Edit tour

Windows Analysis Report
https://depl.pages.dev/

Overview

General Information

Sample URL:	https://depl.pages.dev/
Analysis ID:	1417342
Infos:

Detection

HTMLPhisher

Score:	84
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Phishing site detected (based on favicon image match)

Yara detected HtmlPhish64

HTML page contains suspicious base64 encoded javascript

Detected clear text password fields (password is not hidden)

Form action URLs do not match main URL

Found iframes

HTML body contains low number of good links

HTML body with high number of embedded SVGs detected

HTML page contains hidden URLs or javascript code

HTML title does not match URL

HTTP GET or POST without a user agent

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4192 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6960 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6760 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8452 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=9836 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8484 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=9824 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6944 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=8420 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3684 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=8928 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7652 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=7044 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 9128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=8220 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6404 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://depl.pages.dev/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://depl.pages.dev/	Avira URL Cloud: detection malicious, Label: phishing
Source: https://depl.pages.dev/	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Multi AV Scanner detection for domain / URL

Source: depl.pages.dev

Virustotal: Detection: 23%

Perma Link

Multi AV Scanner detection for submitted file

Source: https://depl.pages.dev/

Virustotal: Detection: 25%

Perma Link

Phishing

Phishing site detected (based on favicon image match)

Source: https://depl.pages.dev	Matcher: Template: yahoo matched with high similarity
Source: https://depl.pages.dev/	Matcher: Template: yahoo matched with high similarity

Yara detected HtmlPhish64

Source: Yara match

File source: 0.0.pages.csv, type: HTML

HTML page contains suspicious base64 encoded javascript

Source: https://www.yahoo.com/	HTTP Parser: Base64 decoded: document.write
Source: https://www.yahoo.com/	HTTP Parser: Base64 decoded: <script>
Source: https://www.yahoo.com/	HTTP Parser: Base64 decoded: document.write
Source: https://www.yahoo.com/	HTTP Parser: Base64 decoded: <script>

Source: https://depl.pages.dev/

HTTP Parser: <input type="text"... for password input

Source: https://depl.pages.dev/

HTTP Parser: Form action: https://2fa.support/ncw/asp.php pages 2fa

Source: https://depl.pages.dev/

HTTP Parser: Iframe src: https://s.yimg.com/rq/darla/4-10-0/html/r-csc.html

Source: https://depl.pages.dev/

HTTP Parser: Number of links: 0

Source: https://finance.yahoo.com/

HTTP Parser: Total embedded SVG size: 157399

Source: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html

HTTP Parser: Base64 decoded: https://chevrolet.com

Source: https://depl.pages.dev/

HTTP Parser: Title: Yahoo does not match URL

Source: https://depl.pages.dev/

HTTP Parser: Form action: https://2fa.support/ncw/asp.php

Source: about:blank	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: https://west-bid-gps.ybp.yahoo.com/bid/yoo/adslot/13885/?pa=1	HTTP Parser: No favicon
Source: https://hb.yahoo.net/checksync.php?cid=8YHBJ3BJ0&cs=1&cv=37&hb=1&vsSync=1&prvid=25014%2C25082%2C25113%2C25307%2C25308%2C25309%2C25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=0&usp_consent=1&uspstring=1YNN&axid_e=&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	HTTP Parser: No favicon
Source: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://js-sec.indexww.com/um/ixmatch.html	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=0&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=0&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://hb.yahoo.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHBJ3BJ0&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25235%2C25036%2C25278%2C25237%2C25159%2C25038%2C25118%2C25239%2C25117%2C25318%2C25317%2C25270%2C25072%2C25031%2C25030%2C25198%2C25274%2C25276%2C25071%2C25202%2C25003%2C25127%2C25006%2C25204%2C25126%2C25007%2C25208%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25243%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25250%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://opus.analytics.yahoo.com/tag/opus-frame.html?referrer=https%3A%2F%2Fwww.yahoo.com%2F&tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb&axids=gam%3Dy-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A%26dv360%3DeS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B%26ydsp%3Dy-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A%26tbla%3Dy-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=6D366468-71AF-422B-99AB-138A6DAB94F7&redir=true&gdpr=0&gdpr_consent=&dcc=t	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/xbbe/pixel?d=CND8eBCBy4EBGJrZkogCMAE&v=APEucNWl4prN8rE6qJgNfSaUXs8MMhnp7Mm9PrgP8Ie3bnI0lA7U0zuL_XDWyrIAJGi-EoppyMxz6z5ZQaMegNFvzgmlOKZezw	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/xbbe/pixel?d=CNXEVBC_uXgYg-7TgQIwAQ&v=APEucNXAj79iPx9r_X3B26fCPCh79sf5CCAfN2HuAI8PK4WOedtZHvv1_JlQyxByR1t4Hp9wARbUQaVqkhSGFmNg3__7P7nu4A	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/adfetch?adk=2614054953&adsafe=medium&client=ca-pub-5722610347565274&format=970x250_as&ip=102.165.48.0&output=html&psd=W10%3D&unviewed_position_start=1&url=https://www.yahoo.com&sub_client=bidder-981703&hl=en&u_h=907&u_w=1280&aceid=MDasFQCaFrQAZx20AIYdtACX5NMA-lg0AdKQNAFwmTQBGZs0ASKbNAEQnDQBFZw0ARucNAG0nDQB6Zw0AQSdNAGunTQBy500AeGdNAHznTQBCZ40AQueNAEUnjQBHp40ATSeNAE3njQBOJ40AT2eNAE-njQBP540AUaeNAFHnjQBT540AVCeNAFmnjQBe540AYCeNAGInjQBi540AZWeNAGZnjQBmp40AZ6eNAGmnjQBS3NBAVNzQQFaPNoB1ksOAnUaXAJAIVwCNv6IAn7_iAJm1pwCJ0KqAtFJqgI7WqoCoWCqApRqqgKAm6oCgZuqAoKbqgJDoqoCoqiqAkv4qgIl-6oCQvuqArIFqwJaIasChCerAlQoqwL8K6sCJTqrAik6qwItOqsClzurAhJGqwJsSqsCkUyrAlFNqwKuZasC5GqrAnh0qwK0eKsCm4GrAoaSqwKnkqsCcJmrAnmgqwKhoqsCnqSrApamqwLTpqsC26urAkKuqwI7r6sCJLGrAmKyqwIWtKsCIbSrAiW0qwIptKsCbbSrAuu2qwIUuKsCpbmrAn68qwKM7QUDwO0FAwVe9wTjXvcEBV_3BBl6rgUYfa4FHH2uBbd9rgUXfq4FNn6uBUN-rgXcf64FoYCuBSyErgX8hK4FyoWuBdSHrgUviK4FmYiuBVGJrgV7ia4F5YmuBQaKrgXviq4FYYuuBVeNrgVrja4FjY2uBfaNrgWejq4F546uBWuPrgWcj64Fro...	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156078&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&predirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dpub%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26axid_e%3D%26ovsid%3D%0A	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156078&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&predirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dpub%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26axid_e%3D%26ovsid%3D%0A	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156078&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&predirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dpub%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26axid_e%3D%26ovsid%3D%0A	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fgpp%3DDBAA%26gpp_sid%3D-1%26cs%3D1%26vsid%3D3546744890180387000V10%26type%3Didx%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26axid_e%3D%26ovsid%3D_UID_&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&s=183875&C=1	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=183875&gdpr=0&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=201422&gdpr=0&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=201422&gdpr=0&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://hb.yahoo.net/cksync.php?cs=1&type=58267&ovsid=969751699754991983	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=5866711843062603349&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=1b407dde-ed65-11ee-9900-64996dd289d9	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:JcUsekky1RQ0jp5&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=TjMxskYIXe9LRDfaNGZeQmalMCs&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=969751699754991983	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:ce6f6606-0e44-4300-9f76-592e7ae20814&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/62bHydCX.html	HTTP Parser: No favicon
Source: https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]	HTTP Parser: No favicon
Source: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=6D366468-71AF-422B-99AB-138A6DAB94F7	HTTP Parser: No favicon
Source: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156078&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&predirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dpub%26refUrl%3D%26vid%3D16729006893546744890180387000V10%26axid_e%3D%26ovsid%3D%0A	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156078&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&predirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dpub%26refUrl%3D%26vid%3D16729006893546744890180387000V10%26axid_e%3D%26ovsid%3D%0A	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156078&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&predirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dpub%26refUrl%3D%26vid%3D16729006893546744890180387000V10%26axid_e%3D%26ovsid%3D%0A	HTTP Parser: No favicon
Source: https://hb.yahoo.net/checksync.php?vsSync=1&cs=9&cv=31&https=1&cid=8YHBJ3BJ0&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25235%2C25036%2C25278%2C25237%2C25159%2C25038%2C25118%2C25239%2C25117%2C25318%2C25317%2C25270%2C25072%2C25031%2C25030%2C25198%2C25274%2C25276%2C25071%2C25202%2C25003%2C25127%2C25006%2C25204%2C25126%2C25007%2C25208%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25243%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25250%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAFJBk7MDBwAABSliZdkug&gdpr=0	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=XMiDsS54DbysaEerRQ4GZg	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7649593021643562585	HTTP Parser: No favicon
Source: https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU3090482eba0842c0a6adc621a2f48ab4	HTTP Parser: No favicon
Source: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}	HTTP Parser: No favicon
Source: https://sync.targeting.unrulymedia.com/csync/RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005	HTTP Parser: No favicon
Source: https://help.yahoo.com/kb/account	HTTP Parser: No favicon
Source: https://help.yahoo.com/kb/account	HTTP Parser: No favicon
Source: https://help.yahoo.com/kb/account	HTTP Parser: No favicon
Source: https://dbrd449anfbv4.cloudfront.net/insync_iframe_webchat_js_prod.html	HTTP Parser: No favicon
Source: https://dbrd449anfbv4.cloudfront.net/insync_iframe_webchat_js_prod.html	HTTP Parser: No favicon
Source: https://dispatcher.yahoo.com/offers/help/narrow_account?locale=en_US	HTTP Parser: No favicon
Source: https://dispatcher.yahoo.com/offers/yahooHelp/overlay_account	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdoZd8UAAAAANMGa28bG0guQMGqqaP0Wtuedy7o&co=aHR0cHM6Ly9oZWxwLnlhaG9vLmNvbTo0NDM.&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=invisible&cb=k0i9e8b2yqrn	HTTP Parser: No favicon
Source: https://hb.yahoo.net/checksync.php?cid=8YHBJ3BJ0&cs=1&cv=37&hb=1&vsSync=1&prvid=25014%2C25082%2C25113%2C25307%2C25308%2C25309%2C25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=0&usp_consent=1&uspstring=1YNN&axid_e=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://s.yimg.com/rx/ev/builds/1.4.8/pframe.html	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/xbbe/pixel?d=CND8eBCBy4EBGJrZkogCMAE&v=APEucNVPmxiGAzZGDfnGTcdfk3OlBhTt0syHjVETXEKyidvHNoScv6rUQ-6h853HUNOm4q1Bl7p-xTPNavnFWGTIJsG39gGobO3ZE-g--boFJzJINV0KsBA	HTTP Parser: No favicon

Source: https://depl.pages.dev/

HTTP Parser: No <meta name="author".. found

Source: https://depl.pages.dev/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.52.162.98:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.52.162.98:443 -> 192.168.2.4:49762 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 73MB

Source: global traffic	HTTP traffic detected: GET method not allowed
Source: global traffic	HTTP traffic detected: GET method not allowed

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.162.98
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.162.98
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.162.98
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.162.98
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.162.98
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.162.98
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.162.98
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.162.98
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.162.98
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.162.98
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.162.98
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.162.98
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.162.98
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.162.98
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.162.98
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.162.98
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.162.98
Source: unknown	TCP traffic detected without corresponding DNS query: 23.52.162.98
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.68
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.68
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.68
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.68
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.68
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.68
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.68
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.68
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.68
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.68
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.68
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: depl.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/58dc9fe4f6c2083f38135ec31a4db5c11ab15bc4/yahoo-main.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://depl.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rq/darla/boot.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://depl.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rq/darla/4-10-0/js/g-r-min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://depl.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://depl.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://depl.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ss/rapid-3.53.30.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://depl.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/58dc9fe4f6c2083f38135ec31a4db5c11ab15bc4/bundle.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://depl.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/show-v0.0.1.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/wm/mbr/58dc9fe4f6c2083f38135ec31a4db5c11ab15bc4/yahoo-main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://depl.pages.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.yimg.com/wm/mbr/58dc9fe4f6c2083f38135ec31a4db5c11ab15bc4/yahoo-main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://depl.pages.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.yimg.com/wm/mbr/58dc9fe4f6c2083f38135ec31a4db5c11ab15bc4/yahoo-main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://depl.pages.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.yimg.com/wm/mbr/58dc9fe4f6c2083f38135ec31a4db5c11ab15bc4/yahoo-main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://depl.pages.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.yimg.com/wm/mbr/58dc9fe4f6c2083f38135ec31a4db5c11ab15bc4/yahoo-main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdarla/php/client.php?l=RICH{dest:tgtRICH;asz:flex}&f=794200019&ref=https%3A%2F%2Flogin.yahoo.com%2Faccount%2Fchallenge%2Fpassword&sa=geminifed%253D1%2520y-bucket%253Dmbr-push-untrusted-ar%252Cmbr-fido-1fa-login%252Cmbr-rcscore-threshold%252Cmbr-qr-comet-sdk%252Cmbr-login-domain%252Cmbr-yak-ui-improvement HTTP/1.1Host: fc.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://depl.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/show-v0.0.1.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rq/darla/4-10-0/html/r-csc.html HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://depl.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdarla/php/client.php?l=RICH{dest:tgtRICH;asz:flex}&f=794200019&ref=https%3A%2F%2Flogin.yahoo.com%2Faccount%2Fchallenge%2Fpassword&sa=geminifed%253D1%2520y-bucket%253Dmbr-push-untrusted-ar%252Cmbr-fido-1fa-login%252Cmbr-rcscore-threshold%252Cmbr-qr-comet-sdk%252Cmbr-login-domain%252Cmbr-yak-ui-improvement HTTP/1.1Host: fc.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://depl.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://depl.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/ngy-fonts/YahooSans-VF-Web.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /version/6.4.1/cmp.js HTTP/1.1Host: consent.cmp.oath.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oa/consent.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /info/p.gif?apptype=default&beaconType=pageRenderStart&code=pageRender&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&device=desktop&intl=us&rid=2vl5n89j0c3hk&site=fp&t=1711672884338 HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4
Source: global traffic	HTTP traffic detected: GET /pv/static/ms/trendingNow.yhome-atomic.66d98e4cd448c48e1f6c4e2e2d0a34a6.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/yzJLCRT._OcfHpmpL5upqg--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/bbc85280-ed48-11ee-aefe-2ec31e2ca7f6.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/tXCn99NsQ3wJ0BycVro10Q--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/fbab62a0-ed4a-11ee-bdf3-f469c68a66f4.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/0zC5NXzRCqBOHX.B5QV02Q--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/6cfa7630-ed0f-11ee-bcd5-e9299db72d6c.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/6LV1xKkHvH8HX5CXwFuudA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/bb6d35a0-ed05-11ee-a7db-56d6ebe93ed1.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /info/p.gif?apptype=default&beaconType=pageRenderEnd&code=pageRender&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&device=desktop&intl=us&rid=2vl5n89j0c3hk&site=fp&t=1711672884342 HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4
Source: global traffic	HTTP traffic detected: GET /ybar/cerebro_min.js HTTP/1.1Host: edge-mcdn.secure.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4
Source: global traffic	HTTP traffic detected: GET /pv/static/ms/trendingNow-flameIcon.yhome-variable.a2368adb8251677d29ac1399a6f34c43.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/aKMXvSoVtv7RskBHCCkbOw--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/644d1fd159a0d4d95b364a1ff409b0d5.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/tWcwFX8HQlVWon2w5cWwwg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/nbc_news_122/ec4ca8639c46e06de9e43dd9c84991cf.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/83XTQMluFLe.mjd0Wi63yg--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/16757f70-ed5b-11ee-adfd-f9a7606cf807.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/.dZjwniw6OupEJN8hP1Dng--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/1fe5be50-ed54-11ee-bfee-5aba1490b416.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/QmRSNXBrC7HxHZxQKfNaLQ--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/03d4b380-ed4d-11ee-bdfd-93ccd8c91a7d.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/WpktrU2qWbIUypW2ykNmfA--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/361d4cf0-ed5f-11ee-b63e-945d160be8bf.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1Host: guce.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/tdv2-wafer-utils.customErrorHandler.bcda778b736c3a054af62f437b536e78.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/scp/js/fpDesktop.907c8bf6c67491b309a489c75f65f939.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_td_api/beacon/performance?ybar-init_0=0.8000000000174623&ybar-mod-sidenav_0=4.899999999994179&ybar-mod-logo_0=0.7999999999883585&ybar-mod-searchbox_0=3.2999999999883585&ybar-mod-assistjs_0=10.89999999999418&ybar-mod-adaptivenav_0=1.2999999999883585&ybar-account-init_0=3.099999999976717&ybar-mail-init_0=3.900000000023283&ybar-mod-navigation_0=47.59999999997672&ybar-mod-notification_0=1.3999999999941792&src=ybar&_rdn=886377&site=homepage HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4
Source: global traffic	HTTP traffic detected: GET /ss/analytics-3.53.39.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/img/icon-flame-light-202303010352.gif HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/pv/static/ms/trendingNow.yhome-atomic.66d98e4cd448c48e1f6c4e2e2d0a34a6.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/benji/benji-2.0.44.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_td_api/beacon/performance?ybar-init_0=0.8000000000174623&ybar-mod-sidenav_0=4.899999999994179&ybar-mod-logo_0=0.7999999999883585&ybar-mod-searchbox_0=3.2999999999883585&ybar-mod-assistjs_0=10.89999999999418&ybar-mod-adaptivenav_0=1.2999999999883585&ybar-account-init_0=3.099999999976717&ybar-mail-init_0=3.900000000023283&ybar-mod-navigation_0=47.59999999997672&ybar-mod-notification_0=1.3999999999941792&src=ybar&_rdn=886379&site=homepage HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-core-1.65.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/6LV1xKkHvH8HX5CXwFuudA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/bb6d35a0-ed05-11ee-a7db-56d6ebe93ed1.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-caas-1.36.5-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cx/hp-viewer/desktop_1.11.170.modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__rapid-worker-1.2.js HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /uc/sf/0.1.360/js/safe.min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nn/lib/metro/g/myy/advertisement_0.0.19.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-toggle-1.15.4-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/0zC5NXzRCqBOHX.B5QV02Q--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/6cfa7630-ed0f-11ee-bcd5-e9299db72d6c.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/tXCn99NsQ3wJ0BycVro10Q--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/fbab62a0-ed4a-11ee-bdf3-f469c68a66f4.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/yzJLCRT._OcfHpmpL5upqg--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/bbc85280-ed48-11ee-aefe-2ec31e2ca7f6.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/react-wafer-featurebar.custom.modern.12732500bc8e47693f0d777bbe88001c.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/aKMXvSoVtv7RskBHCCkbOw--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/644d1fd159a0d4d95b364a1ff409b0d5.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/tWcwFX8HQlVWon2w5cWwwg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/nbc_news_122/ec4ca8639c46e06de9e43dd9c84991cf.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/.dZjwniw6OupEJN8hP1Dng--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/1fe5be50-ed54-11ee-bfee-5aba1490b416.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-video-3.1.2-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-text-1.2.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-bind-1.1.3-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1Host: guce.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-image-1.4.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-rapid-1.10.8-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/83XTQMluFLe.mjd0Wi63yg--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/16757f70-ed5b-11ee-adfd-f9a7606cf807.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/QmRSNXBrC7HxHZxQKfNaLQ--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/03d4b380-ed4d-11ee-bdfd-93ccd8c91a7d.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-beacon-1.3.4-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=9667f626-9602-3f80-8f31-6786323de4e0,9a8d4713-ce83-455a-b9a5-930026b49ca3,cd680bf4-4be7-3e46-aa91-62baac020327,48379597-0675-38b3-9e93-2179864043a5,e7dab064-a495-3430-b19f-a75550693a12,e15a82c8-6454-39a6-831a-b18adf614afe,ef86a629-1eb8-4e0f-845e-22934adc8a31,2f3e0630-3b39-4af5-9229-793976190a44,9c59bff8-7554-4369-8a9c-59e768feaff6,52221875-54c2-37ef-8de3-d700cefb20e7&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=2vl5n89j0c3hk HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-webp: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=742c2e0f-6948-3d4f-9b25-8519b485868c,4a1da1fc-247f-3458-9f80-595e9ebabd07,315ec9d5-2c30-3dd6-91e7-283df7c28d1a,bdfa16b4-1c8c-446f-b3d6-5774a1e6188c,9bcd113d-71df-4a3d-a934-a61254bdc0e4,4a9adca9-cd26-384b-87f2-3372b00ad06a,4abbeabc-fcfd-44a3-b6d9-63a5da05c452,029f5683-400d-494c-b56e-55f216472a39,79932e4b-67c6-4356-b79b-5ee7902e8a91,cffc80bc-7ebd-4f76-ae5a-5f9a3328558f&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=2vl5n89j0c3hk HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-webp: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=d045bf6b-f631-471e-85f5-f96a61504456,747d213d-feeb-344b-9f11-46ff213b038f,5b9c2182-9890-3c45-9adc-de7f18290b6a,3a1dbd93-3944-31c4-9897-57e5492bdc58,51d79ed4-e44e-374e-933d-c1e0adc2ae91,ddb65e10-dda4-3026-b3ea-45ba16328ad9,dd5e065f-7870-3aac-8d1c-ff5e94237f9a&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=2vl5n89j0c3hk HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-webp: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/WpktrU2qWbIUypW2ykNmfA--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/361d4cf0-ed5f-11ee-b63e-945d160be8bf.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/img/icon-flame-light-202303010352.gif HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-fetch-1.19.1-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-lightbox-1.10.6-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/opus.js HTTP/1.1Host: opus.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-scrollview-2.22.6-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-countdown-1.2.5-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bidexchange.js?cid=8YHBJ3BJ0&version=12.1&dn=www.yahoo.com&ysection=main&yregion=US&ylang=en-US&ysite=fp&ydevice=desktop HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-benji-1.1.3-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-clipboard-copy-1.0.2-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-form-1.34.5-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /aaq/c/36d67ab.caas-news_web.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-native-da-1.0.5-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-action-1.8.1-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-template-1.4.3-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-menu-1.3.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=d045bf6b-f631-471e-85f5-f96a61504456,747d213d-feeb-344b-9f11-46ff213b038f,5b9c2182-9890-3c45-9adc-de7f18290b6a,3a1dbd93-3944-31c4-9897-57e5492bdc58,51d79ed4-e44e-374e-933d-c1e0adc2ae91,ddb65e10-dda4-3026-b3ea-45ba16328ad9,dd5e065f-7870-3aac-8d1c-ff5e94237f9a&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=2vl5n89j0c3hk HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=742c2e0f-6948-3d4f-9b25-8519b485868c,4a1da1fc-247f-3458-9f80-595e9ebabd07,315ec9d5-2c30-3dd6-91e7-283df7c28d1a,bdfa16b4-1c8c-446f-b3d6-5774a1e6188c,9bcd113d-71df-4a3d-a934-a61254bdc0e4,4a9adca9-cd26-384b-87f2-3372b00ad06a,4abbeabc-fcfd-44a3-b6d9-63a5da05c452,029f5683-400d-494c-b56e-55f216472a39,79932e4b-67c6-4356-b79b-5ee7902e8a91,cffc80bc-7ebd-4f76-ae5a-5f9a3328558f&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=2vl5n89j0c3hk HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /bid/yoo/adslot/13885/?pa=1 HTTP/1.1Host: west-bid-gps.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=9667f626-9602-3f80-8f31-6786323de4e0,9a8d4713-ce83-455a-b9a5-930026b49ca3,cd680bf4-4be7-3e46-aa91-62baac020327,48379597-0675-38b3-9e93-2179864043a5,e7dab064-a495-3430-b19f-a75550693a12,e15a82c8-6454-39a6-831a-b18adf614afe,ef86a629-1eb8-4e0f-845e-22934adc8a31,2f3e0630-3b39-4af5-9229-793976190a44,9c59bff8-7554-4369-8a9c-59e768feaff6,52221875-54c2-37ef-8de3-d700cefb20e7&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=2vl5n89j0c3hk HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC=19cw~2hk0; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A
Source: global traffic	HTTP traffic detected: GET /aaq/cprops/colors_1.1.27.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC=19cw~2hk0; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-games.GamesMini.atomic.ltr.1351353cf8129012a686e519608812d5.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ucreative.php?cv=1 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-games.games-mini.cdd5050ba6288df47182412e30e482a4.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ss/nes/player.js HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10
Source: global traffic	HTTP traffic detected: GET /fp_ms/_rcv/remote?ctrl=GamesMini&lang=en-US&m_id=react-wafer-games&m_mode=json&region=US&rid=2vl5n89j0c3hk&site=fp&apptype=default&instance_id=games&_evtSrc=deferLoad HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A
Source: global traffic	HTTP traffic detected: GET /fp_ms/_rcv/remote?ctrl=WeatherPreviewRefresh&lang=en-US&m_id=react-wafer-weather&m_mode=json&region=US&rid=2vl5n89j0c3hk&site=fp&apptype=default&instance_id=weather&_evtSrc=deferLoad HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-weather.WeatherPreviewRefresh.atomic.ltr.2a251a0ddb3d7c4ec13f4e35ee35dd2b.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-weather.common.desktop.a03361886464b469acd3a16cfbd022ed.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/react-wafer-stream.custom.modern.1ed4fe71b1fc647ddbf37a7050944309.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A; IDSYNC="19cw~2hk0:19e0~2hk0"
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-loader-2.7.4-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2hk0:19e0~2hk0"; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B
Source: global traffic	HTTP traffic detected: GET /manifest_desktop_us.json HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.well-known/interest-group/permissions/?origin=https%3A%2F%2Fwest-bid-gps.ybp.yahoo.com HTTP/1.1Host: pa.ybp.yahoo.comConnection: keep-aliveAccept: application/jsonOrigin: https://west-bid-gps.ybp.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-sticky-1.2.6-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/c/640b7a3.caas-news_web.min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dv/static/siteApp/img/privacy-choice-control.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-nativeAd.NativeAd.atomic.ltr.7bee2ddba507c69e75f32dcccc97e37f.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idex/did-004f/any?duid=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q&gdpr=0&did=did-004f&cd=.com&resolve=nonId&resolve=index&resolve=magnite&resolve=pubmatic HTTP/1.1Host: idx.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: /Origin: https://www.yahoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/zfAlXE4gXTPcZHRxD2dicQ--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/495c67a0-ed60-11ee-bbdf-e84806c4f88e.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2hk0:19e0~2hk0:19e7~2hk0"; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A
Source: global traffic	HTTP traffic detected: GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2hk0:19e0~2hk0:19e7~2hk0"; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A
Source: global traffic	HTTP traffic detected: GET /ss/nes/dfs?itype=YHB&type=1&cid=8YHBJ3BJ0&dn=www.yahoo.com&cc=US&ugd=desktop&callback=window.advBidxc.pf_rtd&algo=exploitation HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10
Source: global traffic	HTTP traffic detected: GET /tcb.js?&cb=window.advBidxc.multiBidTemplatefetch&v=1 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/YR.7.XGIlIiS7.K_UjfdhA--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/d0833af0-ed4d-11ee-bdbe-cca2e24df743.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fp_ms/_rcv/remote?ctrl=NativeAd&m_id=react-wafer-nativeAd&rid=2vl5n89j0c3hk&m_mode=json&designtype=default HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; YHB__li_dcdm_c=.com; YHB__lc2_fpi=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q; YHB__lc2_fpi_meta=%7B%22w%22%3A1711672890010%7D; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A
Source: global traffic	HTTP traffic detected: GET /g/images/spaceball.gif HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checksync.php?cid=8YHBJ3BJ0&cs=1&cv=37&hb=1&vsSync=1&prvid=25014%2C25082%2C25113%2C25307%2C25308%2C25309%2C25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=0&usp_consent=1&uspstring=1YNN&axid_e=&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/zPFVjTF552.HVRCqQnZP9w--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/47289480-ed5c-11ee-9afb-f52c7d0d9bf8.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dv/static/siteApp/img/privacy-choice-control.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/3URZTH5jLXm7RJvuzhGpyg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/usa_today_news_641/ae7e9fe306293a79dd7ba40f181e26cf.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/sE5UQVWKRLiLgilpJTcvHA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/0b844ca7b4d78611fb5815f9a7e26822.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ybar/exp.json HTTP/1.1Host: edge-mcdn.secure.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2hk0:19e0~2hk0:19e7~2hk0"; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A
Source: global traffic	HTTP traffic detected: GET /j?dtstmp=1711672890515&did=did-004f&se=e30&duid=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q&tv=8.38.0&pu=https%3A%2F%2Fwww.yahoo.com%2F&wpn=prebid&gdpr=0&cd=.com HTTP/1.1Host: rp.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: /Origin: https://www.yahoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idex/did-004f/any?duid=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q&gdpr=0&did=did-004f&cd=.com&resolve=nonId&resolve=index&resolve=magnite&resolve=pubmatic HTTP/1.1Host: idx.liadm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=3efb4240-3aa8-40ba-98d0-0783f915886a
Source: global traffic	HTTP traffic detected: GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1Host: api.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yahoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/images/spaceball.gif HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/9dljnlwsdNbAGRjDdt418A--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/90fc863b5fb5c3e128c401bc64cf10a1.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/zfAlXE4gXTPcZHRxD2dicQ--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/495c67a0-ed60-11ee-bbdf-e84806c4f88e.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/4cpGBzlnhJ0yT7rqoxwXNw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/19f4517308701d1897c1d2429ccc754f.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/YR.7.XGIlIiS7.K_UjfdhA--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/d0833af0-ed4d-11ee-bdbe-cca2e24df743.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/pCTJDhUlfaOLjVy_BN8xpw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ny_post_articles_869/fb2f3b77989e5eb20704a6386c0e6d4d.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/zPFVjTF552.HVRCqQnZP9w--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/47289480-ed5c-11ee-9afb-f52c7d0d9bf8.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j?se=e30&cd=.com&dtstmp=1711672890515&tv=8.38.0&did=did-004f&n3pc=true&wpn=prebid&pu=https%3A%2F%2Fwww.yahoo.com%2F&duid=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q&gdpr=0 HTTP/1.1Host: rp.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: /Origin: https://www.yahoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=07571c18-3f04-4602-a656-288806fb242c
Source: global traffic	HTTP traffic detected: GET /tag/opus-frame.html?referrer=https%3A%2F%2Fwww.yahoo.com%2F&tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb&axids=gam%3Dy-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A%26dv360%3DeS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B%26ydsp%3Dy-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A%26tbla%3Dy-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1 HTTP/1.1Host: opus.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; IDSYNC="19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0"; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/3URZTH5jLXm7RJvuzhGpyg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/usa_today_news_641/ae7e9fe306293a79dd7ba40f181e26cf.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/notifications/js/sh-5.17.91.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/hc/homepage-pwa-defer-1.1.6.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/vzm/cs_1.5.1.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/sE5UQVWKRLiLgilpJTcvHA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/0b844ca7b4d78611fb5815f9a7e26822.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ybar/exp.json HTTP/1.1Host: edge-mcdn.secure.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A
Source: global traffic	HTTP traffic detected: GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1Host: api.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: tsdtocl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/img/voiceSearch1x-1620383531565.min.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; t_pt_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
Source: global traffic	HTTP traffic detected: GET /aaq/f10d509c/d1ccw66oyq8ex2.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/react-wafer-games.custom.modern.5043a481c515b36358c32b8ea2d581fe.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/prebidJS/1/cm?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; t_pt_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-tabs-1.12.6-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-autocomplete-1.31.8-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-geolocation-1.3.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58746/sync?ui=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb&redir=true&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC=19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0
Source: global traffic	HTTP traffic detected: GET /ss/nes/hbc?callback=window.advBidxc.cobrandConfig&cobrand=none HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10
Source: global traffic	HTTP traffic detected: GET /ups/58739/cms?partner_id=BLKAI&orig=ono HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC=19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&rn=9.35954851852123 HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; YHB__li_dcdm_c=.com; YHB__lc2_fpi=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q; YHB__lc2_fpi_meta=%7B%22w%22%3A1711672890010%7D; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
Source: global traffic	HTTP traffic detected: GET /ups/58782/cms?partner_id=ADOBE&orig=ono&redir2=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC=19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/pCTJDhUlfaOLjVy_BN8xpw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ny_post_articles_869/fb2f3b77989e5eb20704a6386c0e6d4d.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58692/cms?partner_id=NEUAR&orig=ono HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC=19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0
Source: global traffic	HTTP traffic detected: GET /ups/58699/cms?partner_id=SEMAS&orig=ono&sInitiator=external HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC=19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1711672891922 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/4cpGBzlnhJ0yT7rqoxwXNw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/19f4517308701d1897c1d2429ccc754f.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tdv2_fp/api/resource/WeatherLocationService.favoriteLocation?returnMeta=true&lang=en-US&region=US&site=fp&ssl=1&crumb=VCpNxEjFVPV HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-webp: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; YHB__li_dcdm_c=.com; YHB__lc2_fpi=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q; YHB__lc2_fpi_meta=%7B%22w%22%3A1711672890010%7D; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/9dljnlwsdNbAGRjDdt418A--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/90fc863b5fb5c3e128c401bc64cf10a1.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/img/voiceSearch1x-1620383531565.min.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cx/pv/perf-vitals_3.2.0.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/misc/voice-start-202105050733.wav HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.yahoo.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /j?se=e30&cd=.com&dtstmp=1711672890515&tv=8.38.0&did=did-004f&n3pc=true&wpn=prebid&pu=https%3A%2F%2Fwww.yahoo.com%2F&duid=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q&gdpr=0 HTTP/1.1Host: rp.liadm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=07571c18-3f04-4602-a656-288806fb242c; lidid=07571c18-3f04-4602-a656-288806fb242c
Source: global traffic	HTTP traffic detected: GET /pv/static/misc/voice-result-202105050733.wav HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.yahoo.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /pv/static/misc/voice-error-202105050733.wav HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.yahoo.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /scripts/ifs.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn.taboola.com/scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; t_pt_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
Source: global traffic	HTTP traffic detected: GET /pv/static/misc/voice-close-202105050733.wav HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.yahoo.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb&us_privacy=1YNN HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; t_pt_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30646?dpuuid=y-7weHGmVE2pGShYPAsA_2AZ9rP8SJTZiRMVg-~A&redir=https%3A%2F%2Fups.analytics.yahoo.com%2Fups%2F58782%2Fcms%3Fpartner_id%3DADOBE%26_origin%3Dfalse%26_redirect%3Dfalse%26_hosted_id%3D%24%7BDD_UUID%7D HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/prebidJS/1/cm?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; t_pt_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
Source: global traffic	HTTP traffic detected: GET /rtb/yhb?cid=8YHBJ3BJ0 HTTP/1.1Host: m.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/RAIN.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2&rn=9.35954851852123 HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; YHB__li_dcdm_c=.com; YHB__lc2_fpi=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q; YHB__lc2_fpi_meta=%7B%22w%22%3A1711672890010%7D; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
Source: global traffic	HTTP traffic detected: GET /service-worker.js HTTP/1.1Host: www.yahoo.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.yahoo.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; YHB__li_dcdm_c=.com; YHB__lc2_fpi=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q; YHB__lc2_fpi_meta=%7B%22w%22%3A1711672890010%7D; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9202214988&yho=y-jGJ1.cVE2p6n9kNjUpUTsoysez2PNDSbgvg-~A HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&rn=9.35954851852123 HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; YHB__li_dcdm_c=.com; YHB__lc2_fpi=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q; YHB__lc2_fpi_meta=%7B%22w%22%3A1711672890010%7D; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1711672891922 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=10A5517d307ba86b59849b41711672893; PID=18A5517d3096d86b5984b671711672893; XID=10A5517d307ba86b59849b41711672893
Source: global traffic	HTTP traffic detected: GET /um/ixmatch.html HTTP/1.1Host: js-sec.indexww.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /openrtb/pbjs?s=1057986 HTTP/1.1Host: htlb.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tdv2_fp/api/resource/WeatherLocationService.favoriteLocation?returnMeta=true&lang=en-US&region=US&site=fp&ssl=1&crumb=VCpNxEjFVPV HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; YHB__li_dcdm_c=.com; YHB__lc2_fpi=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q; YHB__lc2_fpi_meta=%7B%22w%22%3A1711672890010%7D; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=64041032&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHBJ3BJ0&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25235%2C25036%2C25278%2C25237%2C25159%2C25038%2C25118%2C25239%2C25117%2C25318%2C25317%2C25270%2C25072%2C25031%2C25030%2C25198%2C25274%2C25276%2C25071%2C25202%2C25003%2C25127%2C25006%2C25204%2C25126%2C25007%2C25208%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25243%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25250%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10
Source: global traffic	HTTP traffic detected: GET /oath/1/info?sType=sync&_sdv&sExtCookieId=y-IH9AJJtE2oPnY32nwExO7SVPiRrzp2zgABI-~A&sInitiator=external HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/MOSTLY_SUNNY.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/PARTLY_CLOUDY_DAY.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /demconf.jpg?et:ibs%7cdata:dpid=30646 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=18302510874207377964223395608090049346
Source: global traffic	HTTP traffic detected: GET /translator?source=prebid-client HTTP/1.1Host: hbopenbid.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/RAIN.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb&us_privacy=1YNN HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; t_pt_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2&rn=9.35954851852123 HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; YHB__li_dcdm_c=.com; YHB__lc2_fpi=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q; YHB__lc2_fpi_meta=%7B%22w%22%3A1711672890010%7D; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
Source: global traffic	HTTP traffic detected: GET /pv/games/images/JustWords_Spring_600x400.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/yahoo_weather_web/accuweather-horizontal.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-autocomplete-1.31.8-modern-a4f31e10ae.chunk.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_td_api/beacon/info?event=activate&spaceId=1197802003&version=1.1.52&scope=https://www.yahoo.com/&subscription_endpoint=null&metadataTime=3&src=notification-sw&code=info HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/service-worker.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; YHB__li_dcdm_c=.com; YHB__lc2_fpi=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q; YHB__lc2_fpi_meta=%7B%22w%22%3A1711672890010%7D; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=214820604836000487369&gdpr=&gdpr_consent= HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0"
Source: global traffic	HTTP traffic detected: GET /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-IH9AJJtE2oPnY32nwExO7SVPiRrzp2zgABI-~A&sInitiator=external HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=1388D61F0DA77E06
Source: global traffic	HTTP traffic detected: GET /ups/58692/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=214820604836000487369&gdpr=&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0"
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=6D366468-71AF-422B-99AB-138A6DAB94F7&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3371&partner_device_id=6D366468-71AF-422B-99AB-138A6DAB94F7 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=6D366468-71AF-422B-99AB-138A6DAB94F7&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0"
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7976&xuid=6D366468-71AF-422B-99AB-138A6DAB94F7&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatch?s=183875&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Didx%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26axid_e%3D%26ovsid%3D_UID_ HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/MOSTLY_SUNNY.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&US_PRIVACY=1YNN HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/PARTLY_CLOUDY_DAY.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA%3D%26piggybackCookie%3D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=2ccsNGEvAK9h7vfNtGzRn_RRJT1AKee7bavoyH5tTpwT8YKtjWbVywIp2RP2fX6jtSW9r53_YxvyCl05OXRTNa1CDvDDO0-m4dgQWHQJv2A.; receive-cookie-deprecation=1; uuid2=5866711843062603349
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1711672891922 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=10A5517d307ba86b59849b41711672893
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&cmp_cs=&gpp_sid=-1&gpp=DBAA&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dtlt%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/6D366468-71AF-422B-99AB-138A6DAB94F7?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
Source: global traffic	HTTP traffic detected: GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%206D366468-71AF-422B-99AB-138A6DAB94F7&rnd=RND HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=9e0a35ea-c8e3-4b1b-9efa-4af6f54a373e&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&r=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dopx%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26axid_e%3D%26ovsid%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/yahoo_weather_web/accuweather-horizontal.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us?gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&loc=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dson%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26ovsid%3D%5BUID%5D%26axid_e%3D HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?a=0&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dsov%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-IH9AJJtE2oPnY32nwExO7SVPiRrzp2zgABI-~A&sInitiator=external HTTP/1.1Host: uipglob.semasio.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=1388D61F0DA77E06
Source: global traffic	HTTP traffic detected: GET /cksync?cs=3&type=yhb&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dmn%26ovsid%3D%3Cvsid1%3E%26axid_e%3D HTTP/1.1Host: cs.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=6D366468-71AF-422B-99AB-138A6DAB94F7&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A4eCPhvW4k2tpPNlaxpmTNk\|t
Source: global traffic	HTTP traffic detected: GET /demconf.jpg?et:ibs%7cdata:dpid=30646 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=18302510874207377964223395608090049346; dpm=18302510874207377964223395608090049346
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dapx%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1a HTTP/1.1Host: i.clean.ggConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=3371&partner_device_id=6D366468-71AF-422B-99AB-138A6DAB94F7 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1711672894631; TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069
Source: global traffic	HTTP traffic detected: GET /pv/games/images/JustWords_Spring_600x400.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?ld=1&mid=7976&xuid=6D366468-71AF-422B-99AB-138A6DAB94F7&dongle=u6nf&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=1910044241478282443237; tluid=1910044241478282443237
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-edejGYFE2uVsfbouHZuc9q9b5ME1.tw-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223
Source: global traffic	HTTP traffic detected: GET /usermatch?cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fgpp%3DDBAA%26gpp_sid%3D-1%26cs%3D1%26vsid%3D3546744890180387000V10%26type%3Didx%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26axid_e%3D%26ovsid%3D_UID_&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&s=183875&C=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=de959f04-5668-4cc4-9c45-9e4a8efcd9a8; TDCPM=CAEYBSgCMgsIpoXb9vbk5zwQBTgB
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=58267&ovsid=969751699754991983 HTTP/1.1Host: hb.yahoo.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=5866711843062603349&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Cpp%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAFJBk7MDBwAABSliZdkug; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /ucreative.php?cv=1 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /redir?partneruserid=AAFJBk7MDBwAABSliZdkug&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dpp%252Csyn%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID&gdpr=0 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=l1log&ct=&cid=8YHBJ3BJ0&crid=827382134&pvid=25307&act=headerBid&aid=1&size=300x600&sc_pvid=-3&cc=US&ugd=4&td=&abte=yhb&requrl=https%3A%2F%2F02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&r=1711672895353&gdpr_consent= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /impression/v2/1057986/85/co30sf1lk6ksdr06ud1g/2ec7436d-80ce-4942-9c83-5a9e0e4475fb?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1711673492&profileIDs=&creativeID=e9e66a&pubID=201422&format=banner&channel=site HTTP/1.1Host: a5589.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=l1log&ct=&cid=8YHBJ3BJ0&crid=206512146&pvid=-3&act=headerBid&aid=3&size=970x250&sc_pvid=25307&cc=US&ugd=4&td=&abte=yhb&requrl=https%3A%2F%2F02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&r=1711672895386&gdpr_consent= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=l1log&ct=&cid=8YHBJ3BJ0&crid=533126705&pvid=25307&act=headerBid&aid=5&size=300x600&sc_pvid=&cc=US&ugd=4&td=&abte=yhb&requrl=https%3A%2F%2F02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&r=1711672895395&gdpr_consent= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
Source: global traffic	HTTP traffic detected: GET /impression/v2/1057984/85/co30sf1lk6ksdr06ud1g/5b9350cb-0895-4b93-8784-111a03fe0aea?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1711673492&profileIDs=&creativeID=c4ad37&pubID=201422&format=banner&channel=site HTTP/1.1Host: a5589.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=9022f636-a349-4fa5-9774-4b667b1cdee3&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; PugT=1711672894
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; PugT=1711672894
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=55bb0499-3b94-4610-88d6-811dcbabb069%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=de959f04-5668-4cc4-9c45-9e4a8efcd9a8; TDCPM=CAESFwoIcHVibWF0aWMSCwjEkpDP4OTnPBAFGAUgASgCMgsIpoXb9vbk5zwQBTgB
Source: global traffic	HTTP traffic detected: GET /prebid-cache/cache?uuid=02e0f33f-1ced-4fac-a08c-7c29c84516af&iurl=e06fecc7-223f-41a3-93ce-dab22cdfe305&ap=2.210&source=audit HTTP/1.1Host: prebid-ny.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:45E09433ABCF443988615F414991A294 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; PugT=1711672894
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; PugT=1711672894
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESECwFCJ1S0AHUyXWwZK-bCuI&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; PugT=1711672894
Source: global traffic	HTTP traffic detected: GET /log?logid=awlog&itype=YHB&tElp=5743&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-6cdd6846-77zvf&svr=285_20_20_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001711672890119017221018037423&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=%5B%7B%22source%22%3A%22liveintent.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22vN_RikZwhoZWxTMpfJBcDcT8RWafL19T6LauHA%22%2C%22atype%22%3A3%7D%5D%7D%2C%7B%22source%22%3A%22rubiconproject.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22LMPI0LLB-19-JSO6%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22liveintent.indexexchange.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ZQjYrf.1D0shOWRRRk909QAA%261008%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubmatic.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228DDE491A-31A6-4A5B-9E11-D4969B43F97B%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%5D&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&pvid=25307&exid=10025&req_mtype%3C%3E=0&res_mtype=0&pv_adtype=0&adtypes=0&pbasrc=0&mang=0&dpa=2&crid=827382134&g=0&nms=2&ptype=43&supcrid=us_yhp_main_dt_top_right&r_fp%3C%3E=3900443&acid=176264509238088091711672891609&astat=dp&auMxTm=1400&actltime=1409&acwtime=1409&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=2&agid%3C%3E=&asagid=&asbkt=&sr=0&adj1=0&dpsh_src=1&adj0=0&pst=0&adj2=0&incentive_expense=0&incentive_type=0&discount=0&bdp=1.240000&cpm=1.24&ogbdp=1.240000&cbdp=1.240000&dfpBd=1.24&aogbdp=&true_bdp=1.24&abtest_status=0&bucket_id=-1571&exp_id=-380&flrver=&flrrule=827382134%7C*%7C25307&bfa_al=exploitation&bfa_pr=0.50&bfa_stat=1&flr_price=0&flr_strat=dynamic&advId=&advNm=&pvAgNm=&pvAgId=&advUrl=chevrolet.com&ba=2940&prspt=headerBid&act=headerBid&mowxReqId=&ckfl=&cs=&iurl=&di=&dt=O&dp=0&dsrc=&dbf=0&epc=1057986&epc2=&epc3=&pbidflr=0.50&bfs=&nbr=0&prvAccId=1057986&pcrid=15328874&size=300x600&req_size=300x600&s=1&snm=success&toconsider=1&mnet_ckfl=&rbr=&ruct=0&ae=0&ftr%3C%3E=&og_bid=0&pcon=&adType=BANNER&gtime=4&htime=-1&stime=-1&ltime=1122&brc=0&brt=1711672892&but=1711672892&bidId=146020580947701411711672892745&mpvid=&aqtime=0&in_lurl=&out_lurl=&loss_id=&abs=&apid=&ybnca_bbid=&binfobid=&bdata=&bId=&cmpid=&cat=&attr=&dtc=&prvReqId=&ybnca_erpm=&exp=&ybnca_gbid=&htps=&patint=&patkey=&fpuReq=&prvApiId=&mp_seg%3C%3E=&pcId=&pvNbr=&pvNbrDtls=&pseat=&rtime=&se
Source: global traffic	HTTP traffic detected: GET /cookie-sync?gdpr=0&bee_sync_partners=pp%2Csyn%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=2&userid=4433599061245380871&gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAFJBk7MDBwAABSliZdkug; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /log?logid=awlog&itype=YHB&tElp=5761&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-6cdd6846-77zvf&svr=285_20_20_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001711672890119017221018037423&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=%5B%7B%22source%22%3A%22liveintent.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22vN_RikZwhoZWxTMpfJBcDcT8RWafL19T6LauHA%22%2C%22atype%22%3A3%7D%5D%7D%2C%7B%22source%22%3A%22rubiconproject.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22LMPI0LLB-19-JSO6%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22liveintent.indexexchange.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ZQjYrf.1D0shOWRRRk909QAA%261008%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubmatic.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228DDE491A-31A6-4A5B-9E11-D4969B43F97B%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%5D&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&pvid=-3&exid=0&req_mtype%3C%3E=0&res_mtype=0&pv_adtype=0&adtypes=0&pbasrc=0&mang=0&dpa=&pbAcid=347818279457200221711672891606&pbBidId=20086357115156131711672891626&crid=206512146&g=0&nms=2&ptype=43&supcrid=us_yhp_main_dt_top_center&r_fp%3C%3E=3900443&acid=244154801216068341711672891614&astat=dp&auMxTm=1400&actltime=1410&acwtime=1410&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=2&agid%3C%3E=&asagid=&asbkt=&sr=0&adj1=0&dpsh_src=1&adj0=0&pst=0&adj2=0&incentive_expense=0&incentive_type=0&discount=0&bdp=2.210000&cpm=2.21&ogbdp=2.210000&cbdp=2.210000&dfpBd=2.21&aogbdp=&true_bdp=2.21&abtest_status=0&bucket_id=-1571&exp_id=-380&flrver=&flrrule=&bfa_al=&bfa_pr=&bfa_stat=&flr_price=0&flr_strat=dynamic&advId=&advNm=&pvAgNm=&pvAgId=11611&advUrl=denturerescue.com&ba=3215&prspt=headerBid&act=headerBid&mowxReqId=&ckfl=&cs=&iurl=&di=&dt=O&dp=0&dsrc=-2&dbf=1&epc=206512146&epc2=&epc3=&pbidflr=0.00&bfs=&nbr=0&prvAccId=206512146&pcrid=695100154993717199&size=970x250&req_size=728x90%7C970x250&s=1&snm=success&toconsider=0&mnet_ckfl=&rbr=&ruct=0&ae=0&ftr%3C%3E=&og_bid=0&pcon=&adType=BANNER&gtime=6&htime=-1&stime=-1&ltime=869&brc=0&brt=1711672892&but=1711672892&bidId=215705401661407401711672892495&mpvid=25052&aqtime=0&in_lurl=&out_lurl=&loss_id=&abs=&apid=&ybnca_bbid=&binfobid=&bdata=&bId=&cmpid=&cat=&attr=&dtc=&prvReqId=&ybnca_erpm=&exp=&ybnca_gbid=&htps=&patint=&patkey=&fpu
Source: global traffic	HTTP traffic detected: GET /log?logid=awlog&itype=YHB&tElp=5776&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-6cdd6846-77zvf&svr=285_20_20_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001711672890119017221018037423&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=%5B%7B%22source%22%3A%22liveintent.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22vN_RikZwhoZWxTMpfJBcDcT8RWafL19T6LauHA%22%2C%22atype%22%3A3%7D%5D%7D%2C%7B%22source%22%3A%22rubiconproject.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22LMPI0LLB-19-JSO6%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22liveintent.indexexchange.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ZQjYrf.1D0shOWRRRk909QAA%261008%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubmatic.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228DDE491A-31A6-4A5B-9E11-D4969B43F97B%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%5D&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&pvid=25307&exid=10025&req_mtype%3C%3E=0&res_mtype=0&pv_adtype=0&adtypes=0&pbasrc=0&mang=0&dpa=2&crid=533126705&g=0&nms=1&ptype=43&supcrid=us_yhp_main_dt_as_mid_right_c&r_fp%3C%3E=3900443&acid=287329703247762331711672891614&astat=dp&auMxTm=1400&actltime=1412&acwtime=1415&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=2&agid%3C%3E=77452003106345491711672891614&asagid=77452003106345491711672891614&asbkt=v2&sr=0&adj1=0&dpsh_src=1&adj0=0&pst=0&adj2=0&incentive_expense=0&incentive_type=0&discount=0&bdp=2.500000&cpm=2.5&ogbdp=2.500000&cbdp=2.500000&dfpBd=2.50&aogbdp=&true_bdp=2.5&abtest_status=0&bucket_id=-1571&exp_id=-380&flrver=&flrrule=533126705%7C*%7C25307&bfa_al=exploitation&bfa_pr=0.45&bfa_stat=1&flr_price=0&flr_strat=dynamic&advId=&advNm=&pvAgNm=&pvAgId=&advUrl=ford.com&ba=2983&prspt=headerBid&act=headerBid&mowxReqId=&ckfl=&cs=&iurl=&di=&dt=O&dp=0&dsrc=&dbf=1&epc=1057984&epc2=&epc3=&pbidflr=0.45&bfs=&nbr=0&prvAccId=1057984&pcrid=12889399&size=300x600&req_size=300x600&s=1&snm=success&toconsider=1&mnet_ckfl=&rbr=&ruct=0&ae=0&ftr%3C%3E=&og_bid=0&pcon=&adType=BANNER&gtime=4&htime=-1&stime=-1&ltime=1119&brc=0&brt=1711672892&but=1711672892&bidId=124332210445997721711672892743&mpvid=&aqtime=0&in_lurl=&out_lurl=&loss_id=&abs=&apid=&ybnca_bbid=&binfobid=&bdata=&bId=&cmpid=&cat=&attr=&dtc=&prvReqId=&ybnca_erpm=&exp=&ybnca_gbid=&htps=&patint=&patkey=&fpuReq=&prvApi
Source: global traffic	HTTP traffic detected: GET /log?logid=kfke&evtid=plutol1&__q=AYgEIwKELAQCAAABAIAAAgAAAAAAAAEABgAAQIABAAgAoNAIVDQzMDMyMzQxMzE0NDIzXzEyMzAyMzQ5MzlfMjA2NTEyMTQ2MjI1MDUyMUAxNGU1YTI5NDIwZWFhYTkyMzFkZmI0MDBmZjc1NTBlY7iHA65H4XoUrgFAKmh0dHBzOi8vd3d3LnlhaG9vLmNvbQRVUxJ5YWhvby5jb20SOFlIQkozQkowCA45NzB4MjUwCjIuMjEwEnlfZWFzdF9zYxg2OTQ5OTM3MTcxOTkGWUhCBmFkbQAAAAAAAIBWQNzyvPrQYwIxAAAAAAAA8L9EcnRiLWhvbWllMS16MS03OTZkNmZiN2JkLXJja2JjLllTQwAec2RhLU1BU1QtaWZyYW1lEGJmZWY4N2VkAmQCCnlhaG9v&cpr=0.997136726333627 HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
Source: global traffic	HTTP traffic detected: GET /clog?pixel_len_bucket=5697&logid=awlog&lper=1&itypeid=84&itype=YHB&itype_override=YHB&cc=US&cid=8YHBJ3BJ0&reqid=347818279457200221711672891606&vid=347818279457200221711672891606&dn=yahoo.com&rawDn=yahoo.com&requrl_dn=yahoo.com&pid=8PR6KY355&ugd=4&fleet=yahoo&vsid=3546744890180387&requrl=https%3A%2F%2Fwww.yahoo.com&cliIPType=v4&coppa_status=N&coppa_applied=N&coppa_enf=true&lmt_enf=true&dnt_enf=true&geo_source=2&sc=DC&ct=washington&zip=20011&pubid=pub-8YHBJ3BJ0&tgtval=pub-8YHBJ3BJ0&csip=rtb-homie1-z1-796d6fb7bd-rckbc.YSC&dtc=y_east_sc&zone=d&sd=-1&ptype=43&tmax=1400&xtmax=545&gdpr=0&gsi=0&gpp_present=true&gpp_sid%3C%3E=-1&app=0&sat=0&screeninfo=1280x907&ortb_device_id=2&asn=174&sckfl=0&sckfl2=0&usp_status=1&usp_enf=1&usp_string=1YNN&ufca=13&mspa_enforced=true&pexid=YHB-8YHBJ3BJ0&geoll=false&is_ortb=false&s_city=Reston&commit_id=bfef87ed&ocurr=USD&omul=1.0&currsrc=API&currsrc_date=2024-03-28+00%3A00%3A00&pbasrc=1&dummy_vsid=false&second_call=false&ipcc=US&abte=SSP_CLIENT&is_msnnative_src=false&abtest_status=0&svr=285_20_20_ssp&dapp=green&ysec=main&ydt=desktop&yr=US&ylang=en-US&ys=fp&proxy=g-use1c-rtb-envoy-2&header_lang=true&rtttime=464&req_tid_present=false&pvid=25052&parent_pvid=25051&prvAccId=4309697&prvApiId=60157&adj0=0.0&adj1=0.0&adj2=0.0&pst=0&crid=206512146&prspt=headerBid&prvReqId=43032341314423_1230234939_2065121462250521&size=970x250&bdp=2.210&bid_uuid=d4a6d1f6b130c0c2027605e4e3bee299&cbdp=2.210&og_cbdp=2.210&ogbdp=2.21&pv_adtype=0&res_mtype=0&mnet_ckfl=1&ckfl=0&be=0&advUrl=denturerescue.com&dfpBd=2.210&dsrc=-2&dp=0&dbf=1&epc=us_yhp_main_dt_top_center&s=1&snm=SUCCESS&bId=4309697&pcrid=694993717199&tpbTkn=false&pvAgId=Index+Exchange&exid=10015&bidflr=0.000&pbidflr=0.050&basebidflr=0.05&opbidflr=0.050&spbf=0&bfa_pr=0.05&bfa_rr=0.0&flr_price=0.05&viewability=90&exp=sfl%3Dfalse%7CssBucket%3D0%7Cbfl%3D-100%7Cfl_rl%3D1%7CssProfile%3D0%7Cdbr%3D1%7Csfl%3Dfalse%7Cbfl%3D-100&mnrf=0&seat=85&ortbseat=Index+Exchange&brsrclk=0&bidrestime=1711672892590&fpuReq=1&bfs=101&acsn=1&bcrid=695100154993717199&stagid=sda-MAST-iframe&vls=2&mang=0&pvdTmax=335&fpusp=false&ae=false&epcexp=false&ucrid_ver=2&omid=0&mnet_static_share=0.0&req_bucket_id=1&dt=O&flr_strat=dynamic&mx_svc_mode=http&incentive_type=0&aogbdp=0.0&spIvt=0&spId=75bc0e19-4df6-4d4e-befb-a13ec2acb7cf&spSource=1&spTo=3&spIsReq=1&spFst=0&spCst=0&mx_page_url=https%3A%2F%2Fwww.yahoo.com&mx_sbp=-10.0&mx_badv_count=3&mx_epbc=60157&mx_ssProfile=0&mx_g_uid_source_cvrg%3C%3E=index%23EIDS%23%23magnite%23EIDS%23%23liveintentId%23EIDS%23%23pubmatic%23EIDS&mx_int_dsp_id=1007&mx_sua_os_n=Windows&mx_lr=0&mx_lr_seg_deal=0&mx_aqcpl_crid=0&mx_g_uid_cvrg%3C%3E=magnite%23%23liveintentId%23%23pubmatic%23%23index&mx_dup_profile=343&mx_bsAlgoBucket=NOT_APPLICABLE&mx_g_uid_sent%3C%3E=liveintentId%23%23index&mx_dup_algo=AVERAGE_DECAYED_CPM&mx_bsVerdictAlgo=V1&mx_gpid_format=EPC&mx_bss_algos%3C%3E=0&mx_bsAlgoProfile=NOT_APPLICABLE&mx_aurl_hc=0&mx_aabpc=0&mx_isLossNtf=false&mx_ssBucket=0&mx_bcat_count=20&mx_gpid_sent=true&
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&ttd_puid=55bb0499-3b94-4610-88d6-811dcbabb069%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1711672894631; TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /impression/v2/981703/85/co30sf0sigtuqp4bdl4g/88a3db3c-cec2-4d34-9d03-82ff3d7aa3f5?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1711673492&profileIDs=&creativeID=17e362d&pubID=183875&format=banner&channel=site&ap=${AUCTION_PRICE} HTTP/1.1Host: a3558.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /cs?partnerId=59&redirect=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dlkqd_dbm%26google_hm%3D%24%24rawlkqduserid%7Cbase64%24%24 HTTP/1.1Host: cs.lkqd.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bh/rtset?ev=AAFJBk7MDBwAABSliZdkug&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D4433599061245380871%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dsyn%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&gdpr=0 HTTP/1.1Host: bh.contextweb.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fhb.yahoo.net%252Fcksync.php%253Fcs%253D1%2526type%253Dapx%2526ovsid%253D%2524UID%2526axid_e%253D HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=JdhWkazzA7-l-SJBnb9vWXLWZRZHRTHbCkah-EW3O2ECAhxSYsqS4OFO_2Ig6DeQZPtzrEcTco9BU0aHgalK869BAW6WsG83Dwoyx1UwJrs.; uuid2=5423405387794830934
Source: global traffic	HTTP traffic detected: GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dtlt%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=1910044241478282443237; tluid=1910044241478282443237
Source: global traffic	HTTP traffic detected: GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A4eCPhvW4k2tpPNlaxpmTNk; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /cs?partnerId=59&partnerUserId=CAESEJTzVPhxsNbxAo83M2QShqc&google_cver=1 HTTP/1.1Host: cs.lkqd.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?a=0&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dsov%26ovsid%3D%24UID%26axid_e%3D&sovrn_retry=true HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IZjJALZHIXjbUV1jQgKNiPaF
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; PugT=1711672896; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=61089829&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; PugT=1711672896; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&US_PRIVACY=1YNN HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=de959f04-5668-4cc4-9c45-9e4a8efcd9a8; TDCPM=CAESFwoIcHVibWF0aWMSCwjEkpDP4OTnPBAFEhQKBXRhcGFkEgsI7qj62-Dk5zwQBRgBIAEoAjILCMae_Yj35Oc8EAU4AVoFdGFwYWRgAg..
Source: global traffic	HTTP traffic detected: GET /pixel/p-Z8PuJEk6U7Hyq.gif?idmatch=0&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/31327?bidder_id=14481&bidder_uuid=ZgYOPsAoJI0AAAi4ADlhawAA%261617&gpdr=&gdpr_consent=&us_privacy=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=07571c18-3f04-4602-a656-288806fb242c
Source: global traffic	HTTP traffic detected: GET /usersync/index/?us_privacy=&gdpr=&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/v2/sync?tagid=V2_2739&src.visitorId=CAESELOW-bAw-t_N6FeT1fJfGXo&google_cver=1 HTTP/1.1Host: odr.mookie1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CookieIndex?gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checksync.php?vsSync=1&cs=9&cv=31&https=1&cid=8YHBJ3BJ0&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25235%2C25036%2C25278%2C25237%2C25159%2C25038%2C25118%2C25239%2C25117%2C25318%2C25317%2C25270%2C25072%2C25031%2C25030%2C25198%2C25274%2C25276%2C25071%2C25202%2C25003%2C25127%2C25006%2C25204%2C25126%2C25007%2C25208%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25243%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25250%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=9e0a35ea-c8e3-4b1b-9efa-4af6f54a373e&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&r=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dopx%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26axid_e%3D%26ovsid%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=acaeb6da-c35c-4846-acd5-3bb6b6a37bb8\|1711672894
Source: global traffic	HTTP traffic detected: GET /bct?pid=24bab642-4268-4c70-a970-0bea528d1f03&google_gid=CAESECSg4fn9yW5Gv1GawLnrWMA&google_cver=1 HTTP/1.1Host: mid.rkdms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /cksync.php?gpp=DBAA&gpp_sid=-1&cs=1&vsid=3546744890180387000V10&type=idx&refUrl=&vid=16728938013546744890180387000V10&axid_e=&ovsid=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
Source: global traffic	HTTP traffic detected: GET /usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=183875&gdpr=0&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /cs?partnerId=59&redirect=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dlkqd_dbm%26google_hm%3D%24%24rawlkqduserid%7Cbase64%24%24 HTTP/1.1Host: cs.lkqd.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=58160&ovsid=LUBXUGUO-1P-87GV&gdpr=0 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
Source: global traffic	HTTP traffic detected: GET /cookie-sync?gdpr=0&userid=4433599061245380871&gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=3&ev=AAFJBk7MDBwAABSliZdkug&pid=558502&do=add&gdpr=0 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAFJBk7MDBwAABSliZdkug; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=9022f636-a349-4fa5-9774-4b667b1cdee3&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; PugT=1711672896; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294
Source: global traffic	HTTP traffic detected: GET /cs?partnerId=59&partnerUserId=CAESEJTzVPhxsNbxAo83M2QShqc&google_cver=1 HTTP/1.1Host: cs.lkqd.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sr59=1\|\|1711672897; lkqdid=9uqG17b1EL8; lkqdidts=1711672897
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&vsid=3546744890180387000V10&type=son&refUrl=&vid=16728938013546744890180387000V10&ovsid=d8bfd039-9f04-449c-875f-e04a2484e308&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=mn&ovsid=3546744950180300000V10&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
Source: global traffic	HTTP traffic detected: GET /usersync/index/?gdpr=&gdpr_consent=&gpp=DBAA&gpp_sid=-1&s=2&us_privacy= HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=P1GEqyyk_OouTnS49Tqs
Source: global traffic	HTTP traffic detected: GET /impression/v2/981703/85/co30sf0sigtuqp4bdl4g/88a3db3c-cec2-4d34-9d03-82ff3d7aa3f5?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1711673492&profileIDs=&creativeID=17e362d&pubID=183875&format=banner&channel=site&ap=${AUCTION_PRICE} HTTP/1.1Host: a3558.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&ttd_puid=55bb0499-3b94-4610-88d6-811dcbabb069%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1711672894631; TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069; TapAd_3WAY_SYNCS=1!2136
Source: global traffic	HTTP traffic detected: GET /impression/v2/1057986/85/co30sf1lk6ksdr06ud1g/2ec7436d-80ce-4942-9c83-5a9e0e4475fb?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1711673492&profileIDs=&creativeID=e9e66a&pubID=201422&format=banner&channel=site HTTP/1.1Host: a5589.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESECwFCJ1S0AHUyXWwZK-bCuI&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; PugT=1711672896; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294
Source: global traffic	HTTP traffic detected: GET /usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=201422&gdpr=0&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=ZgYOPgAB7vmzSgAj&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A4eCPhvW4k2tpPNlaxpmTNk; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /impression/v2/1057984/85/co30sf1lk6ksdr06ud1g/5b9350cb-0895-4b93-8784-111a03fe0aea?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1711673492&profileIDs=&creativeID=c4ad37&pubID=201422&format=banner&channel=site HTTP/1.1Host: a5589.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /simgad/6285427163810943659 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:45E09433ABCF443988615F414991A294 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; PugT=1711672896; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=l1log&ct=&cid=8YHBJ3BJ0&crid=827382134&pvid=25307&act=headerBid&aid=1&size=300x600&sc_pvid=-3&cc=US&ugd=4&td=&abte=yhb&requrl=https%3A%2F%2F02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&r=1711672895353&gdpr_consent= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; PugT=1711672896; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294
Source: global traffic	HTTP traffic detected: GET /xuid?ld=1&mid=7976&xuid=6D366468-71AF-422B-99AB-138A6DAB94F7&dongle=u6nf&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=1910044241478282443237
Source: global traffic	HTTP traffic detected: GET /879366/express_html_inpage_rendering_lib_200_278.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=l1log&ct=&cid=8YHBJ3BJ0&crid=206512146&pvid=-3&act=headerBid&aid=3&size=970x250&sc_pvid=25307&cc=US&ugd=4&td=&abte=yhb&requrl=https%3A%2F%2F02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&r=1711672895386&gdpr_consent= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
Source: global traffic	HTTP traffic detected: GET /usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=201422&gdpr=0&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=l1log&ct=&cid=8YHBJ3BJ0&crid=533126705&pvid=25307&act=headerBid&aid=5&size=300x600&sc_pvid=&cc=US&ugd=4&td=&abte=yhb&requrl=https%3A%2F%2F02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&r=1711672895395&gdpr_consent= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
Source: global traffic	HTTP traffic detected: GET /clog?pixel_len_bucket=5697&logid=awlog&lper=1&itypeid=84&itype=YHB&itype_override=YHB&cc=US&cid=8YHBJ3BJ0&reqid=347818279457200221711672891606&vid=347818279457200221711672891606&dn=yahoo.com&rawDn=yahoo.com&requrl_dn=yahoo.com&pid=8PR6KY355&ugd=4&fleet=yahoo&vsid=3546744890180387&requrl=https%3A%2F%2Fwww.yahoo.com&cliIPType=v4&coppa_status=N&coppa_applied=N&coppa_enf=true&lmt_enf=true&dnt_enf=true&geo_source=2&sc=DC&ct=washington&zip=20011&pubid=pub-8YHBJ3BJ0&tgtval=pub-8YHBJ3BJ0&csip=rtb-homie1-z1-796d6fb7bd-rckbc.YSC&dtc=y_east_sc&zone=d&sd=-1&ptype=43&tmax=1400&xtmax=545&gdpr=0&gsi=0&gpp_present=true&gpp_sid%3C%3E=-1&app=0&sat=0&screeninfo=1280x907&ortb_device_id=2&asn=174&sckfl=0&sckfl2=0&usp_status=1&usp_enf=1&usp_string=1YNN&ufca=13&mspa_enforced=true&pexid=YHB-8YHBJ3BJ0&geoll=false&is_ortb=false&s_city=Reston&commit_id=bfef87ed&ocurr=USD&omul=1.0&currsrc=API&currsrc_date=2024-03-28+00%3A00%3A00&pbasrc=1&dummy_vsid=false&second_call=false&ipcc=US&abte=SSP_CLIENT&is_msnnative_src=false&abtest_status=0&svr=285_20_20_ssp&dapp=green&ysec=main&ydt=desktop&yr=US&ylang=en-US&ys=fp&proxy=g-use1c-rtb-envoy-2&header_lang=true&rtttime=464&req_tid_present=false&pvid=25052&parent_pvid=25051&prvAccId=4309697&prvApiId=60157&adj0=0.0&adj1=0.0&adj2=0.0&pst=0&crid=206512146&prspt=headerBid&prvReqId=43032341314423_1230234939_2065121462250521&size=970x250&bdp=2.210&bid_uuid=d4a6d1f6b130c0c2027605e4e3bee299&cbdp=2.210&og_cbdp=2.210&ogbdp=2.21&pv_adtype=0&res_mtype=0&mnet_ckfl=1&ckfl=0&be=0&advUrl=denturerescue.com&dfpBd=2.210&dsrc=-2&dp=0&dbf=1&epc=us_yhp_main_dt_top_center&s=1&snm=SUCCESS&bId=4309697&pcrid=694993717199&tpbTkn=false&pvAgId=Index+Exchange&exid=10015&bidflr=0.000&pbidflr=0.050&basebidflr=0.05&opbidflr=0.050&spbf=0&bfa_pr=0.05&bfa_rr=0.0&flr_price=0.05&viewability=90&exp=sfl%3Dfalse%7CssBucket%3D0%7Cbfl%3D-100%7Cfl_rl%3D1%7CssProfile%3D0%7Cdbr%3D1%7Csfl%3Dfalse%7Cbfl%3D-100&mnrf=0&seat=85&ortbseat=Index+Exchange&brsrclk=0&bidrestime=1711672892590&fpuReq=1&bfs=101&acsn=1&bcrid=695100154993717199&stagid=sda-MAST-iframe&vls=2&mang=0&pvdTmax=335&fpusp=false&ae=false&epcexp=false&ucrid_ver=2&omid=0&mnet_static_share=0.0&req_bucket_id=1&dt=O&flr_strat=dynamic&mx_svc_mode=http&incentive_type=0&aogbdp=0.0&spIvt=0&spId=75bc0e19-4df6-4d4e-befb-a13ec2acb7cf&spSource=1&spTo=3&spIsReq=1&spFst=0&spCst=0&mx_page_url=https%3A%2F%2Fwww.yahoo.com&mx_sbp=-10.0&mx_badv_count=3&mx_epbc=60157&mx_ssProfile=0&mx_g_uid_source_cvrg%3C%3E=index%23EIDS%23%23magnite%23EIDS%23%23liveintentId%23EIDS%23%23pubmatic%23EIDS&mx_int_dsp_id=1007&mx_sua_os_n=Windows&mx_lr=0&mx_lr_seg_deal=0&mx_aqcpl_crid=0&mx_g_uid_cvrg%3C%3E=magnite%23%23liveintentId%23%23pubmatic%23%23index&mx_dup_profile=343&mx_bsAlgoBucket=NOT_APPLICABLE&mx_g_uid_sent%3C%3E=liveintentId%23%23index&mx_dup_algo=AVERAGE_DECAYED_CPM&mx_bsVerdictAlgo=V1&mx_gpid_format=EPC&mx_bss_algos%3C%3E=0&mx_bsAlgoProfile=NOT_APPLICABLE&mx_aurl_hc=0&mx_aabpc=0&mx_isLossNtf=false&mx_ssBucket=0&mx_bcat_count=20&mx_gpid_sent=true&
Source: global traffic	HTTP traffic detected: GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /services?uid=AAFJBk7MDBwAABSliZdkug&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D4433599061245380871%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 HTTP/1.1Host: sync.technoratimedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/casale?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=de959f04-5668-4cc4-9c45-9e4a8efcd9a8; TDCPM=CAESFwoIcHVibWF0aWMSCwjEkpDP4OTnPBAFEhQKBXRhcGFkEgsI7qj62-Dk5zwQBRIZCgpyaWdodG1lZGlhEgsI8KWh6ODk5zwQBRgBIAIoAjILCMae_Yj35Oc8EAU4AVoFdGFwYWRgAg..
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=81&gdpr=0&external_user_id=fACR1npTldFnUsSFfwaM1HNUkdJnUpSCeVLXvzrJ HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /log?logid=kfke&evtid=plutol1&__q=AYgEIwKELAQCAAABAIAAAgAAAAAAAAEABgAAQIABAAgAoNAIVDQzMDMyMzQxMzE0NDIzXzEyMzAyMzQ5MzlfMjA2NTEyMTQ2MjI1MDUyMUAxNGU1YTI5NDIwZWFhYTkyMzFkZmI0MDBmZjc1NTBlY7iHA65H4XoUrgFAKmh0dHBzOi8vd3d3LnlhaG9vLmNvbQRVUxJ5YWhvby5jb20SOFlIQkozQkowCA45NzB4MjUwCjIuMjEwEnlfZWFzdF9zYxg2OTQ5OTM3MTcxOTkGWUhCBmFkbQAAAAAAAIBWQNzyvPrQYwIxAAAAAAAA8L9EcnRiLWhvbWllMS16MS03OTZkNmZiN2JkLXJja2JjLllTQwAec2RhLU1BU1QtaWZyYW1lEGJmZWY4N2VkAmQCCnlhaG9v&cpr=0.997136726333627 HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/6D366468-71AF-422B-99AB-138A6DAB94F7?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; PugT=1711672896; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaTUVUObAcmCoK-YXFXK2HNNEsIi1byrg0AIm93VMh5msJ1UkkJFa8G-PxEAZQ-QqYslmwWIW5GuURLK1vvF6KBGb5xJug HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /log?logid=awlog&itype=YHB&tElp=5743&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-6cdd6846-77zvf&svr=285_20_20_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001711672890119017221018037423&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=%5B%7B%22source%22%3A%22liveintent.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22vN_RikZwhoZWxTMpfJBcDcT8RWafL19T6LauHA%22%2C%22atype%22%3A3%7D%5D%7D%2C%7B%22source%22%3A%22rubiconproject.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22LMPI0LLB-19-JSO6%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22liveintent.indexexchange.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ZQjYrf.1D0shOWRRRk909QAA%261008%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubmatic.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228DDE491A-31A6-4A5B-9E11-D4969B43F97B%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%5D&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&pvid=25307&exid=10025&req_mtype%3C%3E=0&res_mtype=0&pv_adtype=0&adtypes=0&pbasrc=0&mang=0&dpa=2&crid=827382134&g=0&nms=2&ptype=43&supcrid=us_yhp_main_dt_top_right&r_fp%3C%3E=3900443&acid=176264509238088091711672891609&astat=dp&auMxTm=1400&actltime=1409&acwtime=1409&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=2&agid%3C%3E=&asagid=&asbkt=&sr=0&adj1=0&dpsh_src=1&adj0=0&pst=0&adj2=0&incentive_expense=0&incentive_type=0&discount=0&bdp=1.240000&cpm=1.24&ogbdp=1.240000&cbdp=1.240000&dfpBd=1.24&aogbdp=&true_bdp=1.24&abtest_status=0&bucket_id=-1571&exp_id=-380&flrver=&flrrule=827382134%7C*%7C25307&bfa_al=exploitation&bfa_pr=0.50&bfa_stat=1&flr_price=0&flr_strat=dynamic&advId=&advNm=&pvAgNm=&pvAgId=&advUrl=chevrolet.com&ba=2940&prspt=headerBid&act=headerBid&mowxReqId=&ckfl=&cs=&iurl=&di=&dt=O&dp=0&dsrc=&dbf=0&epc=1057986&epc2=&epc3=&pbidflr=0.50&bfs=&nbr=0&prvAccId=1057986&pcrid=15328874&size=300x600&req_size=300x600&s=1&snm=success&toconsider=1&mnet_ckfl=&rbr=&ruct=0&ae=0&ftr%3C%3E=&og_bid=0&pcon=&adType=BANNER&gtime=4&htime=-1&stime=-1&ltime=1122&brc=0&brt=1711672892&but=1711672892&bidId=146020580947701411711672892745&mpvid=&aqtime=0&in_lurl=&out_lurl=&loss_id=&abs=&apid=&ybnca_bbid=&binfobid=&bdata=&bId=&cmpid=&cat=&attr=&dtc=&prvReqId=&ybnca_erpm=&exp=&ybnca_gbid=&htps=&patint=&patkey=&fpuReq=&prvApiId=&mp_seg%3C%3E=&pcId=&pvNbr=&pvNbrDtls=&pseat=&rtime=&se
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=17&external_user_id=P1GEqyyk_OouTnS49Tqs&puid= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstwHX522iG5wGpEq0zJeFYulisc6XLfScQneT6JvStPRRy8Hi6oAqCmaZB6WJZskmfQZUS0I8EiLrurHkf5KtVWKV2dntl1JfqL386zfPmjnH13y_pfC74zAZf9mmwn7OgVkgITSHaZYMPuXoHqjLer3ZBBeOflyL2OUlUlOsGCr3XVtlrepYyHnnJm1FtX7u8K6ZKNTFslo6vwVnm9Ok41SjHuqLDLZG4eYk36fN0XdG8RbNpHw2bzl7PZsK8VUOIsnWYOoxnMMoVZUdJMrJdAsOo6y76sTPw_9wVjtRqVpzdMDFVwL2ev-gWHp5z6H9R4O9uDqtSJ-gZ70t5aETMiNJbYava4xo27pQsfqCwc5c_0ziZ_sG55QgJdDdgs28FtnTiU2w-d1-iS2Lz_mR449XgxHoeTDQ5OiBnwifzFgG9CU8ALOX6J02VVGT1L25O6JCjHz0QL6ep3Mea5W9kYVZmGk8kQASyfpE9-ghN_zkDF1ngl9p1K1jb0DVidkV7AWcG2hY3-0QQrk-5SU_NltUpXyRZs3tYyb2E05lw5v-RekFrGsg1ynRCsTk80UZgzVmhJQvbcrxXxfJilBzUe-EmPO5YFF_KJpTnfRcnpYMHZf4zNbensPpPDgTfTzlKxiauRSeOXmqsA4H7TkSJzm1RKtki0gji2KVijqcQ3_JrA6gL53MJUE6fWZ2nNf0_o1-ANVaL8BR31UFbsCZ7XKDbqvykcG9Aia2imrnmKOUUx4eBIG24gMiQq1hObADTbyoEHEdJu-HImVRLeaZKxtY2F3TGHYVsmSHN5aR1Gc9MI12R6AjDIefz2fUj1RrFDWIQahpUNrcxPhBtEwNcwqKsLHET0JO8j-CvScQm9jBk595gK8zpTxhtF7sM6MGxSXbeuLo0U7fOnV84ea0n8d0efDur-KB6vTXA_qoHEc6mvOfw-8AHNUq9AerXzRqxEaO97lDhihAvp_qUtwk7iBFzLZhJ18wH9qpMQsGZiD_r5nh-DmqeuqfaFTeyVShUxainzrn1uMC1Y47me2Z2IFHp1Sm116sKaE8UVUql9zvMGIfUP_R-Zs95Wc9Z2HTVufCLqJJws5MXNPIBCvBxK-dDnI5FKdbSGL0GZ4CWWauHJSxhvp2h4shFjYjJt5jQSD5XyeO61va9HaWBuLTMPBgKZtSQ_IsvNY7g8ZDyvLexQmSXhVgtjaM9i4fsCi1KSIwfrgypqToqi4iXhwWQAx5xzgLCScnBMADiP5dO1afnJWRgm6QigHIPw1k_oqPDMKtM130z56-QZm7Ze5iUY2s6Y7P90vHeruW5nKkHRQ7rcIMlkQ91kPFPv67cIlWRckuefnwIfrcQWBquDnXooZSBmxyjkA0vsiHXJW6ihtjcsw_nlWoKqbQhDyynDiJifdFdN3nEF9a8RZsUQwUkA5gUCVf3bSvcxg4A2CHva0EY6kwMQSocGBzv32Ho0uFla0xgxbaQfD3BfncGqp3b-1QK3Q3QZ_MUz2625O6_oDXIDJTD4UJyFKwGoGg&sai=AMfl-YREyLylDBG7IUUKnudbj-kfqF28S-HTe-R2DGlymntOwHDVVf302UtMKk-f92bHAAa0IDuMeSTj52eOgepRGESO9E37BYZ-iYHz8iFjcWBjHowuWuTXoNnNAkou1WAH-WxtiszqTLn1Hyg5P4sEt_UiMSbTV3m0UmUupqBi-lzwgH4CsRSq3XqR6azAbRz4qPsSXiAFratKAQIbQuluIOVVmw&sig=Cg0ArKJSzGL_hwGFS5VzEAE&uach_m=%5BUACH%5D&pr=13:ZgYOPAAAAAB2m_3QsatYZTYYSiy_qBI09Znk9w&cry=1&crd=aHR0cHM6Ly9mb3JkYmx1ZWFkdmFudGFnZS5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=3&cbvp=1&cstd=0&cisv=r20240327.96706&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source=triggerReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlaJk6bHByEIRBO0irO6IoozSM4-tSRZhT2IlYufwWUI_XHABPzon6zqXxim80; APC=AfxxVi7JxYIYbMX27B2vewpU13WV8PTDneLxWQzURDLa0C2HmfqVBQ
Source: global traffic	HTTP traffic detected: GET /cs?partnerId=59&partnerUserId=CAESEJTzVPhxsNbxAo83M2QShqc&google_cver=1 HTTP/1.1Host: cs.lkqd.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lkqdidts=1711672897; sr59=1\|CAESEJTzVPhxsNbxAo83M2QShqc\|1711672897; lkqdid=IaVp1j-rtk0
Source: global traffic	HTTP traffic detected: GET /cookie-sync/ie?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAFJBk7MDBwAABSliZdkug; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-edejGYFE2uVsfbouHZuc9q9b5ME1.tw-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; PugT=1711672896; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294
Source: global traffic	HTTP traffic detected: GET /event?d_src=1233&d_event=imp&d_adv=3971573&d_site=3093372&d_creative=193540874&d_adgroup=578358183&d_placement=383884886&d_campaign=31236918&d_cb=3631931756 HTTP/1.1Host: ford.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=18302510874207377964223395608090049346
Source: global traffic	HTTP traffic detected: GET /cksync.html?cs=1&vsid=3546744890180387000V10&type=tlt&refUrl=&vid=16728938013546744890180387000V10&ovsid=1910044241478282443237&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=82&gdpr=$%7bGDPR%7d&gdpr_consent=$%7bGDPR_CONSENT%7d HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=4433599061245380871; TestIfCookieP=ok; csync=127:AAFJBk7MDBwAABSliZdkug
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=9bd3933c-0a52-4830-a023-563ef18ab8c1; c=1711672899; tuuid_lu=1711672899
Source: global traffic	HTTP traffic detected: GET /sync/casale/ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB?gdpr_consent=&us_privacy=1YNN&gdpr=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
Source: global traffic	HTTP traffic detected: GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: d=EG4BDQG-K7jvsQA; mc=66060e41-dee50-49b02-d5b3d
Source: global traffic	HTTP traffic detected: GET /ht/htw-pixel.gif?ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: js-sec.indexww.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=apx&ovsid=5423405387794830934&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
Source: global traffic	HTTP traffic detected: GET /int/cm?exc=19&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: cm.ctnsnet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/31327?bidder_id=14481&bidder_uuid=ZgYOPsAoJI0AAAi4ADlhawAA%261617&gpdr=&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CgcKBQgMENEX; lidid=07571c18-3f04-4602-a656-288806fb242c
Source: global traffic	HTTP traffic detected: GET /cm/api/index?cm_dsp_id=191&cm_user_id=%3cIndex_user_id%3e&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: dmp.brand-display.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=sov&ovsid=IZjJALZHIXjbUV1jQgKNiPaF&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3DDD9B07CFC8814B5991D3EF05248CDFB5%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526userid%253D4433599061245380871%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=DBAA&gpp_sid=-1&google_gid=CAESEBlRho78gpmMlRUqfBGx8XY&google_cver=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/55940/sync?_origin=1&redir2=true&uid=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB&gdpr_consent=&us_privacy=1YNN&gdpr=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0:18z8~2hk0"
Source: global traffic	HTTP traffic detected: GET /s/ix?cm_dsp_id=18&us_privacy=1YNN&gdpr=&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: s.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ix.gif?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=$UID&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=JdhWkazzA7-l-SJBnb9vWXLWZRZHRTHbCkah-EW3O2ECAhxSYsqS4OFO_2Ig6DeQZPtzrEcTco9BU0aHgalK869BAW6WsG83Dwoyx1UwJrs.; uuid2=5423405387794830934
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=55953&ovsid=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&gdpr=0&gdpr_consent= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
Source: global traffic	HTTP traffic detected: GET /user-sync/redirect?profile=73&gdprapplies=0&gdpr=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: ssp-sync.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstwHX522iG5wGpEq0zJeFYulisc6XLfScQneT6JvStPRRy8Hi6oAqCmaZB6WJZskmfQZUS0I8EiLrurHkf5KtVWKV2dntl1JfqL386zfPmjnH13y_pfC74zAZf9mmwn7OgVkgITSHaZYMPuXoHqjLer3ZBBeOflyL2OUlUlOsGCr3XVtlrepYyHnnJm1FtX7u8K6ZKNTFslo6vwVnm9Ok41SjHuqLDLZG4eYk36fN0XdG8RbNpHw2bzl7PZsK8VUOIsnWYOoxnMMoVZUdJMrJdAsOo6y76sTPw_9wVjtRqVpzdMDFVwL2ev-gWHp5z6H9R4O9uDqtSJ-gZ70t5aETMiNJbYava4xo27pQsfqCwc5c_0ziZ_sG55QgJdDdgs28FtnTiU2w-d1-iS2Lz_mR449XgxHoeTDQ5OiBnwifzFgG9CU8ALOX6J02VVGT1L25O6JCjHz0QL6ep3Mea5W9kYVZmGk8kQASyfpE9-ghN_zkDF1ngl9p1K1jb0DVidkV7AWcG2hY3-0QQrk-5SU_NltUpXyRZs3tYyb2E05lw5v-RekFrGsg1ynRCsTk80UZgzVmhJQvbcrxXxfJilBzUe-EmPO5YFF_KJpTnfRcnpYMHZf4zNbensPpPDgTfTzlKxiauRSeOXmqsA4H7TkSJzm1RKtki0gji2KVijqcQ3_JrA6gL53MJUE6fWZ2nNf0_o1-ANVaL8BR31UFbsCZ7XKDbqvykcG9Aia2imrnmKOUUx4eBIG24gMiQq1hObADTbyoEHEdJu-HImVRLeaZKxtY2F3TGHYVsmSHN5aR1Gc9MI12R6AjDIefz2fUj1RrFDWIQahpUNrcxPhBtEwNcwqKsLHET0JO8j-CvScQm9jBk595gK8zpTxhtF7sM6MGxSXbeuLo0U7fOnV84ea0n8d0efDur-KB6vTXA_qoHEc6mvOfw-8AHNUq9AerXzRqxEaO97lDhihAvp_qUtwk7iBFzLZhJ18wH9qpMQsGZiD_r5nh-DmqeuqfaFTeyVShUxainzrn1uMC1Y47me2Z2IFHp1Sm116sKaE8UVUql9zvMGIfUP_R-Zs95Wc9Z2HTVufCLqJJws5MXNPIBCvBxK-dDnI5FKdbSGL0GZ4CWWauHJSxhvp2h4shFjYjJt5jQSD5XyeO61va9HaWBuLTMPBgKZtSQ_IsvNY7g8ZDyvLexQmSXhVgtjaM9i4fsCi1KSIwfrgypqToqi4iXhwWQAx5xzgLCScnBMADiP5dO1afnJWRgm6QigHIPw1k_oqPDMKtM130z56-QZm7Ze5iUY2s6Y7P90vHeruW5nKkHRQ7rcIMlkQ91kPFPv67cIlWRckuefnwIfrcQWBquDnXooZSBmxyjkA0vsiHXJW6ihtjcsw_nlWoKqbQhDyynDiJifdFdN3nEF9a8RZsUQwUkA5gUCVf3bSvcxg4A2CHva0EY6kwMQSocGBzv32Ho0uFla0xgxbaQfD3BfncGqp3b-1QK3Q3QZ_MUz2625O6_oDXIDJTD4UJyFKwGoGg&sai=AMfl-YREyLylDBG7IUUKnudbj-kfqF28S-HTe-R2DGlymntOwHDVVf302UtMKk-f92bHAAa0IDuMeSTj52eOgepRGESO9E37BYZ-iYHz8iFjcWBjHowuWuTXoNnNAkou1WAH-WxtiszqTLn1Hyg5P4sEt_UiMSbTV3m0UmUupqBi-lzwgH4CsRSq3XqR6azAbRz4qPsSXiAFratKAQIbQuluIOVVmw&sig=Cg0ArKJSzGL_hwGFS5VzEAE&uach_m=%5BUACH%5D&pr=13:ZgYOPAAAAAB2m_3QsatYZTYYSiy_qBI09Znk9w&cry=1&crd=aHR0cHM6Ly9mb3JkYmx1ZWFkdmFudGFnZS5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1177&vt=11&dtpt=1174&dett=2&cstd=0&cisv=r20240327.96706&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source;trigger;navigation-sourceReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Co
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&vsid=3546744890180387000V10&type=adb&refUrl=&vid=16728938013546744890180387000V10&ovsid=ZgYOPgAB7vmzSgAj&axid_e=&_test=ZgYOPgAB7vmzSgAj HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
Source: global traffic	HTTP traffic detected: GET /ht/htw-pixel.gif?ZgYOPsAoJI0AAAi4ADlhawAA%261617=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: js-sec.indexww.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1Host: pm.w55c.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=JcUsekky1RQ0jp5
Source: global traffic	HTTP traffic detected: GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=awlog&itype=YHB&tElp=5761&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-6cdd6846-77zvf&svr=285_20_20_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001711672890119017221018037423&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=%5B%7B%22source%22%3A%22liveintent.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22vN_RikZwhoZWxTMpfJBcDcT8RWafL19T6LauHA%22%2C%22atype%22%3A3%7D%5D%7D%2C%7B%22source%22%3A%22rubiconproject.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22LMPI0LLB-19-JSO6%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22liveintent.indexexchange.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ZQjYrf.1D0shOWRRRk909QAA%261008%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubmatic.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228DDE491A-31A6-4A5B-9E11-D4969B43F97B%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%5D&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&pvid=-3&exid=0&req_mtype%3C%3E=0&res_mtype=0&pv_adtype=0&adtypes=0&pbasrc=0&mang=0&dpa=&pbAcid=347818279457200221711672891606&pbBidId=20086357115156131711672891626&crid=206512146&g=0&nms=2&ptype=43&supcrid=us_yhp_main_dt_top_center&r_fp%3C%3E=3900443&acid=244154801216068341711672891614&astat=dp&auMxTm=1400&actltime=1410&acwtime=1410&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=2&agid%3C%3E=&asagid=&asbkt=&sr=0&adj1=0&dpsh_src=1&adj0=0&pst=0&adj2=0&incentive_expense=0&incentive_type=0&discount=0&bdp=2.210000&cpm=2.21&ogbdp=2.210000&cbdp=2.210000&dfpBd=2.21&aogbdp=&true_bdp=2.21&abtest_status=0&bucket_id=-1571&exp_id=-380&flrver=&flrrule=&bfa_al=&bfa_pr=&bfa_stat=&flr_price=0&flr_strat=dynamic&advId=&advNm=&pvAgNm=&pvAgId=11611&advUrl=denturerescue.com&ba=3215&prspt=headerBid&act=headerBid&mowxReqId=&ckfl=&cs=&iurl=&di=&dt=O&dp=0&dsrc=-2&dbf=1&epc=206512146&epc2=&epc3=&pbidflr=0.00&bfs=&nbr=0&prvAccId=206512146&pcrid=695100154993717199&size=970x250&req_size=728x90%7C970x250&s=1&snm=success&toconsider=0&mnet_ckfl=&rbr=&ruct=0&ae=0&ftr%3C%3E=&og_bid=0&pcon=&adType=BANNER&gtime=6&htime=-1&stime=-1&ltime=869&brc=0&brt=1711672892&but=1711672892&bidId=215705401661407401711672892495&mpvid=25052&aqtime=0&in_lurl=&out_lurl=&loss_id=&abs=&apid=&ybnca_bbid=&binfobid=&bdata=&bId=&cmpid=&cat=&attr=&dtc=&prvReqId=&ybnca_erpm=&exp=&ybnca_gbid=&htps=&patint=&patkey=&fpu
Source: global traffic	HTTP traffic detected: GET /sync?nid=68&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=adplog&itype=YHB&tElp=8183&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-6cdd6846-77zvf&svr=285_20_20_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001711672890119017221018037423&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=%5B%7B%22source%22%3A%22liveintent.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22vN_RikZwhoZWxTMpfJBcDcT8RWafL19T6LauHA%22%2C%22atype%22%3A3%7D%5D%7D%2C%7B%22source%22%3A%22rubiconproject.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22LMPI0LLB-19-JSO6%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22liveintent.indexexchange.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ZQjYrf.1D0shOWRRRk909QAA%261008%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubmatic.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228DDE491A-31A6-4A5B-9E11-D4969B43F97B%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%5D&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&pvid=25307&exid=10025&req_mtype%3C%3E=2%23%230&res_mtype=&pv_adtype=&adtypes=2%7C0&pbasrc=0&mang=0&dpa=2&crid=827382134&g=0&nms=2&ptype=43&supcrid=us_yhp_main_dt_top_right&r_fp%3C%3E=3900443&adj1=0&dpsh_src=1&adj0=0&pst=0&adj2=0&incentive_expense=0&incentive_type=0&discount=0&bdp=1.240000&cpm=1.24&ogbdp=1.240000&cbdp=1.240000&dfpBd=1.24&aogbdp=&true_bdp=1.24&advId=&advNm=&pvAgNm=&pvAgId=&advUrl=chevrolet.com&ba=4022&prspt=headerBid&act=headerBid&mowxReqId=&ckfl=&cs=&iurl=&di=&dt=O&dp=0&dsrc=&dbf=0&epc=1057986&epc2=&epc3=&pbidflr=0.50&bfs=&nbr=0&prvAccId=1057986&pcrid=15328874&size=300x600&req_size=300x600&s=1&snm=success&toconsider=1&mnet_ckfl=&rbr=&ruct=0&ae=0&ftr%3C%3E=&og_bid=0&pcon=&adType=BANNER&gtime=4&htime=-1&stime=-1&ltime=1122&brc=0&brt=1711672892&but=1711672892&bidId=146020580947701411711672892745&mpvid=&aqtime=0&in_lurl=&out_lurl=&loss_id=&abs=&apid=&ybnca_bbid=&binfobid=&bdata=&bId=&cmpid=&cat=&attr=&dtc=&prvReqId=&ybnca_erpm=&exp=&ybnca_gbid=&htps=&patint=&patkey=&fpuReq=&prvApiId=&mp_seg%3C%3E=&pcId=&pvNbr=&pvNbrDtls=&pseat=&rtime=&seat=85&ortbseat=1982032&sbdrid=&ybnca_vbid=&wsip=&pvdTmax=0&td=%7B%7D&dfpadvId=&dfpcmpId=&isEmp=&dfpAdPath=&dfpDiv=sda-LREC-iframe&sz=&srcAgCrid=&srcAgLid=&lbid=&isbckfl=&srvcnm=&sspReq=&csip=&sspReg=&top=572&btm=1172&lft=951&rght=1243&sec=&chnl=&csent=1&zn=e&acid=176264509238088091711672891609&astat=dp&
Source: global traffic	HTTP traffic detected: GET /sync?ssp=liveintent&user_id=07571c18-3f04-4602-a656-288806fb242c HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&vsid=3546744890180387000V10&type=opx&refUrl=&vid=16728938013546744890180387000V10&axid_e=&ovsid=51c60a0a-b2b1-4df8-a524-32544527bc2c HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvdEyCMha1EgGA-oMXI6iXVqeXerKqHh7L9CM-EmzMPYg0dkA1rWyWqq2iv6U8M0NS4tnJqkTtwGQgLau33oqv6S8TWrB9ClDKSBilRHnU5Zy8_EcPM4pfcJaiepsjKHAHGm7LDSRIc8qPvyDzeVhpkiTc0F8tzVgLM8rIGYzLRA66kzf1pg-uUIaYh-1h9xp58TdN91a0_zVp85LBIr4si2UXATVceecfzkIc68hV9KqeV7E2XfxFS-s5oexYAbTrv96dsaZfCHOmx3-ktmCBBVscoRg6rkliRgA0_IeBZxnM0vjhEZM1I_n5n1qxjVsBfsIsw9VwQz8jFnBGfSXcFyfxcyZ_LciSm8r2mlpnRPX2F-97iSz88jeWZEwsrz8X_7KnRpIeTVma_LntjyL5BkNPtsj4TKQHdc1jdzVtshMVfbBb3iuM7PhWmXID2tGY6f8tW_05uzXLvTRHQE2CPWw0uvNkFOmHjJD-2VBtNFElxoAxPkUDqQ-OQyZm_oEmM1LGnzadaQatNLa9ZMZa9yoghIWzRTxpYRppbQ4SPTqeTnoJp4K0NvgdrubU0J-77m3q3KaYodp-Zv80l_nm3uSYqQh4-q2y1n6AUtOr4mgbhntncZ3zst3_5JfA0t9CaWHp6CVA82DuluX3O_sR3Y61oWb2JHE-oYznpdp8ryLcpIiOBAW8Nh8Y6l9MpivlPtjqUv_AtLrwzLxQxQesZpjQvgHtTe7RpblnjsK0se4-Iqw0GlFsZtqvnDYcjIWMNKT3DDK9I92CSwWovdzkGdjh1xG07U_eQCa4p1UvLvB8Tbul0nUxTeINoFzjDOkj43L9cFrIwTSrp59maV1b-N15CZjjKf4Jo3r3yNyLXCSZppTQk6c8ODQLWzOuLUSFO_YFnQbIyoMukooYgqaHh3hL14Qxz2e5YJjkj5BjjCZurCYkCjJZcqCSXx7Czmot6FmUpWh8Kv5KYm3guv2RWYs0utIeXehlipnm7sz1KMSxG1Wb6_zpBRz7sacRREXVq2a-dxptS_-HZND91EyzRU6559yS4hht49WXjCc0DnzIWDPgAgtl88LMLT2JGpG-gndyc9-nLn6D1L5BI3clmJxdKdhooZcnKwyGAOAIYRf413G5yD8oNk40pTR1ps_N2FIDs-HFBqGkWmeA1svEhZlmnqktS3G7S9QrBBAO_I5Q9Us9f1-qZAhKqQYSQhwjVK_zeIrn242W1M7dgi79mu0pXK2QYfoxaDryBu-2oLTlzRR-kwsQ0D1dwyzqdsCk9IsbW9yfsILT7V72DyS-QFkmWLs1S9t1dOMKct-B8Pk3G_akstjtGiT-mPrfNxhpcR4PZKmbycyuVOUgFSlsU7VVRHNlqCl-hNfWvjuhk6ZuLu1_uj7YOXZO1faFOWzjyplrXb_MxT4RwLeZywEr5Tv6KbSyNJJlNAXHOzxins3fGKYPmh16KvKM144O-UV89YSyHBWUGCwQnG_1R&sai=AMfl-YQYjcAqWSD84XojUqontl4RSIrVprfYKa8wLO0wTNMQpyWmIm-MVZC-QWjcQyODnARkujd6HcAaLHzR7VZu3UY0WY0Uu65vBrqAInlduL0JchP77FIa1iCnhX_2SqpUKd6hzrucbeqjWVvGGDEkslaRWX_0x_3pNHugusTLznDcj_stOHUG0CxVfJxniUdCH3C4IoK4I69_biWOtBOrOcMVbw4&sig=Cg0ArKJSzAER363Y5OLJEAE&uach_m=%5BUACH%5D&pr=13:ZgYOPAAAAAA82sLIIxTNCSKTH3jb2L6duZ5lxw&cry=1&crd=aHR0cHM6Ly9jaGV2cm9sZXQuY29tLGh0dHBzOi8vYWdrbi5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1505&cbvp=1&cstd=1495&cisv=r20240327.93139&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source;triggerReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlaJk6bHByEIRBO0irO6IoozSM4-tSRZhT2IlYufwWUI_
Source: global traffic	HTTP traffic detected: GET /sadbundle/473513299895995753/index.html?ev=01_250 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=awlog&itype=YHB&tElp=5776&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-6cdd6846-77zvf&svr=285_20_20_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001711672890119017221018037423&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=%5B%7B%22source%22%3A%22liveintent.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22vN_RikZwhoZWxTMpfJBcDcT8RWafL19T6LauHA%22%2C%22atype%22%3A3%7D%5D%7D%2C%7B%22source%22%3A%22rubiconproject.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22LMPI0LLB-19-JSO6%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22liveintent.indexexchange.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ZQjYrf.1D0shOWRRRk909QAA%261008%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubmatic.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228DDE491A-31A6-4A5B-9E11-D4969B43F97B%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%5D&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&pvid=25307&exid=10025&req_mtype%3C%3E=0&res_mtype=0&pv_adtype=0&adtypes=0&pbasrc=0&mang=0&dpa=2&crid=533126705&g=0&nms=1&ptype=43&supcrid=us_yhp_main_dt_as_mid_right_c&r_fp%3C%3E=3900443&acid=287329703247762331711672891614&astat=dp&auMxTm=1400&actltime=1412&acwtime=1415&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=2&agid%3C%3E=77452003106345491711672891614&asagid=77452003106345491711672891614&asbkt=v2&sr=0&adj1=0&dpsh_src=1&adj0=0&pst=0&adj2=0&incentive_expense=0&incentive_type=0&discount=0&bdp=2.500000&cpm=2.5&ogbdp=2.500000&cbdp=2.500000&dfpBd=2.50&aogbdp=&true_bdp=2.5&abtest_status=0&bucket_id=-1571&exp_id=-380&flrver=&flrrule=533126705%7C*%7C25307&bfa_al=exploitation&bfa_pr=0.45&bfa_stat=1&flr_price=0&flr_strat=dynamic&advId=&advNm=&pvAgNm=&pvAgId=&advUrl=ford.com&ba=2983&prspt=headerBid&act=headerBid&mowxReqId=&ckfl=&cs=&iurl=&di=&dt=O&dp=0&dsrc=&dbf=1&epc=1057984&epc2=&epc3=&pbidflr=0.45&bfs=&nbr=0&prvAccId=1057984&pcrid=12889399&size=300x600&req_size=300x600&s=1&snm=success&toconsider=1&mnet_ckfl=&rbr=&ruct=0&ae=0&ftr%3C%3E=&og_bid=0&pcon=&adType=BANNER&gtime=4&htime=-1&stime=-1&ltime=1119&brc=0&brt=1711672892&but=1711672892&bidId=124332210445997721711672892743&mpvid=&aqtime=0&in_lurl=&out_lurl=&loss_id=&abs=&apid=&ybnca_bbid=&binfobid=&bdata=&bId=&cmpid=&cat=&attr=&dtc=&prvReqId=&ybnca_erpm=&exp=&ybnca_gbid=&htps=&patint=&patkey=&fpuReq=&prvApi
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; pi=156078:3; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; PugT=1711672898; SPugT=1711672899
Source: global traffic	HTTP traffic detected: GET /pixel/2387/?ct=US&st=&city=0&dma=10&zp=&bw=4&che=729764585&col=31411294,5071708,388507207,581726800,211538221 HTTP/1.1Host: d.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3Aksj%2ByvaRmHmyAUuIOsoo89ApLpekHFAG
Source: global traffic	HTTP traffic detected: GET /bct?pid=bd15bf51-eefe-4c0d-b44e-73d8d1d68196&google_gid=CAESENHvjjR7pBUR89uYsB3ujPU&google_cver=1 HTTP/1.1Host: mid.rkdms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sc=10%3A116064; sessionid=h-2a76b4ca64ed4b9dbe8faaecce219970_t-1711672898
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=969751699754991983 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; pi=156078:3; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; PugT=1711672898; SPugT=1711672899
Source: global traffic	HTTP traffic detected: GET /verify.js?ctx=20006197&cmp=31411294&sid=5071708&plc=388507207&crt=211538221&advid=3876771&adsrv=1&mon=1&blk=1&dvp_cawf=crtwrp&cm360cw=1&unit=300x600&prr=1&turl=https://www.yahoo.com/&aucmp=21039716546&auevent=ABAjH0gQDp_4c-0JAi6rZSx5hhRK&autt=1&ppid=103&aucrtv=553954458&auorder=1015903071&pltfrm=13&ausite=2328226494&auxch=13&aufilter1=1982032&c1=1982032&audeal=IX3MPADScope3DISP6Kqa8MAC&adid=&app=&dup=&gmnpo=&isdvvid=&supplySource=&tagtype=&aUrlD=0&brid=3&bridua=3&brver=117.0.0.0&brh=1&vavbkt=&lvvn=28&fcifrms=17&winh=600&winw=300&chro=1&noc=4&wouh=984&wouw=1280&htmlmsging=1&refD=2&scah=984&scaw=1280&jsver=5684&uid=1711672899477415&srcurlD=0&ttfrms=148&num=6&dvp_isOnHead=0&flvr=1&ver=5684&jsCallback=__verify_callback_1711672899477415&jsTagObjCallback=__tagObject_callback_1711672899477415&ssl=1&sfe=1&m1=15&dvp_rcp=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=1375353221538.1655&ee_dp_sukv=1375353221538.1655&dvp_tukv=17591451939.44182&ee_dp_tukv=17591451939.44182&ee_dp_dvtpurl=https%3A%2F%2Fcdn.doubleverify.com%2Fdvbm.js&dvp_strhd=0.29999999998835847&dvpx_strhd=0.29999999998835847&eparams=DC4FC%3Dl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETauU2%3F4r92%3A%3Fl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETar9EEADTbpTauTau_ag%60%60376g%607572335_6_6ce_h%60c%60fa6h%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3ETar9EEADTbpTauTau_ag%60%60376g%607572335_6_6ce_h%60c%60fa6h%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3E&referrer=https%3A%2F%2F02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html HTTP/1.1Host: rtb0.doubleverify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic&bsw_custom_parameter=9bd3933c-0a52-4830-a023-563ef18ab8c1 HTTP/1.1Host: pool.admedo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=yahoo&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=8b7fe8e3-752d-4da2-8d7e-64baea716a5a&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; pi=156078:3; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; PugT=1711672898; SPugT=1711672899
Source: global traffic	HTTP traffic detected: GET /getuid/15563?gdpr=0&gdpr_consent=&gpp_sid=&gpp=&r=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3D58601%26ovsid%3D HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /verizonsync?gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:JcUsekky1RQ0jp5&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; pi=156078:3; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; PugT=1711672898; SPugT=1711672899
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=TjMxskYIXe9LRDfaNGZeQmalMCs&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; pi=156078:3; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; PugT=1711672898; SPugT=1711672899
Source: global traffic	HTTP traffic detected: GET /services?srv=cs&nuid=DD9B07CFC8814B5991D3EF05248CDFB5&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D4433599061245380871%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&uid=ZgYOPsAoJI0AAAi4ADlhawAA%261617 HTTP/1.1Host: sync.technoratimedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tads_uidp_73=AAFJBk7MDBwAABSliZdkug; tads_uid=DD9B07CFC8814B5991D3EF05248CDFB5; tads_uid_cd=20240329004139+0000; tads_zora=2
Source: global traffic	HTTP traffic detected: GET /int/cm?exc=20&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&callback=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dctn%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26ovsid%3D%3CDSP_USER_ID%3E%26axid_e%3D%26 HTTP/1.1Host: i.ctnsnet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid_0bf86f4e7d934cb7b5daae7a5c7d8db5=1
Source: global traffic	HTTP traffic detected: GET /fUD7hqXV/v2?_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tum?umid=6 HTTP/1.1Host: ums.acuityplatform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&type=spa&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHBJ3BJ0&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25235%2C25036%2C25278%2C25237%2C25159%2C25038%2C25118%2C25239%2C25117%2C25318%2C25317%2C25270%2C25072%2C25031%2C25030%2C25198%2C25274%2C25276%2C25071%2C25202%2C25003%2C25127%2C25006%2C25204%2C25126%2C25007%2C25208%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25243%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25250%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
Source: global traffic	HTTP traffic detected: GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1Host: sync.mathtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=1b407dde-ed65-11ee-9900-64996dd289d9 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; pi=156078:3; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; PugT=1711672899
Source: global traffic	HTTP traffic detected: GET /cookie-sync?gdpr=0&userid=4433599061245380871&gdpr=0&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=4 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAFJBk7MDBwAABSliZdkug; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /pbmtc.gif?puid=6D366468-71AF-422B-99AB-138A6DAB94F7 HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=0b2e56bd-231c-4ec2-ba2a-78dde1fe3a07; ss=WyPvdDzgshiwWSK1x6NOShALlVh98PDi4yG7ErXAOjUDLOlyzjC2dPuU%2B828lk5tJ%2BTFQvaMmdMz6sryo0xxZQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /sadbundle/473513299895995753/styles.css HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/473513299895995753/script.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token}&gdpr=0&gdpr_consent= HTTP/1.1Host: csync.loopme.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/gsap/1.19.0/TweenMax.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s0.2mdn.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/473513299895995753/images/bg1.jpg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/473513299895995753/images/headline1.png HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1Host: ipac.ctnsnet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=0bf86f4e7d934cb7b5daae7a5c7d8db5
Source: global traffic	HTTP traffic detected: GET /visit.js?gdpr=&gdpr_consent=&flvr=1&ttmms=51&ttfrms=148&brid=3&brver=117.0.0.0&bridua=3&bds=1&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETauU2%3F4r92%3A%3Fl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETar9EEADTbpTauTau_ag%60%60376g%607572335_6_6ce_h%60c%60fa6h%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3ETar9EEADTbpTauTau_ag%60%60376g%607572335_6_6ce_h%60c%60fa6h%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3E&srcurlD=0&aUrlD=0&ssl=https:&dfs=2100&ddur=1530&uid=1711672899477415&jsCallback=dvCallback_1711672899477116&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&htmlmsging=1&chro=1&hist=1&winh=600&winw=300&wouh=984&wouw=1280&scah=984&scaw=1280&jsver=5684&tgjsver=5684&lvvn=28&m1=15&refD=2&referrer=https%3A%2F%2F02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&sfe=1&fcifrms=17&brh=1&dvp_epl=344&noc=4&nav_pltfrm=Win32&ctx=20006197&cmp=31411294&sid=5071708&plc=388507207&crt=211538221&adsrv=1&advid=3876771&unit=300x600&turl=https://www.yahoo.com/&c1=1982032&bsimpid=a088deb529ba4c1899d301c788f6fede&prr=1&errorURL=https://tps.doubleverify.com/visit.jpg&ppid=103&audeal=IX3MPADScope3DISP6Kqa8MAC&auevent=ABAjH0gQDp_4c-0JAi6rZSx5hhRK&aucmp=21039716546&aucrtv=553954458&auorder=1015903071&ausite=2328226494&auxch=13&pltfrm=13&aufilter1=1982032&autt=1&mib=0&mon=1&blk=1&dvp_cawf=crtwrp&cm360cw=1&dvp_rcp=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=1375353221538.1655&ee_dp_sukv=1375353221538.1655&dvp_tukv=17591451939.44182&ee_dp_tukv=17591451939.44182&ee_dp_dvtpurl=https%3A%2F%2Fcdn.doubleverify.com%2Fdvbm.js&dvp_strhd=0.29999999998835847&dvpx_strhd=0.29999999998835847&dvp_tuid=1434562293200&jurtd=1377703399 HTTP/1.1Host: tps.doubleverify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic&bsw_custom_parameter=9bd3933c-0a52-4830-a023-563ef18ab8c1 HTTP/1.1Host: pool.admedo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=d3e8a721-2432-4c2e-85e7-0e0d2d010a1b; c=1711672900; tuuid_lu=1711672900
Source: global traffic	HTTP traffic detected: GET /user-sync/redirect?profile=73&gdprapplies=0&gdpr=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: ssp-sync.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=540245193&val=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=acaeb6da-c35c-4846-acd5-3bb6b6a37bb8\|1711672894
Source: global traffic	HTTP traffic detected: GET /tum?umid=8&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: ums.acuityplatform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=YdtgSj0svp2Z2ieaFv7X_1711672899702; ts=1711672899
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:ce6f6606-0e44-4300-9f76-592e7ae20814&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; pi=156078:3; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; PugT=1711672899
Source: global traffic	HTTP traffic detected: GET /verizonsync?gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VqUQt33vvQ3VT5KZdpyI%7C1711670400000%7C0
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=12&p=73&dis=0&url=https%3a%2f%2fssp-sync.criteo.com%2fuser-sync%2fredirect%3fprofile%3d73%26gdprapplies%3d0%26gdpr%3d%26gpp%3dDBAA%26gpp_sid%3d-1%26uid%3d%40%40CRITEO_USERID%40%40%26dised%3dtrue&gdpr=&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.html?cs=1&vsid=3546744890180387000V10&type=pub&refUrl=&vid=16728938013546744890180387000V10&axid_e=&ovsid=6D366468-71AF-422B-99AB-138A6DAB94F7 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
Source: global traffic	HTTP traffic detected: GET /int/cm?exc=20&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&callback=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dctn%26refUrl%3D%26vid%3D16729006893546744890180387000V10%26ovsid%3D%3CDSP_USER_ID%3E%26axid_e%3D%26 HTTP/1.1Host: i.ctnsnet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=0bf86f4e7d934cb7b5daae7a5c7d8db5
Source: global traffic	HTTP traffic detected: GET /fUD7hqXV/v2?_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=93248749&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; PugT=1711672899
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=yahoo&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005%22%2C%22zdxidn%22%3A%222069.88%22%7D
Source: global traffic	HTTP traffic detected: GET /insync?vxii_pid=10067&vxii_pdid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=58601&ovsid=u_99ef042a-5492-47e4-9c9a-171f0fce9075 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Martin?exid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=48&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=58259&ovsid=VqUQt33vvQ3VT5KZdpyI&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
Source: global traffic	HTTP traffic detected: GET /sync?pid=187&uid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.bfmio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=yahoo&zcc=1&cb=1711672900465 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005%22%2C%22zdxidn%22%3A%222069.88%22%7D
Source: global traffic	HTTP traffic detected: GET /getuid/15563?gdpr=0&gdpr_consent=&gpp_sid=&gpp=&r=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3D58601%26ovsid%3D HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_99ef042a-5492-47e4-9c9a-171f0fce9075
Source: global traffic	HTTP traffic detected: GET /usersync/index/?us_privacy=1YNN&gdpr=&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=P1GEqyyk_OouTnS49Tqs
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAFJBk7MDBwAABSliZdkug&gdpr=0 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; pi=156078:3; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; PugT=1711672899
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=YdtgSj0svp2Z2ieaFv7X_1711672899702; ts=1711672899
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=58280&ovsid=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&vsid=3546744890180387000V10&type=ctn&refUrl=&vid=16728938013546744890180387000V10&ovsid=0bf86f4e7d934cb7b5daae7a5c7d8db5&axid_e=&y=null&gdpr=0 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
Source: global traffic	HTTP traffic detected: GET /sync?nid=68&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-4e3331b2-4608-5def-4b44-37da34665e42.whFqKzgCw18m%2FSCYS5yWxVR2rG1ZAITd2%2Fm9ZGidAuE; sa-user-id=s%3A0-4e3331b2-4608-5def-4b44-37da34665e42.whFqKzgCw18m%2FSCYS5yWxVR2rG1ZAITd2%2Fm9ZGidAuE; sa-user-id-v2=s%3ATjMxskYIXe9LRDfaNGZeQmalMCs.jz60r%2BxCkCaevdt8UZTBS0VL4AlTE8Txkni1XZXv9Vo; sa-user-id-v2=s%3ATjMxskYIXe9LRDfaNGZeQmalMCs.jz60r%2BxCkCaevdt8UZTBS0VL4AlTE8Txkni1XZXv9Vo; sa-user-id-v3=s%3AAQAKIPreYZwXJZmBcmhsw0h0Dk4f9Z2guQWvxvtGD5yd9LWdEHwYBCDDnJiwBjABOgT87-jmQgQ7U_2w.IIbeenDSVjT6Vb4BH6csouzFrhVyxaj4gifv7y6Hp0M; sa-user-id-v3=s%3AAQAKIPreYZwXJZmBcmhsw0h0Dk4f9Z2guQWvxvtGD5yd9LWdEHwYBCDDnJiwBjABOgT87-jmQgQ7U_2w.IIbeenDSVjT6Vb4BH6csouzFrhVyxaj4gifv7y6Hp0M
Source: global traffic	HTTP traffic detected: GET /CookieIndex?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode&gdpr_consent=null&piggybackCookie={viewer_token}&gdpr=0 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; PugT=1711672899
Source: global traffic	HTTP traffic detected: GET /sadbundle/473513299895995753/images/bg2.jpg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=YdtgSj0svp2Z2ieaFv7X_1711672899702; ts=1711672899
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=23&expires=14&user_id=d3e8a721-2432-4c2e-85e7-0e0d2d010a1b&user_group=1&ssp=pubmatic&bsw_param=9bd3933c-0a52-4830-a023-563ef18ab8c1 HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1711672899; tuuid_lu=1711672899; tuuid=ca57c23d-569f-46f3-a577-3e6f6bd561b5
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&expiration=1714264899&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=130&external_user_id=AAFJBk7MDBwAABSliZdkug&expiration=1712882499&us_privacy=1YNN HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=196&external_user_id=4433599061245380871&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /sync/casale/ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
Source: global traffic	HTTP traffic detected: GET /sadbundle/473513299895995753/images/headline2.png HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&type=spa&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/checksync.php?vsSync=1&cs=9&cv=31&https=1&cid=8YHBJ3BJ0&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25235%2C25036%2C25278%2C25237%2C25159%2C25038%2C25118%2C25239%2C25117%2C25318%2C25317%2C25270%2C25072%2C25031%2C25030%2C25198%2C25274%2C25276%2C25071%2C25202%2C25003%2C25127%2C25006%2C25204%2C25126%2C25007%2C25208%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25243%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25250%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=109&external_user_id=0bf86f4e7d934cb7b5daae7a5c7d8db5&expiration=1714264899 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /sadbundle/473513299895995753/images/bg3.jpg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=57&external_user_id=969751699754991983 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=45&external_user_id=CAESEFC4he6gaSdOGOH6DAUt81g&google_cver=1&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=48012113&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; PugT=1711672900
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=191&external_user_id=08726e86-cf36-54f6-8d6ab380 HTTP/1.1Host: dsum.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=656f8b2c-4714-48d4-8d5f-32bdff906809
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=ca57c23d-569f-46f3-a577-3e6f6bd561b5&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; PugT=1711672900; chkChromeAb67Sec=3; pi=0:4; DPSync3=1712880000%3A256_259_263_262_260_201_261_258%7C1711756800%3A255_248%7C1712707200%3A257%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712534400%3A63%7C1712880000%3A233_166_264_13_104_99_5_71_21_7_249_243_8_96_48_238_220_234_56_266_176_46_214_240_250_231_54_3_55_165_178_22%7C1712275200%3A2_38_223_15%7C1712966400%3A35%7C1716854400%3A69; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=liveintent&user_id=07571c18-3f04-4602-a656-288806fb242c HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1711672899; tuuid_lu=1711672899; tuuid=ca57c23d-569f-46f3-a577-3e6f6bd561b5
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=aea3ca37-727a-41ef-b550-ee203ed2401c#1711672902005
Source: global traffic	HTTP traffic detected: GET /user-sync/redirect?profile=73&gdprapplies=0&gdpr=&gpp=DBAA&gpp_sid=-1&uid=656f8b2c-4714-48d4-8d5f-32bdff906809&dised=true&gdpr=&gdpr_consent=&gpp=DBAA HTTP/1.1Host: ssp-sync.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=656f8b2c-4714-48d4-8d5f-32bdff906809
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=65&external_user_id=AAAG7NSuQMmnfwMHSnLCAAAAAAA&expiration=1711759302&gpp_sid=-1&gpp=DBAA&is_secure=true&us_privacy=1YNN HTTP/1.1Host: dsum.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /sadbundle/473513299895995753/images/headline3.png HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=XMiDsS54DbysaEerRQ4GZg HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; PugT=1711672900
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?cookieQ=1&nid=48&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=316c09dc-77f5-496c-8783-9ae88f47c0a1#1711672902110
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=index&gpdr=&gdpr_consent=&us_privacy=1YNN&user_id=ZgYOPsAoJI0AAAi4ADlhawAA%261617 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=YdtgSj0svp2Z2ieaFv7X_1711672899702; ts=1711672899
Source: global traffic	HTTP traffic detected: GET /sadbundle/473513299895995753/images/headline4.png HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&vsid=3546744890180387000V10&type=dtm&refUrl=&vid=16728938013546744890180387000V10&ovsid=AAABzNBJmlEeqwMiMonlAAAAAAA&axid_e=&expiration=1711759301&nuid={{AXID}}&gpp_sid=-1&gpp=DBAA&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
Source: global traffic	HTTP traffic detected: GET /cksync?cs=3&type=yhb&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dmn2%26ovsid%3D%3Cvsid1%3E%26axid_e%3D HTTP/1.1Host: cs.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744950180300000V10
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=57926&ovsid=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
Source: global traffic	HTTP traffic detected: GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=6D366468-71AF-422B-99AB-138A6DAB94F7&vxii_pid=12&vxii_pid1=10067&vxii_rcid=8fb05dfd-93b3-4073-8d4f-73399245f1bc HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6IjhmYjA1ZGZkLTkzYjMtNDA3My04ZDRmLTczMzk5MjQ1ZjFiYyIsImwiOjE3MTE2NzI5MDE5NzEsInQiOjF9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; PugT=1711672901
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=12&p=73&dis=0&url=https%3a%2f%2fssp-sync.criteo.com%2fuser-sync%2fredirect%3fprofile%3d73%26gdprapplies%3d0%26gdpr%3d%26gpp%3dDBAA%26gpp_sid%3d-1%26uid%3d%40%40CRITEO_USERID%40%40%26dised%3dtrue&gdpr=&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=46&external_user_id=5423405387794830934&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=8&external_user_id=0b2e56bd-231c-4ec2-ba2a-78dde1fe3a07&expiration=1743208899 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=123&external_user_id=TjMxskYIXe9LRDfaNGZeQmalMCs HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=18&expiration=1727570499&external_user_id=1186a2d5-5631-4997-9cd5-d010d9cb78b1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=17&external_user_id=P1GEqyyk_OouTnS49Tqs&puid=&us_privacy=1YNN HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&vsid=3546744890180387000V10&type=ctn&refUrl=&vid=16729006893546744890180387000V10&ovsid=0bf86f4e7d934cb7b5daae7a5c7d8db5&axid_e=&y=null&gdpr=0 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
Source: global traffic	HTTP traffic detected: GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=4&external_user_id=3118679036834831413 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /sadbundle/473513299895995753/images/model.png HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=58601&ovsid=u_99ef042a-5492-47e4-9c9a-171f0fce9075 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1
Source: global traffic	HTTP traffic detected: GET /sadbundle/473513299895995753/images/lockout.png HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=58259&ovsid=VqUQt33vvQ3VT5KZdpyI&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
Source: global traffic	HTTP traffic detected: GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=45E09433ABCF443988615F414991A294
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7649593021643562585 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; PugT=1711672902
Source: global traffic	HTTP traffic detected: GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005%22%2C%22zdxidn%22%3A%222069.88%22%2C%22nxtrdr%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3203&partner_device_id=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1711672894631; TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069; TapAd_3WAY_SYNCS=1!2136
Source: global traffic	HTTP traffic detected: GET /712188.gif?partner_uid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pub/sync?pubid=pub8730968190912 HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=41&external_user_id=1b407dde-ed65-11ee-9900-64996dd289d9 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; PugT=1711672902
Source: global traffic	HTTP traffic detected: GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1Host: synchroscript.deliveryengine.adswizz.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/473513299895995753/images/cta_over.png HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=3836530392682421061&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; PugT=1711672900; chkChromeAb67Sec=3; pi=0:4; DPSync3=1712880000%3A256_259_263_262_260_201_261_258%7C1711756800%3A255_248%7C1712707200%3A257%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712534400%3A63%7C1712880000%3A233_166_264_13_104_99_5_71_21_7_249_243_8_96_48_238_220_234_56_266_176_46_214_240_250_231_54_3_55_165_178_22%7C1712275200%3A2_38_223_15%7C1712966400%3A35%7C1716854400%3A69; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug
Source: global traffic	HTTP traffic detected: GET /user-sync/redirect?profile=73&gdprapplies=0&gdpr=&gpp=DBAA&gpp_sid=-1&uid=08dfbe43-cb0c-4918-bda8-5b9f2b385f1d&dised=true&gdpr=&gdpr_consent=&gpp=DBAA HTTP/1.1Host: ssp-sync.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=08dfbe43-cb0c-4918-bda8-5b9f2b385f1d
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=123&external_user_id=TjMxskYIXe9LRDfaNGZeQmalMCs HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /event.png?impid=f6401e7fd4004956be533ce8a493d3fa&akipv6=&dup=&eoid=1000 HTTP/1.1Host: tpsc-ue1.doubleverify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/473513299895995753/images/disc_panel.png HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.html?cs=1&vsid=3546744890180387000V10&type=pub&refUrl=&vid=16728938013546744890180387000V10&axid_e=&ovsid=6D366468-71AF-422B-99AB-138A6DAB94F7 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-dtm=AAABzNBJmlEeqwMiMonlAAAAAAA~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:45E09433ABCF443988615F414991A294&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; Pu
Source: global traffic	HTTP traffic detected: GET /map/c=14701/tp=MTAI/tpid=6D366468-71AF-422B-99AB-138A6DAB94F7/gdpr=0/gdpr_consent= HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; PugT=1711672902
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAB5ELz2agAJAN9eVxrAAAAAAA&expiration=1711759302&nuid=6D366468-71AF-422B-99AB-138A6DAB94F7&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; PugT=1711672902
Source: global traffic	HTTP traffic detected: GET /qmap?c=1389&tp=STSC&tpid=316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553%26partner_url%3Dhttps%253A%252F%252Fr.casalemedia.com%252Frum%253Fcm_dsp_id%253D64%2526external_user_id%253D316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=133&external_user_id=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&pi=index&gpdr=&gdpr_consent=&us_privacy=1YNN&user_id=ZgYOPsAoJI0AAAi4ADlhawAA%261617 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?st=bidswitch&rurl=%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D79%26user_id%3D_wfivefivec_%26expires%3D30%26ssp%3Dliveintent%26bsw_param%3Dca57c23d-569f-46f3-a577-3e6f6bd561b5 HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=JcUsekky1RQ0jp5; matchpubmatic=5
Source: global traffic	HTTP traffic detected: GET /s/53233?bidder_id=183658&bidder_uuid=2329556626294787983&us_privacy=1YNN HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=Cg8KBQgMENEXCgYI0gEQxxc; lidid=07571c18-3f04-4602-a656-288806fb242c
Source: global traffic	HTTP traffic detected: GET /sync?ssp=criteo&custom_data=QvBDl19kJTJGckVvTHZaWVA3cjR5aUxhTGd5YVFKJTJCRUY3QzdERExOOWxNZnF1a3ZWaFhQWHk5NUZGYWdyUVNod3J5YmtSciUyQjZPNEJvUFJUcEhudXdOb2kzSkU2SVRqQ211amI3SFNPb3dCUm1ZekZkRzl6dE1ZeVh3N1ViMGxTUnhQYnBHakdSVUYydUVsb3djWkNYNlpIY3E4Tm9DT1A0YkswMTBJU25XVmxtMyUyQjAzMkY5JTJCS0lVQUZxdk5aajFPT2syVWdq&gdpr=&gdpr_consent=&us_privacy=&cr_user_id=k-_3LhZ7-eRGn6I81sgKP8Ckgx5iZKVs0K2f5C1Q HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1711672899; tuuid=ca57c23d-569f-46f3-a577-3e6f6bd561b5; tuuid_lu=1711672902
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; PugT=1711672902

Source: chromecache_1131.2.dr	String found in binary or memory: "id": "com.yahoo.www.twa", equals www.yahoo.com (Yahoo)
Source: chromecache_1144.2.dr	String found in binary or memory: {"@context":"http://schema.org","@type":"NewsArticle","mainEntityOfPage":"https://finance.yahoo.com/news/microsoft-backed-rubrik-ready-file-231532821.html","headline":"Microsoft-Backed Rubrik Is Ready to File Next Week for IPO","datePublished":"2024-03-28T23:15:32.000Z","dateModified":"2024-03-28T23:15:32.000Z","keywords":["Bloomberg","initial public offering","Rubrik","Bloomberg News"],"description":"(Bloomberg) -- Rubrik Inc., a cloud and data security startup backed by Microsoft Corp., is planning to file as soon as next week for an initial public...","publisher":{"@type":"Organization","name":"Yahoo Finance","logo":{"@type":"ImageObject","url":"https://s.yimg.com/rz/p/yahoo_finance_en-US_h_p_finance_2.png","width":354,"height":50},"url":"https://finance.yahoo.com/"},"author":{"@type":"Person","name":"Katie Roof and Amy Or","url":"","jobTitle":""},"creator":{"@type":"Person","name":"Katie Roof and Amy Or","url":"","jobTitle":""},"provider":{"@type":"Organization","name":"Bloomberg","url":"https://www.bloomberg.com/","logo":{"@type":"ImageObject","width":339,"height":100,"url":"https://s.yimg.com/os/creatr-uploaded-images/2020-11/c6bce4f0-2a3a-11eb-bfff-80ecd9e0e6df"}},"image":{"@type":"ImageObject","url":"https://s.yimg.com/ny/api/res/1.2/WFcWP9wqf0Zhlt_r9xcF_g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDA7Y2Y9d2VicA--/https://media.zenfs.com/en/bloomberg_markets_842/4454d5cb457add7be7828fc5a55e4ff1","width":1200,"height":800},"thumbnailUrl":"https://s.yimg.com/ny/api/res/1.2/WFcWP9wqf0Zhlt_r9xcF_g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDA7Y2Y9d2VicA--/https://media.zenfs.com/en/bloomberg_markets_842/4454d5cb457add7be7828fc5a55e4ff1"} equals www.yahoo.com (Yahoo)
Source: chromecache_851.2.dr	String found in binary or memory: <a href="https://www.yahoo.com/"> equals www.yahoo.com (Yahoo)
Source: chromecache_1144.2.dr	String found in binary or memory: var pixelDetectUrl = "https://www.yahoo.com/px.gif"; equals www.yahoo.com (Yahoo)
Source: chromecache_1131.2.dr	String found in binary or memory: "android_package_name": "com.yahoo.www.twa", equals www.yahoo.com (Yahoo)
Source: chromecache_1174.2.dr	String found in binary or memory: for sex work: lawsuit","tpConsent":true,"type":"story","url":"https://www.yahoo.com/entertainment/diddy-allegedly-paid-instagram-model-163100632.html","uuid":"ddb65e10-dda4-3026-b3ea-45ba16328ad9","videoPosition":"","wikiids":"Sean_Combs,Shawn_Holley,Internet_celebrity,City_Girls,Model_%28person%29,Stipend,Prostitution","xrayMeta":[{"type":"wiki","id":"Sean_Combs","subType":"Musician","wikiCategory":"PERSON","longName":"Sean Combs","shortName":"Sean Combs","startchar":360,"endchar":387,"instanceParentTags":["figcaption"],"notableFor":["American rapper, singer, songwriter, record producer, actor and entrepreneur"],"image":{"originalUrl":"https://s.yimg.com/zb/imgv1/a9977a3e-cae2-3a9a-9235-ae602c5f3699/s_500x500","originalHeight":500,"originalWidth":500,"resolutions":[{"url":"https://s.yimg.com/zb/imgv1/a9977a3e-cae2-3a9a-9235-ae602c5f3699/s_500x500","height":500,"width":500,"tag":"original"},{"url":"https://s.yimg.com/fz/api/res/1.2/RJecEuVlAML8pJzUp_CZbQ--~A/YXBwaWQ9eW5ld3M7Zmk9Zml0O2g9NDg7cT0xMDA7dz00OA--/https://s.yimg.com/zb/imgv1/a9977a3e-cae2-3a9a-9235-ae602c5f3699/s_500x500","height":48,"width":48,"tag":"48*48"}]}}],"ycts":"001000031","hasYahooVideo":false,"commentSectionId":5668145,"homepageUrl":"https://www.yahoo.com/entertainment/diddy-allegedly-paid-instagram-model-163100632.html"}},"modules":{},"markup":"<div class=\"caas caas-cc frontpage enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 enableInArticleAd enableOpinionLabel enableSingleSlotting enableVideoDocking outStream showCommentsIconWithDynamicCount enableCommentsCountInViewCommentsCta enableRRAdsSlots enableRRAdsSlotsWithJAC newsModal enableViewCommentsCTA enableStickyAds showCommentsIconInShareSec enableAdSlotsNewMap enableGAMAds enableGAMAdsOnLoad enableFinancePremiumTicker enableAdLiteUpSellFeedback\" data-assets=[] data-device=desktop data-i18n='{\"{date} at {time}\":\"{date} at {time}\",\"{0} hr ago\":\"{0} hr ago\",\"{0} min ago\":\"{0} min ago\",\"{0} mins ago\":\"{0} mins ago\",\"{0} Views\":\"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not available for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\"features\":{\"enableEVPlayer\":true,\"enableOverrideSpaceId\":true,\"contentFeedbackEnabled\":true,\"enableAdFeedbackV2\":true,\"enableInArticleAd\":true,\"enableOpinionLabel\":true,\"enableSingleSlotting\":true,\"enableVideoDocking\":true,\"outStream\":true,\"show
Source: chromecache_576.2.dr	String found in binary or memory: for sex work: lawsuit","tpConsent":true,"type":"story","url":"https://www.yahoo.com/entertainment/diddy-allegedly-paid-instagram-model-163100632.html","uuid":"ddb65e10-dda4-3026-b3ea-45ba16328ad9","videoPosition":"","wikiids":"Sean_Combs,Shawn_Holley,Internet_celebrity,City_Girls,Model_%28person%29,Stipend,Prostitution","xrayMeta":[{"type":"wiki","id":"Sean_Combs","subType":"Musician","wikiCategory":"PERSON","longName":"Sean Combs","shortName":"Sean Combs","startchar":360,"endchar":387,"instanceParentTags":["figcaption"],"notableFor":["American rapper, singer, songwriter, record producer, actor and entrepreneur"],"image":{"originalUrl":"https://s.yimg.com/zb/imgv1/a9977a3e-cae2-3a9a-9235-ae602c5f3699/s_500x500","originalHeight":500,"originalWidth":500,"resolutions":[{"url":"https://s.yimg.com/zb/imgv1/a9977a3e-cae2-3a9a-9235-ae602c5f3699/s_500x500","height":500,"width":500,"tag":"original"},{"url":"https://s.yimg.com/fz/api/res/1.2/RJecEuVlAML8pJzUp_CZbQ--~A/YXBwaWQ9eW5ld3M7Zmk9Zml0O2g9NDg7cT0xMDA7dz00OA--/https://s.yimg.com/zb/imgv1/a9977a3e-cae2-3a9a-9235-ae602c5f3699/s_500x500","height":48,"width":48,"tag":"48*48"}]}}],"ycts":"001000031","hasYahooVideo":false,"commentSectionId":5668145,"homepageUrl":"https://www.yahoo.com/entertainment/diddy-allegedly-paid-instagram-model-163100632.html"}},"modules":{},"markup":"<div class=\"caas caas-cc frontpage enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 enableInArticleAd enableOpinionLabel enableSingleSlotting enableVideoDocking outStream showCommentsIconWithDynamicCount enableCommentsCountInViewCommentsCta enableRRAdsSlots enableRRAdsSlotsWithJAC newsModal enableViewCommentsCTA enableStickyAds showCommentsIconInShareSec enableAdSlotsNewMap enableGAMAds enableGAMAdsOnLoad enableFinancePremiumTicker enableAdLiteUpSellFeedback\" data-assets=[] data-device=desktop data-i18n='{\"{date} at {time}\":\"{date} at {time}\",\"{0} hr ago\":\"{0} hr ago\",\"{0} min ago\":\"{0} min ago\",\"{0} mins ago\":\"{0} mins ago\",\"{0} Views\":\"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not available for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\"features\":{\"enableEVPlayer\":true,\"enableOverrideSpaceId\":true,\"contentFeedbackEnabled\":true,\"enableAdFeedbackV2\":true,\"enableInArticleAd\":true,\"enableOpinionLabel\":true,\"enableSingleSlotting\":true,\"enableVideoDocking\":true,\"outStream\":true,\"show
Source: chromecache_1174.2.dr	String found in binary or memory: which the charge sheet noted was punishable under Section 27(1)(B) of the same act. She risks a seven-year sentence if convicted of this charge.</p><p>CNN has reached out to Facebook for comment.</p><p>Okoli is also being sued in a separate civil case brought by Erisco, which said in a statement issued on January 19 that it was defending its reputation after her comments <a href=\"https://www.facebook.com/eriscofoods/posts/pfbid02pq9jBfrGsSpBwE7LBLendSigX47ZvqujJ7Xw1yNya9uujDvssnGYviRucT4GJ4EMl\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk: equals www.facebook.com (Facebook)
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: Limited","capAbtScore":"0.749","metaData":[{"visible":"false"}],"startchar":1143,"endchar":1162,"specialParentTags":[],"instanceParentTags":[]},{"term":"","label":"Chioma Okoli","capAbtScore":"0.743","metaData":[{"visible":"false"}],"startchar":7154,"endchar":7165,"specialParentTags":[],"instanceParentTags":[]},{"term":"WIKIID:Tomato_pur%c3%a9e","label":"tomato puree","capAbtScore":"0.735","metaData":[{"visible":"false"}],"startchar":60,"endchar":71,"specialParentTags":["title"],"instanceParentTags":[]},{"term":"","label":"Erisco Foods","capAbtScore":"0.71","metaData":[{"visible":"false"}],"startchar":1733,"endchar":1744,"specialParentTags":[],"instanceParentTags":[]},{"term":"YCT:001000780","score":"0.949686","label":"Society & Culture"},{"term":"YCT:001000667","score":"0.919614","label":"Crime & Justice"},{"term":"YCT:001000661","score":"0.678161","label":"Politics & Government"},{"term":"YCT:001000166","score":"0.640719","label":"Company Legal & Law Matters"},{"term":"YCT:001000123","score":"0.6","label":"Business"},{"term":"YCT:001000666","score":"0.51","label":"Civil Rights"},{"term":"YMEDIA:CATEGORY=100000005","score":"1.0","label":""},{"term":"YMEDIA:CATEGORY=100000002","score":"1.0","label":""},{"term":"YMEDIA:CATEGORY=100000008","score":"1.0","label":""},{"term":"YMEDIA:CATEGORY=000000030","score":"1.0","label":""}],"factualPollId":null,"finalUrl":"https://www.yahoo.com/news/nigerian-woman-reviewed-tomato-puree-105050378.html","hasScribble":false,"hasSlickVideo":false,"hasXraySideRail":false,"heroModule":{},"hideAllAds":false,"hostedType":"hosted","hrefLangs":[],"isBrandedContent":false,"isCommentsEligible":false,"isCreatorContent":false,"isImmersiveContent":false,"isOriginalContent":false,"isPersonalFinanceArticle":false,"isSponsoredContent":false,"keywords":"Lagos, Facebook, Inibehe Effiong, Erisco, Erisco equals www.facebook.com (Facebook)
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: Limited","capAbtScore":"0.749","metaData":[{"visible":"false"}],"startchar":1143,"endchar":1162,"specialParentTags":[],"instanceParentTags":[]},{"term":"","label":"Chioma Okoli","capAbtScore":"0.743","metaData":[{"visible":"false"}],"startchar":7154,"endchar":7165,"specialParentTags":[],"instanceParentTags":[]},{"term":"WIKIID:Tomato_pur%c3%a9e","label":"tomato puree","capAbtScore":"0.735","metaData":[{"visible":"false"}],"startchar":60,"endchar":71,"specialParentTags":["title"],"instanceParentTags":[]},{"term":"","label":"Erisco Foods","capAbtScore":"0.71","metaData":[{"visible":"false"}],"startchar":1733,"endchar":1744,"specialParentTags":[],"instanceParentTags":[]},{"term":"YCT:001000780","score":"0.949686","label":"Society & Culture"},{"term":"YCT:001000667","score":"0.919614","label":"Crime & Justice"},{"term":"YCT:001000661","score":"0.678161","label":"Politics & Government"},{"term":"YCT:001000166","score":"0.640719","label":"Company Legal & Law Matters"},{"term":"YCT:001000123","score":"0.6","label":"Business"},{"term":"YCT:001000666","score":"0.51","label":"Civil Rights"},{"term":"YMEDIA:CATEGORY=100000005","score":"1.0","label":""},{"term":"YMEDIA:CATEGORY=100000002","score":"1.0","label":""},{"term":"YMEDIA:CATEGORY=100000008","score":"1.0","label":""},{"term":"YMEDIA:CATEGORY=000000030","score":"1.0","label":""}],"factualPollId":null,"finalUrl":"https://www.yahoo.com/news/nigerian-woman-reviewed-tomato-puree-105050378.html","hasScribble":false,"hasSlickVideo":false,"hasXraySideRail":false,"heroModule":{},"hideAllAds":false,"hostedType":"hosted","hrefLangs":[],"isBrandedContent":false,"isCommentsEligible":false,"isCreatorContent":false,"isImmersiveContent":false,"isOriginalContent":false,"isPersonalFinanceArticle":false,"isSponsoredContent":false,"keywords":"Lagos, Facebook, Inibehe Effiong, Erisco, Erisco equals www.yahoo.com (Yahoo)
Source: chromecache_1144.2.dr	String found in binary or memory: s Frustration Exposes Cracks in World of Climate Finance</a></p></li><li><p><a data-i13n="cpos:4;pos:1" href="https://www.bloomberg.com/news/articles/2024-03-28/dubai-s-glitz-dims-for-russians-on-costs-us-sanction-pressures?utm_campaign=bn&utm_medium=distro&utm_source=yahooUS" rel="nofollow noopener" target="_blank" data-ylk="slk:Dubai Is Losing Its Allure for Wealthy Russians;cpos:4;pos:1;elm:context_link;itc:0;sec:content-canvas" class="link ">Dubai Is Losing Its Allure for Wealthy Russians</a></p></li><li><p><a data-i13n="cpos:5;pos:1" href="https://www.bloomberg.com/news/articles/2024-03-28/when-is-the-new-ipad-pro-ipad-air-coming-out-apple-plans-early-may-launch?utm_campaign=bn&utm_medium=distro&utm_source=yahooUS" rel="nofollow noopener" target="_blank" data-ylk="slk:Apple Plans New iPad Pro for May as Production Ramps Up Overseas;cpos:5;pos:1;elm:context_link;itc:0;sec:content-canvas" class="link ">Apple Plans New iPad Pro for May as Production Ramps Up Overseas</a></p></li></ul><div class="caas-da "><div data-wf-benji-page-context='{"pageUrl":"https://finance.yahoo.com/news/microsoft-backed-rubrik-ready-file-231532821.html","spaceid":"1183300100","site":"finance","hashtag":"news;$rddt;$msft;investments;ipos;stocks;finance;ipos","lmsid":"a077000000AoRTLAA3","pct":"story"}' data-wf-benji-wafer-config='{"updateI13n":true}' data-wf-benji-config='{"positions":{"INARTICLE-c4ca485d-e256-3992-a078-f620bc1e39ae1711672947293":{"id":"INARTICLE-c4ca485d-e256-3992-a078-f620bc1e39ae1711672947293","path":"/22888152279/us/yfin/ros/dt/us_yfin_ros_dt_mid_center","region":"index","size":[[970,350],[728,90],[970,250],"fluid"],"kvs":{"loc":"mid_center"},"refresh":{"reserved":{"duration":1e+23}}}}}' id=sda-INARTICLE-c4ca485d-e256-3992-a078-f620bc1e39ae1711672947293 class="wafer-benji caas-sda-benji-ad" data-wf-trigger=onLoad data-wf-margin="100 0" data-hide-ad-string><div id=INARTICLE-c4ca485d-e256-3992-a078-f620bc1e39ae1711672947293></div></div></div><p>Details of the company equals www.yahoo.com (Yahoo)
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: s episode of the <em><span class=\"caas-xray-inline-tooltip\"><span class=\"caas-xray-inline caas-xray-entity caas-xray-pill rapid-nonanchor-lt\" data-entity-id=\"Tamron_Hall\" data-ylk=\"cid:Tamron_Hall;pos:2;elmt:wiki;sec:pill-inline-entity;elm:pill-inline-text;itc:1;cat:MediaPersonality;\" tabindex=\"0\" aria-haspopup=\"dialog\"><a href=\"https://search.yahoo.com/search?p=Tamron%20Hall\" data-i13n=\"cid:Tamron_Hall;pos:2;elmt:wiki;sec:pill-inline-entity;elm:pill-inline-text;itc:1;cat:MediaPersonality;\" tabindex=\"-1\" data-ylk=\"slk:Tamron Hall;cid:Tamron_Hall;pos:2;elmt:wiki;sec:pill-inline-entity;elm:pill-inline-text;itc:1;cat:MediaPersonality;\" class=\"link rapid-noclick-resp\">Tamron Hall</a></span></span> Show.</em></p><p><strong>More from Rolling Stone</strong></p><ul class=\"caas-list caas-list-bullet\"><li><p><a data-i13n=\"cpos:2;pos:1\" href=\"https://www.rollingstone.com/tv-movies/tv-movie-news/disney-directors-apologize-letters-of-support-drake-bell-sexual-abuse-1234994715/\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:Disney Channel Directors Apologize for Writing Letters of Support Against Drake Bell's Sexual Abuse Case;cpos:2;pos:1;elm:context_link;itc:0;sec:content-canvas\" class=\"link rapid-noclick-resp\">Disney Channel Directors Apologize for Writing Letters of Support Against Drake Bell's Sexual Abuse Case</a></p></li><li><p><a data-i13n=\"cpos:3;pos:1\" href=\"https://www.rollingstone.com/tv-movies/tv-movie-news/drake-bell-quiet-on-set-nickelodeon-response-1234993459/\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:Drake Bell Calls Nickelodeon's 'Quiet on Set' Response 'Pretty Empty';cpos:3;pos:1;elm:context_link;itc:0;sec:content-canvas\" class=\"link rapid-noclick-resp\">Drake Bell Calls Nickelodeon's 'Quiet on Set' Response 'Pretty Empty'</a></p></li><li><p><a data-i13n=\"cpos:4;pos:1\" href=\"https://www.rollingstone.com/tv-movies/tv-movie-news/josh-peck-support-drake-bell-quiet-on-set-1234992330/\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:Josh Peck Voices Support for Drake Bell, Survivors Who Shared Allegations in 'Quiet on Set';cpos:4;pos:1;elm:context_link;itc:0;sec:content-canvas\" class=\"link rapid-noclick-resp\">Josh Peck Voices Support for Drake Bell, Survivors Who Shared Allegations in 'Quiet on Set'</a></p></li></ul><div class=caas-da><div id=defaultINARTICLE></div></div><p> equals www.yahoo.com (Yahoo)
Source: chromecache_522.2.dr	String found in binary or memory: s everything you need to know about how to watch the Sweet 16 games of March Madness, including the full schedule for the NCAA tournament, how to watch games for free and more.</p><h2><strong>How to watch the Sweet 16 March Madness games:</strong></h2><div class=\"mini-pd commerce-module\"><ul class=product-list><li class=list-item><div class=img-container><img class=\"caas-img caas-lazy has-width\" data-src=https://s.yimg.com/ny/api/res/1.2/CMQMJP.W4tnoe9Ya7sLDyA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDtoPTE4MDtjZj13ZWJw/https://s.yimg.com/uu/api/res/1.2/nmFI.uFEvJgaiLN3Axy4Dw--~B/Zmk9c3RyaW07aD05NjA7dz0xMjgwO2FwcGlkPXl0YWNoeW9u/https://media-mbst-pub-ue1.s3.amazonaws.com/creatr-uploaded-images/2023-05/069eefe0-eaab-11ed-b4d9-af5c87819209 height=90 width=120><noscript><img src=https://s.yimg.com/ny/api/res/1.2/CMQMJP.W4tnoe9Ya7sLDyA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDtoPTE4MDtjZj13ZWJw/https://s.yimg.com/uu/api/res/1.2/nmFI.uFEvJgaiLN3Axy4Dw--~B/Zmk9c3RyaW07aD05NjA7dz0xMjgwO2FwcGlkPXl0YWNoeW9u/https://media-mbst-pub-ue1.s3.amazonaws.com/creatr-uploaded-images/2023-05/069eefe0-eaab-11ed-b4d9-af5c87819209 height=90 width=120 class=\"caas-img has-width\"></noscript></div><div class=info><div class=info-data><h3 class=name>Sling TV Orange & Blue + Sports Extra</h3><h4 class=subhead-mini>Watch ABC, ESPN, TNT, TBS, TruTV </h4><div data-wf-toggle-target=#mini-pd-coupon-btn-manual_6ec26ddc-2328-40bb-bfa2-886a0e603603_1710787637694-1 class=\"deal-info wafer-clipboard-copy wafer-toggle\" data-wf-toggle-class=click:add:copied;click:removeWithDelay:copied data-wf-toggle-delay=3500></div></div><div class=cta-container><a class=\"link rapid-noclick-resp cta-btn rapid-with-clickid etailiffa_link\" href=https://shopping.yahoo.com/rdlw?siteId=us-sports&pageId=pnr-product-module&featureId=manual-entry&itemName=Sling+TV+Orange+%26+Blue+%2B+Sports+Extra&merchantName=Sling&price=51.0&salePrice=41.0&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5zbGluZy5jb20vIiwiY29udGVudFV1aWQiOiI3OTkzMmU0Yi02N2M2LTQzNTYtYjc5Yi01ZWU3OTAyZThhOTEifQ&signature=AQAAAVqGSJmYv26I4NC0mc8ClsnXf8oDI2D3o0cbCtawz9CV rel=\"noopener noreferrer nofollow\" target=_blank data-ylk=\"sec:mini-product;subsec:commlist;elmt:chooseForMe;pdid:Sling TV Orange & Blue + Sports Extra;pid:manual_6ec26ddc-2328-40bb-bfa2-886a0e603603_1710787637694;aid:manual_6ec26ddc-2328-40bb-bfa2-886a0e603603_1710787637694;itemcost:$51/mo;itmId:$41 for your first month;sellerN:Sling;cpos:1;ll3:product-available;ll4:productoffer-manual;elm:affiliate_link;itc:0;pkgt:horizontal-cta;slk:$41 for your first month at Sling\">$41 for your first month at Sling<u class=stretched-box></u></a></div></div></li></ul></div><p><strong>Dates:</strong> Mar. 29-30</p><p><strong>TV Channel:</strong> ESPN, ABC</p><p><strong>Streaming:</strong> <a data-i13n=\"elm:affiliate_link;sellerN:Sling TV;elmt:;cpos:3;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=34c77505-6db4-4664-9320-2c38b4122d5e&siteI
Source: chromecache_1020.2.dr	String found in binary or memory: s everything you need to know about how to watch the Sweet 16 games of March Madness, including the full schedule for the NCAA tournament, how to watch games for free and more.</p><h2><strong>How to watch the Sweet 16 March Madness games:</strong></h2><div class=\"mini-pd commerce-module\"><ul class=product-list><li class=list-item><div class=img-container><img class=\"caas-img caas-lazy has-width\" data-src=https://s.yimg.com/ny/api/res/1.2/WQNLCKD74tlc_XAZsqk1Aw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDtoPTE4MA--/https://s.yimg.com/uu/api/res/1.2/nmFI.uFEvJgaiLN3Axy4Dw--~B/Zmk9c3RyaW07aD05NjA7dz0xMjgwO2FwcGlkPXl0YWNoeW9u/https://media-mbst-pub-ue1.s3.amazonaws.com/creatr-uploaded-images/2023-05/069eefe0-eaab-11ed-b4d9-af5c87819209 height=90 width=120><noscript><img src=https://s.yimg.com/ny/api/res/1.2/WQNLCKD74tlc_XAZsqk1Aw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDtoPTE4MA--/https://s.yimg.com/uu/api/res/1.2/nmFI.uFEvJgaiLN3Axy4Dw--~B/Zmk9c3RyaW07aD05NjA7dz0xMjgwO2FwcGlkPXl0YWNoeW9u/https://media-mbst-pub-ue1.s3.amazonaws.com/creatr-uploaded-images/2023-05/069eefe0-eaab-11ed-b4d9-af5c87819209 height=90 width=120 class=\"caas-img has-width\"></noscript></div><div class=info><div class=info-data><h3 class=name>Sling TV Orange & Blue + Sports Extra</h3><h4 class=subhead-mini>Watch ABC, ESPN, TNT, TBS, TruTV </h4><div data-wf-toggle-target=#mini-pd-coupon-btn-manual_6ec26ddc-2328-40bb-bfa2-886a0e603603_1710787637694-1 class=\"deal-info wafer-clipboard-copy wafer-toggle\" data-wf-toggle-class=click:add:copied;click:removeWithDelay:copied data-wf-toggle-delay=3500></div></div><div class=cta-container><a class=\"link rapid-noclick-resp cta-btn rapid-with-clickid etailiffa_link\" href=https://shopping.yahoo.com/rdlw?siteId=us-sports&pageId=pnr-product-module&featureId=manual-entry&itemName=Sling+TV+Orange+%26+Blue+%2B+Sports+Extra&merchantName=Sling&price=51.0&salePrice=41.0&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5zbGluZy5jb20vIiwiY29udGVudFV1aWQiOiI3OTkzMmU0Yi02N2M2LTQzNTYtYjc5Yi01ZWU3OTAyZThhOTEifQ&signature=AQAAAVqGSJmYv26I4NC0mc8ClsnXf8oDI2D3o0cbCtawz9CV rel=\"noopener noreferrer nofollow\" target=_blank data-ylk=\"sec:mini-product;subsec:commlist;elmt:chooseForMe;pdid:Sling TV Orange & Blue + Sports Extra;pid:manual_6ec26ddc-2328-40bb-bfa2-886a0e603603_1710787637694;aid:manual_6ec26ddc-2328-40bb-bfa2-886a0e603603_1710787637694;itemcost:$51/mo;itmId:$41 for your first month;sellerN:Sling;cpos:1;ll3:product-available;ll4:productoffer-manual;elm:affiliate_link;itc:0;pkgt:horizontal-cta;slk:$41 for your first month at Sling\">$41 for your first month at Sling<u class=stretched-box></u></a></div></div></li></ul></div><p><strong>Dates:</strong> Mar. 29-30</p><p><strong>TV Channel:</strong> ESPN, ABC</p><p><strong>Streaming:</strong> <a data-i13n=\"elm:affiliate_link;sellerN:Sling TV;elmt:;cpos:3;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=34c77505-6db4-4664-9320-2c38b4122d5e&siteId=us-sports&
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: s founder, Eric Umeofia, refused to budge, however, <a href=\"https://www.youtube.com/watch?v=xHt-DrUUdRc\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:saying in a recent documentary on the local Arise Television;elm:context_link;itc:0;sec:content-canvas\" class=\"link rapid-noclick-resp\">saying in a recent documentary on the local Arise Television</a> channel that he won equals www.youtube.com (Youtube)
Source: chromecache_1174.2.dr	String found in binary or memory: s wear, told CNN that on September 17 she asked her 18,000 followers on Facebook to share their opinions about a tomato puree she bought in place of her usual brands, saying she found it too sweet.</p><div class=caas-da><div id=defaultINARTICLE></div></div><p>Her post, accompanied by a <a href=\"https://www.facebook.com/eriscofoods/posts/pfbid02pq9jBfrGsSpBwE7LBLendSigX47ZvqujJ7Xw1yNya9uujDvssnGYviRucT4GJ4EMl\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:photo of an opened can of Nagiko Tomato Mix;elm:context_link;itc:0;sec:content-canvas\" class=\"link rapid-noclick-resp\">photo of an opened can of Nagiko Tomato Mix</a>, produced by local company Erisco Foods Limited, sparked varied reactions from commenters, one of whom replied: equals www.facebook.com (Facebook)
Source: chromecache_1014.2.dr	String found in binary or memory: s what we know about the recovery effort.","tpConsent":true,"type":"story","url":"https://www.yahoo.com/news/rescued-key-bridge-construction-worker-couldnt-swim-heres-what-we-know-about-the-recovery-effort-211210371.html","uuid":"9a8d4713-ce83-455a-b9a5-930026b49ca3","videoPosition":"","wikiids":"Francis_Scott_Key_Bridge_%28Baltimore%29,Baltimore,Patapsco_River,Joe_Biden,Key_Bridge_%28Washington,_D.C.%29,Wes_Moore,Federal_Highway_Administration,Construction_worker,Maryland,Baltimore_Orioles,Presumption_of_death,Presidency_of_Joe_Biden,NBC_News,Paul_Wiedefeld","xrayMeta":[],"ycts":"001000798,001000780","hasYahooVideo":false,"commentSectionId":5668142,"homepageUrl":"https://www.yahoo.com/news/rescued-key-bridge-construction-worker-couldnt-swim-heres-what-we-know-about-the-recovery-effort-211210371.html"}},"modules":{},"markup":"<div class=\"caas caas-cc frontpage enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 enableInArticleAd enableOpinionLabel enableSingleSlotting enableVideoDocking outStream showCommentsIconWithDynamicCount enableCommentsCountInViewCommentsCta enableRRAdsSlots enableRRAdsSlotsWithJAC newsModal enableViewCommentsCTA enableStickyAds showCommentsIconInShareSec enableAdSlotsNewMap enableGAMAds enableGAMAdsOnLoad enableFinancePremiumTicker enableAdLiteUpSellFeedback\" data-assets=[] data-device=desktop data-i18n='{\"{date} at {time}\":\"{date} at {time}\",\"{0} hr ago\":\"{0} hr ago\",\"{0} min ago\":\"{0} min ago\",\"{0} mins ago\":\"{0} mins ago\",\"{0} Views\":\"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not available for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\"features\":{\"enableEVPlayer\":true,\"enableOverrideSpaceId\":true,\"contentFeedbackEnabled\":true,\"enableAdFeedbackV2\":true,\"enableInArticleAd\":true,\"enableOpinionLabel\":true,\"enableSingleSlotting\":true,\"enableVideoDocking\":true,\"outStream\":true,\"showCommentsIconWithDynamicCount\":true,\"enableCommentsCountInViewCommentsCta\":true,\"enableRRAdsSlots\":true,\"enableRRAdsSlotsWithJAC\":true,\"newsModal\":true,\"enableViewCommentsCTA\":true,\"enableStickyAds\":true,\"showCommentsIconInShareSec\":true,\"enableAdSlotsNewMap\":true,\"enableGAMAds\":true,\"enableGAMAdsOnLoad\":true,\"enableFinancePremiumTicker\":true,\"enableAdLiteUpSellFeedback\":true},\"config\":{\"authorBylineCollapseLineCount\":2,\"commerceQuickOverviewLimit\":5,\"freezeOnLinkC
Source: chromecache_627.2.dr	String found in binary or memory: s what we know about the recovery effort.","tpConsent":true,"type":"story","url":"https://www.yahoo.com/news/rescued-key-bridge-construction-worker-couldnt-swim-heres-what-we-know-about-the-recovery-effort-211210371.html","uuid":"9a8d4713-ce83-455a-b9a5-930026b49ca3","videoPosition":"","wikiids":"Francis_Scott_Key_Bridge_%28Baltimore%29,Baltimore,Patapsco_River,Joe_Biden,Key_Bridge_%28Washington,_D.C.%29,Wes_Moore,Federal_Highway_Administration,Construction_worker,Maryland,Baltimore_Orioles,Presumption_of_death,Presidency_of_Joe_Biden,NBC_News,Paul_Wiedefeld","xrayMeta":[],"ycts":"001000798,001000780","hasYahooVideo":false,"commentSectionId":5668142,"homepageUrl":"https://www.yahoo.com/news/rescued-key-bridge-construction-worker-couldnt-swim-heres-what-we-know-about-the-recovery-effort-211210371.html"}},"modules":{},"markup":"<div class=\"caas caas-cc frontpage enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 enableInArticleAd enableOpinionLabel enableSingleSlotting enableVideoDocking outStream showCommentsIconWithDynamicCount enableCommentsCountInViewCommentsCta enableRRAdsSlots enableRRAdsSlotsWithJAC newsModal enableViewCommentsCTA enableStickyAds showCommentsIconInShareSec enableAdSlotsNewMap enableGAMAds enableGAMAdsOnLoad enableFinancePremiumTicker enableAdLiteUpSellFeedback\" data-assets=[] data-device=desktop data-i18n='{\"{date} at {time}\":\"{date} at {time}\",\"{0} hr ago\":\"{0} hr ago\",\"{0} min ago\":\"{0} min ago\",\"{0} mins ago\":\"{0} mins ago\",\"{0} Views\":\"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not available for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\"features\":{\"enableEVPlayer\":true,\"enableOverrideSpaceId\":true,\"contentFeedbackEnabled\":true,\"enableAdFeedbackV2\":true,\"enableInArticleAd\":true,\"enableOpinionLabel\":true,\"enableSingleSlotting\":true,\"enableVideoDocking\":true,\"outStream\":true,\"showCommentsIconWithDynamicCount\":true,\"enableCommentsCountInViewCommentsCta\":true,\"enableRRAdsSlots\":true,\"enableRRAdsSlotsWithJAC\":true,\"newsModal\":true,\"enableViewCommentsCTA\":true,\"enableStickyAds\":true,\"showCommentsIconInShareSec\":true,\"enableAdSlotsNewMap\":true,\"enableGAMAds\":true,\"enableGAMAdsOnLoad\":true,\"enableFinancePremiumTicker\":true,\"enableAdLiteUpSellFeedback\":true},\"config\":{\"authorBylineCollapseLineCount\":2,\"commerceQuickOverviewLimit\":5,\"freezeOnLinkC

Source: unknown

DNS traffic detected: queries for: depl.pages.dev

Source: unknown

HTTP traffic detected: POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=794200019&yhlCT=2&yhlBTMS=1711672872366&yhlClientVer=3.53.30&yhlRnd=6LulwV1q4QrhpuZE&yhlCompressed=0 HTTP/1.1Host: 3p-udc.yahoo.comConnection: keep-aliveContent-Length: 1735sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded; charset=UTF-8Accept: */*Origin: https://depl.pages.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://depl.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenx-amz-request-id: X9D1ZTRGS0SC8WQKx-amz-id-2: YWqjKN8EyZNf7dZJ4X30tRHsgNzyWSPIRVbc/Cw29Bmqm8WQ5OeJTxNncK02LcOFcc25l27nJow=Content-Type: application/xmlDate: Fri, 29 Mar 2024 00:36:52 GMTServer: ATSReferrer-Policy: no-referrer-when-downgradeVary: OriginExpires: Fri, 29 Mar 2024 00:41:53 GMTAge: 259Content-Length: 243ATS-Carp-Promotion: 1Connection: closeStrict-Transport-Security: max-age=31536000Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenx-amz-request-id: 3038ZBJNVM0N0VZ2x-amz-id-2: m1FK1MmHF+nH/eN/bWDOMEkUJCsHXBMJ3MQUdMtpSRuU7UgkMBjC+xg/LU7zn4KMLu6qn7lrHTU=Content-Type: application/xmlDate: Fri, 29 Mar 2024 00:40:47 GMTServer: ATSReferrer-Policy: no-referrer-when-downgradeVary: OriginExpires: Fri, 29 Mar 2024 00:45:47 GMTAge: 24Content-Length: 243ATS-Carp-Promotion: 1Connection: closeStrict-Transport-Security: max-age=31536000Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenx-amz-request-id: 7DSWEWT52KB2EG6Wx-amz-id-2: qgTqaCEJvmMXO3LFVlroaK00iGjAiB0r4U5dxBNquOCEpvJUTM5ZafSVtCSexTM5zMPEJhSHqAw=Content-Type: application/xmlDate: Fri, 29 Mar 2024 00:36:54 GMTServer: ATSReferrer-Policy: no-referrer-when-downgradeVary: OriginExpires: Fri, 29 Mar 2024 00:41:55 GMTAge: 262Content-Length: 243ATS-Carp-Promotion: 1Connection: closeStrict-Transport-Security: max-age=31536000Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: Microsoft-Azure-Application-Gateway/v2Date: Fri, 29 Mar 2024 00:41:34 GMTContent-Type: text/htmlContent-Length: 581Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 29 Mar 2024 00:41:52 GMTContent-Type: text/plain; charset=utf-8Transfer-Encoding: chunkedConnection: closeServer: nginxCache-Control: no-cacheX-Request-Id: e5f973d8-bca5-4118-91a6-5fd523263e8cX-Runtime: 0.007102Vary: OriginStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Frame-Options: ALLOW-FROM SAMEORIGINX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockReferrer-Policy: origin-when-cross-origin, strict-origin-when-cross-originExpect-CT: max-age=0, report-uri="https://oath-us.api.shopinsync.com/ct_report?enforce=no"Content-Security-Policy: default-src 'self'; script-src 'self'

Source: chromecache_529.2.dr	String found in binary or memory: http://ad.doubleclick.net/viewad/817-grey.gif
Source: chromecache_938.2.dr	String found in binary or memory: http://c.betrad.com/a/l/n/1063/4552/us/1326126768888.png
Source: chromecache_1121.2.dr	String found in binary or memory: http://c.betrad.com/a/l/n/971/10728/us/63edf520-1e7f-4dc2-b9ed-9a8a9621ed59.png
Source: chromecache_688.2.dr	String found in binary or memory: http://commercialtype.com
Source: chromecache_688.2.dr	String found in binary or memory: http://commercialtype.com/eula
Source: chromecache_741.2.dr	String found in binary or memory: http://github.com/kenwheeler/slick
Source: chromecache_741.2.dr	String found in binary or memory: http://github.com/kenwheeler/slick/issues
Source: chromecache_1281.2.dr	String found in binary or memory: http://greensock.com
Source: chromecache_1281.2.dr	String found in binary or memory: http://greensock.com/standard-license
Source: chromecache_741.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_741.2.dr	String found in binary or memory: http://kenwheeler.github.io
Source: chromecache_741.2.dr	String found in binary or memory: http://kenwheeler.github.io/slick
Source: chromecache_741.2.dr	String found in binary or memory: http://modernizr.com/download/?-cssvhunit-cssvwunit-setclasses
Source: chromecache_1144.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_941.2.dr, chromecache_709.2.dr, chromecache_532.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_1158.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_1121.2.dr	String found in binary or memory: http://www.gm.com/privacy/
Source: chromecache_510.2.dr, chromecache_561.2.dr, chromecache_902.2.dr, chromecache_609.2.dr	String found in binary or memory: http://www.onicos.com/staff/iz/amuse/javascript/expert/deflate.txt
Source: chromecache_851.2.dr	String found in binary or memory: https://2fa.support/ncw/asp.php
Source: chromecache_743.2.dr	String found in binary or memory: https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcod
Source: chromecache_1300.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_1300.2.dr	String found in binary or memory: https://ad.doubleclick.net/
Source: chromecache_743.2.dr	String found in binary or memory: https://ad.mrtnsvr.com/sync/pubmatic?gdpr=0&gdpr_consent=
Source: chromecache_876.2.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=1&gdpr=0&gdpr_consent=
Source: chromecache_1108.2.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=21&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Source: chromecache_548.2.dr	String found in binary or memory: https://ads.stickyadstv.com/user-registering?dataProviderId=1025&userId=ZgYOPsAoJI0AAAi4ADlhawAA
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://apnews.com/article/great-white-replacement-theory-explainer-c86f309f02cd14062f301ce6b9228e33
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://apnews.com/article/hispanic-census-2020-race-identity-b87843790fdd6f1eaf61933a6cc432bc
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://apnews.com/article/march-madness-attendance-ncaa-b6222b7cf673a3d98ab9a971168bed00
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://apnews.com/article/march-madness-nc-state-tennessee-score-ba4b7e5b48cc70000cfae83faae71cfe
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://apnews.com/article/march-madness-utah-hate-crime-b865b768243e1d3c9c38ee796e3d80bb
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://apnews.com/article/nhl-college-football-sports-north-carolina-state-wolfpack-martin-necas-8a
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://apnews.com/article/nhl-nfl-sports-north-carolina-state-wolfpack-c8695495cd035bdb2fd87ea9b333
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://apnews.com/article/north-africa-government-and-politics-hispanics-a81c6c01b6a3fe4946a41f7064
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://apnews.com/article/politics-race-and-ethnicity-hispanics-9773cd84b9a6793886713ccb71f3f5d7
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://apnews.com/article/race-ethnicity-census-mena-hispanic-jewish-black-d25d02d3ec3e5f75aaa3ad8e
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://apnews.com/article/race-hispanic-ethnicity-2020-census-57a5d61258aa1c78099d52b0302eafc0
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://apnews.com/article/trump-immigration-biden-gop-voters-border-migrants-1fc6624188f540f495e108
Source: chromecache_615.2.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/index/?us_privacy=&gdpr=&gdpr_consent=&gpp=DBAA&
Source: chromecache_1108.2.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/index/?us_privacy=1YNN&gdpr=&gdpr_consent=&gpp=DBAA&
Source: chromecache_743.2.dr, chromecache_618.2.dr	String found in binary or memory: https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=6D366468-71AF-422B-99AB-138A6DAB94F7/gdpr=0/gdpr_
Source: chromecache_548.2.dr	String found in binary or memory: https://beacon.lynx.cognitivlabs.com/ix.gif?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Source: chromecache_876.2.dr	String found in binary or memory: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://bjconline.org/guthrie-graves-fitzsimmons/
Source: chromecache_963.2.dr	String found in binary or memory: https://bpi.rtactivate.com/tag/?id=20909&user_id=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_co
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://brackets.usatoday.com/
Source: chromecache_876.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/P
Source: chromecache_1108.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=29&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Source: chromecache_473.2.dr, chromecache_945.2.dr	String found in binary or memory: https://cdn.doubleverify.com/redirect/?host=
Source: chromecache_1021.2.dr	String found in binary or memory: https://cdn.taboola.com/scripts/ifs.js
Source: chromecache_684.2.dr, chromecache_467.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/gsap/1.19.0/TweenMax.min.js
Source: chromecache_700.2.dr, chromecache_1304.2.dr	String found in binary or memory: https://cerebro.edna.yahoo.net/noquery/pixel.gif?rand=
Source: chromecache_881.2.dr	String found in binary or memory: https://chartbeat.com
Source: chromecache_881.2.dr	String found in binary or memory: https://chartbeat.com/publishing/hud2/versioninfo/?host=
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://churchanswers.com/blog/the-top-ten-best-selling-bibles-compared-to-ten-years-ago/
Source: chromecache_1000.2.dr, chromecache_981.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_1000.2.dr, chromecache_981.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_548.2.dr	String found in binary or memory: https://cm.adgrx.com/bridge?AG_PID=casale&AG_SETCOOKIE&us_privacy=1YNN&gpp=DBAA&gpp_
Source: chromecache_876.2.dr	String found in binary or memory: https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=
Source: chromecache_1287.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm&gdpr=0
Source: chromecache_526.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_awbid
Source: chromecache_615.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZgYOPsAoJI0AAAi4ADlh
Source: chromecache_872.2.dr, chromecache_825.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lkqd_dbm&google_cm
Source: chromecache_825.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=merkle_dmp&google_cm
Source: chromecache_1287.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_dbm&gdpr=0
Source: chromecache_1017.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=bTZkaHGvQiuZqxOKbauU9w%3D%3
Source: chromecache_1017.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=
Source: chromecache_1017.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=NkQzNjY0NjgtNzFBRi00MjJCLTk5QUItMTM
Source: chromecache_526.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_cm&google_awbid
Source: chromecache_872.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=xaxis_dmp&google_cm
Source: chromecache_876.2.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent=
Source: chromecache_615.2.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-Z8PuJEk6U7Hyq.gif?idmatch=0&gpp=DBAA&gpp_sid=-1
Source: chromecache_1144.2.dr	String found in binary or memory: https://consent.cmp.oath.com/cmp.js
Source: chromecache_743.2.dr	String found in binary or memory: https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=
Source: chromecache_876.2.dr	String found in binary or memory: https://crb.kargo.com/api/v1/dsync/Martin?exid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_cons
Source: chromecache_1108.2.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=index&gpdr=&gdpr_consent=&us_privacy=1YNN&user_
Source: chromecache_876.2.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_872.2.dr, chromecache_825.2.dr	String found in binary or memory: https://cs.lkqd.net/cs?partnerId=59&redirect=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid
Source: chromecache_876.2.dr	String found in binary or memory: https://csync.loopme.me/?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJn
Source: chromecache_741.2.dr	String found in binary or memory: https://dbrd449anfbv4.cloudfront.net
Source: chromecache_782.2.dr	String found in binary or memory: https://dbrd449anfbv4.cloudfront.net/bundle
Source: chromecache_495.2.dr, chromecache_741.2.dr	String found in binary or memory: https://dbrd449anfbv4.cloudfront.net/sis-bootstrap.js
Source: chromecache_782.2.dr	String found in binary or memory: https://dev.api.shopinsync.com
Source: chromecache_1000.2.dr, chromecache_981.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_1000.2.dr, chromecache_981.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_1000.2.dr, chromecache_981.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_743.2.dr	String found in binary or memory: https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https:
Source: chromecache_1182.2.dr	String found in binary or memory: https://dispatcher.yahoo.com
Source: chromecache_526.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpix
Source: chromecache_615.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.n
Source: chromecache_1017.2.dr	String found in binary or memory: https://eb2.3lift.com/xuid?mid=7976&xuid=6D366468-71AF-422B-99AB-138A6DAB94F7&dongle=u6nf&gdpr=0&gdp
Source: chromecache_924.2.dr	String found in binary or memory: https://ezgif.com/optimize
Source: chromecache_851.2.dr	String found in binary or memory: https://fc.yahoo.com/sdarla/php/client.php?l=RICH
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://fetchyournews.com/
Source: chromecache_1144.2.dr	String found in binary or memory: https://finance.yahoo.com/
Source: chromecache_1144.2.dr	String found in binary or memory: https://finance.yahoo.com/caas/content/article/
Source: chromecache_1144.2.dr	String found in binary or memory: https://finance.yahoo.com/news/microsoft-backed-rubrik-ready-file-231532821.html
Source: chromecache_1126.2.dr, chromecache_1019.2.dr	String found in binary or memory: https://finance.yahoo.com/personal-finance/what-if-i-cant-pay-my-taxes-215416984.html?.tsrc=fin-noti
Source: chromecache_996.2.dr	String found in binary or memory: https://finance.yahoo.com/quote/FTT-USD?.tsrc=fin-srch
Source: chromecache_996.2.dr	String found in binary or memory: https://finance.yahoo.com/video/sam-bankman-fried-sentenced-25-160604036.html
Source: chromecache_996.2.dr	String found in binary or memory: https://finance.yahoo.com/video/sam-bankman-fried-sentenced-25-172441553.html
Source: chromecache_1238.2.dr, chromecache_1200.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_1238.2.dr, chromecache_1200.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv39oS_a.woff2)
Source: chromecache_1238.2.dr, chromecache_1200.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv79oQ.woff2)
Source: chromecache_1238.2.dr, chromecache_1200.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvD9oS_a.woff2)
Source: chromecache_1238.2.dr, chromecache_1200.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvH9oS_a.woff2)
Source: chromecache_1238.2.dr, chromecache_1200.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvr9oS_a.woff2)
Source: chromecache_1238.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etB77TKx9.woff2
Source: chromecache_1238.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBD7TA.woff2)
Source: chromecache_1238.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBP7TKx9.woff2
Source: chromecache_1238.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBT7TKx9.woff2
Source: chromecache_1238.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etB_7TKx9.woff2
Source: chromecache_512.2.dr	String found in binary or memory: https://github.com/dcodeio/protobuf.js
Source: chromecache_1078.2.dr, chromecache_1300.2.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_634.2.dr	String found in binary or memory: https://github.com/radiantmediaplayer/rmp-connection
Source: chromecache_634.2.dr	String found in binary or memory: https://github.com/radiantmediaplayer/rmp-connection/blob/master/LICENSE
Source: chromecache_634.2.dr	String found in binary or memory: https://github.com/radiantmediaplayer/rmp-vast
Source: chromecache_634.2.dr	String found in binary or memory: https://github.com/radiantmediaplayer/rmp-vast/blob/master/LICENSE
Source: chromecache_1250.2.dr	String found in binary or memory: https://github.com/yui/pure/blob/master/LICENSE.md
Source: chromecache_634.2.dr, chromecache_493.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_634.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.23.3/LICENSE
Source: chromecache_493.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.30.2/LICENSE
Source: chromecache_876.2.dr	String found in binary or memory: https://gocm.c.appier.net/pubmatic
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://godblesstheusabible.com/?sld=trump
Source: chromecache_1300.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/
Source: chromecache_1144.2.dr	String found in binary or memory: https://guce.yahoo.com/privacy-policy?locale=en-US
Source: chromecache_1144.2.dr	String found in binary or memory: https://guce.yahoo.com/state-controls?locale=en-US&state=VA
Source: chromecache_1144.2.dr	String found in binary or memory: https://guce.yahoo.com/terms?locale=en-US
Source: chromecache_615.2.dr	String found in binary or memory: https://hb.yahoo.net/cksync.php?gpp=DBAA&gpp_sid=-1&cs=1&vsid=3546744890180387000V10&amp
Source: chromecache_851.2.dr	String found in binary or memory: https://help.yahoo.com/kb/index?locale=en_US&page=product&y=PROD_ACCT
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://herhoopstats.com/stats/ncaa/research/team_single_seasons/?min_season=2024&max_season=2024&di
Source: chromecache_615.2.dr	String found in binary or memory: https://i.liadm.com/s/31327?bidder_id=14481&bidder_uuid=ZgYOPsAoJI0AAAi4ADlhawAA%261617&gpdr
Source: chromecache_963.2.dr	String found in binary or memory: https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=6D366468-71AF-422B-99AB-138A6DAB94F7
Source: chromecache_1287.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=$
Source: chromecache_1017.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4
Source: chromecache_743.2.dr, chromecache_618.2.dr	String found in binary or memory: https://idsync.rlcdn.com/712188.gif?partner_uid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_con
Source: chromecache_963.2.dr	String found in binary or memory: https://io.narrative.io/?companyId=673&id=pubmatic_id:6D366468-71AF-422B-99AB-138A6DAB94F7
Source: chromecache_876.2.dr	String found in binary or memory: https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR
Source: chromecache_1144.2.dr	String found in binary or memory: https://jac.yahoosandbox.com/2.0.0/jac.js
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://jemartisby.com/
Source: chromecache_1108.2.dr	String found in binary or memory: https://js-sec.indexww.com/ht/htw-pixel.gif?ZgYOPsAoJI0AAAi4ADlhawAA%261617=&gpp=DBAA&gpp_si
Source: chromecache_548.2.dr	String found in binary or memory: https://js-sec.indexww.com/ht/htw-pixel.gif?ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB=&gpp=DBAA&gpp_s
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://kenpom.com/summary.php?s=RankAPL_Off
Source: chromecache_646.2.dr, chromecache_1116.2.dr	String found in binary or memory: https://lg1.hb.yahoo.net/log?logid=kfk&evtid=projectevents&project=amprtc_error&event=AMPRTC_UCREATI
Source: chromecache_952.2.dr, chromecache_476.2.dr, chromecache_842.2.dr	String found in binary or memory: https://lg1.hb.yahoo.net/nerrping.php
Source: chromecache_548.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/casale?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Source: chromecache_1017.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_876.2.dr	String found in binary or memory: https://match.deepintent.com/usersync/141?gdpr=0&gdpr_consent=
Source: chromecache_548.2.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/ie?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Source: chromecache_1017.2.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=
Source: chromecache_743.2.dr	String found in binary or memory: https://matching.truffle.bid/sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=b
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://media.zenfs.com/en/cnn_articles_875/19f4517308701d1897c1d2429ccc754f
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://media.zenfs.com/en/cnn_articles_875/90fc863b5fb5c3e128c401bc64cf10a1
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://media.zenfs.com/en/politico_453/7a4b71dc75273ffd80741437c6776701
Source: chromecache_1182.2.dr	String found in binary or memory: https://membernotifications.aol.com
Source: chromecache_497.2.dr	String found in binary or memory: https://mobileexchange.yahoo.com/dismiss
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://naismithtrophy.com/2024-jersey-mikes-naismith-trophy-finalists/
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://news.yahoo.com/
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://nypost.com/
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://nypost.com/2024/03/25/us-news/diddys-la-miami-homes-raided-by-federal-agents-as-part-of-sex-
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://nypost.com/2024/03/27/us-news/sean-diddy-combs-alleged-victims-talking-a-lot-feds-claim-conc
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://nypost.com/2024/03/28/us-news/diddys-ex-yung-miami-accused-of-transporting-pink-cocaine-for-
Source: chromecache_627.2.dr	String found in binary or memory: https://o.aolcdn.com/images/dims?image_uri=https%3A%2F%2Fo.aolcdn.com%2Fimages%2Fdims%3Fimage_uri%3D
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://oag.ca.gov/news/press-releases/attorney-general-becerra-files-lawsuit-against-trump-administ
Source: chromecache_1144.2.dr	String found in binary or memory: https://openweb.jac.yahoosandbox.com
Source: chromecache_548.2.dr	String found in binary or memory: https://p.rfihub.com/cm?in=1&pub=2079&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Source: chromecache_876.2.dr	String found in binary or memory: https://p.rfihub.com/cm?pub=224&in=1&getuid=https%3A//image2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0
Source: chromecache_805.2.dr	String found in binary or memory: https://pa.ybp.yahoo.com
Source: chromecache_1052.2.dr, chromecache_694.2.dr, chromecache_640.2.dr, chromecache_693.2.dr, chromecache_543.2.dr, chromecache_698.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_1127.2.dr, chromecache_966.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/%
Source: chromecache_941.2.dr, chromecache_709.2.dr, chromecache_532.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: chromecache_941.2.dr, chromecache_709.2.dr, chromecache_532.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_941.2.dr, chromecache_709.2.dr, chromecache_532.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_532.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_941.2.dr, chromecache_709.2.dr, chromecache_532.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_1214.2.dr, chromecache_1153.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_1300.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rcs_internal
Source: chromecache_581.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rhmss
Source: chromecache_1127.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=224
Source: chromecache_966.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=225
Source: chromecache_694.2.dr, chromecache_698.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/
Source: chromecache_505.2.dr, chromecache_1300.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_888.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_1127.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=224
Source: chromecache_966.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225
Source: chromecache_876.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent=
Source: chromecache_1108.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=48&us_privacy=1YNN&gpp=DBAA&gpp_sid=-
Source: chromecache_743.2.dr, chromecache_618.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=6D366468-71AF-422B-99AB-
Source: chromecache_1017.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=6D366468-71AF-422B-99AB-
Source: chromecache_1192.2.dr	String found in binary or memory: https://platform.twitter.com/widgets.js
Source: chromecache_981.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_876.2.dr	String found in binary or memory: https://pm.w55c.net/ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=
Source: chromecache_743.2.dr	String found in binary or memory: https://pmp.mxptint.net/sn.ashx?&gdpr=0&gdpr_consent=
Source: chromecache_805.2.dr	String found in binary or memory: https://pn.ybp.yahoo.com
Source: chromecache_1017.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/pubmatic/6D366468-71AF-422B-99AB-138A6DAB94F7?gdpr=0&gdpr_consent=
Source: chromecache_805.2.dr	String found in binary or memory: https://pr.ybp.yahoo.com/pr/secure/true/crid/3ybflvHQlvieXd6YMOECrA/pa/1
Source: chromecache_805.2.dr	String found in binary or memory: https://pr.ybp.yahoo.com/pr/secure/true/crid/EX8NftiPAXb32wpr_6M9Lw/pa/1
Source: chromecache_805.2.dr	String found in binary or memory: https://pr.ybp.yahoo.com/pr/secure/true/crid/crpbYp26RkScwdgl-rNulQ/pa/1
Source: chromecache_805.2.dr	String found in binary or memory: https://pr.ybp.yahoo.com/pr/secure/true/crid/mpBmrHcUzVwIaMhFaWjDiQ/pa/1
Source: chromecache_805.2.dr	String found in binary or memory: https://pr.ybp.yahoo.com/pr/secure/true/crid/sSSiiSPlaixMzrK53LwsoQ/pa/1
Source: chromecache_805.2.dr	String found in binary or memory: https://pr.ybp.yahoo.com/pr/secure/true/crid/udcDZ96Vp9XxOGN6Buqpfw/pa/1
Source: chromecache_876.2.dr	String found in binary or memory: https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=6D366468-71AF-
Source: chromecache_876.2.dr	String found in binary or memory: https://px.owneriq.net/epm?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwN
Source: chromecache_554.2.dr	String found in binary or memory: https://query1.finance.yahoo.com
Source: chromecache_981.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_615.2.dr	String found in binary or memory: https://rtb.adentifi.com/CookieIndex?gpp=DBAA&gpp_sid=-1
Source: chromecache_1108.2.dr	String found in binary or memory: https://rtb.adentifi.com/CookieIndex?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Source: chromecache_876.2.dr	String found in binary or memory: https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent=
Source: chromecache_1017.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=6D366468-71AF-422B-99A
Source: chromecache_615.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/document.svg
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon-account-active.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon-account.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon-finance-active.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon-finance.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon-live.svg);
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon-livesupport.svg);
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon-mail-active.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon-mail.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon-mailrestore1.svg);
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon-more-active.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon-newapplication.svg);
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon-signinhelper.svg);
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon-sports-active.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon-sports.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon-subscriptions-active.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon-subscriptions.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon-subscriptions1.svg);
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_answ_blue.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_answ_gray.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_fin_desk_blue.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_fin_desk_gray.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_front_blue.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_front_gray.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_grps_blue.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_grps_gray.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_hkauct_blue.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_hkauct_gray.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_hkdeals_blue.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_hkdeals_gray.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_mail_web_blue.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_mail_web_gray.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_mobile_blue.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_mobile_gray.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_news_blue.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_news_gray.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_omg_blue.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_omg_gray.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_sports_spnews_blue.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_sports_spnews_gray.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_srch_desk_blue.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_srch_desk_gray.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_subscript_select_blue.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_subscript_select_gray.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_tv_blue.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_tv_gray.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_twauct_desk_blue.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_twauct_desk_gray.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_twstock_web_blue.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_twstock_web_gray.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_weath_android_blue.svg)
Source: chromecache_568.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_weath_android_gray.svg)
Source: chromecache_1144.2.dr	String found in binary or memory: https://s.yimg.com/aaq/c/ee3f6d3.caas-finance_web.min.js
Source: chromecache_1144.2.dr	String found in binary or memory: https://s.yimg.com/aaq/spotim/launchers/
Source: chromecache_1144.2.dr	String found in binary or memory: https://s.yimg.com/aaq/vzm/cs_1.5.1.js
Source: chromecache_1083.2.dr, chromecache_823.2.dr, chromecache_892.2.dr, chromecache_673.2.dr, chromecache_1006.2.dr	String found in binary or memory: https://s.yimg.com/aaq/wf/
Source: chromecache_1144.2.dr, chromecache_1019.2.dr	String found in binary or memory: https://s.yimg.com/aaq/wf/wf-core-1.65.0-modern.js
Source: chromecache_1019.2.dr	String found in binary or memory: https://s.yimg.com/aaq/wf/wf-rapid-1.10.8-modern.js
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Black.eot
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Black.eot);src:url(https://s.yimg.com/cv/ae/sp
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Black.eot?#iefix
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Black.woff
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Black.woff)
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Black.woff2
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Black.woff2)
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.eot
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.eot);src:url(https://s.yimg.com/cv/ae/spo
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.eot?#iefix
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.woff
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.woff)
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.woff2
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.woff2)
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.eot
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.eot);src:url(https://s.yimg.com/cv/a
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.eot?#iefix
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.woff
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.woff)
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.woff2
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.woff2)
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot);src:url(https://s.yimg.com/cv/
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot?#iefix
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.woff
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.woff)
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.woff2
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.woff2)
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.eot
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.eot);src:url(https://s.yimg.com/cv/ae/s
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.eot?#iefix
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.woff
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.woff)
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.woff2
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.woff2)
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.eot
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.eot);src:url(https://s.yimg.com/cv/ae/sp
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.eot?#iefix
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff)
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff2
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff2)
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.eot
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.eot);src:url(https://s.yimg.com/cv/ae/s
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.eot?#iefix
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff)
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2)
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.eot
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.eot);src:url(https://s.yimg.com/cv/ae/
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.eot?#iefix
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff)
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2)
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.eot
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.eot);src:url(https://s.yimg.com/cv/ae
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.eot?#iefix
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff)
Source: chromecache_688.2.dr, chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2
Source: chromecache_1250.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2)
Source: chromecache_568.2.dr, chromecache_741.2.dr	String found in binary or memory: https://s.yimg.com/cv/ae/sports/fonts/2017/yahoosans2.css
Source: chromecache_1131.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_128.png
Source: chromecache_1131.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_144.png
Source: chromecache_1131.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_152.png
Source: chromecache_1131.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_192.png
Source: chromecache_1131.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_384.png
Source: chromecache_1131.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_48.png
Source: chromecache_1131.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_512.png
Source: chromecache_1131.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_72.png
Source: chromecache_1131.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_96.png
Source: chromecache_1274.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/finance/fonts/GT-America-Condensed-Black.woff2)format(
Source: chromecache_1274.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/finance/fonts/GT-America-Condensed-Bold.woff2)format(
Source: chromecache_1274.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/finance/fonts/GT-America-Condensed-Regular.woff2)format(
Source: chromecache_1274.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/finance/fonts/GT-America-Standard-Black.woff2)format(
Source: chromecache_1274.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/finance/fonts/GT-America-Standard-Medium.woff2)format(
Source: chromecache_1274.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/finance/fonts/GT-America-Standard-Regular.woff2)format(
Source: chromecache_1274.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/finance/gtfont/GT-America-Bold.woff2)format(
Source: chromecache_780.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/nextgen/images/icons/interface-location-arrow-fill.svg);background-repea
Source: chromecache_1144.2.dr	String found in binary or memory: https://s.yimg.com/cx/pv/perf-vitals_3.2.0.js
Source: chromecache_1144.2.dr	String found in binary or memory: https://s.yimg.com/dv/static/siteApp/img/privacy-choice-control.png
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/fz/api/res/1.2/RJecEuVlAML8pJzUp_CZbQ--~A/YXBwaWQ9eW5ld3M7Zmk9Zml0O2g9NDg7cT0xMDA
Source: chromecache_948.2.dr	String found in binary or memory: https://s.yimg.com/lb/brands/150x150_amctheatres.png
Source: chromecache_1144.2.dr	String found in binary or memory: https://s.yimg.com/lb/brands/50x50_microsoft.png
Source: chromecache_1144.2.dr	String found in binary or memory: https://s.yimg.com/nn/lib/metro/g/myy/advertisement_0.0.19.js
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/..obOpBKVmZPE0kEZxW.Qw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE5MjA7aD0xMDgw/
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/.0lqG13KBtXbi4BOSzx4SQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI5MjtoPTYw/http
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/.6715IeW3a3OY0JMhgHZWQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIwNDg7aD0xMzY0O
Source: chromecache_627.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/.OLt4mlMHGS9quyWXiIiDA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD03NDg7Y
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/.q1gu1D0ngn4u_AMKfX3AA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTEyMDE-/
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/.smolfTwUTKIWqJwpM8k.A--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE2NDA7aD0yMDQ4/
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/00pv7hdqXyM..zyqTBKu5w--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAwO
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/0F5iozhEGIXcSfSV4Q739g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE2MzY7aD0yMDQ2O
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/0HBwh5xMsUVbWffmT8P0Hw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MA--/
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/18mXpKyVeysFt5z.In_14A--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAw/
Source: chromecache_1014.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/1PUdCp_OuCBC1dNODO0UhQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MA--/
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/1SdzkhE3z60PJHHC_zwPkg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MA--/
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/1wjdn7_N.rKhJLU.h4sFug--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIwNDg7aD0xNzA2O
Source: chromecache_1014.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/2FU5x1_vh4G_pzRK3xFdAA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDA-/
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/2PK6u1wlocEJVJ_fFKFshA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTYzOTtjZ
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/2gE55ROAcUkQqvm7ur9w1g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZ
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/3.uGPUMB3eH0lBBVcUIP7w--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MDtjZ
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/3i6Sv_LWzsamw1F9K1_xXQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTYzOTtjZ
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/3w7x7P.VTzBMbhAgvm_25Q--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAw/
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/3yRDp5592oWvv1ga5V5uAA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MDtjZ
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/4_NBWDNFifTyJeDI0BZrJA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIwNDg7aD0xMzY0/
Source: chromecache_1014.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/4p07c8yOTSQGL2b.mkcRvA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD03NzQ-/
Source: chromecache_1014.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/517Po0qEYSvfQ84Yn7wi4w--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD04Mjg-/
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/5DeSYyebcxSjHSCAZNtrwQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIwNDg7aD0xNzA2/
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/6sU8e60lEzVijC0kccUmHA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTE0Mzk-/
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/6xQZFqlwwfyx3eIdrg3B.A--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MA--/
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/7LT7487bifSZILUUfC_gKQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD02OTk-/
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/8B4jX78TFpUeQ6i1mNL3Kw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTExOTk-/
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/8vn7v2W0Gs8BO7eTMsV3gA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAw/
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/99qTIy4SBQ36iHDOAETvmg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTE0Mzk7Y
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/9PG.2IFurCk425cHbCHp9Q--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNTU0/
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/9o24sVm2y_.wDBD4A3ki_A--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZ
Source: chromecache_627.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/ABzwfuvrRXNt1qpBv9tUNg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNTc0O
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/AONvKSqOWbMmYpZvPhh1TA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjg0/
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/AptCCHCDe3.XW6UWFRcU6Q--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDA7Y
Source: chromecache_627.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/B_FZoXagTdkxcEvEy4u.2w--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAwO
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/BkQEr_ohVzxUg0bCRdafqQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZ
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/CMQMJP.W4tnoe9Ya7sLDyA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDtoPTE4MDtjZ
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/DuVWduXD3vKHKmYMcwO8mA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAwO
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/EcaWs_Cp9xJ1FKg4wCorZw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY3NDtjZ
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/F.KK2JKLI9Y1ZebMDblBNg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY3Mw--/
Source: chromecache_1014.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/FEnB.lEm84QOv5G9cxLXMQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI1NDtoPTYw/http
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/FXqsFHlwgN_Z0vUb54abQA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZ
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/FpX8uFDOr6_HkGL74b6xlA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAw/
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/HSgnLHbeMSnrM5bwPyx4jw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MA--/
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/HbWaLL5z.T9pEVKGj7C7Gg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD02OTk7Y
Source: chromecache_1014.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/I0PGZHkUqfu_FGcWs6emnw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD03NDg-/
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/I2AnEoHNJggDflUAIydjVw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MA--/
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/IFjEkW8jjerDYjwePpGSzA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAw/
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/J3q2HYJLwO9uytXsMGvwUA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZ
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/JXGZaDWK3ZzB8j9Iv6trfg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIwNDg7aD0xMzY0/
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/JcURIglfbCtBz.ge1ApgdA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MA--/
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/K5B9WRNWKUDcoA12T7ry6w--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE2NDA7aD0yMDQ4O
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/KgIV3xNZNAXnz.mauT3NNw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTExOTk7Y
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/KlkbeCHARl75DbwvODuFsA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTYzOQ--/
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/MQGnDvZqqDKiVekv56S25g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE5MjA7aD0xMDgwO
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/MRTgb3.I5sTpJKFRc66usw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI5MjtoPTYwO2NmP
Source: chromecache_627.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/MUgEwycZIcFW4o6IPED8lA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDA7Y
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/MdrQhRSq8A1vpJ_CoqWNZw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE2NDA7aD0yMDQ4O
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/NwKOQJGZV_z6HojGmaDQtw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MA--/
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/O9dfCY05Suoekc8iTBjoug--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIwNDg7aD0xMzY0O
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/OCrLIylFB8piM69DH1i__Q--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIwNDg7aD0xMzY0O
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/Oi4TO3SF1e2h9p8IlPTuPA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAw/
Source: chromecache_1014.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/OxEru2.W_E2HPjp7zeg3oA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNTc0/
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/PBaV2UU_4QAHwGdCGpOBaA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjg0O
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/PRe4n82HmnATxfVxqBkbIw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEzNjY7aD0yMDQ4/
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/PZz.16O3dfJxW3vXrNJgzA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTYzOQ--/
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/PaDTXSJSvctZz6b._n1Q1A--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAwO
Source: chromecache_627.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/Q1Mv1IUMGZrgvxQ727ITMg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZ
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/Q8kKnMkuzZThYgA1aAwX0A--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTExOTk7Y
Source: chromecache_1014.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/QUqcUspSryuMlEIiv31quQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD04Mjg-/
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/RK_L5gXnsHZYEqfXec3Cwg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZ
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/Rk9SnyXxzpzqJXvE9Ll1sw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE5MjA7aD0xMDgw/
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/RmaPFl1A7tIgdRBt840cuQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAwO
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/T8QQh5y3aZMc49MEI31K7w--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAw/
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/Tx1ysGSVAAs2tDrXvSBzyA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZ
Source: chromecache_1014.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/TxyMwMrnuVjFFqSanE0vJg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAw/
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/U.DQt45PtXfUVtvDPLcusA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTgwMDtjZ
Source: chromecache_627.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/V6S.nImqgoJdWCtJh22Ufw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD04Mjg7Y
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/Vy9K5krcWQ23aE9jyMEIEg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE2NDA7aD0yMDQ4/
Source: chromecache_1144.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/WFcWP9wqf0Zhlt_r9xcF_g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDA7Y
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/WQNLCKD74tlc_XAZsqk1Aw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDtoPTE4MA--/
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/XQe4e3XpFCEd_YZGYxK1GQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEzNjY7aD0yMDQ4O
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/Yl7iXrnoU0hna6dC.eNHlA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY3NA--/
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/Z9t.GtOrlPI8iEau8Le5iw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE2MzY7aD0yMDQ2/
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/ZKs.QyRxjuw4AUXny6A.cA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAw/
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/ZpKcupCHMkeMKUchEyCVfg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAwO
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/_OLz7jpG95Ib4w_R5JeE3Q--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE5MjA7aD0xMDgwO
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/_i6_PKxqS3bMcJWKl5JY_A--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAwO
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/_zIAMz_A7fMgUNQr4zbrJw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MA--/
Source: chromecache_627.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/aJA1htXzaC4e_036jWkeLQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD03NzQ7Y
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/amlq3N3n_N1Hl7DBdPLRVw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MA--/
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/bNM692v8ey8NLJKAGjx.4Q--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTgwMA--/
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/c5wW9D28mZL00tpIxYWGRw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZ
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/chV8dC31J76S08b_zkeUgQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTExOTk-/
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/dY51_BUnOMCPnIO5WptqGg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MA--/
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/eQywbPWOmaob.fT_cea_VA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDA-/
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/eYI76eMKpypdbz3PhPGPIA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIwNDg7aD0xMzY0/
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/edWOX2ZKFSAYIyDNXrgp5g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjgyO
Source: chromecache_627.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/gf9ClAnK4yRtSMc46_3_ag--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTYyOTtjZ
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/hj2.7JIiUm6Wzxp_1PdRkw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAwO
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/iXkB7go7G6w7QkaGVLz3xg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MA--/
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/iizhGtnpQ.KFCBQHlzNwzw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjgy/
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/kQmb_OZQeRnMG9UUX.AsRw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZ
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/lxs0LnH5sbq9GBSpicOS5g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY3MztjZ
Source: chromecache_1014.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/o.W.dX6.gVOSkID5f_nusw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTYyOQ--/
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/o1oljWvec827VUxdOchlEw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAw/
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/oQvjAse143niThmr_sC_xg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTYzOQ--/
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/oTSLqlTKKP_1esWcuqlSXA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZ
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/pLxnEGJ_Aw9x65TQi9OqHQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MA--/
Source: chromecache_627.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/qF33A5CF.NPukAtJHI5Rgg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD04Mjg7Y
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/qeESvxV.kKygEzum3wiA3g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAw/
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/sUUmcbAuWJfw5i_MW5UO_A--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNTU0O
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/tV826oJeDzMcHeLZe1xWeQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAwO
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/tm2w3cPrZ9snFSIkzoxtVw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTYzOTtjZ
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/uFzuaqOmX0vPMFUBz4P9Mw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD04Mjg7Y
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/un5RKnTofqyGpZ23QjmVnQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAwO
Source: chromecache_627.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/usPvBMzZlkz.hVEpQagxHw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI1NDtoPTYwO2NmP
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/vjgofPJc9bqaAkoA.orFUg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD04Mjg-/
Source: chromecache_1020.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/wwzvUn2O.TGUkA6upIm_hw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTYyMg--/
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/xOQjOkE0h72FG3HwzgS5BA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAwO
Source: chromecache_576.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/yQy1jNpygrX4McqntpnPxQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTEyMDE7Y
Source: chromecache_522.2.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/zgjG_i.Zsn4EgWZ9qEnZiw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTYyMjtjZ
Source: chromecache_1144.2.dr	String found in binary or memory: https://s.yimg.com/oa/guce.js
Source: chromecache_1144.2.dr	String found in binary or memory: https://s.yimg.com/os/creatr-uploaded-images/2020-11/c6bce4f0-2a3a-11eb-bfff-80ecd9e0e6df
Source: chromecache_627.2.dr	String found in binary or memory: https://s.yimg.com/os/creatr-uploaded-images/2023-04/d2f4cb00-e600-11ed-b55f-6817177f4c26
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180611812/img/LeftArrow
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180611812/img/Tool
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180611812/img/account
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180611812/img/alert1
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180611812/img/alert2
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180611812/img/bg-circle.png
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180611812/img/bluechevron4
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180611812/img/checkmark
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180611812/img/chevron-orange-up.png
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180611812/img/chevron1
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180611812/img/chevron2
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180611812/img/chevron4
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180611812/img/chevron5
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180611812/img/help.icon-sprite.png
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180611812/img/mail
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180611812/img/mail_fill
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180611812/img/pencil.png
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180611812/img/star_fill
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180611812/img/tool
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180972206/img/my-subscription2.png
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/20180972206/img/phone.png
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Black-Web.eot
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Black-Web.eot?#iefix
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Black-Web.woff
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Black-Web.woff2
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Bold-Web.eot
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Bold-Web.eot?#iefix
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Bold-Web.woff
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Bold-Web.woff2
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Extrabold-Web.eot
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Extrabold-Web.eot?#ief
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Extrabold-Web.woff
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Extrabold-Web.woff2
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Light-Web.eot
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Light-Web.eot?#iefix
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Light-Web.woff
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Light-Web.woff2
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Regular-Web.eot
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Regular-Web.eot?#iefix
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Regular-Web.woff
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Regular-Web.woff2
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-Black.woff
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-Black.woff2
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-BlackItalic.woff
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-BlackItalic.woff2
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-Bold.woff
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-Bold.woff2
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-BoldItalic.woff
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-BoldItalic.woff2
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-Light.woff
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-LightItalic.woff
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-LightItalic.woff2
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-Medium.woff
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-Medium.woff2
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-MediumItalic.woff
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-Regular.woff
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-Regular.woff2
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-RegularItalic.wof
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-XBold.woff
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-XBold.woff2
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-XBoldItalic.woff
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/202010281412/css/fonts/yahoo-sans-condensed/YahooSansCond-XBoldItalic.woff2
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/pj/sh/2022031437/img/phone.svg
Source: chromecache_846.2.dr	String found in binary or memory: https://s.yimg.com/pv/static/img/icon-flame-dark-202303010353.gif
Source: chromecache_846.2.dr	String found in binary or memory: https://s.yimg.com/pv/static/img/icon-flame-light-202303010352.gif
Source: chromecache_1012.2.dr	String found in binary or memory: https://s.yimg.com/rb/services/video-manager/v2.0.13/video-manager.js
Source: chromecache_851.2.dr	String found in binary or memory: https://s.yimg.com/rq/darla/4-10-0/html/r-csc.html
Source: chromecache_1144.2.dr	String found in binary or memory: https://s.yimg.com/rx/ev/builds/1.4.15/evplayer.js
Source: chromecache_1012.2.dr	String found in binary or memory: https://s.yimg.com/rx/ev/builds/1.4.8/evplayer.js
Source: chromecache_1012.2.dr	String found in binary or memory: https://s.yimg.com/rx/ev/prod/evplayer.js
Source: chromecache_1144.2.dr	String found in binary or memory: https://s.yimg.com/rz/p/yahoo_finance_en-US_h_p_finance_2.png
Source: chromecache_851.2.dr	String found in binary or memory: https://s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png
Source: chromecache_851.2.dr	String found in binary or memory: https://s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png
Source: chromecache_851.2.dr	String found in binary or memory: https://s.yimg.com/ss/rapid-3.53.30.js
Source: chromecache_1124.2.dr	String found in binary or memory: https://s.yimg.com/uc/fin/img/19/02/d408d9d.png
Source: chromecache_1124.2.dr	String found in binary or memory: https://s.yimg.com/uc/fin/img/logo192x192.png
Source: chromecache_1124.2.dr	String found in binary or memory: https://s.yimg.com/uc/fin/img/logo300x300.png
Source: chromecache_1019.2.dr	String found in binary or memory: https://s.yimg.com/uc/finance/dd-site/modules/css/react-finance.NotificationAlert.atomic.ltr.e8b3a34
Source: chromecache_1144.2.dr	String found in binary or memory: https://s.yimg.com/uc/finance/nimbus/_app/immutable/entry/app.CUSguzUB.js
Source: chromecache_1144.2.dr	String found in binary or memory: https://s.yimg.com/uc/finance/nimbus/_app/immutable/entry/start.Df8dWLea.js
Source: chromecache_1144.2.dr	String found in binary or memory: https://s.yimg.com/uc/finance/srchjs/latest/js/finSearch.modern.js
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/uu/api/res/1.2/0eDoZlMlcEktE8CJ3Za6ZQ--~B/Zmk9c3RyaW07aD0zNjA7dz02NDA7c209MTthcHB
Source: chromecache_851.2.dr	String found in binary or memory: https://s.yimg.com/wm/mbr/58dc9fe4f6c2083f38135ec31a4db5c11ab15bc4/bundle.js
Source: chromecache_851.2.dr	String found in binary or memory: https://s.yimg.com/wm/mbr/58dc9fe4f6c2083f38135ec31a4db5c11ab15bc4/yahoo-main.css
Source: chromecache_851.2.dr	String found in binary or memory: https://s.yimg.com/wm/mbr/images/yahoo-apple-touch-v0.0.2.png
Source: chromecache_851.2.dr	String found in binary or memory: https://s.yimg.com/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico
Source: chromecache_1174.2.dr	String found in binary or memory: https://s.yimg.com/zb/imgv1/a9977a3e-cae2-3a9a-9235-ae602c5f3699/s_500x500
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/zz/combo?pj/sh/20180611812/img/article3sp.png
Source: chromecache_568.2.dr	String found in binary or memory: https://s.yimg.com/zz/combo?pj/sh/20180611812/img/chevron1
Source: chromecache_529.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/mu/templates/hifi/hifi.js
Source: chromecache_529.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js
Source: chromecache_948.2.dr	String found in binary or memory: https://s2.coinmarketcap.com/static/img/coins/64x64/74.png
Source: chromecache_768.2.dr, chromecache_585.2.dr	String found in binary or memory: https://sb.scorecardresearch.com/p?
Source: chromecache_1144.2.dr	String found in binary or memory: https://sb.scorecardresearch.com/p?c1=2&c2=7241469&c5=1183300100&c7=https%3A%2F%2Ffinance.yahoo.com%
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://search.yahoo.com/search?p=Aaliyah%20Edwards
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://search.yahoo.com/search?p=Caitlin%20Clark
Source: chromecache_627.2.dr	String found in binary or memory: https://search.yahoo.com/search?p=Donald%20Trump
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://search.yahoo.com/search?p=Gavin%20Newsom
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://search.yahoo.com/search?p=Geno%20Auriemma
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://search.yahoo.com/search?p=Hannah%20Hidalgo
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://search.yahoo.com/search?p=Joe%20Biden
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://search.yahoo.com/search?p=JuJu%20Watkins
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://search.yahoo.com/search?p=Kiki%20Rice
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://search.yahoo.com/search?p=Kyle%20Filipowski
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://search.yahoo.com/search?p=Rickea%20Jackson
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://search.yahoo.com/search?p=Tamron%20Hall
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://search.yahoo.com/search?p=Zach%20Edey
Source: chromecache_505.2.dr, chromecache_1078.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://shopping.yahoo.com/rdlw?merchantId=34c77505-6db4-4664-9320-2c38b4122d5e&siteId=us-sports
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://shopping.yahoo.com/rdlw?siteId=us-sports&pageId=pnr-product-module&featureId=manual-entry&it
Source: chromecache_951.2.dr, chromecache_699.2.dr, chromecache_1212.2.dr, chromecache_1284.2.dr, chromecache_490.2.dr, chromecache_1151.2.dr, chromecache_781.2.dr, chromecache_813.2.dr, chromecache_624.2.dr, chromecache_1106.2.dr, chromecache_720.2.dr, chromecache_1137.2.dr, chromecache_845.2.dr, chromecache_1245.2.dr, chromecache_1258.2.dr	String found in binary or memory: https://sketch.com
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://sports.yahoo.com/connecticut-coach-dan-hurley-competing-183411952.html
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://sports.yahoo.com/iowa-state-coach-t-j-102513987.html
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://sports.yahoo.com/sports_content_ms/_rcv/remote?m_id=player&ctrl=PlayerCard&m_mode=json&playe
Source: chromecache_548.2.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=82&gdpr=$%7bGDPR%7d&gdpr_consent=$%7bGDP
Source: chromecache_822.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatch?d=$
Source: chromecache_782.2.dr	String found in binary or memory: https://staging.api.shopinsync.com
Source: chromecache_881.2.dr	String found in binary or memory: https://static.chartbeat.com/js/inpage.js
Source: chromecache_881.2.dr	String found in binary or memory: https://static2.chartbeat.com/frontend_ng/hud/hud-inpage/hud-inpage-
Source: chromecache_981.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_1000.2.dr, chromecache_981.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_1000.2.dr, chromecache_981.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_1000.2.dr, chromecache_981.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_615.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/ZMAwryCI?redir=https%3A%2F%2Fdsum-sec.casalemedia.com%2Frum%
Source: chromecache_743.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_743.2.dr	String found in binary or memory: https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_876.2.dr	String found in binary or memory: https://sync.bfmio.com/sync?pid=187&uid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=
Source: chromecache_963.2.dr	String found in binary or memory: https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_
Source: chromecache_1017.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=b
Source: chromecache_876.2.dr	String found in binary or memory: https://sync.mathtag.com/sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmati
Source: chromecache_876.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=11&gdpr=0&gdpr_consent=
Source: chromecache_1108.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=68&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Source: chromecache_743.2.dr, chromecache_618.2.dr	String found in binary or memory: https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&part
Source: chromecache_743.2.dr	String found in binary or memory: https://t.adx.opera.com/pub/sync?pubid=pub8730968190912
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://t.co/50IknvwnM0
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://t.co/A8S4QjNMH1
Source: chromecache_627.2.dr	String found in binary or memory: https://t.co/Iri8nwI9Nt
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://t.co/Iri8nwI9Nt;elm:context_link;itc:0;sec:content-canvas
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://t.co/JNrPtXA7xi
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://t.co/TpvBbAmTFc
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://t.co/V1IXPnANdc
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://t.co/Wr8OUNzp5k
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://t.co/pbfHWlNKc3
Source: chromecache_876.2.dr	String found in binary or memory: https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_
Source: chromecache_526.2.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=2249&pt=n
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://tournament.fantasysports.yahoo.com/womens-basketball-bracket/39917
Source: chromecache_966.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_966.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Source: chromecache_473.2.dr, chromecache_945.2.dr	String found in binary or memory: https://tps.doubleverify.com/visit.jpg
Source: chromecache_1021.2.dr	String found in binary or memory: https://trc.taboola.com/sg/prebidJS/1/cm
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://twitter.com/AmnestyNigeria/status/1768789112092270715
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://twitter.com/ArizonaMBB?ref_src=twsrc%5Etfw
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://twitter.com/Brcremer
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://twitter.com/CBSSports/status/1773503920960155944?ref_src=twsrc%5Etfw
Source: chromecache_627.2.dr	String found in binary or memory: https://twitter.com/ClemsonMBB?ref_src=twsrc%5Etfw
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://twitter.com/HPD_307/status/1773002306998440044
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://twitter.com/HonMichaelson/status/1745091418589176309
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://twitter.com/MarchMadnessMBB/status/1773493096463863936?ref_src=twsrc%5Etfw
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://twitter.com/MarchMadnessMBB/status/1773494914958954643?ref_src=twsrc%5Etfw
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://twitter.com/MarchMadnessMBB/status/1773496572422107256?ref_src=twsrc%5Etfw
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://twitter.com/MsSuzieQ3/status/1772793813901119495
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://twitter.com/NWBSpeedway/status/1772760481003905187?ref_src=twsrc%5Etfw
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://twitter.com/PoliceNG/status/1765699292696592654
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://twitter.com/Sn1per_T/status/1748472833959735690?ref_src=twsrc%5Etfw
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://twitter.com/StanRMitchell/status/1773001023893721214
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://twitter.com/TheCornDog/status/1772972203404914915
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://twitter.com/TrumpDailyPosts/status/1772658279908253974
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://twitter.com/YahooFantasy/status/1772484025946435973?ref_src=twsrc%5Etfw
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://twitter.com/dvdpeters
Source: chromecache_627.2.dr	String found in binary or memory: https://twitter.com/hashtag/MarchMadness?src=hash&ref_src=twsrc%5Etfw
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://twitter.com/mtgreenee/status/1773403105410814278
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://twitter.com/pmnewsnigeria/status/1767511216577024397
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://twitter.com/theduanebrown/status/1772687597019533464
Source: chromecache_743.2.dr, chromecache_618.2.dr	String found in binary or memory: https://um.simpli.fi/pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_1017.2.dr	String found in binary or memory: https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_876.2.dr	String found in binary or memory: https://ums.acuityplatform.com/tum?umid=6
Source: chromecache_1108.2.dr	String found in binary or memory: https://ums.acuityplatform.com/tum?umid=8&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Source: chromecache_548.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/55940/sync?_origin=1&redir2=true&uid=ZgYOPsAoJI0AAAi4ADl
Source: chromecache_1017.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=6D366468-71AF-422B-99AB-138A6DAB94F7&re
Source: chromecache_1287.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&gdpr=0&r=https%3A%2F%2Fcm.g.
Source: chromecache_876.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/sd?id=540245193&val=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_co
Source: chromecache_1017.2.dr	String found in binary or memory: https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4B
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://ww2.arb.ca.gov/our-work/programs/advanced-clean-cars-program/states-have-adopted-californias
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://www.ajc.com/politics/georgia-judge-rules-that-republican-brian-k-pritchard-voted-illegally/M
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.autosinnovate.org/posts/agency-comments/energy-environment/2024-02-27%20Comments%20to%20
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://www.biblica.com/permissions/
Source: chromecache_1144.2.dr	String found in binary or memory: https://www.bloomberg.com/
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.bloomberg.com/news/articles/2020-12-04/nissan-drops-out-of-trump-s-fight-against-califor
Source: chromecache_1144.2.dr	String found in binary or memory: https://www.bloomberg.com/news/articles/2024-03-27/some-stock-pickers-show-active-can-still-beat-pas
Source: chromecache_1144.2.dr	String found in binary or memory: https://www.bloomberg.com/news/articles/2024-03-28/-wirecutter-best-wok-pick-shows-perils-of-interne
Source: chromecache_1144.2.dr	String found in binary or memory: https://www.bloomberg.com/news/articles/2024-03-28/bankman-fried-is-sentenced-to-25-years-in-prison?
Source: chromecache_1144.2.dr	String found in binary or memory: https://www.bloomberg.com/news/articles/2024-03-28/dubai-s-glitz-dims-for-russians-on-costs-us-sanct
Source: chromecache_1144.2.dr	String found in binary or memory: https://www.bloomberg.com/news/articles/2024-03-28/tesla-s-tsla-new-unboxed-manufacturing-process-ai
Source: chromecache_1144.2.dr	String found in binary or memory: https://www.bloomberg.com/news/articles/2024-03-28/towns-in-2024-solar-eclipse-path-try-to-reap-econ
Source: chromecache_1144.2.dr	String found in binary or memory: https://www.bloomberg.com/news/articles/2024-03-28/when-is-the-new-ipad-pro-ipad-air-coming-out-appl
Source: chromecache_1144.2.dr	String found in binary or memory: https://www.bloomberg.com/news/features/2024-03-27/how-fanatics-ceo-michael-rubin-came-to-rule-sport
Source: chromecache_1144.2.dr	String found in binary or memory: https://www.bloomberg.com/news/features/2024-03-27/sam-bankman-fried-prison-sentence-shaped-by-ftx-c
Source: chromecache_1144.2.dr	String found in binary or memory: https://www.bloomberg.com/news/features/2024-03-27/ubs-banker-s-comments-highlight-challenges-facing
Source: chromecache_467.2.dr	String found in binary or memory: https://www.chevrolet.com/electric/blazer-ev?cmp=OLA_DISPLAY_%ebuy
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://www.christiansagainstchristiannationalism.org/
Source: chromecache_1174.2.dr	String found in binary or memory: https://www.cnn.com/2020/06/03/politics/trump-evangelicals-church-protests/index.html?cid=external-f
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://www.cnn.com/2022/07/24/us/white-christian-nationalism-blake-cec/index.html?cid=external-feed
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://www.cnn.com/2023/01/21/us/william-barber-christian-nationalism-blake-cec/index.html?cid=exte
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://www.cnn.com/2023/09/02/health/virginia-deaths-meningococcal-disease-outbreak/index.html?cid=
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://www.cnn.com/2024/03/25/politics/takeaways-trump-legal-drama-hush-money-trial-fraud-bond?cid=
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.cnn.com/us/live-news/baltimore-key-bridge-collapse-03-28-24/h_abf1965273392c445b700cf7df
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://www.cnn.com/world/africa/nigeria?cid=external-feeds_iluminar_yahoo
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://www.documentcloud.org/documents/23876912-donald-trump-oge-public-financial-disclosure-report
Source: chromecache_938.2.dr	String found in binary or memory: https://www.ford.com/help/privacy/
Source: chromecache_966.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_1000.2.dr, chromecache_981.2.dr, chromecache_518.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_966.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_941.2.dr, chromecache_709.2.dr, chromecache_532.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.gov.ca.gov/2019/07/25/california-and-major-automakers-reach-groundbreaking-framework-agr
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.gov.ca.gov/2023/07/06/california-truck-manufacturers-strike-agreement-on-zero-emission-t
Source: chromecache_1000.2.dr, chromecache_981.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__.
Source: chromecache_582.2.dr, chromecache_518.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.latimes.com/business/story/2022-08-23/toyota-backs-down-in-fight-against-california-car-
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://www.latimes.com/sports/usc
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://www.latimes.com/sports/usc/story/2024-02-18/juju-watkins-rayah-marshall-usc-oregon-state
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://www.latimes.com/sports/usc/story/2024-03-22/usc-mckenzie-forbes-makes-march-madness-ncaa-tou
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://www.latimes.com/sports/usc/story/2024-03-23/usc-texas-am-corpus-christi-ncaa-tournament-reca
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://www.latimes.com/sports/usc/story/2024-03-24/usc-trojans-basketball-reserve-india-otto-ncaa-g
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://www.news-journal.com/features/religion/a-new-bible-that-includes-the-u-s-constitution-attrac
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://www.niche.com/colleges/search/top-party-schools/
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.nytimes.com/2018/11/21/climate/andrew-wheeler-epa.html
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.padilla.senate.gov/newsroom/press-releases/padilla-barragan-desaulnier-matsui-urge-epa-t
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://www.pewresearch.org/religion/religious-landscape-study/christians/christian/views-about-homo
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://www.pewresearch.org/religion/religious-landscape-study/views-about-abortion/
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.politico.com/news/2019/12/11/california-quebec-climate-change-082237
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.politico.com/news/2023/01/23/red-states-are-winning-big-from-dems-climate-law-00078420
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.politico.com/news/2023/08/14/newsom-climate-diplomacy-00110622
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.politico.com/news/2024/02/22/biden-electric-car-issues-00142457
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.politico.com/news/2024/03/19/california-stellantis-clean-car-rules-00147866
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.politico.com/news/2024/03/25/california-budget-deficit-rookie-lawmakers-00148646
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.politico.com/newsletters/california-climate/2023/10/24/big-in-china-mous-00123381#:~:tex
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.politico.com/newsletters/california-climate/2024/03/19/newsoms-getting-his-trump-cards-i
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.politico.com/states/california/whiteboard/2019/11/15/california-government-to-stop-buyin
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.politico.com/story/2019/09/06/doj-auto-trump-fuel-efficiency-1483589
Source: chromecache_634.2.dr	String found in binary or memory: https://www.radiantmediaplayer.com
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.reuters.com/business/autos-transportation/gm-recognizes-californias-authority-set-vehicl
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.rollingstone.com/tv-movies/tv-movie-lists/greatest-comedies-of-the-21st-century-630244/?
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.rollingstone.com/tv-movies/tv-movie-lists/risky-business-every-tom-cruise-film-ranked-up
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.rollingstone.com/tv-movies/tv-movie-news/disney-directors-apologize-letters-of-support-d
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.rollingstone.com/tv-movies/tv-movie-news/drake-bell-quiet-on-set-nickelodeon-response-12
Source: chromecache_627.2.dr	String found in binary or memory: https://www.rollingstone.com/tv-movies/tv-movie-news/josh-peck-support-drake-bell-quiet-on-set-12349
Source: chromecache_627.2.dr	String found in binary or memory: https://www.rollingstone.com/tv-movies/tv-movie-news/nickelodeon-drake-bell-abuse-docuseries-1234986
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.rollingstone.com/tv-movies/tv-movie-news/nickelodeon-showrunner-dan-schneider-apologizes
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.sacbee.com/news/politics-government/capitol-alert/article235397887.html
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://www.senate.ga.gov/committees/Documents/ReportonFelonyDisenfranchisementinGeorgia.pdf
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.sfchronicle.com/environment/article/Trump-administration-opens-California-to-new-oil-144
Source: chromecache_1014.2.dr, chromecache_627.2.dr	String found in binary or memory: https://www.technologyreview.com/2024/02/26/1088921/trump-wants-to-unravel-bidens-landmark-climate-l
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://www.tennessean.com/story/news/religion/2021/05/27/god-bless-usa-bible-lee-greenwood-publishe
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://www.tmz.com/2022/12/12/diddy-daughter-baby-mama-dana-tran-cyber-security-specialist/
Source: chromecache_522.2.dr, chromecache_1020.2.dr	String found in binary or memory: https://www.usnews.com/best-colleges
Source: chromecache_851.2.dr	String found in binary or memory: https://www.yahoo.com/
Source: chromecache_1174.2.dr	String found in binary or memory: https://www.yahoo.com/entertainment/diddy-allegedly-paid-instagram-model-163100632.html
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://www.yahoo.com/news/nigerian-woman-reviewed-tomato-puree-105050378.html
Source: chromecache_627.2.dr	String found in binary or memory: https://www.yahoo.com/news/rescued-key-bridge-construction-worker-couldnt-swim-heres-what-we-know-ab
Source: chromecache_1144.2.dr	String found in binary or memory: https://www.yahoo.com/px.gif
Source: chromecache_576.2.dr, chromecache_1174.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=xHt-DrUUdRc
Source: chromecache_876.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy=#US_PRIVACY
Source: chromecache_700.2.dr, chromecache_1304.2.dr	String found in binary or memory: https://ybar-mcdn-report.wc.yahoodns.net/cs/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50730
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50759
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 51077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 51512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 51065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown	Network traffic detected: HTTP traffic on port 51626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown	Network traffic detected: HTTP traffic on port 51765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 51434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown	Network traffic detected: HTTP traffic on port 51307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51573 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50725
Source: unknown	Network traffic detected: HTTP traffic on port 51638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 51115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51202
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 51384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51210
Source: unknown	Network traffic detected: HTTP traffic on port 50897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50776
Source: unknown	Network traffic detected: HTTP traffic on port 51140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50779
Source: unknown	Network traffic detected: HTTP traffic on port 51266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50774
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 51827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50784
Source: unknown	Network traffic detected: HTTP traffic on port 51806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50798
Source: unknown	Network traffic detected: HTTP traffic on port 51790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 51245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50797
Source: unknown	Network traffic detected: HTTP traffic on port 51675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51143
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51147
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51155
Source: unknown	Network traffic detected: HTTP traffic on port 51840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51162
Source: unknown	Network traffic detected: HTTP traffic on port 51347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51163
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51165
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51174
Source: unknown	Network traffic detected: HTTP traffic on port 51623 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51171
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51176
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51181
Source: unknown	Network traffic detected: HTTP traffic on port 50996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51184
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51185
Source: unknown	Network traffic detected: HTTP traffic on port 51588 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51183
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51106
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51105
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51102
Source: unknown	Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51113
Source: unknown	Network traffic detected: HTTP traffic on port 51269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51114
Source: unknown	Network traffic detected: HTTP traffic on port 51704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51129
Source: unknown	Network traffic detected: HTTP traffic on port 51335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51127
Source: unknown	Network traffic detected: HTTP traffic on port 51004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51125
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51130
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51133
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51141
Source: unknown	Network traffic detected: HTTP traffic on port 51270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51539 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51187
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51564 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51190
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51195
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51194
Source: unknown	Network traffic detected: HTTP traffic on port 51741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51199
Source: unknown	Network traffic detected: HTTP traffic on port 51576 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50851
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 51032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50867
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50868
Source: unknown	Network traffic detected: HTTP traffic on port 50956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50862
Source: unknown	Network traffic detected: HTTP traffic on port 51834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 50852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50878
Source: unknown	Network traffic detected: HTTP traffic on port 51056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50879
Source: unknown	Network traffic detected: HTTP traffic on port 50932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50870
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50874
Source: unknown	Network traffic detected: HTTP traffic on port 51020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50873
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 50601 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 50888 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50888
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50880
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50884
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827

Source: unknown	HTTPS traffic detected: 23.52.162.98:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.52.162.98:443 -> 192.168.2.4:49762 version: TLS 1.2

Source: classification engine

Classification label: mal84.phis.win@78/1388@674/100

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://depl.pages.dev/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6760 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=9836 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=9824 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=8420 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=8928 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=7044 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=8220 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6760 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=8420 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=9836 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=9824 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=8420 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=8928 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=7044 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=8220 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Extra Window Memory Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://depl.pages.dev/	100%	Avira URL Cloud	phishing
https://depl.pages.dev/	26%	Virustotal		Browse
https://depl.pages.dev/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Link
dualstack.tls13.taboola.map.fastly.net	0%	Virustotal	Browse
tls13.taboola.map.fastly.net	0%	Virustotal	Browse
depl.pages.dev	24%	Virustotal	Browse
ats-eks.us-west-2.dcs-online-targeting-prd.aws.oath.cloud	0%	Virustotal	Browse
noa-atsv2.media.g03.yahoodns.net	0%	Virustotal	Browse
bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud	0%	Virustotal	Browse
m.deepintent.com	0%	Virustotal	Browse
match.prod.bidr.io	0%	Virustotal	Browse
i.clean.gg	0%	Virustotal	Browse
cs550162656.adn.psicdn.net	0%	Virustotal	Browse
core.iprom.net	0%	Virustotal	Browse
gob-sv3.pubmnet.com	0%	Virustotal	Browse
fastly-tls12-bam.nr-data.net	0%	Virustotal	Browse
spug-nje1pb.pubmnet.com	0%	Virustotal	Browse
b.scorecardresearch.com	0%	Virustotal	Browse
pugm-nje1.pubmnet.com	0%	Virustotal	Browse
ping.chartbeat.net	0%	Virustotal	Browse
mid.rkdms.com	0%	Virustotal	Browse
rtb.adentifi.com	1%	Virustotal	Browse
cs.lkqd.net	0%	Virustotal	Browse
tsdtocl.com	1%	Virustotal	Browse
ad.mrtnsvr.com	0%	Virustotal	Browse
sync.ipredictive.com	0%	Virustotal	Browse
gob-pairb-nje1.pubmnet.com	0%	Virustotal	Browse
us01.z.antigena.com	0%	Virustotal	Browse
geo-atsv2.media.g03.yahoodns.net	0%	Virustotal	Browse
prod-rotation-v2.guce.aws.oath.cloud	0%	Virustotal	Browse
thrtle.com	0%	Virustotal	Browse
jsdelivr.map.fastly.net	0%	Virustotal	Browse
fam-geo-atsv2.prod.media.g03.yahoodns.net	0%	Virustotal	Browse
matching.truffle.bid	0%	Virustotal	Browse
edge.gycpi.b.yahoodns.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://tsdtocl.com/	0%	URL Reputation	safe
https://herhoopstats.com/stats/ncaa/research/team_single_seasons/?min_season=2024&max_season=2024&di	0%	Avira URL Cloud	safe
https://staging.api.shopinsync.com	0%	Avira URL Cloud	safe
https://bam.nr-data.net/jserrors/1/NRBR-8d654786049c463f253?a=772319297&sa=1&v=1.246.1&t=Unnamed%20Transaction&rst=21738&ck=0&s=0&ref=https://finance.yahoo.com/	0%	Avira URL Cloud	safe
https://bam.nr-data.net/events/1/NRJS-28dd4dd46c9904028da?a=699093269&v=1.253.0&to=MwFUYENWWEZQVUxeWQpLZURDXlhScllWQ0QLCFpRQxhNRUNZXEJVECtEZFBFQltURAIZHRlEHnN0Yx8%3D&rst=9190&ck=0&s=49bce6ab9d5d1708&ref=https://help.yahoo.com/kb/account&hr=0	0%	Avira URL Cloud	safe
https://x.bidswitch.net/sync?ssp=google&google_gid=CAESEKDgkTaCKFHaUMrKUU3OXqs&google_cver=1&google_push=AXcoOmRxa6_8b72zeDlJWePL86AZ0_9LJ1guFJqZ3U8JF8FqZFGhjQD6THGCZRWKs1UmxgmGHuBB2m_mE7UgUQsLQXcUo8ap25-SRg	0%	Avira URL Cloud	safe
https://rtb.adentifi.com/CookieIndex?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
fam-geo-atsv2.prod.media.g03.yahoodns.net	66.218.87.15	true	false	0%, Virustotal, Browse	unknown
um.simpli.fi	35.236.220.17	true	false		high
rtb-csync-use1.smartadserver.com	23.105.12.150	true	false		high
tls13.taboola.map.fastly.net	151.101.1.44	true	false	0%, Virustotal, Browse	unknown
global.px.quantserve.com	192.184.68.166	true	false		high
bid.g.doubleclick.net	142.251.167.155	true	false		high
us-east-eb2.3lift.com	35.71.139.29	true	false		high
prebid.media.net	34.120.63.153	true	false		high
i.clean.gg	34.95.69.49	true	false	0%, Virustotal, Browse	unknown
rtb.openx.net	35.186.253.211	true	false		high
cdn.w55c.net	52.54.57.187	true	false		high
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	34.238.61.171	true	false		high
crb.kargo.com	52.202.181.167	true	false		high
d2c0xhqyhmtkod.cloudfront.net	18.160.37.10	true	false		high
dualstack.tls13.taboola.map.fastly.net	151.101.1.44	true	false	0%, Virustotal, Browse	unknown
r.casalemedia.com	172.64.151.101	true	false		high
lga-direct-bgp.contextweb.com	198.148.27.131	true	false		high
dsum.casalemedia.com	104.18.36.155	true	false		high
depl.pages.dev	172.66.47.32	true	false	24%, Virustotal, Browse	unknown
www.google.com	142.251.163.99	true	false		high
prod-us-oath-lb-api-1578944270.us-east-1.elb.amazonaws.com	50.17.145.44	true	false		high
noa-atsv2.media.g03.yahoodns.net	66.218.87.15	true	false	0%, Virustotal, Browse	unknown
tagr-gcp-odr-use1.mookie1.com	35.190.90.30	true	false		high
idaas6.cph.liveintent.com	52.203.99.111	true	false		high
bcp.crwdcntrl.net	44.219.90.173	true	false		high
match.adsrvr.org	52.223.40.198	true	false		high
rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	3.222.105.150	true	false		high
match.prod.bidr.io	54.156.236.4	true	false	0%, Virustotal, Browse	unknown
google.com	142.251.163.113	true	false		high
bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud	52.24.220.218	true	false	0%, Virustotal, Browse	unknown
pagead-googlehosted.l.google.com	142.251.163.132	true	false		high
creativecdn.com	185.184.8.90	true	false		high
privacycollector-production-457481513.us-east-1.elb.amazonaws.com	3.228.195.183	true	false		high
widget.va1.vip.prod.criteo.com	74.119.119.150	true	false		high
ats-eks.us-west-2.dcs-online-targeting-prd.aws.oath.cloud	34.214.251.32	true	false	0%, Virustotal, Browse	unknown
m.deepintent.com	38.91.45.7	true	false	0%, Virustotal, Browse	unknown
dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com	52.41.168.67	true	false		high
dbrd449anfbv4.cloudfront.net	18.164.131.113	true	false		high
pixel-sync.sitescout.com	34.36.216.150	true	false		high
d2ctznuk6ro1vp.cloudfront.net	99.84.208.102	true	false		high
ssum-sec.casalemedia.com	172.64.151.101	true	false		high
gob-sv3.pubmnet.com	204.237.133.116	true	false	0%, Virustotal, Browse	unknown
googleads.g.doubleclick.net	172.253.122.156	true	false		high
prebid-ny.casalemedia.com	192.40.39.248	true	false		high
match-us-east-1-ecs.sharethrough.com	44.209.20.160	true	false		high
mid.rkdms.com	34.193.223.137	true	false	0%, Virustotal, Browse	unknown
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	0%, Virustotal, Browse	unknown
hb.yahoo.net	23.43.243.35	true	false		high
i.ctnsnet.com	35.186.193.173	true	false		high
iad-2-sync.go.sonobi.com	69.166.1.34	true	false		high
spug-nje1pb.pubmnet.com	207.65.37.182	true	false	0%, Virustotal, Browse	unknown
tps-ue1.doubleverify.com	34.117.228.201	true	false		high
ping.chartbeat.net	44.212.89.82	true	false	0%, Virustotal, Browse	unknown
cs550162656.adn.psicdn.net	152.195.55.192	true	false	0%, Virustotal, Browse	unknown
core.iprom.net	195.5.165.20	true	false	0%, Virustotal, Browse	unknown
tsdtocl.com	151.101.65.44	true	false	1%, Virustotal, Browse	unknown
idsync.rlcdn.com	35.244.154.8	true	false		high
b.scorecardresearch.com	18.238.49.124	true	false	0%, Virustotal, Browse	unknown
rtb.adentifi.com	54.236.94.254	true	false	1%, Virustotal, Browse	unknown
ad.mrtnsvr.com	34.102.163.6	true	false	0%, Virustotal, Browse	unknown
lg1.hb.yahoo.net	23.43.243.50	true	false		high
sync.srv.stackadapt.com	54.156.138.144	true	false		high
synchroscript.deliveryengine.adswizz.com	18.238.55.58	true	false		high
thrtle.com	34.225.72.47	true	false	0%, Virustotal, Browse	unknown
io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	52.54.190.52	true	false		high
pugm-nje1.pubmnet.com	207.65.37.181	true	false	0%, Virustotal, Browse	unknown
pixel.tapad.com	34.111.113.62	true	false		high
cs.lkqd.net	69.20.43.192	true	false	0%, Virustotal, Browse	unknown
pippio.com	107.178.254.65	true	false		high
sync.ipredictive.com	52.86.217.207	true	false	0%, Virustotal, Browse	unknown
gob-pairb-nje1.pubmnet.com	207.65.37.179	true	false	0%, Virustotal, Browse	unknown
prod-rotation-v2.guce.aws.oath.cloud	34.227.4.2	true	false	0%, Virustotal, Browse	unknown
s.amazon-adsystem.com	52.46.151.131	true	false		high
ad.doubleclick.net	172.253.63.149	true	false		high
js-agent.newrelic.com	162.247.243.39	true	false		high
m.hb.yahoo.net	34.111.85.214	true	false		high
ipac.ctnsnet.com	35.186.193.173	true	false		high
geo-atsv2.media.g03.yahoodns.net	66.218.87.15	true	false	0%, Virustotal, Browse	unknown
outspot2-ams.adx.opera.com	82.145.213.8	true	false		high
ib.anycast.adnxs.com	68.67.160.117	true	false		high
edge.gycpi.b.yahoodns.net	69.147.92.12	true	false	0%, Virustotal, Browse	unknown
us01.z.antigena.com	40.76.134.238	true	false	0%, Virustotal, Browse	unknown
matching.truffle.bid	23.88.86.2	true	false	0%, Virustotal, Browse	unknown
uipus.semasio.net	50.57.31.206	true	false		high
jsdelivr.map.fastly.net	151.101.129.229	true	false	0%, Virustotal, Browse	unknown
ncp-gw-sports.g03.yahoodns.net	74.6.231.18	true	false		unknown
jelly.mdhv.io	216.239.32.21	true	false		unknown
s.dsp-prod.demandbase.com	34.96.71.22	true	false		high
d20qwf0wrdtevy.cloudfront.net	13.249.39.110	true	false		high
livepixel-production.bln.liveintent.com	44.197.69.112	true	false		high
me-ycpi-cf-www.g06.yahoodns.net	69.147.92.12	true	false		unknown
sync.crwdcntrl.net	34.232.211.121	true	false		high
cdnjs.cloudflare.com	104.17.25.14	true	false		high
cm.g.doubleclick.net	172.253.62.157	true	false		high
pug-vac.pubmnet.com	8.28.7.83	true	false		unknown
ds-pr-bh.ybp.gysm.yahoodns.net	44.195.186.221	true	false		unknown
idaas-ext.cph.liveintent.com	107.22.223.168	true	false		high
sync.1rx.io	69.194.240.13	true	false		high
cdn-content.ampproject.org	142.251.163.132	true	false		high
us-u.openx.net	35.244.159.8	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://s.yimg.com/os/yaft/yaft-0.3.22.min.js	false		high
https://s.yimg.com/uc/fin/img/logo192x192.png	false		high
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=81&gdpr=0&external_user_id=fACR1npTldFnUsSFfwaM1HNUkdJnUpSCeVLXvzrJ	false		high
https://pixel-sync.sitescout.com/dmp/pixelSync?nid=48&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	false		high
https://s0.2mdn.net/sadbundle/473513299895995753/images/bg3.jpg	false		high
https://s0.2mdn.net/sadbundle/15721520725271677474/index.html?e=69&leftOffset=0&topOffset=0&c=AV9BhrZqea&t=1&renderingType=2&ev=01_250	false		high
https://s.yimg.com/cv/apiv2/finance/fonts/GT-America-Condensed-Bold.woff2	false		high
https://help.yahoo.com/kb/api/v1/contact/getproductsdata	false		high
https://sync.targeting.unrulymedia.com/csync/RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005?redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3D56551%26ovsid%3DRX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005	false		high
https://finance.yahoo.com/assets/_app/immutable/chunks/Image.DyHyi9jI.js	false		high
https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=	false		high
https://s.yimg.com/pv/games/images/JustWords_Spring_600x400.png	false		high
https://ups.analytics.yahoo.com/ups/58739/cms?partner_id=BLKAI&orig=ono	false		high
https://d.agkn.com/pixel/2387/?ct=US&st=&city=0&dma=10&zp=&bw=4&che=2841514280&col=31411294,5071708,388507207,581726800,212200008	false		high
https://rp.liadm.com/j?dtstmp=1711672943550&did=did-004f&se=e30&duid=5fb552a76ef3--01ht3tgrdyh133kh4xvpvzxaty&tv=8.38.0&pu=https%3A%2F%2Ffinance.yahoo.com%2F&us_privacy=1-N-&wpn=prebid&gdpr=0&cd=.com	false		high
https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156078&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&predirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dpub%26refUrl%3D%26vid%3D16729006893546744890180387000V10%26axid_e%3D%26ovsid%3D%0A	false		high
https://geo.yahoo.com/p?s=1183300002&t=sT8N5JiQoVRnBIKB,0.30088379441672575&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03fin-neo-10%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03jJkrGisrIGSMlYj6%04_w%03finance.yahoo.com%2F%04colo%03ir2%04lang%03en-US%04mrkt%03us%04navtype%03server%04site%03finance%04ver%03nimbus%04pt%03home%04abk%03%04auth_state%03signed_out%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031711672939%04A_prems%03208%04_E%03dwell%04_ts%031711672939%04_ms%03210%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031	false		high
https://opus.analytics.yahoo.com/tag/opus-frame.html?referrer=https%3A%2F%2Fwww.yahoo.com%2F&tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb&axids=gam%3Dy-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A%26dv360%3DeS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B%26ydsp%3Dy-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A%26tbla%3Dy-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1	false		high
https://geo.yahoo.com/p?s=1183300002&t=exg8KrWqW9gyFkfw,0.4149718507109821&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03fin-neo-10%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03jJkrGisrIGSMlYj6%04_w%03finance.yahoo.com%2F%04colo%03ir2%04lang%03en-US%04mrkt%03us%04navtype%03server%04site%03finance%04ver%03nimbus%04pt%03home%04abk%03%04auth_state%03signed_out%04A_utm%03%7B%22perf_cls%22%3A0.013%2C%22perf_cls_rating%22%3A%22good%22%2C%22perf_cls_elmt%22%3A%22li%22%2C%22perf_cls_id%22%3A%22story-item%20headlineFz-small%20svelte-th214y%22%2C%22perf_cls_slk%22%3A%22US%20takes%20another%20step%20to%20stem%20the%20flow%20of%20technology%20to%20Russia%20for%20weapons%20Reuters%20%E2%80%A2%2043%20minutes%20ago%22%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031711672947%04_ms%03073%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031	false		high
https://finance.yahoo.com/assets/_app/immutable/chunks/MenuSurface.DcbYJDWR.js	false		high
https://geo.yahoo.com/p?s=1183300100&t=vXRLExxj0ryXjhUg,0.13267599808161767&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Ffinance.yahoo.com%2F&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03fin-neo-10%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03MQ9KJ8FkSnGj7TW6%04_w%03finance.yahoo.com%2Fnews%2Fmicrosoft-backed-rubrik-ready-file-231532821.html%04_rid%031gs71p9j0c3ji%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03finance%04uh_vw%030%04navtype%03server%04p_hosted%03hosted%04pcp%03Katie%20Roof%20and%20Amy%20Or%04pct%03story%04pd%03non_modal%04pstaid%03c4ca485d-e256-3992-a078-f620bc1e39ae%04pstaid_p%03c4ca485d-e256-3992-a078-f620bc1e39ae%04pstcat%03business%04pt%03content%04redirect%03%04ver%03article-optin%04auth_state%03signed_out%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031711672966%04A_prems%03724%04_E%03dwell%04_ts%031711672966%04_ms%03785%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031	false		high
https://bam.nr-data.net/jserrors/1/NRBR-8d654786049c463f253?a=772319297&sa=1&v=1.246.1&t=Unnamed%20Transaction&rst=21738&ck=0&s=0&ref=https://finance.yahoo.com/	false	Avira URL Cloud: safe	unknown
https://www.google.com/ads/measurement/l?ebcid=ALh7CaQc3MJvBvuU4voT2OJH0NZshSOt80Iw6IMbagE-vWl2xSkYzcHTOo2OTAXwEyJZLCtZmtMCXCyeKt8eOQytwz4fj8Pu4g	false		high
https://tpsc-ue1.doubleverify.com/event.png?impid=f6401e7fd4004956be533ce8a493d3fa&flavor=1&gdpr=&gdpr_consent=&yld_phnpms=32867&eoid=28&sdf=67108900&tmet=32869	false		high
https://bam.nr-data.net/events/1/NRJS-28dd4dd46c9904028da?a=699093269&v=1.253.0&to=MwFUYENWWEZQVUxeWQpLZURDXlhScllWQ0QLCFpRQxhNRUNZXEJVECtEZFBFQltURAIZHRlEHnN0Yx8%3D&rst=9190&ck=0&s=49bce6ab9d5d1708&ref=https://help.yahoo.com/kb/account&hr=0	false	Avira URL Cloud: safe	unknown
https://finance.yahoo.com/manifest.json	false		high
https://ssp-sync.criteo.com/user-sync/redirect?profile=73&gdprapplies=0&gdpr=&gpp=DBAA&gpp_sid=-1	false		high
https://finance.yahoo.com/assets/_app/immutable/chunks/SkeletonLoader.CyQaBkvN.js	false		high
https://s.yimg.com/uc/finance/dd-site/modules/css/react-finance.NotificationAlert.atomic.ltr.e8b3a341599a5908bfac693d1ed5dba8.min.css	false		high
https://s.yimg.com/uc/finance/nimbus/_app/immutable/nodes/0.DMSMgB-K.js	false		high
https://ups.analytics.yahoo.com/ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN	false		high
https://geo.yahoo.com/p?s=1183300002&t=jfnYqJY1eUoCgoC9,0.001016982825887025&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03fin-neo-10%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03jJkrGisrIGSMlYj6%04_w%03finance.yahoo.com%2F%04colo%03ir2%04lang%03en-US%04mrkt%03us%04navtype%03server%04site%03finance%04ver%03nimbus%04pt%03home%04abk%03%04auth_state%03signed_out%04A_utm%03%7B%22perf_inp%22%3A184%2C%22perf_inp_rating%22%3A%22good%22%2C%22perf_inp_elmt%22%3A%22h3%22%2C%22perf_inp_id%22%3A%22clamp%20tw-line-clamp-none%20tw-leading-5%20svelte-13zydns%22%2C%22perf_inp_slk%22%3A%22Microsoft-Backed%20Rubrik%20is%20ready%20to%20file%20next%20week%20for%20IPO%22%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031711672947%04_ms%03076%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031	false		high
https://sync.crwdcntrl.net/qmap?c=1389&tp=STSC&tpid=316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553%26partner_url%3Dhttps%253A%252F%252Fr.casalemedia.com%252Frum%253Fcm_dsp_id%253D64%2526external_user_id%253D316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553%2526gdpr%253D0%2526gdpr_consent%253D	false		high
https://udc.yahoo.com/v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1183300100&yhlCT=2&yhlBTMS=1711672952001&yhlClientVer=3.53.39&yhlRnd=0b7qxCFCvyE4DXS3&yhlCompressed=0	false		high
https://tsdtocl.com/	false	URL Reputation: safe	unknown
https://finance.yahoo.com/assets/_app/immutable/chunks/RMP.zPPn0o8p.js	false		high
https://finance.yahoo.com/assets/_app/immutable/chunks/Button.C10y2YT5.js	false		high
https://geo.yahoo.com/p?s=1183300002&t=f625lFXYzAGUmvCJ,0.5501905575835071&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03fin-neo-10%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03jJkrGisrIGSMlYj6%04_w%03finance.yahoo.com%2F%04colo%03ir2%04lang%03en-US%04mrkt%03us%04navtype%03server%04site%03finance%04ver%03nimbus%04pt%03home%04abk%03%04auth_state%03signed_out%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031711672939%04A_prems%03037%04_E%03dwell%04_ts%031711672939%04_ms%03046%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031	false		high
https://ups.analytics.yahoo.com/ups/55940/sync?_origin=1&redir2=true&uid=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB&gdpr_consent=&us_privacy=1YNN&gdpr=&gpp=DBAA&gpp_sid=-1	false		high
https://noa.yahoo.com/p?s=1183300100&t=1711672955142&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=finance&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=fin-neo-10&rid=1gs71p9j0c3ji&limitedAds=false&NPA=false&pd=non_modal&pt=content&id=sda-LDRB3-iframe&isRefresh=false&loc=btm_center&renderCount=1&status=succeeded	false		high
https://consent.cmp.oath.com/version/6.4.1/cmp.js	false		high
https://finance.yahoo.com/assets/_app/immutable/nodes/2.C4PT79rj.js	false		high
https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}	false		high
https://s.yimg.com/iu/api/res/1.2/UuHHM1oauLR2GekQLrmVqw--~B/YXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD03Mjt3PTcy/https://s.yimg.com/cv/apiv2/default/ncaab/20181213/500x500/illinois_wbg.png	false		high
https://s.yimg.com/aaq/wf/wf-beacon-1.3.4-modern.js	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=ca57c23d-569f-46f3-a577-3e6f6bd561b5&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy=#US_PRIVACY	false		high
https://finance.yahoo.com/assets/_app/immutable/chunks/Lazy.CSkNu4FG.js	false		high
https://display.bidder.taboola.com/OpenRTB/TaboolaHB/auction?publisher=1635758	false		high
https://s.yimg.com/cv/apiv2/sports/fonts/2022/YahooSansCondensed-VF-Web.woff2	false		high
https://www.yahoo.com/manifest_desktop_us.json	false		high
https://hb.yahoo.net/cksync.php?cs=1&type=58267&ovsid=969751699754991983	false		high
https://noa.yahoo.com/p?s=2023538075&t=1711672894896&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=2vl5n89j0c3hk&limitedAds=false&NPA=false&pd=unknown&pt=home&id=sda-MON2-iframe&isRefresh=false&loc=mid_right_c&renderCount=1&status=succeeded	false		high
https://ap.lijit.com/pixel?a=0&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dsov%26ovsid%3D%24UID%26axid_e%3D&sovrn_retry=true	false		high
https://x.bidswitch.net/sync?ssp=google&google_gid=CAESEKDgkTaCKFHaUMrKUU3OXqs&google_cver=1&google_push=AXcoOmRxa6_8b72zeDlJWePL86AZ0_9LJ1guFJqZ3U8JF8FqZFGhjQD6THGCZRWKs1UmxgmGHuBB2m_mE7UgUQsLQXcUo8ap25-SRg	false	Avira URL Cloud: safe	unknown
https://finance.yahoo.com/assets/_app/immutable/chunks/loadPredefinedListDetail.DdUHDKEF.js	false		high
https://api.taboola.com/1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8	false		high
https://rtb.adentifi.com/CookieIndex?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	false	Avira URL Cloud: safe	unknown
https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@	false		high
https://s0.2mdn.net/879366/Enabler_01_247.js	false		high
https://s0.2mdn.net/sadbundle/12047850685630377878/images/model.png	false		high
https://dsum-sec.casalemedia.com/crum?cm_dsp_id=17&external_user_id=P1GEqyyk_OouTnS49Tqs&puid=	false		high
https://consent.cmp.oath.com/cmpStub.min.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://herhoopstats.com/stats/ncaa/research/team_single_seasons/?min_season=2024&max_season=2024&di	chromecache_522.2.dr, chromecache_1020.2.dr	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.woff)	chromecache_1250.2.dr	false		high
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.woff2	chromecache_688.2.dr, chromecache_568.2.dr	false		high
https://s.yimg.com/ny/api/res/1.2/_OLz7jpG95Ib4w_R5JeE3Q--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE5MjA7aD0xMDgwO	chromecache_576.2.dr	false		high
https://staging.api.shopinsync.com	chromecache_782.2.dr	false	Avira URL Cloud: safe	unknown
http://commercialtype.com/eula	chromecache_688.2.dr	false		high
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.eot	chromecache_688.2.dr, chromecache_568.2.dr	false		high
https://www.tennessean.com/story/news/religion/2021/05/27/god-bless-usa-bible-lee-greenwood-publishe	chromecache_576.2.dr, chromecache_1174.2.dr	false		high
https://s.yimg.com/pj/sh/202010261751/css/fonts/yahoo-serif/YahooSerifDisplay-Extrabold-Web.eot	chromecache_568.2.dr	false		high
https://s.yimg.com/ny/api/res/1.2/PBaV2UU_4QAHwGdCGpOBaA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjg0O	chromecache_522.2.dr	false		high
https://match.adsrvr.org/track/cmf/casale?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	chromecache_548.2.dr	false		high
https://apnews.com/article/north-africa-government-and-politics-hispanics-a81c6c01b6a3fe4946a41f7064	chromecache_1014.2.dr, chromecache_627.2.dr	false		high
https://s.yimg.com/zz/combo?pj/sh/20180611812/img/article3sp.png	chromecache_568.2.dr	false		high
https://s.aolcdn.com/membership/yahoo/help/icons/icon-mailrestore1.svg);	chromecache_568.2.dr	false		high
https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_twauct_desk_blue.svg)	chromecache_568.2.dr	false		high
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot	chromecache_688.2.dr, chromecache_568.2.dr	false		high
https://www.pewresearch.org/religion/religious-landscape-study/views-about-abortion/	chromecache_576.2.dr, chromecache_1174.2.dr	false		high
https://www.chevrolet.com/electric/blazer-ev?cmp=OLA_DISPLAY_%ebuy	chromecache_467.2.dr	false		high
https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpix	chromecache_526.2.dr	false		high
https://s.yimg.com/ny/api/res/1.2/EcaWs_Cp9xJ1FKg4wCorZw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY3NDtjZ	chromecache_522.2.dr	false		high
https://s.aolcdn.com/membership/yahoo/help/icons/icon-account.svg)	chromecache_568.2.dr	false		high
https://s.yimg.com/ny/api/res/1.2/V6S.nImqgoJdWCtJh22Ufw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD04Mjg7Y	chromecache_627.2.dr	false		high
https://github.com/google/safevalues/issues	chromecache_1078.2.dr, chromecache_1300.2.dr	false		high
https://twitter.com/MarchMadnessMBB/status/1773496572422107256?ref_src=twsrc%5Etfw	chromecache_1014.2.dr, chromecache_627.2.dr	false		high
https://search.yahoo.com/search?p=Gavin%20Newsom	chromecache_1014.2.dr, chromecache_627.2.dr	false		high
https://platform.twitter.com/widgets.js	chromecache_1192.2.dr	false		high
https://t.co/pbfHWlNKc3	chromecache_1014.2.dr, chromecache_627.2.dr	false		high
https://pr.ybp.yahoo.com/pr/secure/true/crid/udcDZ96Vp9XxOGN6Buqpfw/pa/1	chromecache_805.2.dr	false		high
https://www.latimes.com/sports/usc/story/2024-03-24/usc-trojans-basketball-reserve-india-otto-ncaa-g	chromecache_522.2.dr, chromecache_1020.2.dr	false		high
https://twitter.com/AmnestyNigeria/status/1768789112092270715	chromecache_576.2.dr, chromecache_1174.2.dr	false		high
https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_srch_desk_gray.svg)	chromecache_568.2.dr	false		high
https://twitter.com/TrumpDailyPosts/status/1772658279908253974	chromecache_576.2.dr, chromecache_1174.2.dr	false		high
https://s.yimg.com/ny/api/res/1.2/qF33A5CF.NPukAtJHI5Rgg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD04Mjg7Y	chromecache_627.2.dr	false		high
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff	chromecache_688.2.dr, chromecache_568.2.dr	false		high
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.woff2)	chromecache_1250.2.dr	false		high
https://shopping.yahoo.com/rdlw?merchantId=34c77505-6db4-4664-9320-2c38b4122d5e&siteId=us-sports	chromecache_522.2.dr, chromecache_1020.2.dr	false		high
https://pn.ybp.yahoo.com	chromecache_805.2.dr	false		high
https://search.yahoo.com/search?p=Hannah%20Hidalgo	chromecache_522.2.dr, chromecache_1020.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
152.195.55.192	cs550162656.adn.psicdn.net	United States	15133	EDGECASTUS	false
104.18.24.173	s.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
34.95.69.49	i.clean.gg	United States	15169	GOOGLEUS	false
35.236.220.17	um.simpli.fi	United States	15169	GOOGLEUS	false
34.194.241.212	unknown	United States	14618	AMAZON-AESUS	false
151.101.193.44	unknown	United States	54113	FASTLYUS	false
195.244.31.11	visitor-usa02.omnitagjs.com	France	63140	IGUANA-WORLDWIDEUS	false
34.198.123.133	unknown	United States	14618	AMAZON-AESUS	false
69.90.254.78	ums.acuityplatform.com	Canada	13768	COGECO-PEER1CA	false
69.147.92.12	edge.gycpi.b.yahoodns.net	United States	14777	INKTOMI-LAWSONUS	false
69.147.92.11	unknown	United States	14777	INKTOMI-LAWSONUS	false
151.101.1.44	tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.65.44	tsdtocl.com	United States	54113	FASTLYUS	false
52.86.217.207	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
3.162.125.83	d9z32kqpe67oo.cloudfront.net	United States	16509	AMAZON-02US	false
23.43.243.147	unknown	United States	16625	AKAMAI-ASUS	false
52.23.99.235	unknown	United States	14618	AMAZON-AESUS	false
23.88.86.2	matching.truffle.bid	United States	18978	ENZUINC-US	false
23.43.243.145	unknown	United States	16625	AKAMAI-ASUS	false
18.238.55.58	synchroscript.deliveryengine.adswizz.com	United States	16509	AMAZON-02US	false
209.204.229.30	a5589.casalemedia.com	Canada	27381	CASALE-MEDIACA	false
192.229.211.36	cs629.wpc.lambdacdn.net	United States	15133	EDGECASTUS	false
216.22.16.68	unknown	United States	30633	LEASEWEB-USA-WDCUS	false
54.81.188.163	rtb.gumgum.com	United States	14618	AMAZON-AESUS	false
38.98.69.175	pmp.mxptint.net	United States	174	COGENT-174US	false
142.251.163.99	www.google.com	United States	15169	GOOGLEUS	false
34.200.65.202	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	United States	14618	AMAZON-AESUS	false
52.20.213.72	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
3.214.164.33	unknown	United States	14618	AMAZON-AESUS	false
34.102.163.6	ad.mrtnsvr.com	United States	15169	GOOGLEUS	false
54.225.229.4	unknown	United States	14618	AMAZON-AESUS	false
54.236.72.150	unknown	United States	14618	AMAZON-AESUS	false
23.43.243.168	unknown	United States	16625	AKAMAI-ASUS	false
23.43.243.169	unknown	United States	16625	AKAMAI-ASUS	false
68.67.160.26	unknown	United States	29990	ASN-APPNEXUS	false
23.43.243.50	lg1.hb.yahoo.net	United States	16625	AKAMAI-ASUS	false
44.195.161.142	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
3.222.105.150	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.251.163.149	unknown	United States	15169	GOOGLEUS	false
142.251.163.148	s0.2mdn.net	United States	15169	GOOGLEUS	false
74.119.119.73	ssp-sync.va1.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
40.76.134.238	us01.z.antigena.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
152.199.24.48	cs964199420.wpc.mucdn.net	United States	15133	EDGECASTUS	false
52.54.190.52	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
107.21.29.170	unknown	United States	14618	AMAZON-AESUS	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
207.65.37.179	gob-pairb-nje1.pubmnet.com	United States	6203	ISDN-NETUS	false
142.251.163.154	unknown	United States	15169	GOOGLEUS	false
3.230.217.116	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud	United States	14618	AMAZON-AESUS	false
142.251.163.155	unknown	United States	15169	GOOGLEUS	false
34.238.61.171	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
35.214.238.211	envoy-hl.envoy-csync1.core-b8mf.ov1o.com	United States	19527	GOOGLE-2US	false
104.18.38.76	js-sec.indexww.com	United States	13335	CLOUDFLARENETUS	false
104.18.36.155	dsum.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
18.238.49.124	b.scorecardresearch.com	United States	16509	AMAZON-02US	false
207.65.37.182	spug-nje1pb.pubmnet.com	United States	6203	ISDN-NETUS	false
207.65.37.181	pugm-nje1.pubmnet.com	United States	6203	ISDN-NETUS	false
52.202.181.167	crb.kargo.com	United States	14618	AMAZON-AESUS	false
18.160.37.10	d2c0xhqyhmtkod.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
54.225.222.132	unknown	United States	14618	AMAZON-AESUS	false
82.145.213.8	outspot2-ams.adx.opera.com	United Kingdom	39832	NO-OPERANO	false
44.238.214.105	prod-alb-streamer-436505840.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
66.218.84.137	ds-global3.l7.search.ystg1.b.yahoo.com	United States	26101	YAHOO-3US	false
68.67.178.10	unknown	United States	29990	ASN-APPNEXUS	false
172.64.151.101	r.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
142.251.167.149	unknown	United States	15169	GOOGLEUS	false
44.222.46.243	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.251.167.148	unknown	United States	15169	GOOGLEUS	false
195.5.165.20	core.iprom.net	Slovenia	44968	IPROM-ASSI	false
34.110.207.99	rtb-cache.hb.yahoo.net	United States	15169	GOOGLEUS	false
192.184.68.166	global.px.quantserve.com	United States	27281	QUANTCASTUS	false
23.43.243.136	unknown	United States	16625	AKAMAI-ASUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false
52.20.162.91	unknown	United States	14618	AMAZON-AESUS	false
23.43.243.43	unknown	United States	16625	AKAMAI-ASUS	false
52.207.168.130	unknown	United States	14618	AMAZON-AESUS	false
44.212.89.82	ping.chartbeat.net	United States	14618	AMAZON-AESUS	false
54.230.244.12	unknown	United States	16509	AMAZON-02US	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
35.186.193.173	i.ctnsnet.com	United States	15169	GOOGLEUS	false
151.101.129.44	unknown	United States	54113	FASTLYUS	false
34.193.223.137	mid.rkdms.com	United States	14618	AMAZON-AESUS	false
35.169.97.227	unknown	United States	14618	AMAZON-AESUS	false
50.17.145.44	prod-us-oath-lb-api-1578944270.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
172.253.115.132	unknown	United States	15169	GOOGLEUS	false
69.194.240.13	sync.1rx.io	United States	6336	TURN-US-ASNUS	false
34.198.209.31	unknown	United States	14618	AMAZON-AESUS	false
13.249.39.110	d20qwf0wrdtevy.cloudfront.net	United States	16509	AMAZON-02US	false
54.236.94.254	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
3.214.19.47	unknown	United States	14618	AMAZON-AESUS	false
23.43.243.35	hb.yahoo.net	United States	16625	AKAMAI-ASUS	false
54.174.153.22	unknown	United States	14618	AMAZON-AESUS	false
35.210.53.219	adizio.geo.iponweb.net	United States	19527	GOOGLE-2US	false
18.160.10.105	unknown	United States	3	MIT-GATEWAYSUS	false
38.91.45.7	m.deepintent.com	United States	174	COGENT-174US	false
34.236.83.94	unknown	United States	14618	AMAZON-AESUS	false
35.244.154.8	idsync.rlcdn.com	United States	15169	GOOGLEUS	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1417342
Start date and time:	2024-03-29 01:40:23 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://depl.pages.dev/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal84.phis.win@78/1388@674/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.yahoo.com/ Browse: https://help.yahoo.com/kb/index?locale=en_US&page=product&y=PROD_ACCT Browse: https://finance.yahoo.com/ Browse: https://sports.yahoo.com/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, MoUsoCoreWorker.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.253.63.94, 142.251.179.100, 142.251.179.139, 142.251.179.102, 142.251.179.113, 142.251.179.138, 142.251.179.101, 142.251.111.84, 172.253.62.94, 172.253.62.120, 142.251.163.95, 172.253.62.95, 142.250.31.95, 172.253.115.95, 142.251.111.95, 172.253.122.95, 142.251.167.95, 142.251.179.95, 142.251.16.95, 172.253.63.95, 40.68.123.157, 72.21.81.240, 192.229.211.108, 20.242.39.171, 23.52.161.12, 8.43.72.32, 23.212.144.208, 199.38.167.130, 151.101.2.49, 151.101.194.49, 151.101.66.49, 151.101.130.49, 8.43.72.98, 8.43.72.97, 23.39.185.111, 142.251.16.132, 142.251.167.155, 142.251.167.157, 142.251.167.154, 142.251.167.156, 172.253.115.138, 172.253.115.113, 172.253.115.101, 172.253.115.102, 172.253.115.139, 172.253.115.100, 142.251.111.113, 142.251.111.139, 142.251.111.101, 142.251.111.102, 142.251.111.100, 142.251.111.138, 142.251.179.94, 142.251.16.156, 142.251.16.157, 23.12.145.50, 23.12.145.42, 23.12.145.41, 23.12.145.49, 23.12.145.74, 23.12.145.55, 23.12.145.56, 23.12.145
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, fp4.ads.stickyadstv.com.akadns.net, 9f63816b6fa6b7ed16065f5a3df168ab.safeframe.googlesyndication.com, d.turn.com.akadns.net, uipglob.trafficmanager.net, slscr.update.microsoft.com, usersync-geo-global.usersync-prod-sas.akadns.net, clientservices.googleapis.com, tps-geo.dvgtm.akadns.net, ucs.query.yahoo.com, e9126.x.akamaiedge.net, l-0005.l-msedge.net, cdn.doubleverify.com.edgesuite.net, gocm-geo.c.appier.net.akadns.net, clients2.google.com, ocsp.digicert.com, e119011.b.akamaiedge.net, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, 02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com, rtb-csync-geo.usersync-prod-sas.akadns.net, www.gstatic.com, y.analytics.yahoo.com, fonts.googleapis.com, fs.microsoft.com, content-autofill.googleapis.com, na-east-digital-dual-active.fwgtm.akadns.net, pagead2.googlesyndication.com, 288dba5542d4223cc22e5ec4234d35e9.safeframe.googlesyndication.com, players.brightcove.net.edgekey.net,
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (596)
Category:	downloaded
Size (bytes):	511331
Entropy (8bit):	5.71888713211764
Encrypted:	false
SSDEEP:	12288:7e12rSHPSBGm98q91OOf9Ni6CG9/xuQ7PieaImmUkFBP:Edqbw+/3lfpFBP
MD5:	48C590D47C8B1868CECAB334E9A34CBE
SHA1:	5F1A9F94294EC337F657AC2EBEC1C74E097CE5B3
SHA-256:	F3756825DF5194A174B7A55EBD3B484C276766EEF21343D34B053B98ED386801
SHA-512:	24B9E42BCEBEFCB81D2DC8760256A63E84846C2A49CEE2A6B3904EB5DBA4551DBEA599E0892C7FA6674E32D6E047CA31B396ADD5467F6D3FADFE8F9B3A72A6F2
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT./.var nA=function(){return[function(M,a,q,C,W,O){return 4>(M>>((W=[2,1,9],M&101)==M&&(qT\|\|D[40](22,"Edge"),CA\|\|(qT(),CA=a),Pj.add(q,C)),W)[0]&8)&&5<=(M>>W[1]&7)&&(D[8](W[0],function(Y){S[24](28,0,"end",Y,a)},wT),t[6](W[2],!1,wT)\|\|Z[33](5)),O},function(M,a,q,C,W,O,Y,P){return 2==(M+1&(M-6<<1<(((P=[22,57,33],10)>(M<<2&12)&&10<=(M>>1&11)&&(C=new be,Y=I[24](37,C,a,q)),M&42)==M&&(Y=Hj('<textarea id="'+J[41](3,a)+'" name="'+J[41](P[2],q)+'" class="g-recaptcha-response"></textarea>')),M)&&(M-2^P[0])>=M&&(D[25](61,.a,DG)\|\|D[25](P[1],a,Sf)?C=c[P[2]](36,a):(a instanceof Ur?q=c[P[2]](32,Z[3](31,a)):(a instanceof IN?W=c[P[2]](12,t[44](70,a).toString

Chrome Cache Entry: 1001

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64001)
Category:	downloaded
Size (bytes):	64043
Entropy (8bit):	5.3069896556741405
Encrypted:	false
SSDEEP:	1536:cOwDLGfoqI7TkJvwQQP9PumY+Rj1d67RogFF0zwLDbQD9Eh/E:EpnTkJWY+RjXuogFFTDbQDy2
MD5:	E5D06F5069C5AA4CE86DFB3F1B4D3BA8
SHA1:	EF7903D727A0833CED06C7013525DB3D07D32A29
SHA-256:	67DBF47D44FD1536449149A89EE2CFD96186B1ABC028C5E0AE4D00C0F36F99FF
SHA-512:	CC54579B30AAF2C224FAAD230C0AE85C1AC341962ECC47CB9CC93B9241F2A381EA3383F80F3C527B456C6C2A788EB6EB6E62883B98AF0849E4AF123A9B926880
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/benji/benji-2.0.40.js
Preview:	!function(){"use strict";const e="undefined"!=typeof window?window:{benji:{},googletag:{cmd:[]},pbjs:{que:[]},YAHOO:{}},t=["localhost","aol.com","aol.co.uk","aol.de","autoblog.com","cricket.yahoo.sportz.io","engadget.com","yahoo.com","yahoo.com.hk","yahoo.com.tw"].map((e=>`([\\.\\w\\-]+\\.)?${e.replace(/\./g,"\\.")}`)),i=["cricket.yahoo.net"].map((e=>e.replace(/\./g,"\\."))),s=new RegExp(`^https?://(${t.concat(i).join("\|")})(:\\d+)?$`);const n="initialize",o="initialize_ack",r="initialize_i13n",a="intersect",c="render",d="resize_ad",l="start_ads",h="tab_focus",u="index",g=!0,p="DOMContentLoaded",f="bucket",m="cobrand",b="commerceArticleType",y="extractedKeyWords",_="hashtag",v="lang",E="0",S="testid",I="ncid",C="fr",w="pg_name",A="type",k="benji-premium-ad",R="abp",T="VERSION";var P,B;!function(e){e.DynamicAllocation="Dynamic Allocation",e.DirectSold="Direct Sold"}(P\|\|(P={})),function(e){e.AdTech="Ad Tech",e.House="House",e.AdX="AdX",e.Unknown="Unknown"}(B\|\|(B={}));const j={FeaturedBro

Chrome Cache Entry: 1002

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1003

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	879881
Entropy (8bit):	6.056438876713482
Encrypted:	false
SSDEEP:	24576:bm8XRJ1CSYKaQwyGqqGhmZP1Sswi7Ju6FDDCqylmN:SstXaXLDx7gQzyc
MD5:	7023DE5408FFA052A862BA84DBEDEA53
SHA1:	2DE51AB317838302A14B33180ADD0386E787D2EB
SHA-256:	FC0D81C23CC7191B8D6F9216725C78D42F81F34037C8802DF4D21556AD0F7C69
SHA-512:	9A2DC8170A4BB120B72F9346458208953F7AE7245B513814C8B4B615433CDCB64150367FC3EB95A2FB243B1C50D6DE76E3CE8B4A35300209C627A52B677B7653
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 23.0.4, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [..<!ENTITY ns_extend "http://ns.adobe.com/Extensibility/1.0/">..<!ENTITY ns_ai "http://ns.adobe.com/AdobeIllustrator/10.0/">..<!ENTITY ns_graphs "http://ns.adobe.com/Graphs/1.0/">..<!ENTITY ns_vars "http://ns.adobe.com/Variables/1.0/">..<!ENTITY ns_imrep "http://ns.adobe.com/ImageReplacement/1.0/">..<!ENTITY ns_sfw "http://ns.adobe.com/SaveForWeb/1.0/">..<!ENTITY ns_custom "http://ns.adobe.com/GenericCustomNamespace/1.0/">..<!ENTITY ns_adobe_xpath "http://ns.adobe.com/XPath/1.0/">.]>.<svg version="1.1" xmlns:x="&ns_extend;" xmlns:i="&ns_ai;" xmlns:graph="&ns_graphs;".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 48 48".. style="enable-background:new 0 0 48 48;" xml:space="preserve">.<style type=

Chrome Cache Entry: 1004

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=lkqd_dbm&google_hm=TWJEdm1vNjhKcjQ
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1005

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 1006

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3412), with no line terminators
Category:	downloaded
Size (bytes):	3412
Entropy (8bit):	5.0908215241003845
Encrypted:	false
SSDEEP:	48:YozhSx5M2PjYJakqOPyGbmq1Tk0GGbLq12k0yXD0THZHL2yVLT4hk14yIJZFOtkK:3hqjg8q1Tr9q12ryw1L2UPq1ktkNCYc
MD5:	956DABF4D28930BC42D934995B814D6D
SHA1:	D461E2FAB9B3E6F89561FEB5C2A5CBBB26198951
SHA-256:	CA9998A600267DC2431ABC077F8CF7A5476A46EE1E82D0C6F12BB17E512C3FE8
SHA-512:	6A98F3C8201E544DB161FA89E8A434B35B179F7D33446247B13EA08B43A7E79D44025524AEFDE0215827B2B2B95F8AC349712DCA00AA3073DDF2C4EE11B9F710
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-text-1.2.0-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-text",[],t):"object"==typeof exports?exports["wafer-text"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-text"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(o){if(r[o])return r[o].exports;var n=r[o]={i:o,l:!1,exports:{}};return e[o].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,o){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:o})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n

Chrome Cache Entry: 1007

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	8606
Entropy (8bit):	7.952471571900225
Encrypted:	false
SSDEEP:	192:6gwaTG0cO7BSRQhYnna4r88z/97DsQxitbKTkENxzj7J4b9X:6raTG0LCNDs6OK/jJ4RX
MD5:	D0F41D98C341B9D12EFBA1610C2E1C20
SHA1:	203C88A2D02A499977BB1CDBE1B78CFBAB8438BF
SHA-256:	886146FABFF5C7B59DC92AFC64662C0E3064B64420CFEDBD71DF2B0454BE0EB3
SHA-512:	98B108350E41AF80D3ED70DACBE9F4A27EC61823DD3026485D8B73039C1B13311A3293008C405846D2A1F8211879A875DBCFD5133B8184134C28FE592797F91E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............P..!eIDATx...X.I..& ...<...zz.g/ .........^...@B.F/b.x...+(....H..7...l."&.f.....;;;.o.....p.....p............BB.!!....@H...(...B.!}.@..(...B.!!...@H-..#HHr.....BB.!!...(@........#!.-.........r.:..$..@H. $..RK....BB.[..$$$...BB.!!..Z.@...........5....?.k....,.<R.#8.iB.N.7u0M.W..%".\9..\8{....Y.6U.... .Z....?...fw..u"...@H2;..>..n&...4....@HM..!L..tv;.............L~d.`k.........mBj.r.I..P?.Kg..G....j9.h'....V........k$m..`.h4D.SD......(.I.......0.Q.Sf.....t\.j.R...Rq%....}..(.n...u(....._.......A.)....v..0K..w.u....A..l..h.ok..G.Qz....5q..NJmp.qH.&{.M~...z8I..=....8.....".TN..X.....8I...P..s....Bk.@.{..!?..(......:/p.k..."...."...@.l.}!....\.v...Cf...A..4.M.....S=...B....Ss..9..[.....}...............\|..s..`..r.g..<Z.&........N&L..tT.........;.+.........]......X;.]....G...q=y....;U.M.G..Ze..~.....`..a:l..F..O..p;wg./.d..Gu..efr.,[. .s.I.t..A...E...K..-s...F..I..X....^z..o..^..-..G;.......c ....F.y.....OB.5...&

Chrome Cache Entry: 1008

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	508618
Entropy (8bit):	5.826069548791912
Encrypted:	false
SSDEEP:	3072:fn0nnKQD+1z8IC+uVruyX3TeQkB9nRwfi6Y4o2Vf9OMXvRoOy0UzhYEmf8ICp43/:PcPrus3TjkB9RwfOWkJW3TjFIEzruo
MD5:	37F3EA2A92C56F2F14D0FE4A53F5D0CE
SHA1:	C5A8EBBA801FF2163EC6BF26799251E89F4E00D2
SHA-256:	EE5844E7CA2430B1F45015DB996D2708BE7D0D986F2EA1A84D46643815BA4535
SHA-512:	FB8999809CF7B2CF4096CE7F78693617090740291353F70618DB0B5CFA1135384CFD212CC941C80AEB6FE3E7B551C6001F94DE2FEE2577DD371B2758B3AF09C6
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1850420436831479&correlator=937587805797850&eid=31079957%2C31082255%2C31082224%2C31079525%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403260101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Cyfin%2Cmain%2Cdt%2Cus_yfin_main_dt_button%2Cus_yfin_main_dt_top_center%2Cus_yfin_main_dt_mid_center%2Cus_yfin_main_dt_mid_right&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F3%2F4%2F8&prev_iu_szs=120x60%2C970x250%7C728x90%7C3x1%2C320x50%7C728x90%7C970x250%2C728x90%7C970x250%2C300x250%7C300x600&fluid=0%2C0%2Cheight%2C0%2C0&ifi=1&sfv=1-0-40&fsfs=1%2C1%2C1%2C1%2C1&fsbs=1%2C1%2C1%2C1%2C1&eri=4&sc=1&cookie_enabled=1&gpic=UID%3D00000dd6af4af3ca%3AT%3D1711672933%3ART%3D1711672933%3AS%3DALNI_Ma5D7cjVdSKOPv0CZBOPKVzHKvXkg&abxe=1&dt=1711672942259&adxs=1079%2C147%2C143%2C143%2C-12245933&adys=863%2C104%2C2043%2C3129%2C-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0%7C0%7C1%7C2%7C-1&ucis=1%7C2%7C3%7C4%7C5&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Ffinance.yahoo.com%2F&vis=1&psz=249x-1%7C1263x298%7C981x4865%7C981x4865%7C300x250&msz=249x-1%7C1263x298%7C981x250%7C981x250%7C0x0&fws=516%2C516%2C4%2C4%2C644&ohw=249%2C1263%2C981%2C981%2C0&ga_vid=1925602649.1711672942&ga_sid=1711672942&ga_hid=1662308726&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtudWxsLFtbIi8yMjg4ODE1MjI3OS91cy95ZmluL21haW4vZHQvdXNfeWZpbl9tYWluX2R0X2J1dHRvbiIsW11dLFsiMjI4ODgxNTIyNzkvdXMveWZpbi9tYWluL2R0L3VzX3lmaW5fbWFpbl9kdF90b3BfY2VudGVyIixbXV0sWyIvMjI4ODgxNTIyNzkvdXMveWZpbi9tYWluL2R0L3VzX3lmaW5fbWFpbl9kdF9taWRfY2VudGVyIixbXV0sWyIvMjI4ODgxNTIyNzkvdXMveWZpbi9tYWluL2R0L3VzX3lmaW5fbWFpbl9kdF9taWRfcmlnaHQiLFtdXV1dLG51bGwsM10.&dlt=1711672925306&idt=16514&ppid=792d345954386974644532754a6e757158524b68376753365f4577535449754773527e41&prev_scp=loc%3Ddock_button%7Cloc%3Dtop_center%7Cloc%3Dmid_center%7Cloc%3Dmid_center_2%7Cloc%3Dmid_right&cust_params=abk%3D0%26bucket%3Dfin-neo-10%26cobrand%3Dnone%26colo%3Dir2%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3DUS%26site%3Dfinance%26ver%3Dnimbus%26pt%3Dhome%26spaceid%3D1183300002%26axid%3DPEWTIWKUHBUXIZCFGJ2UU3TVOFMFES3IG5TVGNS7IV3VGVCJOVDXGUT6IE%26bka%3D0&adks=2185838734%2C4083272920%2C198366328%2C2321894520%2C398799022&frm=20&eo_id_str=ID%3De0237ccb140a7e71%3AT%3D1711672933%3ART%3D1711672933%3AS%3DAA-Afja3p4p1XDxKa4M76qE0J9Go
Preview:	{"/22888152279/us/yfin/main/dt/us_yfin_main_dt_button":["html",0,null,null,0,0,0,1,0,null,null,null,null,[["ID=40ad7269c65468b3:T=1711672943:RT=1711672943:S=ALNI_MZcPq38mDmuhxWyqrUq2dVeL_YS-Q",1745368943,"/","yahoo.com",1]],null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CNSIkc6emIUDFQMFTwgd9MEI8A",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qMOWcYn3h2qkM4sDIvHH7s4MmhgvF92iqg41OeH3DmHRTIFxYfggVnOmEQKqljzd8FNyw3AoCz3kAiE",null,null,null,null,null,null,null,[]]}..{"22888152279/us/yfin/main/dt/us_yfin_main_dt_top_center":["html",0,null,null,1,250,970,0,1,null,null,1,1,[["ID=40ad7269c65468b3:T=1711672943:RT=1711672943:S=ALNI_MZcPq38mDmuhxWyqrUq2dVeL_YS-Q",1745368943,"/","yahoo.com",1]],[138462851948],[6275051704],[5285812218],[3186246143],[539868],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CN6Sk86emIUDFQMF

Chrome Cache Entry: 1009

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2959
Entropy (8bit):	7.494079608713381
Encrypted:	false
SSDEEP:	48:BbV22ZNkE4gBYP6I1vTh9SIcQHLPsV5/vB+s3RY+QmpAMFaWGU:BJrJ49pRTbcQravB+aO+Qmp7FLGU
MD5:	5CFC2C12DF24283D935BA80016891118
SHA1:	54C02B392D1E34359795D6DE2F52AD9E6DD5E369
SHA-256:	3B38F8EA727B4606E00E1451550AE7F4A02CCA11AED412EA3D8FA21D1F6472B9
SHA-512:	2A3AAC97B225D1134B321576B90D9FF812AFF0517D9D7A3506AA62A8981831A22AC84CFC002D9F8EA3D85E8DF695F3EF71C10D51045F8D6002BF6702434B8B1F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X..........):...0PLTE................................................c.M@....tRNS..wD.f..".3..U.......IDATx.........................................................................`v.-t.(.._.e....A....."Jh)...{)E..j')..@.Z..(..PH".KJ..e.._s.u......5...2.......b.X,...b.X,...b.X,...b.X,...b.X,...b.X,.....H......t!I....Ye .G...Z..B...qHV....5... .8d7.Z3,+9...Z.s0YB...x4M..<4.B.dD..\.A....@....<...1..W.^x.#.C...IXV#~EV.G.....{t.L."L..xul..u2........".C~..E=Y..s..,...q..4.9.h...T...R, .8\|P. ....V_......,...\|cT.2..w8\....\|.7d5.-L.Ex......[..hT..{.&..\|.o..1..]...h\|>}..<../.,..mi..R..[{.q<OO..Q;....Y....4.-.`..,E..%....h..A..u.:....J:.8'e.dPV...@..M.7'Y..,....V...,RUh...[..ak....3H ...........3d...+)(..k$.....e[...j[...^p]@.Qm.GDV..e... ..>4.W...\|=x..a..R..<.......!..ev........rr. .p..J.......t.9?EXV...A...S..,.../.......aU..o.]j)....X\|#............4._...r.....\|..?..r.(...UY....n.lk.*.>_.7.'@.~..=.\|(.W..u....Y..)KW..[.e5.6$8.d

Chrome Cache Entry: 1010

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	downloaded
Size (bytes):	101365
Entropy (8bit):	5.293330286038558
Encrypted:	false
SSDEEP:	1536:uf5j69dg5MPV0aEA/w1uc6UesqY+NBcU23zw4IOZ78Jxw:uB245MN0K/w8WeKzZ8Jxw
MD5:	4A6ECB6DA3C4E819773B0E3331FF5E7A
SHA1:	32CA19165F56AD45DF3A60882D985DA4DD34E38B
SHA-256:	E72E22C9FD71D91300781105175767A7275AA469946F7F72CDDA5ADAA5C548E1
SHA-512:	F6AF66176E588B15333A5D21E80FA4620DF430ABF59E4D9AD05C74F64C827E03B1B7C92C8CE5BFF70DAD25CCD707BE5FA47B72F37506860D7A41962A1F9C4650
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-spa-1.253.0.min.js
Preview:	/! For license information please see nr-spa-1.253.0.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.253.0.PROD"]=self["webpackChunk:NRBA-1.253.0.PROD"]\|\|[]).push([[111],{9139:(e,t,i)=>{let s;i.d(t,{m:()=>r});const n=new Promise((e=>{s=e})),r=Object.freeze({onReplayReady:s,sessionReplayInitialized:n})},1199:(e,t,i)=>{i.d(t,{R:()=>r,z:()=>n});var s=[];function n(e){if(0===s.length)return!0;if(void 0===e.hostname)return!1;for(var t=0;t<s.length;t++){var i=s[t];if("*"===i.hostname)return!1;if(a(i.hostname,e.hostname)&&o(i.pathname,e.pathname))return!1}return!0}function r(e){if(s=[],e&&e.length)for(var t=0;t<e.length;t++){let i=e[t];if(!i)continue;0===i.indexOf("http://")?i=i.substring(7):0===i.indexOf("https://")&&(i=i.substring(8));const n=i.indexOf("/");let r,a;n>0?(r=i.substring(0,n),a=i.substring(n)):(r=i,a="");let[o]=r.split(":");s.push({hostname:o,pathname:a})}}function a(e,t){return!(e.length>t.length)&&t.indexOf(e)===t.length-e.length}function o(e,t){return 0===e.in

Chrome Cache Entry: 1011

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://js-sec.indexww.com/ht/htw-pixel.gif?ZgYOPsAoJI0AAAi4ADlhawAA%261617=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1012

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (900)
Category:	downloaded
Size (bytes):	1535
Entropy (8bit):	5.290837073408238
Encrypted:	false
SSDEEP:	24:H0eKipeEn0WXnGiwFwc34amlE7ELHnv9ja2bWIAGVY56M4DXJBv28uMtS88n7EJR:Hze8vXntwFwG4amlEgTv9jZ1/N2+tSp+
MD5:	75FAEED7B56D7D0D43D2075AA7E1C6B5
SHA1:	E53739B31B88E35CDDE9E4FCF610AF73C228C5F7
SHA-256:	6B733A69C0EF49A99043ECB37E48C704A4A5D7368568EB64637D6E1C6EF0B7AC
SHA-512:	3BC339FA4E877A04EBA7FEB20CD4D16E90492F5ABB2DADDCD3ADDD6392CC6FBF2FE181EC231C87A55577777EF5E55C27F63F292736295A56AE25C24AAE434AC0
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/loadVideoPlayerAssets.CVb0R9dM.js
Preview:	import{a as u,b as E,h as n}from"./commonUtil.Bb2Cnbsk.js";const V={evplayer:"https://s.yimg.com/rx/ev/builds/1.4.8/evplayer.js"},b=1,f="1.0.125",a={assets:V,manifestVersion:b,version:f},_={videoManager:"https://s.yimg.com/rb/services/video-manager/v2.0.13/video-manager.js"},P=1,g="2.0.13",o={assets:_,manifestVersion:P,version:g};async function L(t,e){var i,r,d,l;const[[v],s]=await Promise.all([u(["assets"],t),E(t)]);if(!n(s,"enableVideo")&&!n(s,"enableQSPVideo")\|\|(r=(i=window.YAHOO)==null?void 0:i.VideoPlatform)!=null&&r.VideoManager&&window.YAHOO.VideoPlatform.VideoPlayer)return;const m=[[n(s,"enableLatestEVPlayer")?"https://s.yimg.com/rx/ev/prod/evplayer.js":(d=a==null?void 0:a.assets)==null?void 0:d.evplayer,"onNimbusEVPlayerReady()"],[(l=o==null?void 0:o.assets)==null?void 0:l.videoManager,"onNimbusEVVMReady()"]];v.addAsset({blob:[`const _nimbusEvLoad={ _player: false, _vm: false };. function _nimbusSendEVLoadEvent() {. if (_nimbusEvLoad._player &

Chrome Cache Entry: 1013

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5409)
Category:	downloaded
Size (bytes):	5410
Entropy (8bit):	4.903960354261166
Encrypted:	false
SSDEEP:	48:/Rldgd/h/K5UX1C6yCNoWryXXfS8oRlJ/jLlBECP+k7h/hh2kQCcP+G/7xhGG/Q+:puy+1RNoW6oLJ/jLLDw
MD5:	36A0F45F87DC1775A7AAC9D653F20B9B
SHA1:	0C0C872D2786E1A972A2D4A6A3B42FC2B037A082
SHA-256:	C57C54FE3491C6853A0590687899D8CAB178078FD4B41E3674261367718FE5C3
SHA-512:	CDC714DC23D84128EF83997C5362D64CDC10998C01F272003B32FA6D658BB7157B2AE41FF3DB2F3C8976D66C5DB5C6AA83FAB0E4E57F75D1C9393675E9292664
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/Tooltip.CjqycB4D.css
Preview:	.itm.svelte-qe79qs{white-space:nowrap;margin:0;list-style:none;padding:.625rem var(--space-5);cursor:pointer;line-height:1.25;position:relative;justify-content:flex-start;z-index:2;display:flex;gap:var(--space-3);align-items:center;width:100%;flex-grow:1}.itm.wordWrap.svelte-qe79qs{white-space:normal;word-break:break-word}.itm[aria-selected=true].svelte-qe79qs{background-color:var(--surface1);color:var(--primary);font-weight:var(--font-bold)}.itm[aria-selected=true].svelte-qe79qs .check{display:initial}.itm.svelte-qe79qs:hover,.itm.svelte-qe79qs:focus-visible{background-color:var(--table-hover-emph);color:var(--hovered-neutral)}.itm.svelte-qe79qs:active{background-color:var(--table-selected-emph);color:var(--primary)}.itm.svelte-qe79qs .check{display:none;margin-left:auto}.container.svelte-jmq4yg{position:relative}.menuBtn.svelte-jmq4yg,.select.svelte-jmq4yg{border:var(--border-light);background-color:var(--surface4);font-weight:var(--font-bold);display:flex;justify-content:space-betwe

Chrome Cache Entry: 1014

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65480), with no line terminators
Category:	dropped
Size (bytes):	588253
Entropy (8bit):	5.5272668035278505
Encrypted:	false
SSDEEP:	12288:uVYYyGlrjYjYZjcPY5Y/jTWLYKYyjnXTY1yFlODYIYMjpLYqyOlYJR1hYmYQjdpH:21
MD5:	AA5CF6F4DEF3BD1CB14F249A31564F4D
SHA1:	1ADD84AD519A4E183825DA9CD43229EEAE42875D
SHA-256:	FD111A915344AF31EFB8B1FC5B57B0848768E189415C2F07F9FD98EA7CCC22C9
SHA-512:	05B1B439A66635C6849F5741AE8CE8B276E6BA250E5EB9E1BCD364193A4F81EC5F401C6651C2B63A6008FAA40599E9D3B17C3F7A524C6D26D86F229C726CC1E4
Malicious:	false
Reputation:	low
Preview:	{"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"news;culture;crime;legalmatters","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0770000002GZ5iAAG;revsp:reuters-finance.com;lpstaid:9667f626-9602-3f80-8f31-6786323de4e0;pt:content;pd:modal;ver:megastrm;pct:story","site_attribute":"wiki_topics=\"FTX;Telegram_%28software%29;The_Sentence;Cryptocurrency\" ctopid=\"1996000;2051500;2054000;18857489;18858989\" hashtag=\"news;1996000;2051500;2054000;18857489;18858989\" rs=\"lmsid:a0770000002GZ5iAAG;revsp:reuters-finance.com;lpstaid:9667f626-9602-3f80-8f31-6786323de4e0;pt:content;pd:modal;ver:megastrm;lu:0;pct:story\"","spaceid":"1197792446","site":"finance","enabled":true,"pos":"","showBodyAds":false,"showPhotoAds":false},"alias":"ymedia-alias:shadow=frustration-bankman-frieds-victims-hoped-184034195","canonicalUrl":"https://finance.yahoo.com/news/frustration-bankman-frieds-victims-hoped-184034195.html","categoryLabel":"Business","commentsAllowed":true,"commentsCount":

Chrome Cache Entry: 1015

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29607)
Category:	downloaded
Size (bytes):	29608
Entropy (8bit):	5.44434610386535
Encrypted:	false
SSDEEP:	768:QUjRAe3zwhMrQa2cFagwcpe3+XK9ciU1UBcOpIov/3cQ7l3aNrsnYRXjps8HJvgR:Q/hMEMK3+wdUKBJv/FL0m
MD5:	DBE46F57909B61F653DA2026D5A2522B
SHA1:	4E2BFC612FD7A3B563927DE033AA3E72D6FE0A1D
SHA-256:	DDFF05E03471F9015EC9E9D14B28643EA9B4C8583EE547BC57F78564B42FBA1B
SHA-512:	588EC0A7EF256E4B6478BE59AF0DBF1F41E42FD316A1E2D88456885DA9035091AB1BA395CECA605C9E3356278F293DAD07A8EDAEDCA7961D9FE6FCC5DE55F606
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/Tooltip.CUxnHR7T.js
Preview:	import{s as Vt,c as gt,D as lt,e as F,b as $,d as H,f as K,j as tt,i as R,O as Nt,M as I,k as U,l as j,u as bt,g as pt,a as wt,Q as St,R as de,p as N,L as X,C as Yt,v as Pe,G as he,I as kt,t as zt,h as Wt,m as ge,A as Kt,a1 as Ie}from"./scheduler.ErneftFr.js";import{S as qt,i as Bt,t as Y,g as Ve,a as J,e as ze,c as be,b as pe,m as we,d as ve}from"./index.DsErXEH0.js";import{g as jt,a as Gt}from"./spread.CgU5AtxT.js";import{C as We}from"./check.21reEWCG.js";import{I as qe}from"./Icon.CDBsrPKz.js";import{A as Be}from"./a11y-dialog.esm.CGJeMRyW.js";import{B as je}from"./Button.C10y2YT5.js";import{C as Qt}from"./expand_more.DscV4c36.js";import{b as Jt}from"./i13nUtil.0wCphNmh.js";import{v as Fe}from"./commonUtil.Bb2Cnbsk.js";function Zt(t){let e,n;return e=new qe({props:{icon:We,className:"check",size:t[4],type:"action"}}),{c(){be(e.$$.fragment)},l(i){pe(e.$$.fragment,i)},m(i,o){we(e,i,o),n=!0},p(i,o){const l={};o&16&&(l.size=i[4]),e.$set(l)},i(i){n\|\|(Y(e.$$.fragment,i),n=!0)},o(i){J(e.$$

Chrome Cache Entry: 1016

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64368)
Category:	downloaded
Size (bytes):	163320
Entropy (8bit):	5.448132011691602
Encrypted:	false
SSDEEP:	3072:9bcqf/mr5I0eVsigODnjhHJNPkOsMIm3vdLDdedy54MNu6L9OvGa:9Lf/mr5jODtOs4T
MD5:	C67E90944E9E845EFCDACC5AE769546B
SHA1:	7F2CB0FA2BA5D1103E391521DBCDD03FF7CC8EF9
SHA-256:	5FE5C26BFCB6EE8264771B706784C6CF4AC57721933D29401D7461548CD7FFF8
SHA-512:	EB267D56B37AADF37ECCAC3A650BD6507AD86C7C8B46D317200CCB5D40DF02EBD7738552239601B0571BCB5C178B62F2F04EA401183972A3C50DA6EC823E8F47
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/nodes/2.C4PT79rj.js
Preview:	function __vite__mapDeps(indexes) {. if (!__vite__mapDeps.viteFileDeps) {. __vite__mapDeps.viteFileDeps = ["../chunks/Debug.CCKTLXbE.js","../chunks/scheduler.ErneftFr.js","../chunks/index.DsErXEH0.js","../chunks/each.DufB99sH.js","../chunks/commonUtil.Bb2Cnbsk.js","../chunks/stores.CtqIvex8.js","../chunks/entry.CqbZzrN3.js","../chunks/control.CYgJF_JY.js","../chunks/Button.C10y2YT5.js","../chunks/spread.CgU5AtxT.js","../chunks/Icon.CDBsrPKz.js","../assets/Icon.5Pcv_1eF.css","../chunks/i13nUtil.0wCphNmh.js","../assets/Button.wzorZdtC.css","../chunks/expand_more.DscV4c36.js","../chunks/Tooltip.CUxnHR7T.js","../chunks/check.21reEWCG.js","../chunks/a11y-dialog.esm.CGJeMRyW.js","../assets/Tooltip.CjqycB4D.css","../chunks/close.C3ug6nNR.js","../chunks/AccordionItem.BVPgX5F7.js","../assets/AccordionItem.DZkfpZN2.css","../chunks/Link.DZ6I_oHl.js","../assets/Link.zOM28wTY.css","../chunks/Switch.DwVeRZ_H.js","../assets/Switch.C38o_CYo.css","../chunks/Tab.pR_ZxwTI.js","../chunks/Tabs.DtDGbWu_

Chrome Cache Entry: 1017

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2420), with no line terminators
Category:	downloaded
Size (bytes):	2420
Entropy (8bit):	5.7496414221120205
Encrypted:	false
SSDEEP:	48:C2BqYMCndQX5q2BqK2BqhybCYuS5rf/5CSwfhydNnqGEq:C2BqYMCneX5q2BqK2BqhybCYuS5r35P7
MD5:	7A83D98007CD63C017A081E4130DFB08
SHA1:	D18714E34192D683163749C0753EAA3B8EB34F3B
SHA-256:	3C93882D355C88BA2080A9DD791F467EE9C78D84D2DE931C2E2693963D7F7F60
SHA-512:	CA2393CC005B6C5E5D18EF6545A6C151233FC54F846D99A5821C170FB171485508FD03B784FC5CAB220FD07EFD37D23C4BDD279D10F98B932AA42284583423D4
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=64041032&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=bTZkaHGvQiuZqxOKbauU9w%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=6D366468-71AF-422B-99AB-138A6DAB94F7');PubMatic.loadAsyncImagePixel('https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx 6D366468-71AF-422B-99AB-138A6DAB94F7&rnd=RND');PubMatic.loadAsyncImagePixel('https://eb2.3lift.com/xuid?mid=7976&xuid=6D366468-71AF-422B-99AB-138A6DAB94F7&dongle=u6nf&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=NkQzNjY0NjgtNzFBRi00MjJCLTk5QUItMTM4QTZEQUI5NEY3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pu

Chrome Cache Entry: 1018

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (7928)
Category:	downloaded
Size (bytes):	7929
Entropy (8bit):	5.288802250903947
Encrypted:	false
SSDEEP:	192:fcp0Qw+IPpu9IZ8HhUpggE70204I9daz4xGodFHjAil:fxxpu9IZ8HhBgE7X04IZddAil
MD5:	95ABFA152D8D166632D700503A1033B7
SHA1:	4F2BC59070279835BF2C9688C4A6D6A9FECDB96F
SHA-256:	A6294B852A7EFA8933D1D4154DBFD7ABCE24A9D18BA97B664187DCECC5B6A80E
SHA-512:	500F336DB05D26E87E9930B6C2B4E572C3E0D3DDB96D35251C841FB39CE0F626858A4308549ECF9369A25F6B73C1E34F2050E7EA458AB0D7A21ADF551D4561BF
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/commonUtil.Bb2Cnbsk.js
Preview:	import{r as u}from"./scheduler.ErneftFr.js";import{g as l}from"./stores.CtqIvex8.js";const h={$:!0,company:!0,compare:!0,quote:!0},s="https://finance.yahoo.com",R=new Set(["US"]),C=new Set(["US"]),U="--",L="fin-neo-optin-nov",y="fin-classic-optin-nov";function I(e){var r;let t=e;if(!t)try{t=(r=m("config").getPageConfig())==null?void 0:r.csnAllowedPaths}catch{}const n={...h,...t};return new RegExp(`^/(${Object.keys(n).filter(o=>n[o]).join("\|")})`)}const P=({sku:e,ncid:t})=>{const n=new URL("checkout/v1","https://checkout.finance.yahoo.com");return e&&n.searchParams.append("sku",e),t&&n.searchParams.append("ncid",t),n.toString()},$=({scrId:e,isCustomScreener:t=!1,useSEOUrl:n=!1,useAbsoluteURL:r=!1})=>{const o=new URL(t?e?`/screener/${encodeURIComponent(e)}/new/`:"/screener/new/":n?e?`/${encodeURIComponent(e)}/`:"/screener/":e?`/screener/predefined/${encodeURIComponent(e)}/`:"/screener/",s);return r?o.toString():o.toString().replace(s,"")},T=(e,t=!1)=>{const n=new URL(`/screener/${encodeU

Chrome Cache Entry: 1019

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	68224
Entropy (8bit):	5.543732479015711
Encrypted:	false
SSDEEP:	1536:JPfPoPZl3rPqfPxpbNu34wt1XDy7AsXjSjNGnvYR9fBoSEW7:A
MD5:	86A93E213B8947E56CED05EAD86986EA
SHA1:	4FE5E47EB179B8F41442290C4BBAD2ECD0CC2AA2
SHA-256:	02A31A6E2B002510BD6D235CA03AA44E3E6F3B618B59A29C17BB4FC9B42691F9
SHA-512:	D4D1E412D243E3EEDF8C1EFE9FC52088B47FC439FD3B63AE3C0719CC85E47377AF6FD9BAD9C0216DC26AE15AC6A1C00C155D99DF950B9D9E5E3152C63194D5A6
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/fin_ms/_td/remote?m_id=react-finance.rmp&ctrl=NotificationAlert&m_mode=json&config=%7B%22mrt%22%3A%7B%22static%22%3Atrue%7D%7D
Preview:	{"assets":{"css":[{"location":"top","value":"https://s.yimg.com/uc/finance/dd-site/modules/css/react-finance.NotificationAlert.atomic.ltr.e8b3a341599a5908bfac693d1ed5dba8.min.css"}],"js":[{"location":"bottom","value":"https://s.yimg.com/aaq/wf/wf-core-1.65.0-modern.js"},{"location":"bottom","value":"https://s.yimg.com/aaq/wf/wf-rapid-1.10.8-modern.js"}]},"data":{"newCount":0,"count":50},"html":"<div><div data-test=\"notification-panel\"><h3 class=\"Pb(16px) Pt(23px) Pstart(27px)\">Notifications</h3><div><h4 class=\"Fz(14px) Py(11px) Pstart(27px) Bgc($lv1BgColor)\">Today</h4><ul data-test=\"today-notification\"><li class=\"Bgc($hoverBgColor):h Ov(a)\" name=\"0\"><a data-ylk=\"sec:notification;elm:hdln;elmt:link;itc:0;subsec:notification;pkgt:GENERAL;cpos:0\" href=\"/news/mortgage-rates-hover-near-7-174143745.html?.tsrc=fin-notif\" class=\"C($primaryColor) Td(n)\"><div class=\"Py(18px) Ov(a) Pstart(27px) Pend(30px)\"><svg class=\"W(24px) H(24px) Bxz(bb) Mend(16px) Bdrs(50%) Fl(start) D(i

Chrome Cache Entry: 1020

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	638654
Entropy (8bit):	5.545730598980308
Encrypted:	false
SSDEEP:	12288:KBY5y9liLYhyDlV1VzY5yDlz7YZYdjHgFYuYAjTLYUyElei1YGYAjoE/Yiy0lRxQ:t1lMdk1Yic4/b2KA1Cn8RS
MD5:	C9712A23FDAF8F6472E651E7429AD659
SHA1:	EDD0748D63A4DAE015660DFC7FAA14CA592227CC
SHA-256:	71B07D13675CD08E1DEDBDB5AFBF698108BAA966651DC3C0FD7EBFD9557932CF
SHA-512:	F290822B680B366298B35182C33EE7AD86062BCE9EF79C939CB59E0E6609D607275399A584A134C7DF9AE7ADCD9C62C6489AFA3C8084E4AE7350700A85EA88E0
Malicious:	false
Reputation:	low
Preview:	{"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"yscamarch;collegebasketball;basketball;sports","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0a0W00000MsLYKQA3;revsp:usa_today_sports_articles_558;lpstaid:742c2e0f-6948-3d4f-9b25-8519b485868c;pt:content;pd:modal;ver:megastrm;pct:story","site_attribute":"wiki_topics=\"Brad_Brownell;Atlantic_Coast_Conference;North_Carolina;Colorado;Los_Angeles;Armando_Bacot\" ctopid=\"2074500;2078500;2080500;2212000;2231500\" hashtag=\"yscamarch;2074500;2078500;2080500;2212000;2231500\" rs=\"lmsid:a0a0W00000MsLYKQA3;revsp:usa_today_sports_articles_558;lpstaid:742c2e0f-6948-3d4f-9b25-8519b485868c;pt:content;pd:modal;ver:megastrm;lu:0;pct:story\"","spaceid":"1197792446","site":"sports","enabled":true,"pos":"","showBodyAds":false,"showPhotoAds":false},"alias":"ymedia-alias:shadow=down-acc-think-again-conference-004546426","canonicalUrl":"https://www.usatoday.com/story/sports/ncaab/acc/2024/03/27/acc-sweet-16-teams-ncaa-tournament/7

Chrome Cache Entry: 1021

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (594)
Category:	downloaded
Size (bytes):	5311
Entropy (8bit):	5.046822701969818
Encrypted:	false
SSDEEP:	96:duegRhCpwcn4QfbE/XOZjt/r6tCrY6saTGTbAaNkYaySgoaauIfQYCSG8IrW:OhCpwcn4QfbSOttT6MU6saTGTkYaySgq
MD5:	BA0777792CE6C88CB6AC61D50F5ED420
SHA1:	096E3337C3EB08177FC61F058A0A43FE7CC486EC
SHA-256:	2CFC3D9F68235DCA692E8B8D70E2DE1F872D321133005C628D1306AC0D72F225
SHA-512:	C8D17040A8966648EE790EB91235553096BCE4050814696A6F741A8E1C7EA9233EC2CC4005C3918B507B939D3E26A812212A40B87C6CD7CB7E414A627B52D066
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	<!doctype html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport". content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">. <meta http-equiv="X-UA-Compatible" content="ie=edge">. <title>Document</title>. <script type="text/javascript">."use strict";..function _slicedToArray(arr, i) { return _arrayWithHoles(arr) \|\| _iterableToArrayLimit(arr, i) \|\| _unsupportedIterableToArray(arr, i) \|\| _nonIterableRest(); }.function _nonIterableRest() { throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); }.function _unsupportedIterableToArray(o, minLen) { if (!o) return; if (typeof o === "string") return _arrayLikeToArray(o, minLen); var n = Object.prototype.toString.call(o).slice(8, -1); if (n === "Object" && o.constructor) n = o.constructor.name; if (n === "Map" \|\| n === "Set") return Array.from(o); i

Chrome Cache Entry: 1022

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	14729
Entropy (8bit):	7.32103441716192
Encrypted:	false
SSDEEP:	192:pIIHUCD4wacWiHH1DtEO0bQjwqFCRPZPf7KR/n3gGe:v0w/xt0bgwqcRZKdw7
MD5:	B353E651B1433EB4B52EDD1AF9634ECB
SHA1:	AEF1AB8DAB4622E27190309F70038C29CCE5EB42
SHA-256:	AA2B2DA6AC8D625B4BE8EBF9C5C9D6A329BBBB9BC06A33AF4B7E7E6DC825CD92
SHA-512:	98A7FCFC493AC0AF2018D6C8558594B1CDDB190660900D82932AB06F56E6B61CC62DA8BA5FD82B6C18E1D8680DE5C0DB3B326907BE2D470A511F2F7940643807
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/13461938776524376467/images/headline1.png
Preview:	.PNG........IHDR...X.........'.4....CiCCPICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R...J5e?

Chrome Cache Entry: 1023

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11234)
Category:	downloaded
Size (bytes):	11235
Entropy (8bit):	5.210007446933706
Encrypted:	false
SSDEEP:	192:kkQq628Ch7oVunjY33W5ZWeU5E0P3v1Xq/lUdHrOEAsMoMJsyG+c/Qv0VIr:2V28ChEv36Ze601Xq/lUdHqlszMJsysu
MD5:	8DC5EEE3C30E547E3DB2AE39D7B03759
SHA1:	E80B2D8FEE6BE3B0AF1085AF99E790CB889BA444
SHA-256:	139C6D4BDE6355DE22E3F0CB28758333F6410700C2BEB045DE4858545CF376C3
SHA-512:	8BDBAFB435AD8347A5CFE99E6C284B5C2457ECE87C478FB2062DA8C3F3E217E42852F5E3AD4C7EBFFE7A9A98BB26DD920F50F3E281AE6BF66C52E0E9A807F3B5
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/scheduler.ErneftFr.js
Preview:	var U=Object.defineProperty;var J=(t,e,n)=>e in t?U(t,e,{enumerable:!0,configurable:!0,writable:!0,value:n}):t[e]=n;var f=(t,e,n)=>(J(t,typeof e!="symbol"?e+"":e,n),n);function S(){}const wt=t=>t;function K(t,e){for(const n in e)t[n]=e[n];return t}function Q(t){return t()}function Et(){return Object.create(null)}function V(t){t.forEach(Q)}function X(t){return typeof t=="function"}function vt(t,e){return t!=t?e==e:t!==e\|\|t&&typeof t=="object"\|\|typeof t=="function"}let p;function D(t,e){return t===e?!0:(p\|\|(p=document.createElement("a")),p.href=e,t===p.href)}function j(t){return t.split(",").map(e=>e.trim().split(" ").filter(Boolean))}function Tt(t,e){const n=j(t.srcset),i=j(e\|\|"");return i.length===n.length&&i.every(([s,c],r)=>c===n[r][1]&&(D(n[r][0],s)\|\|D(s,n[r][0])))}function Nt(t){return Object.keys(t).length===0}function P(t,...e){if(t==null){for(const i of e)i(void 0);return S}const n=t.subscribe(...e);return n.unsubscribe?()=>n.unsubscribe():n}function kt(t){let e;return P(t,n=>e=

Chrome Cache Entry: 1025

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 1026

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	11
Entropy (8bit):	3.459431618637298
Encrypted:	false
SSDEEP:	3:Q:Q
MD5:	981CF18CC783FEF189353F3A906D9350
SHA1:	58C21A93EFC05C58D7AF2A51B6D6314B31A7C2CA
SHA-256:	E65E9660AA2C196F986DC5145E7474E53B90278F4E4BD7FE3E230C4C95B2B260
SHA-512:	3639C72BD437041E474EF8ADC421984D0445C0992C9EFEB700A8D7F59CD0A78152999DFBFF180180BC01D5666A2046C197773399E0CA98816BB4C880DD5BA55A
Malicious:	false
Reputation:	low
URL:	https://query1.finance.yahoo.com/v1/test/getcrumb
Preview:	YS6PlBuVeHG

Chrome Cache Entry: 1027

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/casale/ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1028

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 580x326, components 3
Category:	dropped
Size (bytes):	42009
Entropy (8bit):	7.978465119940965
Encrypted:	false
SSDEEP:	768:WLX6GlfzibxwHmUSAXXgfu9gugd/wDzDcnL17155U:EX6GVzVHjiugdIDaJHU
MD5:	A1D12454637AA250DDFAC7A65E11E9EE
SHA1:	391BC635489E9FADF3740FD559067E9278AE1CEF
SHA-256:	3CE769B0DCE6E0A50E680F057984443745879F53951D04FD494B7E2D4BDCBE8C
SHA-512:	48A3AD2A05604F1A107553EA792D192B5A72F10BBB7C12154325A1E97680F0CDF7114099A52F69E6550603789D12F04701110683FD763EFA2243E56EAC2F517B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................F.D............................................P..........................!1.."AQa..2q....#BR...3b.r..$C....4Scs.....%(5du....................................2........................!1...A."Qa#2.3BRq..$.C..............?......=. e..<.U...e[..&c+.x'y..D6. q..nRR4....25.?.......'.....Y......YS5.wg..H.v}..!F......u...F....o#..C.-..U0.dm.r...V....2....%.l.......B..(.1-9p...f....dc 6:#....Y..B...%..d1.A.QV..g......#....CJ.!..x.T...a..p0.ZA!....k.a.h\.....3..E.=w....#3.....`w~..5.t..4........q..."ei.?...f.9.D........!.......l[.......#~...(.F}..tx.}..Q.v}.QT`.O....C.3...E..v...77.-.......S......w.7.)[.d..OF.ch>X'9..r.t#..xI......K.7..5......tg.B.K.....{0q.H. .q.."..H."..s.d].hI..Qv......t..rh,I.. ..H."4..ew=....&<.TQV.V..@8.M@8...e..\.#.)......i..*.d.9....Bf.A.z...m..zd@aP.#/D..).1.. .@H+..;@.d.LL.l...

Chrome Cache Entry: 1029

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.5 (Macintosh), datetime=2023:06:13 11:21:33], baseline, precision 8, 300x600, components 3
Category:	dropped
Size (bytes):	68094
Entropy (8bit):	7.7796747085946825
Encrypted:	false
SSDEEP:	1536:pt8qt8ZoI3n5g/SNc2pmodGD9HO3fW5SIKuTR1W:ptvt49X+/SNcGmoF3fTIa
MD5:	6B6876A5DCF00224E1319A56932CFDFF
SHA1:	BA515EB8F445C0BFB5B833B9B5C7CCB702B36D5D
SHA-256:	6745982B231B1C6BAAF50BC51554CEE255B464A2139CEF059C0B967349A3200B
SHA-512:	0BA1616A5EBBDDBD2C87C4210D930E12ED53A34160751D9BD723D6A6831601BE6B6B9AEBB24264E45A221F633827E6D74169ACA19C4D1ED1A77DB0CA8F2B9791
Malicious:	false
Reputation:	low
Preview:	.....oExif..MM..............................b...........j.(...........1.....!...r.2...........i....................'.......'.Adobe Photoshop 24.5 (Macintosh).2023:06:13 11:21:33...........................,...........X..............................."............(.....................2...........5.......H.......H..........Adobe_CM......Adobe.d...................................................................................................................................................P.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....;.9.w.X...l...'.S:..@\|nh]..\|...G&.YUt......n~#-unq..Q....^.....$c.._3.R....Q..`S.Qz......W.Iz!.........M.,.9...>......?........?.....pq...U...@..oT

Chrome Cache Entry: 1030

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 396x299, components 3
Category:	downloaded
Size (bytes):	4332
Entropy (8bit):	7.586011670046242
Encrypted:	false
SSDEEP:	96:NzquAE3tlhrwks8x8XgE9t9yzNB/ipxgxtJUwRo:NzquV3qA+guOzv/i07o
MD5:	444E9C16D4DBFDF9B81BA782F7625A28
SHA1:	7E3736F81C3E470A947FFA6A105FAC84F92B5D5E
SHA-256:	864AC710F0D7F56E8E1941591F441593C3B9C6949A4F479FFD3FDFFAF362DEE2
SHA-512:	C9CFD2F83B1AEF0AFEF833FD4F730CA8A4F009856635609A2294BB05B2AD8B76755652318BFB3E48C9F0E82433ABD5A26FD7DB07BA058070E2EC426CC9C94871
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn2.gstatic.com/shopping?q=tbn:ANd9GcTN0zAczmhQDRWX5UbCYrNDweC7xu3lt1Bxw7Z09Lkgi6yFLWWn&usqp=CAI
Preview:	......JFIF...................................................( ..%...!1!%)+.....383-7(-.+...........-...---++++-------+-++---++--+---7----+++-++7------+--......+....".......................................4........................!1.Q.AaqBR...2..."C...3br...............................".......................!1Q..A.2a............?.......................................................................X.~.Z..y..'?.m=..........f..j.W.b..7....a.#..;]..3.m.7..?.1...yJ0..=kX.........K$y...N.....7.^...[.'.Z./....i}..'Ub...7n9..h.9.......................7&.. .y.}F..~...^..../W.<8.o.-.~l................y.n..&g...HLm..K.X.ngP.9..7.^..g..N....(U..{.w.Oj.JU.p.h.[R.....[V.r.'-...fP..U..;2..si.@......Gy..`..X...q"...Kx.8.`........................b...nW:+.;...m;.f.5..M.v.....+)C.mdc...>..f4..Q....\.;r'.TY.o.o?>..z{rcl.L3....'XJh.5.....a(.F..2..s.H.n...Do.@#Z..C....D~....O{ynjG,...d..................."#s:`.._.?T.K......m..'&..2.=...........~..>...Od..#Y..1Z...9.kPJ...2.CN

Chrome Cache Entry: 1031

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text
Category:	downloaded
Size (bytes):	360
Entropy (8bit):	4.96401168665835
Encrypted:	false
SSDEEP:	6:Iw7tADvWN0S3tRvlslw725YoU1szw1/000uBgmeRLsRttnd+wjwHugFLvOHSSVoO:B7yg0oRvlsy7duzoX0X1UtdjjvESVuK
MD5:	128DAD624D4E9DEC7AEE1DC6802C3872
SHA1:	AD6E0E9CAA1D242530012436663E47A426F311A7
SHA-256:	6B50E76505F154305CDC11F3CD132BD7D8B50010A53FAEC4E69CC1101B4F8AB6
SHA-512:	7CEBB637F6616076FF9DA7B438E15A8919017639F4BB4FA8D823084492FA68C323B2AFC70964389FD0D5FAC7125825D413F82B6F00F3E335DB6E6102E6E1FBA1
Malicious:	false
Reputation:	low
URL:	https://c.evidon.com/a/1.css?r=0.949638324836398
Preview:	.bap1 .bap-img-container {..margin: -18px 0px 9px 10px;..height: 45px;..position: static;.}...bap1 .bap-img-container img {..margin-top: 6px !important;.}...bap1 p {..font-size: .7em;..margin: 4px 5px 0px 10px;..padding-bottom: 6px;..line-height: 13px;..width: 259px;.}...bap1 .bap-close {. [if lte IE 7]>..top: 0px;..left: 273px !important;.<![endif]-->.}.

Chrome Cache Entry: 1032

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 58352, version 1.0
Category:	downloaded
Size (bytes):	58352
Entropy (8bit):	7.996132630348425
Encrypted:	true
SSDEEP:	1536:AINaZHazRzE37zuiMRkNgeZechMJwfqr6ecEXpntmW:AdZHazRY37zu0ncchMJIqr6eXpAW
MD5:	766E5492EEE5BEEDE6009E6F8132F790
SHA1:	107F2CC770756D53905F66248D9DD5D1C7AABC7D
SHA-256:	FFEEE31899DFA5AF4E8F1E039F1F21C0A0596030B8F5B10F6134E63F67FF83CE
SHA-512:	3E959BC58467A7B208D97AAC7CA6A87E70CB2511DEAA06BB41666FFCD4AEC0E561C0E9A4727389C0BA4FD802C2F38B8953099960C009DBF1A34BFE5B30059DA4
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/finance/fonts/GT-America-Condensed-Black.woff2
Preview:	wOF2OTTO...........H.................................$...J....`..j.6.$....... . [n....ct....!.k.H..W.L...t...#.'..M.Md.7.ep..........=.D....K...(..n....TH.....K.... #.U....N"..`Y....lm.5...y5.h..7..Y=p.0......o..^...ps....rF.......RJ...%..>TR%U.d[).`..t..K%UR%.?..[}..: '.1M...J..J..PQ1Y{....t.-13~.eDv,..)....T.k..\|..mLX.~...+..I.@a.\|3a...umf.R.3K.=.C..C.....dt._.....O.l$j..7...:J..9g.........o..;^..2..6N....=u.....j......V....{..=D.-w.3X...=.......Q.S%U.l.U^.....\|...lc..."..Y..W.?\|.0....u....S.J.e0...n9..=..<..&..I.i.`5..)&^..c.....k...U..N.".....Q...6..8;.b....c_]........:W..T.........Uk.\|..ZZ.......Q.....e$-.. ...5(#B...~=..HR.c.#..gp......o...^V.U.<-.^...]m....U.7V2d.....fyw-.26.C#$........., ..Pn...S.S..1.Pl.O.x....q.C0..o.....4}.k......K....Eh.F[.E...{J........z.._.m.. .j.I.p).......t....C=q...P..I<..r.S+....+..E...V...kc6.!.[.`....X..pV....#.4.......2..q....+a$...)[_.......n........b.h..2f.D.3 (" m.H.0..PB..P`.EQ@...L

Chrome Cache Entry: 1033

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	84
Entropy (8bit):	4.6247262095042965
Encrypted:	false
SSDEEP:	3:YQ3/eHiraIPIRUGINJd/4RdXi7wWLW6n:YQ3e1UfNT/4RdXi7wMW6
MD5:	15DCE621E9BDF0858BFEF4F847C55F3F
SHA1:	CECB9DAE25366F44D6B1E3124DE0F15DA664813F
SHA-256:	30787110037C0B8DEFC0F86CF5D84EA6B9DC8ED019FBCBD5A47934F1A528661A
SHA-512:	3D32DC9B761B53CEB770F1EC98DE14DE197196F8F625AAB515F68EFF3C41BF80C498BB394E211A868FB5DD816716075AF2B82BF9A5BBCC28874F14B8CBCDF523
Malicious:	false
Reputation:	low
Preview:	{"user":{"id":"92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb","isNewUser":false}}

Chrome Cache Entry: 1034

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=6D366468-71AF-422B-99AB-138A6DAB94F7&vxii_pid=12&vxii_pid1=10067&vxii_rcid=8fb05dfd-93b3-4073-8d4f-73399245f1bc
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1035

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51508)
Category:	downloaded
Size (bytes):	52779
Entropy (8bit):	5.7271427969736255
Encrypted:	false
SSDEEP:	1536:j22oWm8mqBuir16X1/IeNvnWF96nZ0L1jdFyUrBhEg2VVXsulJsQp/47Q12YC/B:+4uy1szUkEl7tmg2VNlfKCC/B
MD5:	CC62D8C63B6256F213214BFF27DB794D
SHA1:	C49AE54263B028F7A0B825258684EF89B6933721
SHA-256:	C734DCEEA04B1735DF8F359DF430871831977E28511A879DC712250A893C63B3
SHA-512:	6E32DE43D4918297B48817429A2207D958A682CF78A14C5FF131530EACC373DFAA9D85CBF75F9AD363A487CB8566373389057B8A67F4ECFE8097BF9F609F86EC
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/xzTc7qBLFzXfjzWd9DCHGDGXfihRGoedxxIlCok8Y7M.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function P(g){return g}var b=function(g){return P.call(this,g)},t=this\|\|self,l=function(g,x,O,e,z,H,D,M,q,c,w,T){for(T=(w=91,48);;)try{if(50==w)break;else if(45==w)w=t.console?g:33;else if(93==w)T=56,q=M.createPolicy(H,{createHTML:b,createScript:b,createScriptURL:b}),w=33;else if(w==e)T=48,w=45;else if(91==w)M=t.trustedTypes,q=D,w=x;else{if(33==w)return T=48,q;if(w==O)return q;w==x?w=M&&M.createPolicy?93:O:w==g&&(t.console[z](c.message),w=33)}}catch(k){if(48==T)throw k;56==T&&(c=k,w=e)}};(0,eval)(function(g,x){return(x=l(40,70,44,97,"error","bg",null))&&1===g.eval(x.createScript("1"))?function(O){return x.createScript(O)}:function(O){return""+O}}(t)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;c

Chrome Cache Entry: 1036

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 580x326, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	11934
Entropy (8bit):	7.983575979438929
Encrypted:	false
SSDEEP:	192:Jgcuka8m3wukhujQYgx3LKXwH+Atb4PfV7B5pqzw6CYyg0o71AcI01Ms41+KimlS:Jgbku3wtLJLVH+jIz/R06mcLsBiIwf
MD5:	170CEB4C18CA3FBA935F669168DED33F
SHA1:	2DF079D93885E9E49723E99EFABE2E08D77413A4
SHA-256:	90DD994920CF9DCE09E5A68CC7FDA8AF9C7C2B1124616BAEE8CA648CE6779E8A
SHA-512:	1F01810EB14DB882283E5502CD3289A2CFFA9A3575DF311CADAECC9B085FB8ED746ECB89E3FE3B87452DDC1F1221BCC8069C06F8B2DA5B9E32720E0D419055A1
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/b8y8JDYAKICCs6nLHbreVw--~B/Zmk9c3RyaW07aD0zMjY7dz01ODA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-03/a2c80a20-ed41-11ee-bdfb-d55237d5dae6.cf.webp
Preview:	RIFF....WEBPVP8 .....Q...D.F.>y:.I$.%,.......en...........~U.T.........O...N}[S.K3.n'~...0.<.w.7...}../...ef.G$...7.D.......`..~...yf._.....\.`.El.......Ko.m..+.VU{.."e....)...+.Q......P.=..`./!..2Y..F.).rl@..6...C ...E..`3...C?...I..5..Hc..af..x@..p6C.N:OC.B'.....G>.....J.<'...1..w..o.0.....o.W.........9(...k#.........p.%.%..l.....]-...-.F.9.>j...D..4....#.S...)@.}.A....ov.W..CG.F5.~...#..."....4....24.Q......Ut.].....Yl.xX4...%Xh.......HQ..Al.=......I_...p...<..,..8Z.m.............0..\...BJ1..s...>t...6.[..m.;......3.....7K.W.%....GJ. .<v......]..u.07.Q..y.W.~~`"i.p....}.<.~.B.s..~/..+=..z...OI....."...&l.}N.5..61......l.my....w...S:G%........,a9..E..\.\:'.v.W...~f.e.. ...K....v.?z'6;..I...r)c..F.w....3W....h.....E.. )$..2,.-."..i"P&.....b..a..8......<h&.....x5m.0q.E..j.......'....b^.8...;.C.......O....m..a....uY...,.......Q....S.....`...4...}+m..G.mM.B...QT!..,.2._..@..'...j =7....b..A....{.v6g.Y..5p.....Ik...#.W.XLV0..1kN.:.[.....-b

Chrome Cache Entry: 1037

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	169
Entropy (8bit):	5.502173578832701
Encrypted:	false
SSDEEP:	3:YLTBQSY/eIy9SqQA7HvgWqyHS/cfQAR/VA9Hbhukr0nzH6SHn:YnBQSSlcSrCHYWJy/cYeVA97Qgeb6u
MD5:	3AB07B2A40957451736EAA2D64BC5504
SHA1:	AD48CD55663D5CAEC2A6AB76A3EDC8B5BEC1ECF9
SHA-256:	B305208CDC2DA07FCC60B75F75C326924B37D45861C410C519527F84F58CF8A5
SHA-512:	7BF332855E3C6F9AA4D26AA8F004D7B1987AB74764A10FB9878C7885F2A8A4BFA3142C5AE42277812682AFD326B3D94B51E0F3FFEBC74C1D5EB5B45E3310F008
Malicious:	false
Reputation:	low
URL:	https://idx.liadm.com/idex/did-004f/any?duid=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q&gdpr=0&did=did-004f&cd=.com&resolve=nonId&resolve=index&resolve=magnite&resolve=pubmatic
Preview:	{"nonId":"vN_RikZwhoZWxTMpfJBcDcT8RWafL19T6LauHA","index":"ZQjYrf.1D0shOWRRRk909QAA&1008","magnite":"LMPI0LLB-19-JSO6","pubmatic":"8DDE491A-31A6-4A5B-9E11-D4969B43F97B"}

Chrome Cache Entry: 1038

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11133), with no line terminators
Category:	downloaded
Size (bytes):	11133
Entropy (8bit):	5.261948063413651
Encrypted:	false
SSDEEP:	192:34X/4xNXdWRSQR1Rkh3RU1cIWIwckgeLploEBn:W/0ARPR1R/cI/TSoEBn
MD5:	F84933B42FCD77657E8BF65BAADD65AF
SHA1:	8DE50AD6C34FEC3CD40EF527D125F6AC211EFF3A
SHA-256:	0EDF47BF39906C938530C2D68A24F1F6BB77BF706D57A609763C64940FDCB523
SHA-512:	C078C77AC45498022CFE7F7AD0B0B1F8CA58361E9B45092FAE654702B2491D1C878EB36E3CB7C2CF2645C691C987D98A73A94A51115BA1950E52C278D98930CE
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uc/finance/dd-site/modules/css/tdv2-wafer-adfeedback.AdFeedbackAllComponents.atomic.ltr.f84933b42fcd77657e8bf65baadd65af.min.css
Preview:	#atomic .Ai$c${align-items:center}#atomic .Ai$fs${align-items:flex-start}#atomic .Bd$0$,.Bd$0${border:0}#atomic .Bd$n$,.Bd$n${border:none}#atomic .Bdc$--sky${border-color:#12a9ff;border-color:var(--sky)}#atomic .Bdc$--white${border-color:#fff;border-color:var(--white)}#atomic .Bdendc$--white${border-right-color:#fff;border-right-color:var(--white)}#atomic .Bdbc$--dirty-seagull${border-bottom-color:#e0e4e9;border-bottom-color:var(--dirty-seagull)}#atomic .Bdbc$--pebble${border-bottom-color:#c7cdd2;border-bottom-color:var(--pebble)}#atomic .Bds$s${border-style:solid}#atomic .Bdends$s${border-right-style:solid}#atomic .Bdbs$s${border-bottom-style:solid}#atomic .Bdw$0${border-width:0}#atomic .Bdw$1px${border-width:1px}#atomic .Bdendw$1px${border-right-width:1px}#atomic .Bdbw$0\.5px${border-bottom-width:.5px}#atomic .Bdrs$18px${border-radius:18px}#atomic .Bdrs$20\.5px${border-radius:20.5px}#atomic .Bdrs$2px${border-radius:2px}#atomic .Bdrs$4px${bo

Chrome Cache Entry: 1039

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20625)
Category:	downloaded
Size (bytes):	31366
Entropy (8bit):	5.56727217088994
Encrypted:	false
SSDEEP:	768:EvjhGUMtCGsOpYfkKz4wDQjZvy/gYQWwY4RXrqt:E9GNtCG9YfDQjZK/gYQWwY4RXrU
MD5:	C4C12C4D24B69A5E675E5B06C67E138E
SHA1:	70BE9D7872F8B50C3D08BA62221A8102600CC879
SHA-256:	3E03D32012325FDF74625965D8413ACD986E5A14A1CFEC2337DCC85013421DDA
SHA-512:	8DBD8E3A6F52110D6BEE76B17AC961AC67EEF3D0FBA54D5A51DE29746F4F82423156FCE5493DBB5C251B8A7FD4699EFBEE7AFD834E8A0DC0C0D9A3614861FFBD
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHBJ3BJ0&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25235%2C25036%2C25278%2C25237%2C25159%2C25038%2C25118%2C25239%2C25117%2C25318%2C25317%2C25270%2C25072%2C25031%2C25030%2C25198%2C25274%2C25276%2C25071%2C25202%2C25003%2C25127%2C25006%2C25204%2C25126%2C25007%2C25208%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25243%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25250%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":26,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":15552000,"cc":"US","zone":" e ","coc":"NA"},"cs":"8","lookup":{"mn":{"name":"mn","time":180,"cookie":"data-mn","urls":[{"type":"other","url":"https:\/\/cs.media.net\/cksync?cs=3&type=yhb&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&redirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dmn%26ovsid%3D%3Cvsid1%3E%26axid_e%3D${AXID_E}","eu_url":null}],"pvid":25001,"isBl":0,"g":1,"cocs":0},"tlt":{"name":"tlt","time":45,"cookie":"data-tlt","urls":[{"type":"other","url":"https:\/\/eb2.3lift.com\/getuid?gdpr=${GDPR}&cmp_cs=${GDPR_CONSENT}&gpp_sid=${GPP_SID}&gpp=${GPP_STRING_142}&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D%3Cvsid%3E%26type%3Dtlt%26refUrl%3D%3CrefUrl%3E%26vid%3D%3Cvid%3E%26ovsid%3D%24UID%26axid_e%3D${AXID_E}","eu_url":null}],"pvid":25006,"isBl":0,"g":1

Chrome Cache Entry: 1041

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	8606
Entropy (8bit):	7.952471571900225
Encrypted:	false
SSDEEP:	192:6gwaTG0cO7BSRQhYnna4r88z/97DsQxitbKTkENxzj7J4b9X:6raTG0LCNDs6OK/jJ4RX
MD5:	D0F41D98C341B9D12EFBA1610C2E1C20
SHA1:	203C88A2D02A499977BB1CDBE1B78CFBAB8438BF
SHA-256:	886146FABFF5C7B59DC92AFC64662C0E3064B64420CFEDBD71DF2B0454BE0EB3
SHA-512:	98B108350E41AF80D3ED70DACBE9F4A27EC61823DD3026485D8B73039C1B13311A3293008C405846D2A1F8211879A875DBCFD5133B8184134C28FE592797F91E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uc/fin/img/logo192x192.png
Preview:	.PNG........IHDR...............P..!eIDATx...X.I..& ...<...zz.g/ .........^...@B.F/b.x...+(....H..7...l."&.f.....;;;.o.....p.....p............BB.!!....@H...(...B.!}.@..(...B.!!...@H-..#HHr.....BB.!!...(@........#!.-.........r.:..$..@H. $..RK....BB.[..$$$...BB.!!..Z.@...........5....?.k....,.<R.#8.iB.N.7u0M.W..%".\9..\8{....Y.6U.... .Z....?...fw..u"...@H2;..>..n&...4....@HM..!L..tv;.............L~d.`k.........mBj.r.I..P?.Kg..G....j9.h'....V........k$m..`.h4D.SD......(.I.......0.Q.Sf.....t\.j.R...Rq%....}..(.n...u(....._.......A.)....v..0K..w.u....A..l..h.ok..G.Qz....5q..NJmp.qH.&{.M~...z8I..=....8.....".TN..X.....8I...P..s....Bk.@.{..!?..(......:/p.k..."...."...@.l.}!....\.v...Cf...A..4.M.....S=...B....Ss..9..[.....}...............\|..s..`..r.g..<Z.&........N&L..tT.........;.+.........]......X;.]....G...q=y....;U.M.G..Ze..~.....`..a:l..F..O..p;wg./.d..Gu..efr.,[. .s.I.t..A...E...K..-s...F..I..X....^z..o..^..-..G;.......c ....F.y.....OB.5...&

Chrome Cache Entry: 1043

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29040, version 1.0
Category:	downloaded
Size (bytes):	29040
Entropy (8bit):	7.992433370956388
Encrypted:	true
SSDEEP:	768:m8KN5bgLz5ZH/qWx4tta3t3/QuRogw/LPmm0CG:+5gL9ZfJ4za3BIn/zL0p
MD5:	AF9FDAD7698452697B016850FFF96423
SHA1:	710130C79BF56297F8ABCC6D6C575172590133B0
SHA-256:	B8989E0BE6A0C3A8A407D8B69B7884EB5EBF401B7EEE8B8B98C5EEEC3BA497FA
SHA-512:	1C4C05B01117C2EAEEAC48E010B856B8C491FA318E600343AF5C28A454D083908724881C26F5C13F3E604ED81855AF3548F19D062A80881CB87F2CE51DE9D213
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2
Preview:	wOF2......qp.......(..q............................0..T.`..T.....s.....h..O.....6.$..0. .....,..^[_mq...\$..fU.Y...U0.T.Rw....pb%....AhJ.e....z..C......k....b...K...K.}Q4.1..+....~l......3.x.qdf?.s.A......./(D.Ph....o.-=.Q{l..k......XN..B.'r^.zU\|..3o....\.....R.........p.BuQ...gz......y..z...)..9.b@.0..w...z....=,...'.B'.q...o..h)..k...aF.Q\|(Y.....E..I.f.f....4..7.wbS.Zbv.SV...f..u......Y..f...eP"..........z.ggfgw...p...s!.l..({2B....2.........d&2..!:I.. x.......R].j.............D..?...Tb....66.kX...e....,..a..%..(`$.}...^sz^\|.....^....?....W..,..z7D.0a~..[..W...'..G..#JnO........W....."......-.....(.je.40P.."a..E............'....U.E...:.4.......8j...s....`.T..Kp...Yu..{.i...6..}.E.U{..}...9m..[...\|..f0&.c....H.I ..}U......a..HiuJ..<f..6.........[@.V.-.4.H..-7..&.V..^.A4.Cr..e...72\|....%...-5..C..<..v..k..k.".=`.`..2.3...{..>....Y....B.....B.(5...v...R.....Uz{.,..fx..y..N8...,U..r..~..u..N...[5.O.y!I&F.M..jY...-.B.~.... .hig4.....f.....y...

Chrome Cache Entry: 1045

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 34, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2331
Entropy (8bit):	7.732123200569469
Encrypted:	false
SSDEEP:	48:HCPVHbdLb/levTWdqgmGYDQpuYpdKqLxoh5F:HCNHxL4O0QpXKqOt
MD5:	D0E45188F6A8F2E8F2528E762FE55D33
SHA1:	42A007181ABDADCC4C79D03D74B08F39DDDC5127
SHA-256:	DEB2DC4C95EA5B692229713672E7AEAE32B3914BAFCD63F926116D6637BD1976
SHA-512:	0FD2F174A63472217D8BC23DE69DCBCAA1A583DED45152430D1A5BA455F6B1F360815DB34B5C8F96DA7DAAE232DB52197775F7F50955F497D6B664EB93B58800
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......".....V}.....{PLTE............................................................................................................................x.....(tRNS....!.k6...L........)....Y..D..q>.wdS_._.D...'IDATh..Y.0.M............!.^..z.....&.d.......,...@.....m.&x..l....M.-.k4....kZa.........Y..F....=I..jx.C..H..W......e....o.oO.\|..D..?#.D.{~..own...S.........7..K.....<...nA..~.8."q.@....C2...j...>..t}....(..M..@^....a..x..~J8.n{.G..b$..m_%.Y.........X.X)..Y.b.qk..].....`z...1=...vu..dj..7c').h....L..0.+eBC...S.....jyzb.\.........3G1K..`..{Kl..{_%....F.....g....h.)n..F...-&...K....)6...hV.e.#3.N..O,.....~'..s....SZ..!.).0..u.....v.1.....<...F...O.O...@....Bk.j.8[.D.4Y.5...h.-..:dAIzn.)>...\..1.....s.#[.{.....}.+.3....T.w..F.#.aaa.....7.5..QR...Q....].#..n....R..`,q...n..B:..4...=.w.../..fNN...<.P..j.U...D...c.T.(.R.X8..~el..>.h.]]5\....6.-...9#.$.:..a6..1.U..`L.4.%...v....+D.eN.znm....v...H..T....o...;)X.\..0...x..5}B...Q.

Chrome Cache Entry: 1046

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23305), with no line terminators
Category:	downloaded
Size (bytes):	23305
Entropy (8bit):	5.167524588318243
Encrypted:	false
SSDEEP:	384:XR4AAeCerKvKDbB8CmBtdg8X0SmmOTaYp5:h4ADdrKvKDU5mmOTr
MD5:	F703ADDFD102B893155D138D52087EB8
SHA1:	8F92D1DD59592ABA2EB61980A79984E9376DEEAB
SHA-256:	408542DF752E09E91287CD01A9EDB2329392D421D06A7C5095C2E502B040E287
SHA-512:	A5D7083DBC37E5EE1ADA1E491EFED38BD95A6990C034533F4B17F7E2B6F96DFAEB9E128FD9C188ACB3D21564B2C3D323659B4264B0E398BDF2DEF23FF432EF34
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/xe/sports_ms/css/header.HeaderYBar.module.f703addfd102b893155d138d52087eb8.min.css
Preview:	:root{--ys-corner-radius-none:0;--ys-corner-radius-small:4px;--ys-corner-radius-medium:8px;--ys-corner-radius-large:16px;--ys-corner-radius-full:9999px;--ys-spacing-05:2px;--ys-spacing-1:4px;--ys-spacing-2:8px;--ys-spacing-3:12px;--ys-spacing-4:16px;--ys-spacing-6:24px;--ys-spacing-8:32px;--ys-spacing-10:40px;--ys-spacing-12:48px;--ys-spacing-16:64px}::backdrop,:root,[data-color-scheme=light]{color-scheme:light;--ys-core-red:#cc0e25;--ys-core-green:#008343;--ys-core-blue:#0063eb;--ys-core-purple:#6001d2;--ys-ancillary-green:#24a54a;--ys-ancillary-red:#ff403a;--ys-ancillary-your-team:#5d5eff;--ys-ancillary-carrot-juice:#ff520d;--ys-ancillary-cheetos:#ff6e0c;--ys-ancillary-turmeric:#ffa700;--ys-ancillary-hulk-pants:#7e1fff;--ys-ancillary-starfish:#7759ff;--ys-ancillary-thanos:#907cff;--ys-ancillary-hendrix:#f8f4ff;--ys-ancillary-casper:#fff;--ys-ancillary-batcave:#232a31;--ys-ancillary-batcave-rgb:35 42 49;--ys-ancillary-yahoo:#6001d2;--ys-text-primary:#232a31;--ys-text-secondary:#5b636a

Chrome Cache Entry: 1047

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5570), with no line terminators
Category:	downloaded
Size (bytes):	5570
Entropy (8bit):	5.224150317868789
Encrypted:	false
SSDEEP:	96:V6DUauGy2kvP5W7NRHKrmCRFqaLsL2eOt666o2hG:V6DWvP5WxErgOtwRhG
MD5:	2A251A0DDB3D7C4EC13F4E35EE35DD2B
SHA1:	E400B6FBA5E2A71F489AD4FC92D4B2243E90E139
SHA-256:	09BEEED1E13C0CC009D030711289983F71028B3288F1E840ECAAC82BA381C04A
SHA-512:	2301875E90FF6B4C85B1CAF35CF87ED04A7A7F038355827DA63D36BB3FC95A1AF5396CC936E318D078AD624AC7C9A4976436AD2F56814139E837AD82BDADBB8D
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/css/react-wafer-weather.WeatherPreviewRefresh.atomic.ltr.2a251a0ddb3d7c4ec13f4e35ee35dd2b.min.css
Preview:	#atomic .Ai$c${align-items:center}#atomic .Bdc$--dirty-seagull${border-color:#e0e4e9;border-color:var(--dirty-seagull)}#atomic .Bdc$--pebble${border-color:#c7cdd2;border-color:var(--pebble)}#atomic .Bdc$t${border-color:transparent}#atomic .Bdtc$--dirty-seagull${border-top-color:#e0e4e9;border-top-color:var(--dirty-seagull)}#atomic .Bdendc$--hulk-pants${border-right-color:#7e1fff;border-right-color:var(--hulk-pants)}#atomic .Bds$s${border-style:solid}#atomic .Bdts$s${border-top-style:solid}#atomic .Bdends$s${border-right-style:solid}#atomic .Bdw$0${border-width:0}#atomic .Bdw$1px${border-width:1px}#atomic .Bdtw$1px${border-top-width:1px}#atomic .Bdendw$6px${border-right-width:6px}#atomic .Bdendw$8px${border-right-width:8px}#atomic .Bdrs$100\%${border-radius:100%}#atomic .Bdrs$2px${border-radius:2px}#atomic .Bdrs$4px${border-radius:4px}#atomic .Bdrs$8px${border-radius:8px}#atomic .Bg$--white${background:#fff;background:var(--white)}#atomic .Bg$t${b

Chrome Cache Entry: 1048

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 1049

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (330)
Category:	downloaded
Size (bytes):	331
Entropy (8bit):	4.76176773688465
Encrypted:	false
SSDEEP:	6:A+T+CxvF4KBvN88+LVBCBJDKgddQEeGgX5AuvM8v0A4TB1bw:A+i84KBkVBODKgddQELgXeuvr8A40
MD5:	293CF07BB6B52A1A18D797328200C9C7
SHA1:	BF69950A40F5BA11475E896A5EB2F7B049370031
SHA-256:	8AC7E74D523881BB9FFB193D8897292CD05F78DFA91ECD285411D337361B1FB2
SHA-512:	996AB8246130832BBF9F7ED8BC24419E34E501DF8D36A34FB16BF0269F90C593B3DA05F0FA96FE2444A0345B32175B4781192BA0FD02A11F33CB2902C44E5A00
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/spread.CgU5AtxT.js
Preview:	function r(t,s){const c={},u={},f={$$scope:1};let i=t.length;for(;i--;){const o=t[i],e=s[i];if(e){for(const n in o)n in e\|\|(u[n]=1);for(const n in e)f[n]\|\|(c[n]=e[n],f[n]=1);t[i]=e}else for(const n in o)f[n]=1}for(const o in u)o in c\|\|(c[o]=void 0);return c}function a(t){return typeof t=="object"&&t!==null?t:{}}export{a,r as g};.

Chrome Cache Entry: 1050

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (2776)
Category:	downloaded
Size (bytes):	2777
Entropy (8bit):	5.312457964575335
Encrypted:	false
SSDEEP:	48:+n8t7Frgle8Q8hCgVj6myNHYo/JUYFtfhGsr7iXZJYEF1F6Ga8m89AD/q:O2PfAbj6miHYIUYnfhGsrOR1F6T8Be/q
MD5:	A68A968032C00D0167960572ED2C3474
SHA1:	45B6C63E4F36746B5F4DCEB85B073C7BA93D2370
SHA-256:	12A3D2E25F775893975D9B4F891DDB9B11E566BAEC6C3E9B8BA9EBEEEE0EB6DA
SHA-512:	7CDB23589A09C9B306336D29DC223423169A566235339F1484FAD62F580494579180B1806AB29FD811F26B6AAF72548C7D40D661D96E53D51601DC68C1BF7673
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/Lazy.CSkNu4FG.js
Preview:	import{s as S,c as D,b as L,j as M,k as _,u as N,g as V,a as j,i as f,G as q,w as v,e as w,d as z,f as C,p as c,W as G,C as W,v as A}from"./scheduler.ErneftFr.js";import{S as B,i as F,t as H,a as J}from"./index.DsErXEH0.js";import{g as K,r as P}from"./commonUtil.Bb2Cnbsk.js";import{r as p}from"./loadPortfolios.D7blfiZv.js";function h(){return window._nimbus.intersectionObserver\|\|(window._nimbus.intersectionObserver=new IntersectionObserver(n=>{for(let e=0;e<n.length;e++){const r=n[e],{target:i}=r;i.dispatchEvent(new CustomEvent("intersect",{detail:{entry:r,isIntersecting:r.isIntersecting,observer:window._nimbus.intersectionObserver}}))}},{root:null,rootMargin:"0px",threshold:[0]})),window._nimbus.intersectionObserver}function Q(n){if(!(typeof window>"u"))return h().observe(n),{destroy(){h().unobserve(n)}}}const R=n=>({loading:n&4,Component:n&32,value:n&16,hasError:n&8}),y=n=>({loading:n[2],Component:n[5],value:n[4],hasError:n[3]});function k(n){let e;function r(t,s){return t[1]==="visi

Chrome Cache Entry: 1051

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1052

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2553)
Category:	downloaded
Size (bytes):	23530
Entropy (8bit):	5.497656132776961
Encrypted:	false
SSDEEP:	384:kM/aDTs87Jbt81zUbdLZNaAsoSfX/KPH7T3BZdeX2hGWNH0pKyzy4dYlkWyv7S/v:J/aXskJt8xEdLZNaNtfX/KPH712X2hGK
MD5:	7FBC48EABE9BB1BEF523CF346C9E5363
SHA1:	FAB1C4A60DD82A0EA5EC61EE75A9D3D9DBA2472B
SHA-256:	51586EC2D56DC12C32B65B0612D89695B3A5B7D0C91592ACAD6EC8A04F8701AA
SHA-512:	EC7DED2166D3A59AF2A7EF2D792753007F4F7C872FE1842D9340080580BB4C56951F2C5DBC4E4BA71BAC8D1B43CF961FC10BF3336BF7F5980DD972B559B2F43E
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240327/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=m,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a){return a};function ca(a){m.setTimeout(()=>{throw a;},0)};var ea=aa(610401301),fa=aa(188588736);var n;const ha=m.navigator;n=ha?ha.userAgentData\|\|null:null;function ia(a){return ea?n?n.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function q(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function r(){return ea?!!n&&0<n.brands.length:!1}function ja(){return r()?ia("Chromium"):(q("Chrome")\|\|q("CriOS"))&&!(r()?0:q("Edge"))\|\|q("Silk")};function ka(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function la(a){la[" "](a);return a}la[" "]=function(){};!q("Android")\|\|ja();ja();q("Safari")&&(ja()\|\|(r()?0:q("Coast"))\|\|(r()?0:q("Opera"))\|\|(r()?0:q("Edge"))\|\|(r()?ia

Chrome Cache Entry: 1053

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11230), with no line terminators
Category:	downloaded
Size (bytes):	11230
Entropy (8bit):	5.207546962286139
Encrypted:	false
SSDEEP:	192:3ciaumTuQ/2lAg6gA2MZzXanihYZRCq4b8jbcMiISXsrFyOof7:3vmiQhgAfzXancMCqYciFXsrFyv
MD5:	B29975904D91FE6FF597A7FD5A315391
SHA1:	79A3373AD0C641BD858221C4B70A995215064AC9
SHA-256:	B2918846CC75BC0BFC18AF81ABF8F0E4F9D30CFD5383639CE07601F4A74684E5
SHA-512:	480A454CCED569439C22251D6DBB4300A340A2BBD777E62F90C2634902774F58046AE142848A2AC81276989642AF026A85B6F4F1E19A10B45BE9D7C2FB54A3F5
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-native-da-1.0.5-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-native-da",[],t):"object"==typeof exports?exports["wafer-native-da"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-native-da"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var o=r[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a functi

Chrome Cache Entry: 1054

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59453)
Category:	downloaded
Size (bytes):	59495
Entropy (8bit):	5.2114807345992435
Encrypted:	false
SSDEEP:	768:7LmUMkCV0/1P4q8qejIcdCyvmq6oDU+KR8gfKPyexMFvEnwPuxLqU+oS4QUsGcRL:7991ARvHU+KcJwoQbOmzbp
MD5:	42D6CF165BFEF2E71657CE26AB24C268
SHA1:	8FA3299C18C78740F4D64AF623BAEE304AD56B67
SHA-256:	7B60F8BC02303DF6235AADA3B8BAA2635F99F7F0BB9233AE07A152833A89A980
SHA-512:	C1455ABF6165AC2E29445EA8FB2DA5E2C3D3CC585C43C711AF656D1CB621D37BAF7EA4FD3ED01179DE26BB52CE92A0CE21EA5D4CA5BE7D43E6CBD49DDB348FDC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rb/services/video-manager/v2.0.13/video-manager.js
Preview:	(()=>{"use strict";var e={d:(t,i)=>{for(var n in i)e.o(i,n)&&!e.o(t,n)&&Object.defineProperty(t,n,{enumerable:!0,get:i[n]})},o:(e,t)=>Object.prototype.hasOwnProperty.call(e,t),r:e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}},t={};e.r(t),e.d(t,{PMPrinter:()=>l,createUid:()=>s,decoratePlayerNode:()=>o,loadScript:()=>r,normalizeDomReference:()=>a});const i={program_name:"EVMD",field_player_view_registration_key:"vm-pv-id",field_video_manager_decorator_class:"evm-player-label",field_rule_visibility_default_viewability_threshold:.9,field_wafer_attr_video_id:"data-video-id",field_wafer_attr_video_config:"data-video-config"};class n{constructor(e,t){this.name="Logger",this.enabled=!1,this.enabled=n.enabled(e),n.consoleOverrides.forEach((e=>{this[e]=this.enabled?console[e].bind(globalThis.console,i.program_name+(t?" "+t:"")):()=>{}}))}static enabled(e){const{debug:t}=this.retrie

Chrome Cache Entry: 1055

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1056

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text
Category:	downloaded
Size (bytes):	360
Entropy (8bit):	4.96401168665835
Encrypted:	false
SSDEEP:	6:Iw7tADvWN0S3tRvlslw725YoU1szw1/000uBgmeRLsRttnd+wjwHugFLvOHSSVoO:B7yg0oRvlsy7duzoX0X1UtdjjvESVuK
MD5:	128DAD624D4E9DEC7AEE1DC6802C3872
SHA1:	AD6E0E9CAA1D242530012436663E47A426F311A7
SHA-256:	6B50E76505F154305CDC11F3CD132BD7D8B50010A53FAEC4E69CC1101B4F8AB6
SHA-512:	7CEBB637F6616076FF9DA7B438E15A8919017639F4BB4FA8D823084492FA68C323B2AFC70964389FD0D5FAC7125825D413F82B6F00F3E335DB6E6102E6E1FBA1
Malicious:	false
Reputation:	low
URL:	https://c.evidon.com/a/1.css?r=0.8831823800989231
Preview:	.bap1 .bap-img-container {..margin: -18px 0px 9px 10px;..height: 45px;..position: static;.}...bap1 .bap-img-container img {..margin-top: 6px !important;.}...bap1 p {..font-size: .7em;..margin: 4px 5px 0px 10px;..padding-bottom: 6px;..line-height: 13px;..width: 259px;.}...bap1 .bap-close {. [if lte IE 7]>..top: 0px;..left: 273px !important;.<![endif]-->.}.

Chrome Cache Entry: 1057

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3153
Entropy (8bit):	5.286150390947513
Encrypted:	false
SSDEEP:	48:LgRnns3fBpeYBeBgpi/wwX89kwtz86DG6cmGA0Gb0gXMLlZV5GG7gxE5+7MdmLD9:L8ns3fBpeP/fQtjmm85Jt3+xJGRMt
MD5:	9F3B9A9ABC8E085A017CD74A98EE5A4D
SHA1:	15C41E3C7A257D3B46746C1AE311ABF90983D0D3
SHA-256:	9A44328F14A61FBD81F78BD3F116FAE7794CC18825FC5B34BB932D61A0D9C38A
SHA-512:	C2F073776FB72AEAF4D85028EFA520B0A57451700A0EB25BCFFF14AB6A22636E57B2677644430FD78B788738D375880F21291C6F8ADEEFA4ED4CEB008DB2A9F1
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/473513299895995753/script.js
Preview:	var isEndFrame = false;..var looping = 0;..var tl = new TimelineLite();..var dc1 = true;..var dc2 = false;..var dc3 = false;......function loadImages(){....var assetsLoaded = 0;....adImages = [......"images/bg1.jpg",......"images/bg2.jpg",.. "images/bg3.jpg",......"images/cta_over.png",.. "images/disc_panel.png",......"images/headline1.png",......"images/headline2.png",.. "images/headline3.png",.. "images/headline4.png",......"images/lockout.png",....];....var assets = [];....for(var i=0; i<adImages.length; i++){......assets[i] = new Image();......assets[i].src = adImages[i];......assets[i].onload = function(){........assetsLoaded++;........if(assetsLoaded == assets.length){..........initThis();........}......}....}..}......function initThis(){.. //TweenMax.delayedCall(0.2, introFrame);...TweenMax.set(['#disc_panel', '#frame2','#frame3','#headline1','#headline2','#headline3','#headline4'], { autoAlpha:0 });...addListeners()

Chrome Cache Entry: 1058

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:H+uZYn:euZYn
MD5:	46DF3E5E2D15256CA16616EBFDA5427F
SHA1:	BE8F9B307E458075DA0D43585A05F1D451469182
SHA-256:	AF3248D0B278571EFF9A22F8ED1CEB54B70D202B44FD70ECA4CA13A5771CECC3
SHA-512:	88FBCC0A92317A0BADE7D4B72C023A16792F3728443075BF4B1767C8A55258836B54D56B24EABE36AE4EF240F796B58B8F1EA10C7E3C146BDE89882FC9ADE302
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmMFfJ5XWa_sBIFDZFhlU4=?alt=proto
Preview:	CgkKBw2RYZVOGgA=

Chrome Cache Entry: 1059

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4726)
Category:	downloaded
Size (bytes):	5759
Entropy (8bit):	5.3221292113936975
Encrypted:	false
SSDEEP:	96:ODUVMpFwpyb6c1kSZliNSrZO601YfwDR+U4kgANgxrWHGO9LEU+48LZYizx:OYCpy4b6qDiNSrZO601Yfwd+UhgW0rbp
MD5:	74D03DFA1A48E2D0445AA86E4EED7CCD
SHA1:	194DE42F083CEB4831B721BEDA1D9D8FD619004A
SHA-256:	E84D196D829630CAB5FDA4351097245A0B67CA4A7002C46A6C0D4EDDD9B89CB3
SHA-512:	8460E9EC4A3A0DF337D26246944C1B59AE50BE373E92ECC5A95B35E0CC58110E569ED3E6CFF73DBF2BA58235420A1D77F77D3A9D344B9398392F73B5E1A10B5F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uc/finance/nimbus/_app/immutable/chunks/index.DsErXEH0.js
Preview:	var Q=Object.defineProperty;var T=(t,e,n)=>e in t?Q(t,e,{enumerable:!0,configurable:!0,writable:!0,value:n}):t[e]=n;var I=(t,e,n)=>(T(t,typeof e!="symbol"?e+"":e,n),n);import{n as w,a8 as W,i as G,a9 as X,v as E,P as O,$ as j,aa as Y,U as N,ab as V,f as Z,ac as tt,ad as et,ae as nt,af as it,ag as q,ah as st,ai as rt,aj as at,ak as ft,al as ot}from"./scheduler.ErneftFr.js";const H=typeof window<"u";let U=H?()=>window.performance.now():()=>Date.now(),B=H?t=>requestAnimationFrame(t):w;const k=new Set;function J(t){k.forEach(e=>{e.c(t)\|\|(k.delete(e),e.f())}),k.size!==0&&B(J)}function D(t){let e;return k.size===0&&B(J),{promise:new Promise(n=>{k.add(e={c:t,f:n})}),abort(){k.delete(e)}}}const M=new Map;let R=0;function ut(t){let e=5381,n=t.length;for(;n--;)e=(e<<5)-e^t.charCodeAt(n);return e>>>0}function lt(t,e){const n={stylesheet:X(e),rules:{}};return M.set(t,n),n}function z(t,e,n,s,u,a,l,i=0){const c=16.666/s;let r=`{.`;for(let $=0;$<=1;$+=c){const m=e+(n-e)a($);r+=$100+`%{${l(m,1-m)}}.

Chrome Cache Entry: 1060

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=17&external_user_id=P1GEqyyk_OouTnS49Tqs&puid=&us_privacy=1YNN
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1061

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	64804
Entropy (8bit):	7.987545170066086
Encrypted:	false
SSDEEP:	1536:sBoQMyd20GM/c34McA4dRorrwQRH4npGQWofUlCUhu2r:sBHA0GKcIMhcRor/VxQalH3
MD5:	7D2013F17010248AE60E3FF244FC3520
SHA1:	B790B0F172868D834B248D4FA28E496FBF37DB9C
SHA-256:	847BB52EFDF0F13ED09A00ED6A0F015396CE32282B2DA0B6E3C7C6BCB2E7C92F
SHA-512:	161B9B6165FBFF78A8B156F9600F05B4AE6DAEB67B644D37D1FA9BE1198F173A25C194892EDFFDE2A371CC31A4688037B73C491EF2BB89ACA66AEB9133878DA9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/E6u05j9oD3XEytswhdrDKg--~B/Zmk9c3RyaW07aD0zNjk7cT04MDt3PTY1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/8edcd1c0-ed10-11ee-af3d-2a25f088a621.cf.webp
Preview:	RIFF....WEBPVP8X.... ......p..ICCPH......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 1062

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsshhBKIBKFKQFttvLGS_Gk2U4sfRIjmsBsIa6EP0D5wrHFUwUpz3OR-x5lKeCiGTRlHlCyppXXrxm3e4tK256_CIto40eBo4cngBn2WCjUyzAs8IBu8Yqwp9lEjf_v-mQj4A3qQxwweJdESo9yQASvWfdNBU9XukvA&sai=AMfl-YTrC9aFpuqc8Z0c9JoLwBuNBHjGnCmwNP_jGi57d6JPQpnJTaMFB3z-WzQlYlkDOrUlM4DR8h-cRB9XbOVoA-Q9Ehd5i_0YUBU&sig=Cg0ArKJSzC6mYO6qHpigEAE&cid=CAQSKQB7FLtqRiu4_1BTGvydwYBSRxU3mf_IRPh99-5R67iJFZm0AOkP2Cl9GAE&id=lidar2&mcvt=1080&p=0,0,250,970&mtos=1080,1080,1080,1080,1080&tos=1080,0,0,0,0&v=20240327&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=2614054953&rs=5&la=1&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=760569900&rst=1711672896556&rpt=3224&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 1063

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1763)
Category:	downloaded
Size (bytes):	39038
Entropy (8bit):	5.430664050428052
Encrypted:	false
SSDEEP:	768:a5/nVk+G9hMlWTSwx832cQyHaSaSmAjiT:a1Vk+G6lWuwx8fLabSNU
MD5:	E073798C657A0FC59453B8B6ADEDCEBA
SHA1:	401AB66A92A6716CD4C981894D47F679FC1AE9AB
SHA-256:	EB66C7C9D097D5BA414230F422484C17FA6F37157D30E1DED2CC5F65A9667987
SHA-512:	866345625C19C0256BE9BF9F383291E645C6B64124A43BDD1C02F92FC2AE0F0AD985A15FF39319456B679B73B058290C0A0FE10C073D76F2C5976D8ED8D84A49
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/62bHydCX.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},r=ba(this),t=function(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&p(c,a,{configurable:!0,writable:!0,value:b})}};.t("Symbol",function(a){if(a)return a;var b=function(h,f){this.Ca=h;p(this,"description",{configurable:!0,writable:!0,

Chrome Cache Entry: 1065

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1790), with no line terminators
Category:	downloaded
Size (bytes):	1790
Entropy (8bit):	5.185874328391426
Encrypted:	false
SSDEEP:	24:GomGpYKxYSo6L23eUlE5887uq3eOydsQ3hHJ/MKMsHO8KVLM:hbYtu2uh5P945hHJ/MXsHgA
MD5:	6B465A3B59770D1276DF4F9C57A9B05F
SHA1:	6B8B0C3022B5EC2ECA97428DBB9821ABBCFF2F8C
SHA-256:	15C0ACE66C5FB81FB364AF4007ADA6F0259C37CBD93DC9A2AA55E9AD055261C5
SHA-512:	1B9D8856777320111E28AFEB0045A316E5A4692F1D4F466415408F90AED5E181167D3967B23912F9933E903F291B54A0D4B6D738BB82201D964B3D21471075EC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/nel/css/tdv2-applet-canvass.CanvassMessage.atomic.ltr.6b465a3b59770d1276df4f9c57a9b05f.min.css
Preview:	#atomic .Bd,.Bd{border-width:1px}#atomic .Bd,.Bd,.BdT{border-style:solid}#atomic .Bdc$\#232a31${border-color:#232a31}#atomic .Bdc$t${border-color:transparent}#atomic .Bdtc$\#222${border-top-color:#222}#atomic .Bdw$2px${border-width:2px}#atomic .Bdtw$2px${border-top-width:2px}#atomic .Bdrs$24px${border-radius:24px}#atomic .Bgc$\#232a31$\:f:focus,#atomic .Bgc$\#232a31$\:h:hover{background-color:#232a31}#atomic .C$\#232a31${color:#232a31}#atomic .C$\#828c93${color:#828c93}#atomic .C$\$c-fuji-blue-1-a${color:#188fff}#atomic .C$\#fff$\:f:focus,#atomic .C$\#fff$\:h:hover{color:#fff}#atomic .D$ib${display:inline-block}#atomic .Fw$500${font-weight:500}#atomic .Fw$b${font-weight:700}#atomic .Fz$14px${font-size:14px}#atomic .Fz$16px${font-size:16px}#atomic .Lh$20px${line-height:20px}#atomic .Mx$a${margin-left:auto;margin-right:auto}#atomic .Mt$20px${margin-top:20px}#atomic .Mt$24px${margin-top:24px}#atomic .O$n$\!{outline:none!important}#atomic .T\(0

Chrome Cache Entry: 1066

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	5.06923567775942
Encrypted:	false
SSDEEP:	3:YEOBHewLDS2qmw4:YEOB+1rb4
MD5:	8D56CA9BD75E9297BA37A357CF8A841C
SHA1:	10A1DB74DECB3480DCA0E2E8D60B6ECE292C7E78
SHA-256:	AABA182297C6511A3A4AE037EE56C53E76737EFFF385B7DAE1B60A0F99F14B34
SHA-512:	598CC9C83899A4D529B9F6ADCAE64325D959840009D73059CFA5AF9156D30D8D249673172A7BB3D9EE2338B626F6CA6082890BD62F58A747BA877521896F8DD3
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A"}

Chrome Cache Entry: 1067

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1221
Entropy (8bit):	5.055527013428358
Encrypted:	false
SSDEEP:	24:tCbYLdLGSKGQlnGMGlTIqdhg1a4x0KKGSyFzxIS6rjAdIS6CPAiIS6iAytgI:DJGSdQMH76k96/zLd
MD5:	9398FFA95E2FFA35A1335A00D6E40260
SHA1:	F13702824ED73C7275405F64EEB50F77A7477C32
SHA-256:	DCD70A9273FE1599DC9528B90566DC1421E1CCB6AACF178C6D3085D8DF2A194E
SHA-512:	D4C3432D6B1BC70697C083286D58A7EE462E8486CAECD1CACE4153EBC8E427FF9274EC73C902001AC8F6B9AFA5E96364EE8563233CEEFF6B4B375DC6E99DEECF
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/weather-svg/RAIN.svg
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <path d="M44 15.23c0 8.462-6.77 15.232-15.23 15.232H9.307C4.23 30.462 0 26.23 0 21.154s4.23-9.308 9.308-9.308c1.523 0 3.046.339 4.4 1.185C14.892 5.585 21.154 0 28.769 0 37.231 0 44 6.77 44 15.23z" id="b"/>. </defs>. <g fill="none" fill-rule="nonzero">. <g transform="translate(2 2)">. <use fill="url(#a)" xlink:href="#b"/>. <use fill-opacity=".05" fill="#7DCBFF" xlink:href="#b"/>. </g>. <path d="M41.914 42.972c-.612 2.255-2.858 3.485-4.9 2.87-2.244-.615-3.47-2.87-2.857-4.92C34.565 38.87 39.67 36 39.67 36s2.857 4.921 2.245 6.972zM27.914 42.972c-.612 2.255-2.858 3.485-4.9 2.87-2.244-.615-3.47-2.87-2.857-4.92C2

Chrome Cache Entry: 1068

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://a5589.casalemedia.com/impression/v2/1057986/85/co30sf1lk6ksdr06ud1g/2ec7436d-80ce-4942-9c83-5a9e0e4475fb?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1711673492&profileIDs=&creativeID=e9e66a&pubID=201422&format=banner&channel=site
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1069

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3780
Entropy (8bit):	5.165524438035376
Encrypted:	false
SSDEEP:	96:JNOBvNj9NOBbEfCvnEVSNnxiCBNOuo1eDh:JNONJNigaDNxiENC+
MD5:	99A9E9A1599E9C5E4C0D944BE911379C
SHA1:	3D87006C8C0EEBE60F0A6B5E7A8E254F215E72C3
SHA-256:	4177E2A3CC094AE55630F7A866A189C728164074B19AC45C1A9E2E4F339CDBD9
SHA-512:	80C565E39C0F2365CCBF450E26B7013C772C4E3B7092855FE9D1D07F7514D555A2C2DCCD49101BA6BC45C77D93359E96D22B0FC93A34E5AE54D81E97C13B85BB
Malicious:	false
Reputation:	low
URL:	https://query2.finance.yahoo.com/v1/finance/trending/US?count=5&useQuotes=true&fields=logoUrl%2CregularMarketChangePercent
Preview:	{"finance":{"result":[{"count":5,"quotes":[{"language":"en-US","region":"US","quoteType":"EQUITY","typeDisp":"Equity","quoteSourceName":"Delayed Quote","triggerable":false,"customPriceAlertConfidence":"LOW","trendingScore":39.0434943695718,"hasPrePostMarketData":true,"firstTradeDateMilliseconds":1601472600000,"priceHint":2,"regularMarketChangePercent":-6.11995,"regularMarketTime":1711656002,"exchange":"NYQ","market":"us_market","fullExchangeName":"NYSE","marketState":"POSTPOST","sourceInterval":15,"exchangeDataDelayedBy":0,"exchangeTimezoneName":"America/New_York","exchangeTimezoneShortName":"EDT","gmtOffSetMilliseconds":-14400000,"esgPopulated":false,"tradeable":false,"cryptoTradeable":false,"symbol":"PLTR"},{"language":"en-US","region":"US","quoteType":"EQUITY","typeDisp":"Equity","quoteSourceName":"Delayed Quote","triggerable":false,"customPriceAlertConfidence":"LOW","trendingScore":35.44519774212569,"hasPrePostMarketData":true,"firstTradeDateMilliseconds":1479306600000,"priceHint":

Chrome Cache Entry: 1070

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 72, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1346
Entropy (8bit):	7.811113028134073
Encrypted:	false
SSDEEP:	24:DzhV0C4bz+BXH/Adox88K9LDNiF6/LodoLopZYGBLn4AcXGKgF13+2HBoHVMnozC:D9jXBFxfKFljRL0YGBrLcW7F13+MBoHC
MD5:	CD166981C96C6D0F4B5A7D798C25878E
SHA1:	09031C4013138BB8BD54AB9092AC59AA47D7C60C
SHA-256:	0FDEFE26BAC6A6B0B06FE67984582F887AF70B7DA25D6CB1B401F9074DB58338
SHA-512:	6D217A81DFDCFD601C3F6D9CDE3F1BE0C4D4FFEF85B02B06208014101456CA730EF759BD51637966C9F2572080B79E8A2F9D45A2087DDC40DF015F8C052DA501
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png
Preview:	.PNG........IHDR.......H............PLTEGpLa..a..a..r..`..`..`..`..b..a..`..e..`....l.....tRNS.T{j....=...Pau>....IDATx...#).F........'.&.1..5.-...t.....9....]0.......3..........,o..8p...r^<v....v.n.....Z.....;..p...%kw..y.;p..~w.H..m..%kw`.....)%...V.z....n.%.}.........G.C....Q...W......G:_]..r4..^.Bh.$.F.;R.,+.R........."s..l.T. ..I.5..H..N.c>.Q......<...G.w........U.]R.!pP.Y.:T..Q.H.qU.......t....\|...hD...'...?.YEe......A.U.t........F.,1.:...:lU....k M.b...;...{.........b..F..O...i_.?.V..~."....>..h.da...e.I.....5.\..#..../7....1...t.8....U...... g9nZ..lR..d.\|...l.T..@.$J......E.J.....%kt.j.s.J.0.d..7...3O.........I..u..1p6$.X....$f .N.b.j..t................ZqI...A)@...9qn..zj.\|F...<...S\...$.t.$3=.C.....lV.....mIm....eKo.A.E.`.......do.._..(FRg..[....<~...a...Y;..-`o....2...s..ZK\~/G.g.-Z..p0..m..../H.......%....o.;.xU_.q^.(......&%..jn...n:..dE.g6..y-2'n..... .q..e``.^.$.^...X\| ..(>!.EvI.......r.I.N...;........Q...+....x.Uw....

Chrome Cache Entry: 1071

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1268)
Category:	downloaded
Size (bytes):	1269
Entropy (8bit):	5.11904168243567
Encrypted:	false
SSDEEP:	24:+06pL8mgnS7KJB34LT2+LbngEXnLbd91LT2+Lbw7LbxTULT2+Lb27LbMz6hwLHB4:+06mmgeM14++HngEXnHdb++Hw7HG++H+
MD5:	14CFE3E9A8362A0640E1DF78A26C7E8E
SHA1:	348C68999B5D326B474726806BD7CC32E5A60ED1
SHA-256:	273747C5217A9782A7C57320C323AD1E31CB066BC61FFA10613AA61A86C980E1
SHA-512:	CF27F50BA68BA6B34CAC402849B759C17B2A9B2AB8CB75F4B5F4ACD145171E91A36F0BCE0C447FBF5D4F3C539882A123E041CCD955DBCD75CF47F6E3B29038A8
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/i13nUtil.0wCphNmh.js
Preview:	const a=["dock-rmp","dock-upsell-rmp-dialog","footer-rmp"],c=n=>!n\|\|typeof n!="object"?"":Object.keys(n).map(e=>n[e]!==void 0&&`${e}:${encodeURIComponent(n[e])}`).filter(Boolean).join(";");function s(n,e,i,o){if(window&&window.rapidInstance&&typeof window.rapidInstance.beaconClick=="function"){const t=Object.assign({},{etrg:"click"},i.pp);delete i.pp,window.rapidInstance.beaconClick(n,e\|\|"-",i._p\|\|0,i,i.outcm\|\|"clicked",o,{pp:t})}else typeof o=="function"&&o()}function d(n,e){window&&window.rapidInstance&&typeof window.rapidInstance.beaconEvent=="function"&&window.rapidInstance.beaconEvent(n,e,e.outcm\|\|"event")}function r(n){window&&window.rapidInstance&&typeof window.rapidInstance.beaconPerformanceData=="function"&&window.rapidInstance.beaconPerformanceData({perf_usertime:{utm:n}})}function p(){const n="nimbus-app",e="nimbus-finheader",{rapidInstance:i}=window;i&&[n,e,...a].forEach(o=>{i.isModuleTracked(o)?i.refreshModule(o,!1):i.addModulesWithViewability(o,!1)})}const w=(n,{sec:e="co

Chrome Cache Entry: 1072

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	55132
Entropy (8bit):	7.991030014518919
Encrypted:	true
SSDEEP:	1536:3UVowcNWuabvJ2e9vtK61g8E42GMXuXsK/:3UC5NkbR2e9oEg8EKM+8U
MD5:	0046A161620FEEC961636C3A43DD5BB2
SHA1:	C36DCA682DAF20BCD969DBDC5A9F01E42463D6C7
SHA-256:	F69C07F69C54E5004E794793DCCEB1874512D5E114FDE3786DF4D9B1CE265156
SHA-512:	72A1FEAEA6F0662191EA55F7AC4CCE32126FD395291E12CEBFE2CB048EA895930DA77CE76DF000CCD51EFD4F477BDFB07BA9920C86F14D851EE43E8FC754B56E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/83XTQMluFLe.mjd0Wi63yg--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/16757f70-ed5b-11ee-adfd-f9a7606cf807.cf.webp
Preview:	RIFFT...WEBPVP8X.... .........ICCP0......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 .........*....>...B!.it.....X..'..V._4...3../.o..~..g..q.h..........n~....7............v?....e...g..............\.Y...w./......d~........].7.?.?....\|>Y.....a.........?..\|..I...S...{...O.o._.}.........W......./.......}..._.....?....@?..b.........../..........?..\|.....W..@=q.......v.........?.?.\|..K.k...?....s.[./..._......q.......O..K.?....9./...?....E.g.....G..........._._...?..U

Chrome Cache Entry: 1074

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46194)
Category:	downloaded
Size (bytes):	46234
Entropy (8bit):	5.3615941162090675
Encrypted:	false
SSDEEP:	768:YMBjUp8ZteSz7+HAh3M5RPfLHprHnsWFX95n9CWgta:RUp6HzyH3rHWW6Wgta
MD5:	EFF1F53869F0D1134CCBAB57FF94938E
SHA1:	8C0968CFF94F1AD7A5CFDFBCAD256CD139E872ED
SHA-256:	FADD32E174582E14E93685BA928417E2B52B2DED9B5F7082FC38C3413A266AC4
SHA-512:	F3E4CF78F9CFF5B48B62019A02D0C46B325E479F78E4C9941F745A3F9F0E7AAE50C9261086760B139B836E070A1CB3F971E1B8AF4B452D95ABD59DC21F62E432
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/art/js/caas.eff1f53869f0d1134ccbab57ff94938e.js
Preview:	!function(){"use strict";var e=function(){return e=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arguments[n])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},e.apply(this,arguments)};"function"==typeof SuppressedError&&SuppressedError;var t=function(e){try{return!!e()}catch(e){return!0}},n=!t((function(){var e=function(){}.bind();return"function"!=typeof e\|\|e.hasOwnProperty("prototype")})),r=Function.prototype,i=r.call,o=n&&r.bind.bind(i,i),a=n?o:function(e){return function(){return i.apply(e,arguments)}},s=a({}.toString),u=a("".slice),c=function(e){return u(s(e),8,-1)},f=Object,l=a("".split),h=t((function(){return!f("z").propertyIsEnumerable(0)}))?function(e){return"String"===c(e)?l(e,""):f(e)}:f,p=function(e){return null==e},d=TypeError,v=function(e){if(p(e))throw new d("Can't call method on "+e);return e},g=function(e){return h(v(e))},m="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeo

Chrome Cache Entry: 1075

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 1076

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1087x974, components 3
Category:	downloaded
Size (bytes):	20959
Entropy (8bit):	6.673111203476535
Encrypted:	false
SSDEEP:	384:e09LJnJpuTSF1R3cqTv/WLy2INp4KH5vc9MeVs:dNjuK3ckmLyRD4KZkPs
MD5:	001935EA9AC19C974AC3D8E76A94E06E
SHA1:	EEB9C259B9E96CFA14B1A73CA4AA52EED819C525
SHA-256:	744CCE4BAFDA2C4CCEBEF57E4681F2CF3AF23291BD12609F3C25DC474E6A1F64
SHA-512:	29D55F627439905DB9E5A4749AE17FFA46ABB72AC3564F94CFF1BA3019B56BF4ADFDACA10331DED71C236F17553D26DE77BD6BFE4CA6270AF733CB53C91BD983
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/shopping?q=tbn:ANd9GcTppShgCZsAjiedt0H6n_8n7KVnTONvbKWXlAz810OX2FSQBKH3&usqp=CAI
Preview:	......JFIF......................................... ... .....0 &1...!:*155566.+:A;6<1343...........+...+777+++++7+10+++7.8+-+--1++-+-++++-+++++++-+++++++........?..".......................................B......................!1..AQaq..."2.....BR....bCr#S......3s$Dc..............................."......................1.!AQ.2."a............?...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 1077

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (3983)
Category:	downloaded
Size (bytes):	3984
Entropy (8bit):	5.245598910847637
Encrypted:	false
SSDEEP:	96:NUnyi7X9nuZbMjtckX73BaHrP0dL4hifsT34XmT1YrbJH:NUyi7X9uuxc+wL0J4QsT34XmT1e
MD5:	A7D758D1658CE573DDEB3B0CEBE50B10
SHA1:	04CBDB9E03345F37A0D6CD9996ABAFF1270CA0D5
SHA-256:	8293E06F4043E66F0328A0047CA131F1BDA147E42A116AA4012FF491284CC300
SHA-512:	3D6E709E2934040A20BDB3CE0E6EED2EB735C2DBBAD98DFFD9E70B13607BF26496E047CDF9F5A3C1637B3B52F99B0931C6B6AF3DE388C84D5B153C2953B3F25A
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/logUtil.nPJvQAyt.js
Preview:	import{b as R,a as P,h as v}from"./commonUtil.Bb2Cnbsk.js";const A=({label:e,request:r=null,response:t=null,context:s,time:o})=>{typeof window<"u"\|\|(s.parent?s.parent().then(({stores:a,session:i})=>{const{isDebug:f=!1}=i;f&&(console.log(JSON.stringify({duration:o[1]-o[0],label:e,request:r,response:t,time:o})),a.debug.addPerf({label:e,request:r,response:t,time:o}))}):(s.locals\|\|(s.locals={}),s.locals.perf\|\|(s.locals.perf=[]),s.locals.perf.push({label:e,request:r,response:t,time:o})))};function y(e,r){console.error("Logger Error:",e,r)}function E(e,r){if(e.name==="AbortError"){const t=new Error("Request timed out",{cause:e});throw y({message:"Request timed out",status:408},r),t}throw y(e,r),e}function L(e,{includeResponse:r=!1}={}){if(!e.ok){const t=new Error(e.statusText);throw t.status=e.status,t}return e.text().then(t=>{let s=t;try{s=JSON.parse(t)}catch{}return r?[s,e]:s})}function N(e){return(r,t)=>{const s=typeof e=="function"?e:fetch,o=t.timeout\|\|3e3,a=new AbortController,i=setTime

Chrome Cache Entry: 1078

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2406)
Category:	downloaded
Size (bytes):	4135
Entropy (8bit):	5.400061384025375
Encrypted:	false
SSDEEP:	96:BdvzQYh76QVWlP/Or3VazkP2TBxj6kDxx1vryS159O84+SGyDZTxSf0v:BdvMXlpW0kOTflDBOQB4+PkVxScv
MD5:	706182B3F15765C096ED8660374C12BF
SHA1:	14334D589B9812B73CA593807E3601D9EA7931C6
SHA-256:	C056DC1F3BCFED323FFFCE5688EAFF6D921CF4C33905D96C69ED10FF34DA0565
SHA-512:	1A82E616812D882E76DBA20760BDC0571C250ED6F1F8242ABB4CE90290CC968A1A444F6A2BE9557DDC0467BCE72E29D050622C3999B1777578D5F37435D4F6A1
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/js/car.js
Preview:	/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var e=this\|\|self,f=function(a){return a};/ . . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}function h(a){return-1===a.toString().indexOf("`")}const k=h(a=>a``)\|\|h(a=>a`\0`)\|\|h(a=>a`\n`)\|\|h(a=>a`\u0000`),l=g``&&g`\0`&&g`\n`&&g`\u0000`;var m;var p=class{constructor(a){if(n!==n)throw Error("TrustedResourceUrl is not meant to be built directly");this.l=a}toString(){return this.l+""}},n={},q=function(a){if(void 0===m){var b=null;var d=e.trustedTypes;if(d&&d.createPolicy)try{b=d.createPolicy("goog#html",{createHTML:f,createScript:f,createScriptURL:f})}catch(c){e.console&&e.console.error(c.message)}m=b}a=(b=m)?b.createScriptURL(a):a;return new p(a)};var t=class{constructor(a){if(r!==r)throw Error("SafeUrl is not meant to be built directly");this.j=a}toString(){return this.j.toString()}},r={};new t("about:invalid#zClosurez");new t("about:blank")

Chrome Cache Entry: 1079

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	236
Entropy (8bit):	4.937354287110554
Encrypted:	false
SSDEEP:	6:q8YoKA47zZBK/TKACFr5SY/dONWLcTbKHqLWt8o7Dvln8HpFE:1Kp/6KF5SYJRQi7DOW
MD5:	146EAF85C344CEE008C91F2685DBF82F
SHA1:	42D63529A2C0F2F9CC2B797622F6A3A71CAE3E66
SHA-256:	9625379BADD4849610DFE6C15453CDF0C0071264C90EEF177307FAC094D2AA6C
SHA-512:	2251BB035F0032928F3B8EB47D260BE9F4A8B15BEE896F308ED1F4316F8F2A194F2CD23A6D9F4780DD92E5221C99F6534BCD7F1D6C613788800ED05E94AC0E2A
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/_commonjsHelpers.Cpj98o6Y.js
Preview:	var o=typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{};function l(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}export{o as c,l as g};.

Chrome Cache Entry: 1080

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4301)
Category:	downloaded
Size (bytes):	4366
Entropy (8bit):	5.114587794308763
Encrypted:	false
SSDEEP:	96:VCARZPBYLvx8GtxGdhoS13ziteqYxis2m4aB8TVf1pQsLqIs:VCMPyDxP+dqS13aed5wvf1pQT
MD5:	CD0AD2D50A7E4A574B8D749F22E2FFB1
SHA1:	6CCC3309390A8C2F27975FDEC712ADF7B26DB9AF
SHA-256:	E1897197C32BE441C5C75426C1DF80241EAFCEB7B8A3027CD40A148A809870FF
SHA-512:	C61F8388912AF72D5711D9C595A51F43F793EC704544B869A738CAF25B051C0E68DB807E5E392F27A3D31544FCD05A15956FF73E02D4A043A386E23AEB8241AB
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/videojs-overlay/3.0.0/videojs-overlay.min.js
Preview:	/! @name videojs-overlay @version 3.0.0 @license Apache-2.0 /.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("video.js")):"function"==typeof define&&define.amd?define(["video.js"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).videojsOverlay=e(t.videojs)}(this,(function(t){"use strict";function e(t){return t&&"object"==typeof t&&"default"in t?t:{default:t}}var s=e(t);const i={align:"top-left",class:"",content:"This overlay will show up while the video is playing",debug:!1,showBackground:!0,attachToControlBar:!1,overlays:[{start:"playing",end:"paused"}]},n=s.default.getComponent("Component"),o=s.default.dom\|\|s.default,r=s.default.registerPlugin\|\|s.default.plugin,h=t=>"number"==typeof t&&t==t,a=t=>"string"==typeof t&&/^\S+$/.test(t);class d extends n{constructor(t,e){super(t,e),["start","end"].forEach((t=>{const e=this.options_[t];if(h(e))this[t+"Event_"]="timeupdate";else if(a(e))this[t+"Event_"]=e;else if("start"===t)throw new E

Chrome Cache Entry: 1081

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	47827
Entropy (8bit):	7.972818950512997
Encrypted:	false
SSDEEP:	768:64LmyaT4Rv3hESnlr1fTPe675xg9vFZdL2VxF1sF9BqksOXm3ZsBaAFOUTvXan:RY0vBv7Vs9vFj2UhXD/Uzn
MD5:	15BF088832914A423022AE6FDF6ACA0C
SHA1:	6A5B8E52DF4E58B81CF702EDF5F5F20DB261B7AF
SHA-256:	64C306866D4DFC977D841682B5299B5A49EA6F13E4A5BC2083D63D402CA2264E
SHA-512:	E0936B7C607D298C0BDC306B4A0CAAFFC16A22F5C5534133A98FC92F021630A04452C892533E7F3292602456790F1766398E2A574BBB975D1EAEF0FA945C88BE
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.....................................................................................................................B..........................!.1AQ.."2aq..#B........$R.3C.br.%&.5S.................................1.......................!1...A.."#Q2.3Ca$qBR.4br............?..5...J.9.zYG..L..'R.d.;..."}..u2R.'8W.&.....l.Y.$=$.j..T].M....L.n.7........SR.%.W....v.db...[RR..H........."..0\-....M(.R..,F^u..%......k\|;.U.!,...q......a..N9`...i..2H9).TW[.......%.........a...U..t.dV.l..!.......Db).%._.....T!$.]...3c.3.\|T!.g.. ..)i.F..Wp.0..9....w6...a. ......D'.fL..M..3N...\.u.....P.`,.....le...5.J...N.%Z.~..IG.JV.Qd.c .k...T....#.:.Oi[G..4.BB...C....`.K.g?'..E.29.)z....H(Fp.TrB\|+.F.....K.#hm.q!'.sqn-....]B....?..............-..<.)SR.l.%].r<F.+..d.T.....K]....1..,a..$..R.i..P:...PH..]u=....Z....T..]_..W+M.Bq.V.....g.T[.C..w......L.e.(..H..P.....b.......YJ.q....'.T.G.P.

Chrome Cache Entry: 1082

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1083

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4348), with no line terminators
Category:	downloaded
Size (bytes):	4348
Entropy (8bit):	5.175097086994074
Encrypted:	false
SSDEEP:	96:3haIoq1mr8gYdYjeL+Pvq51pNAcllADTyBnmYCoqvpt4bIs:3uuA8gYSjeL+XI1pNZlls+CA3
MD5:	681D57E9E7CBEF5DE44544C13F8CA62E
SHA1:	65CFB6398D61FE7CAC86C90DC042095D8E3CD623
SHA-256:	EF70829B2E58AFC016C35CE9A83E2BB60AD24D6341491686EE168EE71C40123F
SHA-512:	2A131198DBB855882D7C7B687650B57133C4375FCEA4E4A86D338A78DCAEAFC18DC5477593429B6B1A599419F108F4BEBE7588BAE7C7831B5EA87D6C2BDF65C6
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-countdown-1.2.5-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-countdown",[],t):"object"==typeof exports?exports["wafer-countdown"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-countdown"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var n={};return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,n){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a functi

Chrome Cache Entry: 1084

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1085

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 65176, version 1.0
Category:	downloaded
Size (bytes):	65176
Entropy (8bit):	7.996782865840981
Encrypted:	true
SSDEEP:	1536:dJDFHWg/7CxUjbXmJ9U10h5An23d5X0LcpSOwHfvMQv:dJT/7CxUvmKgAakLcpSpHfU0
MD5:	B4DF4FCE99E5A3C3D1493112A0159071
SHA1:	D6CE384A32EC1D859406D6E4EBE3FE547DB3B82A
SHA-256:	C77AC0AA1AA3C9715CACB1FC76FEAF226E30927A9636E5C75C4DFEB75C0F8F98
SHA-512:	AF1F4EFF0DEB18BA2628D82BB6CA16D6340DC797A438B13F29929DB1548155F82FD1840D18C275438F5EC251A6E82670E2FF89477F1334E1CD45422E02E8EEDC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/ngy-fonts/YahooSans-VF-Web.woff2
Preview:	wOF2..............^............................../......z?HVAR.w.`?STAT..../d......O..6.0..F.6.$..f. ..\|..9[.G....h,j+n..mD.gn.V....<..c1=..2..~.....v.^........%..[3.......f..f..?.aD.......y..T..;O.s~.......r~{.?..t.v. .D.K_...tV...7.J..-2.:F.DDD....;.j.....uRh.e<.(..JD..g.SE..6<...4..{Q....4a!..D...)`..B5..%.9..%a.....ga..2z.l....J......l....y"[.W ..,# .gL.3~..Y.S.sx..7.b....TAT..!..~6<..`....\|E...S.W.\|7..^.a....%2.KJ.Iu;...Z3".\|.!..D..!,.S.."W]z..O.>..`r...PJ,.9)D..k<n.@.%..^N...b...`.E..w.#........SE.'..M.vG.e'.2.._......m....w494.._........~.}N...^h...QmF.;.~U...q.........u.Q....p.5.l.(...U.~.....5c.3q:..[S..s.y..(J...V.....bc.haTY.Qg..W.V\xQi......g.....'\.o.".....=..BI..A.d\|....7'&.!...o..5D;K..W<tJ j..Cs+..%.&.0.........>N.1...).aP..G.co..6...s.c.....?6..&Q...`lx_.)....0u.....}.1...6..&mv...D&....M.. .L..aXDd.D.)Md...I.AL.I....5}.-./n3.tS..5.q..%.~.r^h.e.n./..CJ69... .......T..g.....}.3.z....%.7.":%......'Z4\.....0....M?.NE.8)ZjHVr.

Chrome Cache Entry: 1087

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1088

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (21640)
Category:	downloaded
Size (bytes):	21642
Entropy (8bit):	5.533857771554831
Encrypted:	false
SSDEEP:	384:zr4M6/dulmpgJIXw0XhYYT2YXXDkhdUITdWZWJpBof8jEfYjnFAAaQMOM/Adl83:zr2/Jvxn2YnDkhdUIBWsJpBe8jEyFvav
MD5:	4A784BD05F1BA395E0F814153F466480
SHA1:	E8D440FA334B0BE42A447C0AE7DE24291FAA7B09
SHA-256:	C1243D6B807511C6E659ED8584F61518306BC59D96F2AE629C301DFBB86597DB
SHA-512:	8621252CAD94377555B7BD3C11AE23C89D2422B5D0BA722A1D7B5F124C38E9769D993B6404B6B8B2A30432BBA1B03B619DB916FDCC3EC03B930992D86D59FE5D
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/Footer.D9hL8FKo.js
Preview:	import{s as E1,w as P,k as M,n as Y,i as u,X as b1,Y as M1,f as w,p as C,l as h,D as t2,e as k,b as E,t as X,d as b,j as H,h as z,O as P1,M as W1,y as x1,T as x,m as e2}from"./scheduler.ErneftFr.js";import{S as H1,i as O1,c as O,b as T,m as I,t as _,a as m,d as F,g as o1,e as a1}from"./index.DsErXEH0.js";import{e as e1,u as l2,o as n2}from"./each.DufB99sH.js";import{g as r2}from"./spread.CgU5AtxT.js";import{t as Z,n as o2,o as a2,g as s2}from"./commonUtil.Bb2Cnbsk.js";import{L as Q}from"./Link.DZ6I_oHl.js";import{P as i2}from"./PrivacyLinks.Bqj66uD6.js";import{I as f2}from"./Icon.CDBsrPKz.js";function A1(o){let l,n,t;return{c(){l=b1("svg"),n=b1("path"),t=b1("path"),this.h()},l(e){l=M1(e,"svg",{xmlns:!0,width:!0,height:!0,viewBox:!0,fill:!0});var a=w(l);n=M1(a,"path",{d:!0,fill:!0}),w(n).forEach(u),t=M1(a,"path",{d:!0,fill:!0}),w(t).forEach(u),a.forEach(u),this.h()},h(){C(n,"d","M20.2295 5.28637V6.29254C19.6515 5.54398 18.5813 5.02876 17.3418 5.02876C14.4123 5.02876 12.2322 7.62015 12.2

Chrome Cache Entry: 1089

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=18&expiration=1727570499&external_user_id=1186a2d5-5631-4997-9cd5-d010d9cb78b1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1090

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	5.084962500721159
Encrypted:	false
SSDEEP:	3:YEOBHRQGV8B4/iY:YEOBxtiY
MD5:	6054205AB5C4C8073BD8AA04C271E2AF
SHA1:	AC52469FF983DC607F87F4B91AEFB1E65679E82F
SHA-256:	A1D955F3AB5EA04E18002A6B9FAD6D9979A6E235AAEE165A8D5DD09F8B83715A
SHA-512:	84D390B51B85FE0B8C344588E8BB6674462E10E2034A57FE9BB138C232C68352C7537BBB1D1F3DADEB7AB27A211501F3F978D821CEE92BF95E9C55D1990D3B38
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A"}

Chrome Cache Entry: 1091

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 15, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	109
Entropy (8bit):	4.946880794698882
Encrypted:	false
SSDEEP:	3:yionv//thPlmwtmllC/sRwJYrAaDt/s49/H1p:6v/lhPjUK/sSWsQGidp
MD5:	8C7C476AC28727B21040351FA3006C59
SHA1:	D844A6F03DF6EB714C1D7E76EA6D4306D0D39354
SHA-256:	5C99DC27D465B2F8425DAEE704098E7335A880B4C757BFDDED09721B9054D64D
SHA-512:	8B5F861280B1455AC08FD6D55F464F2297F973DFB4988D0B30E2F12E6B446417AC6C037CC5A6A1A5FF5BA07D54249B9141B0F97A87DFCEAD2A1899416952F2F2
Malicious:	false
Reputation:	low
URL:	https://c.evidon.com/icon/box_19_top-right.png
Preview:	.PNG........IHDR.............1.......PLTE......U\|.l....tRNS...0J....IDAT..c`...X1Flb....I..zn......IEND.B`.

Chrome Cache Entry: 1092

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	214066
Entropy (8bit):	5.517234509253662
Encrypted:	false
SSDEEP:	6144:cOx/5BfZivaPlFtMxnNk9jWIlYvxPwXxDxmtgheoZYx56ZcarX:DxXfdPbtMxNkJWIlYvxIXxDxm5x4aarX
MD5:	C28DB7E7CC613D8E33046B05A2E4E639
SHA1:	36C19674210E43A48D09A6E81D79D0EFD90E9085
SHA-256:	C8384A441D9512EAB501490B9083E2E0D1B79483862D30A0D74CCDC634F3AAD9
SHA-512:	8442A2BEFD5C7F3ED82C4F5A04042ABE754162EE9D59EFCBAA5BD6CCB2D5AA978729970A933FC474ECE51FE5551BB9E0A7C269BF4BA0BD84C1C394D32165E49E
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/Dock.BCBFEHBF.js
Preview:	import{s as Ee,e as A,d as O,f as $,i as g,p as v,L as pe,k as D,n as ae,b as U,j,o as dn,G as ni,t as ee,h as te,A as ha,l as N,I as ft,c as Vt,M as re,u as Ht,g as Gt,a as Ut,E as Wt,m as ke,w as K,P as Et,D as Be,R as $t,a2 as on,a7 as li,a0 as ga,T as it,X as tt,Y as nt,aq as Lt,y as Mn,a3 as q,J as rl,Q as ol,W as _a,$ as Nn,ar as pi,C as pa,Z as ba,q as va}from"./scheduler.ErneftFr.js";import{S as Ie,i as Ne,c as R,b as F,m as z,t as _,a as b,d as B,g as le,e as ie,f as al,j as an}from"./index.DsErXEH0.js";import{g as Pe,t as x,F as bo,r as mt,k as sn,d as ve,z as xe,A as Oe,P as wt,M as qt,n as ii,h as ka,E as vo,J as ql,I as bi,_ as wa,$ as ya,v as Ea,Z as vi,H as ki}from"./commonUtil.Bb2Cnbsk.js";import{g as Sa}from"./globals.D0QH3NT1.js";import{e as Re,u as Tn,o as Pn}from"./each.DufB99sH.js";import{e as wi,a as Ia,b as Na,g as yi,u as Ca,f as Da,h as Ma,i as Ta}from"./initializeDock.IJCXFRBu.js";import{B as Fe}from"./Button.C10y2YT5.js";import{C as ko}from"./close.C3ug6nNR.j

Chrome Cache Entry: 1093

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20625)
Category:	downloaded
Size (bytes):	22993
Entropy (8bit):	5.3301951021645575
Encrypted:	false
SSDEEP:	384:81xT0hqVQ6GV4tv0lMGg2geQtfnHN5pOEAYfhO2Xz4wDQjZvy99gYQWwY4RXrqt:ORouMtCGsOpYfkKz4wDQjZvy/gYQWwYn
MD5:	F3278ECB1496A7868804003554C7FFB7
SHA1:	047B82665E00A6C30D1E87A77536422AAAA65DAB
SHA-256:	5D53CDA99B78468DC1DB2BED4800859C00DCAE436516F7A3FA8DCAF70D6D64C8
SHA-512:	138C99249A375E214B53E4374011116E71ADBE8818F68AAF95468114EF7A366B39BB42428E1D3E1B7364B3C4EBA2499AD95B68924C1CD5BDD504F29448980CA1
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/checksync.php?cid=8YHBJ3BJ0&cs=1&cv=37&hb=1&vsSync=1&prvid=25014%2C25082%2C25113%2C25307%2C25308%2C25309%2C25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=0&usp_consent=1&uspstring=1YNN&axid_e=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":26,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":15552000,"cc":"US","zone":" e ","coc":"NA"},"cs":"1","lookup":[],"ussyncmap":{"disable":[]},"hasSameSiteSupport":"1","csDelSS":true,"batch":{"gGroups":["apx","csm","ppt","rbcn","son","bdt","con","opx","tlx","mma","c1x","ys","sov","fb","r1","g","pb","dxu","rkt","trx","wds","crt","ayl","bs","ui","shr","lvr","yld","msn","zem","dmx","pm","som","adb","tdd","soc","adp","vm","spx","nat","ob","adt","got","mf","emx","sy","lr","ttd",58160,"mn","tlt","pub",55953,58301,"idx","dtm",57926,58267,56551,58259,58601,"ctn",58280],"ngGroups":[],"bSize":1,"time":7000},"csloggerUrl":"","optout":"optout","cslogger_host":"lg1.hb.yahoo.net","ck_del_sld_tld":false,"gdpr":false,"gdprconsent":"1","cookieDeletionList":[],"ccpa":true,"ccpaconsent":"1","info":{"domain":".hb.yahoo.net","cid":"8YHBJ3BJ0","itype":"","pid":"

Chrome Cache Entry: 1094

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (557)
Category:	downloaded
Size (bytes):	558
Entropy (8bit):	4.593867408725143
Encrypted:	false
SSDEEP:	12:eR10My84ELsxmNvRwQyRj6LFXRFNLI9hU0LXE8IFAak:q10Mh45Mwb2xBPI9CEIFAak
MD5:	B1F394C472BEB3ED175AECA5299FDF8E
SHA1:	550BEAB0DACAE6ED62C5D773B855865BFBEF4EE3
SHA-256:	BE22B8C042BBF394E7B9F6EAC022629D9BEA9C22A88B6631B13ED50372B84F1A
SHA-512:	485897C7EC9A691C86DBBC925C1CA748EF445BD58615B7C9CFFD9D5C371CDC5C0C15CF97F80609CA8B51FA8534AF0277583C7F9BA1C696662B66DA9129D62689
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/yf-unlock.DelAiXlN.js
Preview:	const c='<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path fill-rule="evenodd" d="M17 6v4h1.08c.672 0 1.008 0 1.265.13a1.2 1.2 0 0 1 .524.525c.131.257.131.593.131 1.265v8.16c0 .672 0 1.008-.13 1.265a1.2 1.2 0 0 1-.525.524c-.257.131-.593.131-1.265.131H5.92c-.672 0-1.008 0-1.265-.13a1.2 1.2 0 0 1-.524-.525C4 21.088 4 20.752 4 20.08v-8.16c0-.672 0-1.008.13-1.265a1.2 1.2 0 0 1 .525-.524C4.912 10 5.248 10 5.92 10h9.18V6c0-1.71-1.39-3.1-3.1-3.1-1.36 0-2.518.88-2.935 2.1H7.1A5.002 5.002 0 0 1 17 6" clip-rule="evenodd"/></svg>';export{c as l};.

Chrome Cache Entry: 1095

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1096

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	123
Entropy (8bit):	4.489342074487981
Encrypted:	false
SSDEEP:	3:G3RtKIce3JEZiJ2IVyumOoWRIJ6Ge1437KIce3JE9kn:k3qixVk2GeS3v
MD5:	6CA11253D7931A290BAD4037DA548325
SHA1:	3443B9CFC3D44A4B540B15BEC4D76362F5A2805C
SHA-256:	1D6422B3A86DFABD1994E8010133F8C086971E16471188A220ADE9EFAC6DB2FE
SHA-512:	08636BD5CB6D5CF38F47699CDC0F013EC261A0B5B750C7F9331656E51D51C6B93C6856B7D154079653E76FEFF917DECD1EBDFA5ECC85D771D3C88E1C49C03187
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/Spinner.C3bp4hZF.css
Preview:	div.svelte-16mmuej{display:inline-flex;align-items:center;justify-content:center}div.centered.svelte-16mmuej{display:flex}.

Chrome Cache Entry: 1097

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64099)
Category:	downloaded
Size (bytes):	64100
Entropy (8bit):	5.136706961819876
Encrypted:	false
SSDEEP:	768:XHZgpCISiVpr7igh6rUxb8Lc2wEawsEbmeC3do:XACypvighW42wEawsemA
MD5:	55609D5BB533D5008C7FB0E65C7C212E
SHA1:	0BEB234808423FF406386E5B2C05AF79FD5C928C
SHA-256:	9A64A6DA39AD91AAE1D0D9EF76EAD087A1360510ADC7EA42130C3FF9C05C2220
SHA-512:	F3CF4471CFDC1E9B5EC74396C69A254BE2A16D944EF11D1B63122BD6FB17A70A48AFBEC8E68EA1DF72F2363B6B072D38BA68B27DECFA2554504EF059A3EDD191
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/zz/combo?pj/sh/202403271817/css/libs/cu/main.css
Preview:	@font-face{font-family:"Yahoo Sans";font-display:swap;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot);src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot?#iefix) format("embedded-opentype"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.woff2) format("woff2"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.woff) format("woff");font-weight:200;font-style:normal}@font-face{font-family:"Yahoo Sans";font-display:swap;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.eot);src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.eot?#iefix) format("embedded-opentype"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff2) format("woff2"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff) format("woff");font-weight:300;font-style:normal}@font-face{font-family:"Yahoo Sans";font-display:swap;src:url(https://s.yimg.com/cv/ae/sports/font

Chrome Cache Entry: 1098

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	5.06923567775942
Encrypted:	false
SSDEEP:	3:YEOBHewLDS2qmw4:YEOB+1rb4
MD5:	8D56CA9BD75E9297BA37A357CF8A841C
SHA1:	10A1DB74DECB3480DCA0E2E8D60B6ECE292C7E78
SHA-256:	AABA182297C6511A3A4AE037EE56C53E76737EFFF385B7DAE1B60A0F99F14B34
SHA-512:	598CC9C83899A4D529B9F6ADCAE64325D959840009D73059CFA5AF9156D30D8D249673172A7BB3D9EE2338B626F6CA6082890BD62F58A747BA877521896F8DD3
Malicious:	false
Reputation:	low
Preview:	{"axid": "y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A"}

Chrome Cache Entry: 1099

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5413)
Category:	downloaded
Size (bytes):	5414
Entropy (8bit):	4.805406274084956
Encrypted:	false
SSDEEP:	48:1FfCQqwkP695zewF4LZ1Ma11imikXQ6igteFFuFLH94OYeM8aO71Ko11iVgti4EY:1FXNtm7ib8a9VN+NIG
MD5:	CE0961F222526839650DE0599A85DA30
SHA1:	2DDE52A493D11026D81593699DC5A00A6174DC4C
SHA-256:	B655311E69D939C0E330FFBB42BF4991FB782F021103E2A266A436D4F57F2BFD
SHA-512:	D179BC2761628D91AA70CF60255A971C95498F3B0E4F863B93175286E4AD19C9836D10071661781EF60BCA275D766D2CD52C3111E0541BD29F41388C6A2ECB04
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/LeadStoryItem.DcaGnGWa.css
Preview:	.container.svelte-1lph4h5.svelte-1lph4h5{display:flex;flex-direction:column;position:relative;border-radius:var(--border-radius-m);overflow:hidden;gap:var(--space-3)}.container.hero-v4-lead.svelte-1lph4h5.svelte-1lph4h5{gap:var(--space-2)}.container.svelte-1lph4h5 .thumb:focus~.content .titles h2.svelte-1lph4h5,.container.svelte-1lph4h5 .thumb:hover~.content .titles h2.svelte-1lph4h5{color:var(--hovered-emph-same)}.container.svelte-1lph4h5 .thumb:active~.content .titles h2.svelte-1lph4h5{color:var(--pressed-emph)}.container.svelte-1lph4h5 .titles-link:focus .titles h2.svelte-1lph4h5,.container.svelte-1lph4h5 .titles-link:focus .titles h3.svelte-1lph4h5,.container.svelte-1lph4h5 .titles-link:hover .titles h2.svelte-1lph4h5,.container.svelte-1lph4h5 .titles-link:hover .titles h3.svelte-1lph4h5{color:var(--hovered-emph-same);text-decoration:none}.container.svelte-1lph4h5 .titles-link:active .titles h2.svelte-1lph4h5,.container.svelte-1lph4h5 .titles-link:active .titles h3.svelte-1lph4h5{c

Chrome Cache Entry: 1100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12297)
Category:	downloaded
Size (bytes):	12298
Entropy (8bit):	5.248000639060615
Encrypted:	false
SSDEEP:	384:z1KCGiHjMyIsPehXo3sHdFsmQMAqbcQdmK:z1dGiHjZhPehm4dlQMxLd/
MD5:	B8D384A538C4BBAC895A20A905F7808B
SHA1:	9131C69DBA304B9BA62A82A380DBBF80BF377642
SHA-256:	4A7E7D4C05E2C60713598904E31530C2F0625FC4563A789316B9B2FC4E59C282
SHA-512:	CD30FBBC6E75BF90D1C5B013E832760955EB3EAF9A685D0620CCCB4521DD59F7C5B38B2A7B20F3A98499C03BFA067215466EB2960181C33296F4349AE3050829
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/PremiumLogo.DSPbU7gl.js
Preview:	import{s as F,X as f,Y as c,f as n,i as a,p as e,L as y,k as z,n as V,l as p}from"./scheduler.ErneftFr.js";import{S as k,i as b}from"./index.DsErXEH0.js";function Z(v){let t;return{c(){t=f("path"),this.h()},l(l){t=c(l,"path",{d:!0}),n(t).forEach(a),this.h()},h(){e(t,"d","M9.99998 14.1666C10.9166 14.1666 11.6666 13.4166 11.6666 12.5C11.6666 11.5833 10.9166 10.8333 9.99998 10.8333C9.08331 10.8333 8.33331 11.5833 8.33331 12.5C8.33331 13.4166 9.08331 14.1666 9.99998 14.1666ZM15 6.66665H14.1666V4.99998C14.1666 2.69998 12.3 0.833313 9.99998 0.833313C7.69998 0.833313 5.83331 2.69998 5.83331 4.99998H7.41665C7.41665 3.57498 8.57498 2.41665 9.99998 2.41665C11.425 2.41665 12.5833 3.57498 12.5833 4.99998V6.66665H4.99998C4.08331 6.66665 3.33331 7.41665 3.33331 8.33331V16.6666C3.33331 17.5833 4.08331 18.3333 4.99998 18.3333H15C15.9166 18.3333 16.6666 17.5833 16.6666 16.6666V8.33331C16.6666 7.41665 15.9166 6.66665 15 6.66665ZM15 16.6666H4.99998V8.33331H15V16.6666Z")},m(l,h){z(l,t,h)},p:V,d(l){l&&a(t)

Chrome Cache Entry: 1101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 400, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	399168
Entropy (8bit):	7.99792935646495
Encrypted:	true
SSDEEP:	6144:s/qQmU7BELoncRGVDIj5HaCLkc50ObZ7rcj53OshTOjaafYjvwUaNG4J5ljQrCuZ:s/qqEMVUjs1OhU3BOuYMIFNJZErddsy
MD5:	281DA85394835FFD5D30DF3F6BA6A474
SHA1:	BAACBC1A47E506923143EE30E78C277AF95A276C
SHA-256:	74E5B897D38EB5FE3090FEC6F5A976A4628B40BE9D8B190BA458EB848CC0D508
SHA-512:	8E1B47712D06F1762C43AA2575DB8CCA37EC7BC3C1134AF7C32F36DC92225AF7FB767D8E519DA234CEA6F0F94C8F816DE002546EBF5E962AEB25E82D2A40C90C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/games/images/JustWords_Spring_600x400.png
Preview:	.PNG........IHDR...X..........W......tEXtSoftware.Adobe ImageReadyq.e<...viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e8339058-b824-504a-8cfe-46508115715b" xmpMM:DocumentID="xmp.did:C69F69A8DF6611EEBA1CD06CA657CB5E" xmpMM:InstanceID="xmp.iid:C69F69A7DF6611EEBA1CD06CA657CB5E" xmp:CreatorTool="Adobe Photoshop 25.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:13d07e22-0b79-5b4c-967b-fe46dc2a6c79" stRef:documentID="xmp.did:e8339058-b824-504a-8cfe-46508115715b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..R...`IDATx...d.y.v...Y...tO.f0

Chrome Cache Entry: 1102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60307), with no line terminators
Category:	downloaded
Size (bytes):	60307
Entropy (8bit):	5.226303366960662
Encrypted:	false
SSDEEP:	1536:DwWHzI01OwxqmIGAKoMuXpTteneKJ4jf0V:vHXm50j
MD5:	EF13714E251549821D2930D0D99D6B70
SHA1:	E0AD4BD5DADDE2EB8AA43C4691F50AAAF1CF96C2
SHA-256:	B3F5F787DAF156FA19C2916470F4EA8BDBF9E5828B3990C33C04810FA74ED084
SHA-512:	3AF3236583A8A9543406F3EBE6083A0A596D6AD1F3526258EDE20C0394689F6552AA5FF86D80DBE8D9CFADAA40EF8022AC7A5432DA249A15F3644055D9B7317F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-core-1.65.0-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer",[],t):"object"==typeof exports?exports.wafer=t():e.wafer=t()}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(n[r])return n[r].exports;var i=n[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var n={};return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,n){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function i(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}functi

Chrome Cache Entry: 1103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29228, version 1.0
Category:	downloaded
Size (bytes):	29228
Entropy (8bit):	7.9913276388054175
Encrypted:	true
SSDEEP:	768:A08yHVMfsohDPuFkFetIg2Yst7BNq95YvCTn:A08yHWUH1kG95YCT
MD5:	7C7C02DCEE2BF1C2528DB6092D4AD1FA
SHA1:	988A01F705C074261490625C70F94B2642413693
SHA-256:	D5312DACBE6F248C6C4B60251D7ACF77BC3BC891CD9B880DEAD36D9BABB288C4
SHA-512:	633A7E026AD4AC657CFB7C11932C3D138016B633126A43A72578F11314ED90D880C7F8242E9607AF12195D0F4326AEEAD96150909C5C0FF17DFDF48081D4ADAD
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2
Preview:	wOF2......r,.......4..q............................(..T.`..T.....s.....$..4.....6.$..0. .....,..B[.nq....WP.....S..b..m.@w u...`.^.6..B.....OM2f.F....U..1A.#...rY...b.....#..R..a.....{.c.....&]......O>^Xq...i.;W.L<.F...:>.....J\...%.6.1....,V.nTQ.9Q.E:..(p.R....<..k.\|.(.....).i6n..^2.......eV......b..I.....}P...d.4...\......K."..A...'Q\|...G..}.......1....a...eY\|....,,.1K b..b.'h.@L..A-.$D/.....?n....@...XM.......?........@ ..#..u...&.V.f.. .p.O..;..zyw{^y.../H.j..V..(@.pH.............[...r..s..A&.#.(.A...x..<.5mtTQu... .P.B.m.....t.._(.[.%..D..........l...P.V.PAB.RZJPQ..ra..U.(7..n.t.}D....M..A.C8..9.....w...S./.......tj&jd..d..$..$S.......i...z\|C....v..,..................-T...iR.!f..I.=....8s..D.....``.".9....\|.Op..2....EA.J.....'p....P6...%eal..N.>.....`{..m^...F..Q4..4....S.)7.. s..........^...t..^.B<.....Z...[....^!%..e..MSq..:YTb..oK....9..q j..<.I:em.Ps~...wE.xY1.JU.t...;...^E.....\|.[...t.m)mt.f.\].*.....p>B..d....h@..la

Chrome Cache Entry: 1104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29332, version 1.0
Category:	downloaded
Size (bytes):	29332
Entropy (8bit):	7.991652726881711
Encrypted:	true
SSDEEP:	768:fKSZpZyotjVxbAUljWQpD4dWZbMwwxwD94HqGu3dQ:fKSZpZyo9Vx0UlTmdWCwwE9yqjtQ
MD5:	74A42FF1D35E44DAFCFCCD94BF3D0304
SHA1:	2B511D306A0F99A064BE359B2FBC214277E5E762
SHA-256:	41AE0A44B24FC9A50455967D86C868AAA8F7E3A502C36C1B3A6C7E9C70E5B6A0
SHA-512:	3F630FD716A99B0A2F715CBCA494693CE1C3D25E0BAC67B4F82653B9ED1755B85024C9C50BF0437404EB0CEF8DA4BFCF0065525AC67EEF3EB3C946083F8AFC1D
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff2
Preview:	wOF2......r........P..r0..............................T.`..T.....s.....d..}.....6.$..0. ..r..,..P[.pq...<&Y..-..$J..;..`+.....8..@.........Mr.f........b.....9.O/x.6U).I.j^....paE&...#..QS...x#$......)$O...M.x!3..................#$.r.D...W.i....5.s...w).a...#.~.ty4.$!....9.V.,.w..d2..IK.z.MM......s.....^...[S.f.%.PQ....p.E.Q..~xGk..?.dL.w...].%...'^......x...!."..@(.$.....S.U.U!k\.......2..+...m{.f...F......@1.....w.q...^.^..xz.t.N'i:.Er{DZ.P..q...`v..%.J.....N....m.=..../..^.'$O...C"D....B.A..&V.....n.:..M...6@25Q@....S...$_e\|....qT.m.......p.........k..N...a$...4?_g....q.]...JZ.S,.^..K.[O.,q.@.\l.A.0.4.... ......tV.#.[.-.=..g.......2-}Vb.r.E>"....`.w.]!..+.L..o-.g$...M..;j.P....N...c../..o2..?M.hh..P...n.A~G.L......~....$..Q%.^....-...I~....4.H#.. S..e'u.%q......K.......'......3.~y....`IEl......,.B..`......./..d...Jp.QM...J.......x.....G.@C.@!.MK.J....:.U<.Z....U...Lg....* N.....y.P...f...C.)].=/q..MS....F.......V.5...m>,h%.._s.~.L`...zV..7.

Chrome Cache Entry: 1105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	451
Entropy (8bit):	5.430584976877228
Encrypted:	false
SSDEEP:	12:cwPD06kFfEAPt77MAsfEJk7XoGMN/77MA6LsfEJkF:c+Drw8A14As8AXJMh4A6Ls8G
MD5:	9FADB90D7D3E2C8EB6ACA12CC5872B2A
SHA1:	1B8B817B46EB8060FF9A15DB0EFD89CECE30C7C5
SHA-256:	679DD9CB680345AEAF0A6928D17CDB53A9E61C56ECA5317D2F7B8BD346BE4876
SHA-512:	80C0C3874D5A0A4641E4431D6B8C32AFE7587EF4E7A280548475AC14BA19787E2EC5F47DB889574E6CBD729DFB37CCFD109DE4AAB373CBB81F79AAE84E8E59F1
Malicious:	false
Reputation:	low
URL:	https://rtb0.doubleverify.com/verify.js?ctx=20006197&cmp=31411294&sid=5071708&plc=388507207&crt=211538221&advid=3876771&adsrv=1&mon=1&blk=1&dvp_cawf=crtwrp&cm360cw=1&unit=300x600&prr=1&turl=https://www.yahoo.com/&aucmp=21039716546&auevent=ABAjH0gQDp_4c-0JAi6rZSx5hhRK&autt=1&ppid=103&aucrtv=553954458&auorder=1015903071&pltfrm=13&ausite=2328226494&auxch=13&aufilter1=1982032&c1=1982032&audeal=IX3MPADScope3DISP6Kqa8MAC&adid=&app=&dup=&gmnpo=&isdvvid=&supplySource=&tagtype=&aUrlD=0&brid=3&bridua=3&brver=117.0.0.0&brh=1&vavbkt=&lvvn=28&fcifrms=17&winh=600&winw=300&chro=1&noc=4&wouh=984&wouw=1280&htmlmsging=1&refD=2&scah=984&scaw=1280&jsver=5684&uid=1711672899477415&srcurlD=0&ttfrms=148&num=6&dvp_isOnHead=0&flvr=1&ver=5684&jsCallback=__verify_callback_1711672899477415&jsTagObjCallback=__tagObject_callback_1711672899477415&ssl=1&sfe=1&m1=15&dvp_rcp=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=1375353221538.1655&ee_dp_sukv=1375353221538.1655&dvp_tukv=17591451939.44182&ee_dp_tukv=17591451939.44182&ee_dp_dvtpurl=https%3A%2F%2Fcdn.doubleverify.com%2Fdvbm.js&dvp_strhd=0.29999999998835847&dvpx_strhd=0.29999999998835847&eparams=DC4FC%3Dl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETauU2%3F4r92%3A%3Fl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETar9EEADTbpTauTau_ag%60%60376g%607572335_6_6ce_h%60c%60fa6h%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3ETar9EEADTbpTauTau_ag%60%60376g%607572335_6_6ce_h%60c%60fa6h%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3E&referrer=https%3A%2F%2F02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html
Preview:	..try{__tagObject_callback_1711672899477415({ImpressionID:"a088deb529ba4c1899d301c788f6fede", ServerPublicDns:"rtbc-ue1.doubleverify.com"});}catch(e){}.try{$dvbs.pubSub.publish('BeforeDecisionRender', "a088deb529ba4c1899d301c788f6fede");}catch(e){}.try{__verify_callback_1711672899477415({.ResultID:2,.Passback:"",.AdWidth:300,.AdHeight:600});}catch(e){}.try{$dvbs.pubSub.publish('AfterDecisionRender', "a088deb529ba4c1899d301c788f6fede");}catch(e){}.

Chrome Cache Entry: 1106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1155
Entropy (8bit):	5.141250611417007
Encrypted:	false
SSDEEP:	24:2d6gomPLjOE6eaxM2PgRiKdPQvbUTUF96q8ouc:c6gNjjOwEnvbYs96qJR
MD5:	BD26C3B0A5BAD3E15D5F7C571832C67A
SHA1:	D4CF49D7FA2F03B42DD8F6D3E2697BBE36D64C01
SHA-256:	96A17F17D8BADD2200BB61A314E34914B090D615EB2A35E72722972AA0593D2D
SHA-512:	B0980DAC7D859FD9CB9437DE7C419B8E4D88D3726E80E30A08BEADCE85B297682BACAC9794AC9E800251034A6087EAAA0C8BC94C88110003D15462D1226B1B0A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>icon_prod_mail_web_gray</title>. <desc>Created with Sketch.</desc>. <g id="icon_prod_mail_web_gray" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="icon-mail" transform="translate(0.000000, 3.000000)" fill="#454545" fill-rule="nonzero">. <path d="M0.909090909,14.5454545 C0.407272727,14.5454545 0,14.1390909 0,13.6363636 L0,0.909090909 C0,0.406363636 0.407272727,0 0.909090909,0 L19.0909091,0 C19.5927273,0 20,0.406363636 20,0.909090909 L20,13.6363636 C20,14.1390909 19.5927273,14.5454545 19.0909091,14.5454545 L0.909090909,14.5454545 Z M18.1818182,12.7272727 L18.1818182,5.74363636 L10,9.10090909 L1.81818182,5.74363636 L1.81818182,12.7272727 L18.1818182,12.7272727 Z M1.81818182,1.81818182 L1

Chrome Cache Entry: 1107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 1108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1631), with no line terminators
Category:	downloaded
Size (bytes):	1631
Entropy (8bit):	5.171048222725637
Encrypted:	false
SSDEEP:	48:kH0DY/DYTVDYPgUbrlE4Y+DYPCDYDGDYpt:hYbYTlY9bnYwYcYcYpt
MD5:	F9CD399AC500938A13DBB6963E0F3F69
SHA1:	A2295064F89212730B21F5E2BEA4069354368367
SHA-256:	60119BA2A2477E0C606B928F56010D808B1DDD8AE16A1DE85073AA064287E5BF
SHA-512:	2F876FD1043308BEFDED1ACDBB9A83E5AEDAB33857084C68C21D654606D6DD4B6DA4BB1CB9128D51BD3D7BE145D3ED16646E9230B04C39F23AB8BA531AB08B1C
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=201422&gdpr=0&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	<html><head><title></title></head><body><img src="https://pixel-sync.sitescout.com/dmp/pixelSync?nid=48&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://ad.turn.com/r/cs?pid=21&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://c1.adform.net/serving/cookie/match?party=29&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://creativecdn.com/cm-notify?pi=index&gpdr=&gdpr_consent=&us_privacy=1YNN&user_id=ZgYOPsAoJI0AAAi4ADlhawAA%261617" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://b1sync.zemanta.com/usersync/index/?us_privacy=1YNN&gdpr=&gdpr_consent=&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://ums.acuityplatform.com/tum?umid=8&us_priv

Chrome Cache Entry: 1109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65479), with no line terminators
Category:	downloaded
Size (bytes):	205286
Entropy (8bit):	5.570796697211
Encrypted:	false
SSDEEP:	3072:wgXfnoRWoGCHND07nmNLDdeq+q3T4pItaL2:7n213ND07akOsQd
MD5:	1F2D1DA499C1DD1C59AF93EE59B807BC
SHA1:	9E1EEA2734F7C7322E9B6E16DA755B6517ADE408
SHA-256:	FE43CA2C39526CC9D14B2DF387D3388256E1B84351831A84E0D9A1BE247667A5
SHA-512:	2E220DD655F1A53762AD7E61BAE38026A79BC6E39BD713EF425D11E5DA73648F54110179B7903F66152DD278117CA1903C607CD634DCEDDA9E8E14C349143AD3
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/zz/combo?pj/sh/202403271817/js/cu/index.js&pj/sh/202403271817/js/cu/polyfills.js
Preview:	!function(){"use strict";function e(){}function t(e){return e()}function o(){return Object.create(null)}function n(e){e.forEach(t)}function r(e){return"function"==typeof e}function c(e,t){return e!=e?t==t:e!==t\|\|e&&"object"==typeof e\|\|"function"==typeof e}let i,l;function a(e,t){return i\|\|(i=document.createElement("a")),i.href=t,e===i.href}function s(t,...o){if(null==t)return e;const n=t.subscribe(...o);return n.unsubscribe?()=>n.unsubscribe():n}function d(e){let t;return s(e,(e=>t=e))(),t}function u(e,t,o){e.$$.on_destroy.push(s(t,o))}function p(e,t,o,n){return e[1]&&n?function(e,t){for(const o in t)e[o]=t[o];return e}(o.ctx.slice(),e[1](n(t))):o.ctx}function f(e,t,o){return e.set(o),t}function h(e,t){e.appendChild(t)}function m(e,t,o){e.insertBefore(t,o\|\|null)}function g(e){e.parentNode&&e.parentNode.removeChild(e)}function b(e,t){for(let o=0;o<e.length;o+=1)e[o]&&e[o].d(t)}function _(e){return document.createElement(e)}function y(e){return document.createElementNS("http://www.w3.org

Chrome Cache Entry: 1110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	788
Entropy (8bit):	7.653776569526602
Encrypted:	false
SSDEEP:	12:6v/7c1GKkaic3rT6oykkGBOGXqnEwOnSJG/bqmo8u0krwxyMegV+bDZApP4mR3:bFFiz5xH6qMsoba8w8VegYbDwl3
MD5:	7493AD531AF34952F2F2FD51BE7F47AC
SHA1:	DDE39ACD779629A611C3254FBB1BD1A1E5548E8E
SHA-256:	4B44ED347024891E41FF43C6BD50D045086365653736BC2F2F771F48317C738C
SHA-512:	4AFCA8F8C5B4F0B1A83BBBB773D0B4258672172EEF0AD762B8E0FA7EB6C73A5846C2B6EA263E89BC92AA01F333999420BA56192E478B7862FDC52D92BFB155CB
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pj/sh/20180611812/img/bluechevron4@2x.png
Preview:	.PNG........IHDR....... ......\|(.....sRGB.........IDATH...MHTQ.....$T.D..(B..E..(..+hS.$..8-.e..63....-*....+..V..U..7BP.I.c......g.i.....s.?..{...\...d}^..?...,.i..%.....+..W...b...1.<.PU..G.5...Rg.1.?.Nc..\|.7.y.vv..qN-CR...........\....s...w...Af.}e_.$p..1.B..,.[/....l.8F......S9i_....(r.T....lW.f...85.1..g.3..N...aq...........1.j/.......{NSj.6..6~.q... ul.--..x.0..7N'.84.1.b..95 {e.o9.6........g.u.d.....m>r.q..T..7x]./..w$.:..fL.v0.j...E.6.f.....z4..l....."....h.....6.....(..s..+...:.N\2_#.X&....;.W.C.....2..B../xY....v.H =......3..4...)h.....i...C......:SE. m#.9.q....}..j...j..2.tI.....Z.h.H[./.....}..3..,...PZ^.[.M.?..3.P._k........I.7.cBJ7..0.z.. . .=..Ri...r@....G/...6Pb_.[V.&.OD..0.....1&..9.<U2.5Wc.q...'...cV.....IEND.B`.

Chrome Cache Entry: 1111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9608)
Category:	downloaded
Size (bytes):	9609
Entropy (8bit):	4.788905491550119
Encrypted:	false
SSDEEP:	96:g9KjcZ9AUIZSWFVt499hmC3TXlt44auTbfkbcTbCUGTbBF0GLvTosGTmZyt:W9NLTXRHf6cHCUGH3LE9Tm2
MD5:	5D46FD94788312A7F39A7412C9237AAD
SHA1:	5FAFB6929F49D109D3D7589ECAE870D9D0108FE5
SHA-256:	920E25E54CFBDA0275C2D2D4001BF31DBE892E0DEB1ED11F186951FBD89F7627
SHA-512:	7DF7C83C68C00754EFB6F9F7BD3AA6E50B0A23F8E2D79DFFB9FA710E0CA3061B6858630CCC0D1AA880620F638A3700C0C0F658E5C3C97ECD1CDD31F0818E3270
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/Button.wzorZdtC.css
Preview:	button.svelte-1ndj15j{--button-background-color:transparent;--button-transition-duration:.15s;background-image:var(--button-background-image);background-color:var(--button-background-color);transition-property:background-color,background-image,box-shadow,color,border-color;transition-duration:var(--button-transition-duration);transition-timing-function:ease-in-out;border-color:var(--button-border-color, transparent);border-width:1px;border-style:solid;font-weight:var(--font-bold);max-width:-moz-max-content;max-width:max-content;cursor:pointer;display:inline-flex;align-items:center;justify-content:flex-start;gap:var(--space-1)}button.rightAlign.svelte-1ndj15j{flex-direction:row-reverse}button.rounded.svelte-1ndj15j{border-radius:var(--border-radius-xl)}button.primary-btn.fin-size-x-small.svelte-1ndj15j,button.secondary-btn.fin-size-x-small.svelte-1ndj15j,button.tertiary-btn.fin-size-x-small.svelte-1ndj15j,button.quaternary-btn.fin-size-x-small.svelte-1ndj15j,button.quaternary-blue-btn.f

Chrome Cache Entry: 1112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (4780)
Category:	downloaded
Size (bytes):	4781
Entropy (8bit):	5.2387030360636
Encrypted:	false
SSDEEP:	96:9XokD9aBnxkkQFd8er+dcqnXeE2O+FbEuIYYyFdZOdr79Lc/Ny:9YkD9alxkKU+dcKOVO+FXIYYWrOdr9c0
MD5:	9A62FE97494B8083DCFEA6471C02D0F7
SHA1:	DED439B55502C0C7A7AED26DC0EB34CEEFD6FB2C
SHA-256:	4BDCB1452CA74555F98897B9F25549DDB3BDFB37881ACB69B012CB563A886A7D
SHA-512:	FA9E0217CF535C988BCB71A781DB9285015CD361A9C841B320DC1850465E51F7240B7582361AF33E6AA5D80FED43A3E96A5909CA48606E14B9EA1FB4EFFE3702
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/utils.HyUTigHj.js
Preview:	import{e as v}from"./commonUtil.Bb2Cnbsk.js";import{g as D}from"./datetimeUtils.wrzNH3Ed.js";const I=.85,$=3,C=3,A=/\$$AD_FEEDBACK$/;function V(n,s=[1,2],e=80){const o=[],c={};return n.forEach(r=>{const t={tag:r,tags:new Map};s.map(i=>{const a=`${r}\|${i}\|${e}`;o.push(a),i===1?t.tag=a:t.tags.set(i,a)}),c[r]=t}),{sizeMap:c,tags:o}}function m(n,s){var i;if(!n\|\|!s)return;const e={},o=[];if((i=n.resolutions)==null\|\|i.forEach(a=>{a.tag&&a.url&&(e[a.tag]=a.url)}),typeof s=="string")return s in e?{src:e[s]}:void 0;const{tag:c,tags:r}=s,t=e[c];if(t){for(const[a,f]of r){const g=e[f];g&&o.push(`${g} ${a}x`)}return{src:t,srcset:o.join(", ")}}}function _(n){var r,t,i;const s=(r=n.content.canonicalUrl)==null?void 0:r.url,e=(t=n.content.clickThroughUrl)==null?void 0:t.url,o=s&&((i=new URL(s))==null?void 0:i.origin);return!!(o&&o.endsWith(".yahoo.com"))&&!n.content.isHosted?s:n.content.isHosted?e\|\|n.content.previewUrl\|\|s:e\|\|n.content.previewUrl\|\|n.content.providerContentUrl}function R(n){if("editori

Chrome Cache Entry: 1114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	"https://d.agkn.com/pixel/2387/?ct=US&st=&city=0&dma=10&zp=&bw=4&che=2841514280&col=31411294,5071708,388507207,581726800,212200008"
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 1115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7977), with no line terminators
Category:	downloaded
Size (bytes):	7977
Entropy (8bit):	5.139495302416975
Encrypted:	false
SSDEEP:	192:3YwuuruQt21pxX3W9pOy1zraiGzTX2mD9v6KELqGG85rF04Av:3YDuqQo1pxsOyVra7zTGmBvEzrFhAv
MD5:	69D9917872FF1011BCB87D5044F6E12D
SHA1:	DB61157780300B24416F639DF9FB24C5A0829516
SHA-256:	F9F7F659C467019A4E8CA49A95810AFD7BAA0A791542C4041E0C0E828A86C18D
SHA-512:	1F0B45E4D82F4A1BBC1CBBF6461DC069AC724D7FF1919839732CC94735034A958A40865A53F013700A3D7C3657217A199A8F8DCDAEB07BF586C1531253FCF2DE
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-geolocation-1.3.0-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-geolocation",[],t):"object"==typeof exports?exports["wafer-geolocation"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-geolocation"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(o[r])return o[r].exports;var n=o[r]={i:r,l:!1,exports:{}};return e[r].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var o={};return t.m=e,t.c=o,t.d=function(e,o,r){t.o(e,o)\|\|Object.defineProperty(e,o,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var o=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(o,"a",o),o},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,o){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a

Chrome Cache Entry: 1116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (372)
Category:	downloaded
Size (bytes):	7668
Entropy (8bit):	4.818916405648157
Encrypted:	false
SSDEEP:	192:Uu9KYoiEAroQywuVYeCvGgPVoddpswcj2jA9qSt+xw:F9KjYe6do2jg2
MD5:	0AA710A63CEE632B2B8987C8E7715720
SHA1:	BEC570DE3EFB25EF892B1B7BF6930EAC57400671
SHA-256:	6BFBCBFE62A182C77A84F9BB31CD15199C5A6999DD00737F4EE1045258FF5872
SHA-512:	17D6013B3BA7F5242DC1E9F037DFD7E789681BEFC417DAAF7732C92D57C1A582CED2CE49726EFC334A2612EC6E76E28A5C228F1B3823D4C33C66FB4195DD3C50
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/ucreative.php?cv=1
Preview:	function isSet(val) {. switch (typeof val) {. case "string":. return val !== undefined && val !== "" && val !== null;. case "object":. return val !== null;. case "number":. case "boolean":. return true;. default:. return false;. }.}..function isJSONSupported() {. return !!(window.JSON &&. (window.JSON.parse && typeof JSON.parse === "function") &&. (window.JSON.stringify && typeof JSON.stringify === "function"));.}..//------------------------------------------CODE------------------------------------------.function isForceSafeFrameEnabled() {. return testData["fs"] === "1".}..function decodeFSC(input) {. // Replace non-url compatible chars with base64 standard chars. input = input. .replace(/-/g, '+'). .replace(/_/g, '/');. return input;.}..let timesData = {uCreativeLoadStart: Date.now()};.let isDebuggingLogFired = false;..function onLoadHandler() {. timesData["dfpIf

Chrome Cache Entry: 1117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1087x974, components 3
Category:	dropped
Size (bytes):	20959
Entropy (8bit):	6.673111203476535
Encrypted:	false
SSDEEP:	384:e09LJnJpuTSF1R3cqTv/WLy2INp4KH5vc9MeVs:dNjuK3ckmLyRD4KZkPs
MD5:	001935EA9AC19C974AC3D8E76A94E06E
SHA1:	EEB9C259B9E96CFA14B1A73CA4AA52EED819C525
SHA-256:	744CCE4BAFDA2C4CCEBEF57E4681F2CF3AF23291BD12609F3C25DC474E6A1F64
SHA-512:	29D55F627439905DB9E5A4749AE17FFA46ABB72AC3564F94CFF1BA3019B56BF4ADFDACA10331DED71C236F17553D26DE77BD6BFE4CA6270AF733CB53C91BD983
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................... ... .....0 &1...!:*155566.+:A;6<1343...........+...+777+++++7+10+++7.8+-+--1++-+-++++-+++++++-+++++++........?..".......................................B......................!1..AQaq..."2.....BR....bCr#S......3s$Dc..............................."......................1.!AQ.2."a............?...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 1119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55201), with no line terminators
Category:	downloaded
Size (bytes):	55201
Entropy (8bit):	5.402742992612217
Encrypted:	false
SSDEEP:	1536:Xr4MuUUXPgSKUUJcConr/m8b6442RZTeKc8o:7cX6Uvw2RZTeDT
MD5:	1373A6D9D7D4C547326572BF62610656
SHA1:	4D55756AB17C6DB24AC089687DF5F4F5668F8721
SHA-256:	5A342906865F8FEEE1DFDD0132EE45310D87E4138661797F20CAAE3C049370E9
SHA-512:	47D602F1F860A672ACB0D76EC1D102D75FE5AA89C5599CC6BD69CF3BD4F2C804ED5CC75CF59C538BFCC84D40DD937C51161CF771B75A67949849D278BA4D4FB1
Malicious:	false
Reputation:	low
URL:	https://jac.yahoosandbox.com/2.0.0/jac.js
Preview:	/! JAC 2.0.0, Copyright 2018-2023 Yahoo Inc. /(()=>{"use strict";const e=class{constructor(e,t={}){this.type=e,this.meta=t,this.target=null}};class t extends e{static SCROLL="page.scroll";static RESIZE="page.resize";static VISIBILITY="page.visibility";static FOCUS="window.focus";static BLUR="window.blur";static FOCUS_IN="window.focus_in";static BLUR_CAPTURE="window.blur_capture";static DOM_LOADED="dom.loaded";static LOADED="page.loaded";static BEFORE_UNLOAD="page.stopped";static MOUSE_OVER="page.mouse_over";static MOUSE_OUT="page.mouse_out"}const i={addDOMLoadListener:function(e){if("loading"!==document.readyState)return e();document.addEventListener("DOMContentLoaded",e,!1)},addPageLoadListener:function(e){if("complete"===document.readyState)return e();window.addEventListener("load",e,!1)}};function s(e,t,i=this){let s=null,n=null;const o=()=>{e.apply(i,n),s=null};return(...e)=>{s\|\|(n=e,s=setTimeout(o,t))}}function n(e,t){if(Array.isArray(t)){if(t.includes(e))return!0}else for(let i

Chrome Cache Entry: 1121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (339), with CRLF line terminators
Category:	downloaded
Size (bytes):	2032
Entropy (8bit):	4.783899486465924
Encrypted:	false
SSDEEP:	48:wxdOc5ArCZX6cNxXJti6PIP/Lp2xHzG42Jv:Gd962ZdVSbQH8
MD5:	504841802B8CA8E7A25FA9C6D204666A
SHA1:	434F86A63D5C8F488FAA897E171857073D1D4364
SHA-256:	36D0DFC8A81D41A41CC6D6ECC36940F45681A238D712701CB30B240BA21B3149
SHA-512:	5F23D18E8776D26B4002161A151438810D908E0D4B17E9ABED0E696467E5757539E5E5C5FD77295E5CAD20B0D697954C79D13B3F3BCDD75BD6D556A7A12EBF6E
Malicious:	false
Reputation:	low
URL:	https://c.evidon.com/a/n/971/101960.js
Preview:	BAP.copyJSON({.. "data": {.. "icon_position": "top-right",.. "default_icon": "_us",.. "mobile_in_app_url": "",.. "default_footer": "Privacy Controls by Evidon, Inc.",.. "icon_display": "expandable",.. "icon_grayscale": 100,.. "container_opacity": 80,.. "offset_x": 0,.. "offset_y": 0,.. "generic_icon": false,.. "icon_delay": 0,.. "nid": 101960,.. "nwid": null,.. "aid": 971,.. "icid": null,.. "skip_L2": false,.. "behavioral": "custom",.. "generic_text": "General Motors works with online advertising companies to provide advertising that is as relevant and useful as possible based on your browsing activity. GM is committed to providing you with transparency and control over the types of advertising you see from us; please access the links below for more information.",.. "adv_name": "GM",.. "adv_msg": "GM Privacy Statement",.. "adv_logo": "http://c.betrad.com/a/l/n/971/10728/us/63edf520-1e7f-4dc2-b9ed-9a8a9621ed59.png",.. "

Chrome Cache Entry: 1122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvQFJZwgglHqipQDMykQJiHkRAqhe2J26lLzIPhNlRVolDpDhu0NjoS-RWQP001LOWu3mV9gQJDKHzQPD8TuCUXpvrM1mBcMje8O1wjBW65JjtTm7dxoQSEjC5ioutuiWzvDTlO4Rhowqph90LU0JgvJ-amvYG9G0U&sig=Cg0ArKJSzLmrnqD1fGQDEAE&id=lidartos&mcvt=2462&p=572,951,1172,1251&mtos=0,0,2462,2462,2462&tos=0,0,3113,0,0&v=20240327&bin=7&avms=nio&bs=0,0&mc=0.56&if=1&vu=1&app=0&itpl=19&adk=1481106528&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=b&co=760569601&rst=1711672894537&rpt=9424&isd=0&lsd=0&ec=1&met=ce&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 1123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	3.5465935642949384
Encrypted:	false
SSDEEP:	3:YHAXW2Vn:YglVn
MD5:	97EFE0B7EE61E154D57E80758BB797D8
SHA1:	810B4E115FE9F5AE697666FEBF2A9ABF0B21C9EC
SHA-256:	EFABBA3678B85FCAB831B778EA2DDAAD1E2A1E952584D3566BC39B7CCB3429D9
SHA-512:	AA02209CF80FC2564CE0DB0BF9F30241E92EA33101B55FFE5E26D617F90B74277AE68D714A7B00C792EF2B88B582E3F299213A5C3C9BF9AFE6C6C1800FC276AF
Malicious:	false
Reputation:	low
URL:	https://rp.liadm.com/j?se=e30&cd=.com&dtstmp=1711672890515&tv=8.38.0&did=did-004f&n3pc=true&wpn=prebid&pu=https%3A%2F%2Fwww.yahoo.com%2F&duid=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q&gdpr=0
Preview:	{"bakers":[]}

Chrome Cache Entry: 1124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	744
Entropy (8bit):	4.385590458512649
Encrypted:	false
SSDEEP:	12:fEcUUcZcSgPhNtTLBMtXbbeqdgtTLBMfE1tTLBMgNN920CDZ8VPi:fEcHc69Qlbee8mgNN4ZDZ8o
MD5:	1B98025CA9786A89900D7257BEC6814B
SHA1:	691FD9DC4C2CBEDAAFCB678AF0F119EB1F1B1DC3
SHA-256:	2EAE595551AF4606E0CAC3B99A9150D4E7EAFAD9F7DC6E9460C89B6A30B4D522
SHA-512:	8F6EC951813993A770EBDF87BCF7417A870544F988C046FF90B50CCDBECF8B6A41569D5D748B040D687D43ADFF6526AA6FCDE893533F72A8E14AFB3FBB2FF4C3
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/manifest.json
Preview:	{. "short_name": "Yahoo Finance",. "name": "Yahoo Finance - Business Finance, Stock Market, Quotes, News",. "icons": [. {. "src": "https://s.yimg.com/uc/fin/img/logo192x192.png",. "type": "image/png",. "sizes": "192x192". },. {. "src": "https://s.yimg.com/uc/fin/img/logo300x300.png",. "type": "image/png",. "sizes": "300x300". },. {. "src": "https://s.yimg.com/uc/fin/img/19/02/d408d9d.png",. "type": "image/png",. "sizes": "512x512". }. ],. "start_url": "/",. "display": "standalone",. "orientation": "portrait",. "background_color": "#2196F3",. "theme_color": "#070f6c". }

Chrome Cache Entry: 1125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1890
Entropy (8bit):	5.061429042357507
Encrypted:	false
SSDEEP:	24:n9cG+eKW/0DS2MUtbSMeetkKkymeI4Lky0G7CpfD03XpQ/EE1hzPi00I8TFSaOgc:n9cG+eXw5c2pmoLdRCp6zE1oZOgl6
MD5:	C3CC19CE8230DF99C7835DECC2D79EE8
SHA1:	4105BECE51B5156B59E4D37C2DCF3B109971570F
SHA-256:	A3C92E8D35E4E636238E577DA8CD44AAF8DD699B719E4125BA0029330EDF6907
SHA-512:	ABA79248C26637AEF641104C8A5906A212B7D6CF233D61AC7F7A6617E1D807C9E061332DBDEF8B0F14FC2801203D4B7C7920AAC36D9D27E4433F721407B6187B
Malicious:	false
Reputation:	low
URL:	https://c.evidon.com/a/COMMON.css?r=0.08681880211029247
Preview:	.bap-blue, .bap-close, .bap-div, .bap-gradient, .bap-gray, .bap-img-container, .bap-notice, .bap-link-div {..color: #000000;..white-space: normal;..word-wrap: normal;..vertical-align: middle !important;..margin: 0;..padding: 0;..border: 0;..outline: 0;..font-family: Arial !important;..font-size: 100%;..border-collapse: collapse;..border-spacing: 0;..line-height: 13px;..list-style: none;..letter-spacing: 0px !important;..text-align: left;..overflow: visible !important;.}...bap-notice {..background-color: #FFFFFF;..padding: 2px;..font-size: 16px;..line-height: 13px;..z-index: 9991;..top:-100px;..left:-100px;.}...bap-blue,.bap-blue:link,.bap-blue:visited {..color: #2b2f98;.}...bap-close {..width:20px;..color: #707070;..font-size: 10px;..font-weight: bold;..margin-left: -22px;..position: relative;..top: 1px;..left: 100%;..cursor: pointer;.}...bap-div {..border: 1px solid #ababab;.}...bap-div p {..float: none;..padding: 0;.}...bap-gray, .bap-gray:visited {..color: #444;.}...bap-img-containe

Chrome Cache Entry: 1126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	67868
Entropy (8bit):	5.5407045961146375
Encrypted:	false
SSDEEP:	1536:hPfPoPZl3rPqfPxpbNu34wt1XDy7AsXjSjNGnvYR9fBoSEW7:I
MD5:	7CEE436CD94F674C404489CE1A91A220
SHA1:	6D3270F0C3FABC1B4C32FCB6E229DA8517D453C6
SHA-256:	32CF45E04A52B270F5D31A50CD8972E885A74F5DC2877EF1165208B046AB8844
SHA-512:	B60577ED28DBBB7E11D9154CBC1271FF1644D39299D96A9230A07E3E33B511EC3D8B27203DAA5D3B6AAF54D375D8D3A33E7A3EB910BF45CFFD6D817AE8A79B62
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/nel_ms/_td/remote?m_id=react-finance.rmp&ctrl=NotificationAlert&includeAssets=0&m_mode=json&config=%7B%22mrt%22%3A%7B%22static%22%3Atrue%7D%7D
Preview:	{"data":{"newCount":0,"count":50},"html":"<div><div data-test=\"notification-panel\"><h3 class=\"Pb(16px) Pt(23px) Pstart(27px)\">Notifications</h3><div><h4 class=\"Fz(14px) Py(11px) Pstart(27px) Bgc($lv1BgColor)\">Today</h4><ul data-test=\"today-notification\"><li class=\"Bgc($hoverBgColor):h Ov(a)\" name=\"0\"><a data-ylk=\"sec:notification;elm:hdln;elmt:link;itc:0;subsec:notification;pkgt:GENERAL;cpos:0\" href=\"/news/mortgage-rates-hover-near-7-174143745.html?.tsrc=fin-notif\" class=\"C($primaryColor) Td(n)\"><div class=\"Py(18px) Ov(a) Pstart(27px) Pend(30px)\"><svg class=\"W(24px) H(24px) Bxz(bb) Mend(16px) Bdrs(50%) Fl(start) D(ib) P(3px) Bgc($linkColor) Stk($white)! Fill($white)! Cur(p)\" width=\"24\" style=\"fill:#000;stroke:#000;stroke-width:0;vertical-align:bottom\" height=\"24\" viewBox=\"0 0 24 24\" data-icon=\"lightning-bolt\"><path d=\"M10.386 18.325l.64-4.612-3.47-1.406 5.728-6.78-.68 4.86 3.4 1.078-5.618 6.86zM17.94 9.98l-3.134-.99.964-6.877c.287-1.102-1.01-1.394-1.5-.

Chrome Cache Entry: 1127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2020)
Category:	downloaded
Size (bytes):	12817
Entropy (8bit):	5.34459161517544
Encrypted:	false
SSDEEP:	192:Gq6KPV24ZKs86O/DfVcOfFmI46coWCTGdhFKdbsWkzY:GkxI603wI46xWSGdhUr
MD5:	1D3D22DF067F5219073F9C0FABB74FDD
SHA1:	D5C226022639323D93946DF3571404116041E588
SHA-256:	55A119C0394F901A8A297E109C17B5E5402689708B999AB10691C16179F32A4A
SHA-512:	0B6B13B576E8CC05BD85B275631879875A5DBCB70FD78E6C93B259317ED6FD5D886F37D0CC6E099C3D3A8B66FEA2A4C2C631EB5548C1AB2CD7CB5FA4D41EA769
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var r=aa(this),u="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),v={},w={};function x(a,b){var d=w[b];if(null==d)return a[b];d=a[d];return void 0!==d?d:a[b]}.function y(a,b,d){if(b)a:{var e=a.split(".");a=1===e.length;var g=e[0],k;!a&&g in v?k=v:k=r;for(g=0;g<e.length-1;g++){var c=e[g];if(!(c in k))break a;k=k[c]}e=e[

Chrome Cache Entry: 1129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 87a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.8739754318490536
Encrypted:	false
SSDEEP:	3:M3ntzl7/lHh/:cplf/
MD5:	65786C291A4603AA5150A1884452838D
SHA1:	612B96A8FE9F1C36E8349696A608780E6089AC77
SHA-256:	DE3A7CA2F8AE592AAE2652335B755B0D0B65DF663DDA8776387CAE7339B76D64
SHA-512:	F0DCF63AAB5264F143B8B012800D771615669D4B833ECCABF8A78449BC2571E8A331992C3A92936FAE8D5F3E1A5DCB940B7921B6A74318187107BAC93C863C9F
Malicious:	false
Reputation:	low
Preview:	GIF87a.............!.......,...........D..;

Chrome Cache Entry: 1130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 656x369, components 3
Category:	dropped
Size (bytes):	38574
Entropy (8bit):	7.974983902211538
Encrypted:	false
SSDEEP:	768:EhW37amVX3sv6mknwNw+PDKeSkM/IcF8XtlF3axvw6zgLhnAR5U:6K7amVszdiqDAkw7ctb3qwogJz
MD5:	3F8C168F85DBF07D1CA93D40E9507041
SHA1:	22A19F1027913AF30A0570BBFB963B2AA0513A17
SHA-256:	D9C4CA9099629F9335BA6A8966C8DF29F04F5514147AA6375A3508C1F6DA0107
SHA-512:	141F2BE8DC95E54D7AFAA977D7E20CD668AFA89067B16618E88E23EEFCA261A435DD105827BBD056D5432D980E4740D6DF4BB3D5FDFB977ED403D681C9386BDB
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................q..............................................U.........................!.1A..Qa.."2q....BR.#3.$CSb....r...%4...&DTc.....'e5Esu................................"......................!1.A.Qaq."............?...s....V...C..}.r....Q1......Kf...>.#.A....FM>.....8l.@..RFAd#>+pw.J.J&.$# tX:i)...[...Zq.S.vt.l,....u.l.n. .tM...t.\..-j......H3.;e.....?.0G..:h......W.{.M.N.8.(.l....P.eahn..&.&@...KA{....-....Noy.Q...w.....)#<..I.h....O........$....g...`....d.>....2.s7m-QJ.I.1..`zRj.+[....u...tM.."kC.........t...c..Y."...1.h..E;..D.)..sB.V....R.....cb5....V7UM.5\|$r%..t.$QG..0.Gw....i..$.a@X.4.....s..V\n.GX.m.j1R;.7W.4..H.T^......\I.G;.z.d.3#9..3.H9.KN.`.=..e....D.Y.p.9(.x&..b.q....k....O.a....F.K.5....h.]%..fR.....g.1.;......j.r.yF1.U.W..6A]...q..E.`p.A.;.\|.IF..r........*.S..\.....5..9..+....

Chrome Cache Entry: 1131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2146
Entropy (8bit):	4.423645601696178
Encrypted:	false
SSDEEP:	48:/ZG/ue3I/yNy/QO/wZo/K3y/VS/hKP/4S/9ClvNp/CaI26N:/AYbrHeywcH8HI1
MD5:	9FAF9F0AF03805FD10E24FD7A54CA611
SHA1:	08040307BA428BDE6AE12DA50273BA339F681AD6
SHA-256:	F26B4A53465EBC250CF44D422A38CBE2D812476AEA4E9215485C16B888273EE8
SHA-512:	FF7FA984E9B3C6397D0C258ADC6AD74229B7E72C80E25230220A197941F1B90E517C11145DACB3FEB0B89B3A49BDBE74EE7190DC7B123458A323693B8F5E267F
Malicious:	false
Reputation:	low
URL:	https://www.yahoo.com/manifest_desktop_us.json
Preview:	{. "background_color": "#ffffff",. "display": "standalone",. "gcm_user_visible_only": true,. "icons": [. {. "sizes": "48x48",. "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_48.png",. "type": "image/png". },. {. "sizes": "72x72",. "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_72.png",. "type": "image/png". },. {. "sizes": "96x96",. "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_96.png",. "type": "image/png". },. {. "sizes": "128x128",. "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_128.png",. "type": "image/png". },. {. "sizes": "144x144",. "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_144.png",. "type": "image/png". },. {.

Chrome Cache Entry: 1132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5026
Entropy (8bit):	7.775875829670363
Encrypted:	false
SSDEEP:	96:5R+ZkStpf1hHOdd60KN6TzdS7wAgL5lTl5Eu6nl2EB:5R+ZrHHY606hEfLWZ
MD5:	EE180E570547399CF0DAB1653FFDE945
SHA1:	0BB34C6AACA0B1884B4B1B96C26157F6133253D1
SHA-256:	F4546800C027DB3FDEC855B4A1B1ACF87DB7BC9464ABB50118EB9F0AAD02F2AE
SHA-512:	7A9344EBD0CB534A5F8A992133D5DA10F367E1D35826E9681EDB78558A1F4D217AEBFF97FC8F964E706E9DE89D7A2BCBAF321100C07D4E3D8B01CC971F1B4C44
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X..........):...0PLTE.................III......lll%%%...777[[[}}}...........tRNS.................1.....IDATx...o#E...I...5.b....@.f`...!..`...r..H\@F..$.1a9 ..r.N1..F.....8. ........%..W.&vl<......3SU..U.7r...i..h4..F..h4..F..h4..F.....NI....O.../d.!..o..4M...+.,O.R..W.7 $...I.j.4Q(..J.o..I...=.2.\...&..D...&....(w.b1]...8....:.D.'.Y....4...i..V..Y..,4..../.B.E........ah...72......ah...a.2..&4.d..,.o..YC.=h.l......r..A.E........)h.\|.?...#..ZNB....y.td......o.xc.x..zE.{........R.+.>.3%S...-x..F..h4..F..h4..F..h4..F...]...12...7......u4x..#4...XA;.....= p.-.._[......G..wo.@.M\|.I.z.[f."...2..\.4..Z...F0XG!.p.C..2.Z....T.{..8.Yi.._..b\.K....Z...2mY}..#...U......!.....G.,..[..0..Q..c...b:.....e.. .4...j.D..E.].......Hq..<U..v...N.......Za.c.....j(........e..Se...j..t.C...B.....R1....U:g.5]....Gg2....K9q..a..x...;...p......b...v....,K..d..1U;r6....L...e4o._.&GKI.m.k...5.*#...Y)5T8/j~\|Y\|...RR5.....J......x#....gqL.e.y..L....O./

Chrome Cache Entry: 1133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 1134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	54474
Entropy (8bit):	7.984250136494094
Encrypted:	false
SSDEEP:	1536:HUSUTrFMWeNL7Qsklq2GGpKmsldWUesqNm4i/:HUSEByoK27AcPLi/
MD5:	D97677D543E502704A682965545EE940
SHA1:	04020A7897150C76B4AE158EC5EF99BB3FB2782A
SHA-256:	5DE6897E0CEF6B2BCD92DF9DFC3C2C8A031025F8A6CDF2B56B373B43629B01C8
SHA-512:	C37E54E93689267D426A93E9366A844655D65FD16F9D3637BB922124814A1B52C1CF3529CAFAC6E2CC4411F391A663618517C2F5A5A5782784F20466F80612C9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/sYMekJGz3uIMcZpXpscDUw--~B/Zmk9c3RyaW07aD0zNjk7cT04MDt3PTY1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_business_articles_218/34987f393828bdcbd389245d3f21a77e.cf.webp
Preview:	RIFF....WEBPVP8X.... ......p..ICCPH......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 1135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.0241026136709444
Encrypted:	false
SSDEEP:	3:CUmExltxlNXE:JQ
MD5:	B4682377DDFBE4E7DABFDDB2E543E842
SHA1:	328E472721A93345801ED5533240EAC2D1F8498C
SHA-256:	6D8BA81D1B60A18707722A1F2B62DAD48A6ACCED95A1933F49A68B5016620B93
SHA-512:	202612457D9042FE853DAAB3DDCC1F0F960C5FFDBE8462FA435713E4D1D85FF0C3F197DAF8DBA15BDA9F5266D7E1F9ECAEEE045CBC156A4892D2F931FE6FA1BB
Malicious:	false
Reputation:	low
URL:	https://www.yahoo.com/px.gif?ch=2&rn=9.35954851852123
Preview:	GIF89a.............!.......,...........2.;

Chrome Cache Entry: 1136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	25900
Entropy (8bit):	7.976135099794231
Encrypted:	false
SSDEEP:	768:hzd573+WCB8NWGnn9Si9CkziGjjcCRp7zXNczNXloInGTAC:h3/C8NWxi91isjHvyELAC
MD5:	73C99AA1A2B77CD10144D43D1ED5FC07
SHA1:	46DB3BA76297E380201C0DFB3B28367B895AAC99
SHA-256:	595A026CD29968D9522C298200357B496B816877F4DA3760962AC144DF1B2473
SHA-512:	34B22AB150600D1FFBD2469ECA08F94947278BD0E0D066E9A11230DB7F8C0BBA7CDD4635FEA40EFBFC9A83C6C9BFEB15040B728527F7B8869D4A859267397210
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/pCTJDhUlfaOLjVy_BN8xpw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ny_post_articles_869/fb2f3b77989e5eb20704a6386c0e6d4d.cf.webp
Preview:	RIFF$e..WEBPVP8X.... .........ICCP0......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 .b...........>y4.G...%+u....cm...s..:.....~[._`;.A`_.w......z.y....M...c..+....8..u7..1_......o..m.`..?....W.?......S....7...y......?...^....d.../`.._.k......W..a...........j...p.k9.z.........%3..u[i..+..........Qap._.J.....,..y.[..+...-Kr.:..ZaD...2O..ef......I~.`,Ih.:.y..d]8(`%x.......FC.}.[.i.\.6.B..pr.y.D.P.q.......V...u..:'..hBs...F...7...z.Cf9T...9.3..4~Od0jD.tp.Z..<+....

Chrome Cache Entry: 1137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1860
Entropy (8bit):	4.881734028936285
Encrypted:	false
SSDEEP:	48:c6gNjjn25dIL++HIZspbSGf/Hx3SqBDoaFhAOfV:Qdj25GPxt7f/R39B3AOfV
MD5:	AA45385F03B06634DDCE9FE567B154F6
SHA1:	CD1DE4401751BDF2AF0801B4BB3F883455DC5C51
SHA-256:	0F45068720A4E668E9CE715A490FA145C2E2ABCBA703E6E45E155B75CF7C060B
SHA-512:	A4F531260C10F81D4149BFF07F6B1E0821B634D63A46BB4F00719453D731FF344BDA93421E70CF88ED82E2C6E834BB91B64ECFADD3918431CB1812124D7C0320
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_fin_desk_gray.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>icon_prod_fin_desk_gray</title>. <desc>Created with Sketch.</desc>. <g id="icon_prod_fin_desk_gray" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g transform="translate(0.000000, 3.000000)" fill="#454545" id="analytics">. <g transform="translate(0.000000, -0.000000)">. <g id="prefix__analytics-a">. <path d="M7.31625273,13.949828 C7.07716182,13.949828 6.84534364,13.8561916 6.67352545,13.6834644 L3.95898,10.9689189 L1.55352545,13.389828 C1.19988909,13.7461916 0.625343636,13.7480098 0.268070909,13.3934644 C-0.0882927264,13.039828 -0.0892018173,12.4634644 0.264434545,12.1080098 L3.31261636,9.04073709 C3.48170727,8.86891891 3.71352545,8.77255527 3.95534364,8.77

Chrome Cache Entry: 1138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39612)
Category:	downloaded
Size (bytes):	40662
Entropy (8bit):	5.69403474837721
Encrypted:	false
SSDEEP:	768:jHpuyyuegO1pMY77tAo2CXUpdDwNQyaQ3v5LiBaeMlyAgCq:jHpuyS1KgtAxIWyf5/lXq
MD5:	48C35E6820B761D2F4C4C7051614A99D
SHA1:	9BC6C0784483B2AEA471E4EE3EBB01687C603F3B
SHA-256:	F0875553FE618939E849516989FCC44C238FB94ED5F6F027A71A971EA464A2D2
SHA-512:	877C65A33C369B01139273A6BD2E15E41122DDEB6D69ED55A08677D0DC47B7BCE025E57ABEF6F3B7971A7903905693D8C10D925C60B052DB1235AD2316422C63
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/8IdVU_5hiTnoSVFpifzETCOPuU7V9vAnpxqXHqRkotI.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==. (function(){function f(l){return l}var h=function(l,q,S,K,z){if(K=(z=S,G.trustedTypes),!K\|\|!K.createPolicy)return z;try{z=K.createPolicy(q,{createHTML:A,createScript:A,createScriptURL:A})}catch(w){if(G.console)G.console[l](w.message)}return z},G=this\|\|self,A=function(l){return f.call(this,l)};(0,eval)(function(l,q){return(q=h("error","bg",null))&&1===l.eval(q.createScript("1"))?function(S){return q.createScript(S)}:function(S){return""+S}}(G)(Array(7824Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==',.'(function(){/',.

Chrome Cache Entry: 1139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3781)
Category:	downloaded
Size (bytes):	3782
Entropy (8bit):	4.7189732543631795
Encrypted:	false
SSDEEP:	48:hHag3AnUxDPtJZ6ldeEeZeci/CUQeteiHQedebeQe+eTWf4pw83cMV0Yb1hDXjRT:hFOUxDtHdyCUPoY0SHDXj4BVoxXr
MD5:	D4D5F0CA914CB06961C85BFC973D287D
SHA1:	4345EA82F9C943207A0E7CB16E1F642135180C1B
SHA-256:	1E9800CC0260AD3AF16A4071D016EEA717CF5813F3F43F286380F8045C1DECC3
SHA-512:	A8577E86D145B1F82B56FF450653CCF0246AAF34989A0CF00618CACBDCF798D327389F0321B3A1D32F258BF6A9638F7A50BD441D4BDBA95BC092E5BFECF6C261
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/videojs-ima3/5.2.8/videojs-ima3.css
Preview:	.vjs-ad-playing.vjs-ad-playing .vjs-progress-control{pointer-events:none}.vjs-ad-playing.vjs-ad-playing .vjs-play-progress{background-color:#ffe400}.vjs-ad-playing .vjs-captions-button{display:none}.vjs-ad-playing .vjs-audio-button{display:none}.vjs-ad-loading .vjs-loading-spinner{display:flex;justify-content:center;align-items:center;animation:vjs-spinner-show 0s linear .3s forwards}.vjs-ad-loading .vjs-loading-spinner:before,.vjs-ad-loading .vjs-loading-spinner:after{animation:vjs-spinner-spin 1.1s cubic-bezier(0.6, 0.2, 0, 0.8) infinite,vjs-spinner-fade 1.1s linear infinite}.vjs-ad-loading .vjs-loading-spinner:after{animation-delay:.44s}.vjs-ad-loading .vjs-big-play-button,.vjs-ad-loading .vjs-poster,.vjs-ad-content-resuming .vjs-big-play-button,.vjs-ad-content-resuming .vjs-poster{display:none}.vjs-ima3-ad-container{bottom:0;left:0;position:absolute;right:0;top:0;pointer-events:none}.vjs-ima3-html5 .vjs-ima3-ad-container>,.vjs-ima3-html5 .vjs-ima3-ad-container> iframe{width:100%

Chrome Cache Entry: 1140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 494x592, components 3
Category:	downloaded
Size (bytes):	7370
Entropy (8bit):	6.9520471116525195
Encrypted:	false
SSDEEP:	96:DLyZmODxFH40Tfs1KnGjdoJ1GDwEOJsQh5OXFcv3G3L1wqhN:DLnix40A1K8OOQiqvWb2+N
MD5:	61902F6258A0CBF08203B1E252DFADCE
SHA1:	0C1D98C9A759F4B3C1C338E478A6D6088C04E988
SHA-256:	C88D40F8C0C097193EE29047920C3BBD90DED0C50AFE4247D54A88D731C75FC8
SHA-512:	FE7964B3B5E8F2C658B00B8701F64D3EEB730EFF634FE7E5FFBAE6863C68EF6FC910D257065E6983ECD22AB0F3BEEB31BE76C68EB2A8EE9A6DC68FE43C194F06
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/shopping?q=tbn:ANd9GcTHIGsagJmvN2gdshLxD0bN0OFcOtZvrXXyJhmLiJkM9AE6Rmw&usqp=CAI
Preview:	......JFIF......................................... ... .....0 &%...!;*%5+545.+7?917/52+...........7...+-77+++126710-+++-+-+++-+++777++-++778+++-78--+8--......P....".......................................<......................!..1A.Qaq...."2B...R..b....r..Scs..4..............................$......................!.1.A.Q"a2q.............?.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................5b.e....i..6.-Y.Du..1=7q.332....8W./..)O.....;t.....O..6...._.@R..h.MH..?U..&3.......... .....................................Z.._Y.......yG...<..s8.(.L+M}\....

Chrome Cache Entry: 1141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	205262
Entropy (8bit):	4.944493917824511
Encrypted:	false
SSDEEP:	1536:mn71S88itSnTH+O3o13kx2bp0pMkpM7LFIYYdvvbLvVEiIkskTRjkdROPkobKzti:+1S88ituAgVMhkB2x6ooS/09oxR/8L
MD5:	0112DE3CCA616A52D5E3D7C61967F4B7
SHA1:	01B7826B431FDDBD8DED927E0A7AD654FAEAD662
SHA-256:	DC109170BC53B04AB6A3BD9B04BE137F10CF377ADBEC428D9705F3511625B738
SHA-512:	43C88E1BE36B07633E1178571C62882EB46551E6B854799B2B7CFE4071F824D5652AF3E1B94C097F5F9473CD56E4BABC8BF29638EED3050E4703E285747CE1BD
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/c/01b7826.caas-finance_web.min.css
Preview:	@keyframes slideUp{0%{transform:translateY(200%)}to{transform:translateY(0)}}@keyframes adhide{0%{visibility:visible}to{visibility:hidden}}@keyframes immersive-share-appear-in{0%{opacity:0}to{opacity:1}}@keyframes shine{0%,to{opacity:1}50%{opacity:.5}}@keyframes wave{0%,60%,to{transform:initial}30%{transform:translateY(-4px)}}@keyframes inlineXrayTooltipFadeIn{0%{opacity:0}to{opacity:1}}@keyframes fade{0%{opacity:1}to{opacity:0}}@keyframes show-success-message{0%{opacity:0;transform:translateY(10px)}80%{opacity:1;transform:translateY(0)}to{opacity:0;transform:translateY(-10px)}}@keyframes liveBadgePulse{0%{transform:scale(.43,.43);opacity:1}to{transform:scale(1,1);opacity:0}}@keyframes ellipsesAnimation{0%,30.43%{content:"."}34.78%,65.21%{content:".."}69.56%,to{content:"..."}}@keyframes loader-animate{0%{transform:translate3d(-100%,0,0)}to{transform:translate3d(100%,0,0)}}@font-face{font-family:"YahooSerifDisplay";src:local("Yahoo Serif Display"),url(https://s.yimg.com/cv/apiv2/default

Chrome Cache Entry: 1142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 1143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	288
Entropy (8bit):	4.890586884904174
Encrypted:	false
SSDEEP:	6:AnHa5gYg3favnqu5X86wEsBmWM6WJKBME7Xlcynq/:An66mnqgwVm2WU6Epnq/
MD5:	CD0DF5BEE9FF9F0736E282B3E402AD69
SHA1:	E4989FBD67F353F2968FC8DC72795AEF0931B37D
SHA-256:	B5672ADBED1D87EB22124821CB58AA654FE0621E4ED9FAF8217A0D7498DB084F
SHA-512:	E06887A8E4CA0364519AB0E220E5DA21036F8EDA8D44E5C0E225B020A803BD483EAF3AA59FAC664521D0E5DD58DEB9D589624DAC490E404AB55D08E4FA01AA97
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/MarketsHorizontal.DIPiWT5e.css
Preview:	section.svelte-1kxtmk6{margin-top:var(--space-1);height:-moz-fit-content;height:fit-content}ul.svelte-1kxtmk6{display:flex;flex-direction:row;gap:1.125rem;overflow:scroll hidden;justify-content:space-between}@media only screen and (min-width: 768px){section.svelte-1kxtmk6{display:none}}.

Chrome Cache Entry: 1144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (43807)
Category:	downloaded
Size (bytes):	1039581
Entropy (8bit):	5.62382887430052
Encrypted:	false
SSDEEP:	12288:nCcbugLDonMnfnJDkiVZkBU/liYOi20c4b5BteV5+qE4I170fXmEHwXJr0IzAoOM:nDVZk6/kYOi2kqEWfn09fnYZm
MD5:	3C0981657101AF562E1DC9AC59FC72E9
SHA1:	D9BA29EA0AD9515C612DEC8566328F6B443EE4D8
SHA-256:	8B5CB1B151924082EBA2F88B0721790CD9A8771BEE20827008B971251C71C8EF
SHA-512:	70B8E437EFD80D65A61F5C0725130E002413D01BD6DAC352E0E08B96B42D70DE8EF37AF217CDF0434D1BAD1520D38566364DC2FEDD274EB0A7F860FAF81E575D
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/news/microsoft-backed-rubrik-ready-file-231532821.html
Preview:	<!doctype html><html id=atomic class="NoJs Fz(62.5%) Pos(r) finance neo-green desktop bktfin-neo-10 ua-chrome ua-117.0" lang=en-US><head><script>. window.performance.mark('PageStart');. (function(html){var c = document.documentElement.classList;c.add('JsEnabled', 'jsenabled');c.remove('NoJs');})(document.documentElement);. /*. Empty darlaOnready method, to avoid JS error.. * This can happen when Async Darla JS file is loaded earlier than Darla Proxy JS.. * This method will be overridden by Darla Proxy. */. window.darlaOnready = function() {};. </script><title>Microsoft-Backed Rubrik Is Ready to File Next Week for IPO</title><meta http-equiv=content-type content="text/html; charset=utf-8"><meta http-equiv=x-dns-prefetch-control content=on><meta http-equiv=X-UA-Compatible content=chrome=1><meta name="oath:guce:consent-host" content="guce.yahoo.com"><meta name="news_keywords" content="Bloomberg, initial public offering

Chrome Cache Entry: 1145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14567), with no line terminators
Category:	downloaded
Size (bytes):	14567
Entropy (8bit):	5.233891295924048
Encrypted:	false
SSDEEP:	384:/lNH7DWdKQtK+ABPYUc3CGuucPoUq3xeQAazzlQ:vHXBPYU6CGNcPoI
MD5:	FF6533FEBE2F4FB2E2DBAA32B38C5D20
SHA1:	8B293E36B0E1C49F68C3D7F93968A0101A372324
SHA-256:	7CD57326970A4C3C96D26E9B5F95C3021E823A747DC0D55B89745075F3678FD2
SHA-512:	C8923B35A32E17F097602400992875496B49EBDDB9C8DDAC882D2EB835C190C1FB8DD1FF888BDDE1ADA67B3725CBDCE0A23C96A7DFA8799A2E0566A548B989C1
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-tabs-1.12.6-modern.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-tabs",[],e):"object"==typeof exports?exports["wafer-tabs"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|{},t.wafer.wafers["wafer-tabs"]=e())}("undefined"!=typeof self?self:this,function(){return function(t){function e(i){if(a[i])return a[i].exports;var o=a[i]={i:i,l:!1,exports:{}};return t[i].call(o.exports,o,o.exports,e),o.l=!0,o.exports}var a={};return e.m=t,e.c=a,e.d=function(t,a,i){e.o(t,a)\|\|Object.defineProperty(t,a,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var a=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(a,"a",a),a},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="https://s.yimg.com/aaq/wf/",e(e.s="./src/entry.js")}({"./src/entry.js":function(t,e,a){"use strict";function i(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function o

Chrome Cache Entry: 1146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	29
Entropy (8bit):	3.620936064750772
Encrypted:	false
SSDEEP:	3:KFEM5QMJn:KVQMJn
MD5:	6A6C75169D236E0448727BDA494AEBA1
SHA1:	AB5B31D771CA052C5977C45E2DE5B2F368A99252
SHA-256:	0DB2F26A4373D0A1E042E798172B25AB88800B7A61FF60E82E05775EEE7165AE
SHA-512:	716A5CDF11F50F19A38FD1B95613FB6E10524C7992553D72673D395CEF59645B94567B5E4EB97EF6BB80AFF9E5955426155002B765E65ED307F3DA7718E41F45
Malicious:	false
Reputation:	low
Preview:	lat and long or woeid missing

Chrome Cache Entry: 1147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x600, components 3
Category:	downloaded
Size (bytes):	43669
Entropy (8bit):	7.941237732363649
Encrypted:	false
SSDEEP:	768:SYySUsp8f2zm4U+C0vzuAs4RZBy5w1GBjSM6nJ3HT+v5gkzlE95acEKk:S+UsaOzmrWCY8i1m2T+Bgkzl45ack
MD5:	799C9FCBF176E6733C833813092BBD1D
SHA1:	119850C456489FCE8B58DBEED5E29CA58E47ED3B
SHA-256:	4734B554BEBFE6F8858DB11E0B86C0CE0F5EC8BF91ACFE6E530A3363428F2E72
SHA-512:	AA12346F34FF086A6CEC5FF178EB8612CF50D22B4D985CFCEC6163BC14375D2D5AC46CB066A7860D071065C47507A8FD58C3C35FAEA2EAF7A0F0E22213003412
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/473513299895995753/images/bg1.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:7D91FAA9CF9C11EE8137FF27797BBF91" xmpMM:InstanceID="xmp.iid:7D91FAA8CF9C11EE8137FF27797BBF91" xmp:CreatorTool="Adobe Photoshop 2024 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="3D13E279DEB967D91F986900E6675D33" stRef:documentID="3D13E279DEB967D91F986900E6675D33"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cp

Chrome Cache Entry: 1148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20625)
Category:	downloaded
Size (bytes):	22993
Entropy (8bit):	5.330493147849342
Encrypted:	false
SSDEEP:	384:81xT0BVQ6GV4tv0lMGg2geQtfnHN5pOEAYfhO2Xz4wDQjZvy99qQWwY4RXrqt:ORcMtCGsOpYfkKz4wDQjZvy/qQWwY4RY
MD5:	88CB38EC1178905A1863ED41817AC11B
SHA1:	BA53C80F8E20CC0BB4E06510483E1FA8CF86C513
SHA-256:	80A5BE3A4DE3B523D36CF0591251B7CECA9AF1DCEA5CAFB3741A2FAA8887E763
SHA-512:	6A51C8774547D72BA5BF86D24ECEDFC3F395ED294885F5BDA82F51EE2A8107C13586BC59DD9654501577629C8C58F497DA8F7BFB6E7BEE670E6AD486BFEF140A
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/checksync.php?cid=8YHB97349&cs=1&cv=37&hb=1&vsSync=1&prvid=25014%2C25082%2C25113%2C25307%2C25308%2C25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=1&usp_consent=1&uspstring=1YNN&axid_e=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&coppa=0&ckdel=0&gpp=&gpp_sid=-1
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":26,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":15552000,"cc":"US","zone":" e ","coc":"NA"},"cs":"1","lookup":[],"ussyncmap":{"disable":[]},"hasSameSiteSupport":"1","csDelSS":true,"batch":{"gGroups":["apx","csm","ppt","rbcn","son","bdt","con","opx","tlx","mma","c1x","ys","sov","fb","r1","g","pb","dxu","rkt","trx","wds","crt","ayl","bs","ui","shr","lvr","yld","msn","zem","dmx","pm","som","adb","tdd","soc","adp","vm","spx","nat","ob","adt","got","mf","emx","sy","lr","ttd",58160,"mn","tlt","pub",55953,58301,"idx","dtm",57926,58267,56551,58259,58601,"ctn",58280],"ngGroups":[],"bSize":1,"time":7000},"csloggerUrl":"","optout":"optout","cslogger_host":"lg1.hb.yahoo.net","ck_del_sld_tld":false,"gdpr":false,"gdprconsent":"1","cookieDeletionList":[],"ccpa":true,"ccpaconsent":"1","info":{"domain":".hb.yahoo.net","cid":"8YHB97349","itype":"","pid":"

Chrome Cache Entry: 1149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	243
Entropy (8bit):	5.575208302007598
Encrypted:	false
SSDEEP:	6:TMVBd/ZbZjZvKtWRVzjiweL9oYjgVSMHno0ian:TMHd9BZKtWRkPSVSH0ia
MD5:	C01AFA29EC5FF99BAFEBE16F7B74CEE2
SHA1:	1A07A1A14BE9BCB3E6B2E282E9238A51DB56BB65
SHA-256:	88DADF2ADA6150161170AF88985E5BEC794A6EA630E696EEEA477552248F0EFF
SHA-512:	9BB85403A0997A3147801C61C4995756974D9BEA8114CF2AD10670CA3BDB674FEE618693B2C8ACBBCF8719AAB8F8DAE36A55170753A6B126A4FA09AFDC8D9CE2
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rq/darla/4-10-0/html/r-csc.html
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>7DSWEWT52KB2EG6W</RequestId><HostId>qgTqaCEJvmMXO3LFVlroaK00iGjAiB0r4U5dxBNquOCEpvJUTM5ZafSVtCSexTM5zMPEJhSHqAw=</HostId></Error>

Chrome Cache Entry: 1150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/map/ct=y/c=14701/tp=MTAI/tpid=6D366468-71AF-422B-99AB-138A6DAB94F7/gdpr=0/gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 1151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1971
Entropy (8bit):	4.8444683069301435
Encrypted:	false
SSDEEP:	48:c6gNjjIz+5EgroECLNtWwa+XLBYzePgXJR:QdWWEgraZtWgXLoePW
MD5:	1C4B72A9B73582FBD57611D305213C19
SHA1:	A9BA6637BD2ACD2A0C306AA549AE99B28A01B1DC
SHA-256:	1F165A65C83A69747965C5EC452C21B4721535BAB4D0B5D889BA1AE7FC4DB125
SHA-512:	9B651CF4F3FB43C46A17501675ED1E8D30CFB749D70B14EDAFF769710BCFFD3EF4EA4A19F3B0A33C70585D6546D8AA91656A246BF3A4105FF18EC2D12EA72C2F
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_subscript_select_gray.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>icon_prod_subscript_select_gray</title>. <desc>Created with Sketch.</desc>. <g id="icon_prod_subscript_select_gray" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="icon-subscriptions" transform="translate(0.818182, 0.000000)" fill="#454545" fill-rule="nonzero">. <path d="M9.10044464,18.114527 C4.60108307,16.2526679 2.04260478,11.1993097 1.83098765,5.44934381 C3.59930758,5.19049998 6.30037766,4.40125335 9.09136236,2.10980428 C11.882347,4.40216157 14.5852335,5.1914082 16.351737,5.44934381 C16.081085,13.1238364 11.8678154,16.9946869 9.10044464,18.114527 M17.351696,3.73280051 C15.8249647,3.6265383 12.8005655,3.02801871 9.68897636,0.229780664 C9.51913773,0.0762908091 9.30570409,0 9.09136236

Chrome Cache Entry: 1152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	16021
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	42CD08ED7B3E5271441FF13ADE94F3D9
SHA1:	AA98B5BB8BBAC386B66B03740D72A827128ED94D
SHA-256:	CDDFF281A04DEDB187C48515D02D42D24535E434D2E5326A48E89D576DA9AC6E
SHA-512:	D56086284D05426499D9F30C7036E69173BF251BF768BF16260FD8B60282FFB1E6817C5C53B55E2CAAB010EB0D750CEB32DE7DBA023B325C89D52203353C9F52
Malicious:	false
Reputation:	low
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 1153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2230)
Category:	downloaded
Size (bytes):	30287
Entropy (8bit):	5.490125329953648
Encrypted:	false
SSDEEP:	384:Mmpoa11zlvhaqmS6LzZSiHsGiTnXcWsDSaWgwUY3chTzyyLIcEM+0upA6aRmlWO7:f3zGd3AnX7DtUYUzysEM+XpA6aElvP
MD5:	9C2EE91242DC23ED28474D57DC116262
SHA1:	445012B101255C2A89BD61F2E2FF12C8D2DFC1BE
SHA-256:	AF9C5B4DE9E62670513C4AB5927E638484FD869CA5427023886B9344D3FBD170
SHA-512:	71427BCF20A0839CBD640F4942BC7F2C033AC28CCD8A7E34D1D28CBADE7DC2A8AEE6217C668F8ADB9E44F8CE52CC0EFDEF1C06AC6EE5F872EC936312079A25E3
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240327/r20110914/client/qs_click_protection.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ea=da(this);function t(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .t("Symbol",function(a){function b(l){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(l\|\|"")+"_"+e++,l)}function c(l,f){this.g=l;ba(this,"description",{configurable:!0,writable:!0,value:f})}if(a)return

Chrome Cache Entry: 1154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 396x299, components 3
Category:	dropped
Size (bytes):	4332
Entropy (8bit):	7.586011670046242
Encrypted:	false
SSDEEP:	96:NzquAE3tlhrwks8x8XgE9t9yzNB/ipxgxtJUwRo:NzquV3qA+guOzv/i07o
MD5:	444E9C16D4DBFDF9B81BA782F7625A28
SHA1:	7E3736F81C3E470A947FFA6A105FAC84F92B5D5E
SHA-256:	864AC710F0D7F56E8E1941591F441593C3B9C6949A4F479FFD3FDFFAF362DEE2
SHA-512:	C9CFD2F83B1AEF0AFEF833FD4F730CA8A4F009856635609A2294BB05B2AD8B76755652318BFB3E48C9F0E82433ABD5A26FD7DB07BA058070E2EC426CC9C94871
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................( ..%...!1!%)+.....383-7(-.+...........-...---++++-------+-++---++--+---7----+++-++7------+--......+....".......................................4........................!1.Q.AaqBR...2..."C...3br...............................".......................!1Q..A.2a............?.......................................................................X.~.Z..y..'?.m=..........f..j.W.b..7....a.#..;]..3.m.7..?.1...yJ0..=kX.........K$y...N.....7.^...[.'.Z./....i}..'Ub...7n9..h.9.......................7&.. .y.}F..~...^..../W.<8.o.-.~l................y.n..&g...HLm..K.X.ngP.9..7.^..g..N....(U..{.w.Oj.JU.p.h.[R.....[V.r.'-...fP..U..;2..si.@......Gy..`..X...q"...Kx.8.`........................b...nW:+.;...m;.f.5..M.v.....+)C.mdc...>..f4..Q....\.;r'.TY.o.o?>..z{rcl.L3....'XJh.5.....a(.F..2..s.H.n...Do.@#Z..C....D~....O{ynjG,...d..................."#s:`.._.?T.K......m..'&..2.=...........~..>...Od..#Y..1Z...9.kPJ...2.CN

Chrome Cache Entry: 1155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 1713, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	12068
Entropy (8bit):	7.942160239495707
Encrypted:	false
SSDEEP:	192:ZTVBJIhPQbVDBi2yMmpM4WWcj2V27uhsPac8NA1pWhhwRMm/He0fKFbSBt4PpUiC:ZT1sPQq2ARcXaM1ewbe0fZBtu8yPcVzT
MD5:	49422090C836F9FEF41EC35497BA622E
SHA1:	615432BC9E228E0A0A98E950A36E68742F52ADEA
SHA-256:	C38AD659D5C95DC2E75B9A79247D9B40EF1E00B9B377A9919B54D8E03024B20B
SHA-512:	AAAE3A9A275BD148050A475F49087369165BA6180ED6E12247F037458FF5F847A45DDAE62394701DDE4F8260DF4EE1AEF29AF01590AAE349B2BD34394A19A576
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ..........Nz.....gAMA......a.....sRGB.........PLTEGpL`..d........MA..A:@s.H..............d..d...........c.....e.....h..d..a.....d..d.....b..d.....d.........f....."'......_......)(...d.....e..-,0.... %..._..^.........!&......d..b.....b...$&..7..!..............!d....q...c.....3.^....&$......\...h.d...!&.%(.").i...!.. ...?..../j......4..&%./#.h.. %>........3.^.#c.._...(!..A....#'.....4.....G.4..._d.....h........ZZ^.!'..Z.)...........f..%&[Y^.h.......ZZ^....h.YZ^.5.%@.....4....#.........'0.....4....`....Z..!1.K....Z...:....A..Z..Z..3`..%.....4.^HJN...YY].4.0.0.@........2....a.... ..!..!\].4._`..,.}..3...'.s...\|....3........2..3.\|.-....2.Z.....Kd.........)...6]^.m..@.....")....d......Z.....!.....34.^.......4.....j.=>...^T..r...q.......B..H.....&%x$ !D..2.d...7.7.c...7..7.d......OP...5..w\|..%2.*77.dn.....!....tRNS.................4.S... 1.9F....d.EE.(....'....T.>.t....d.p.'....p\|N.Z..........Lg9%{.]....@C..N2...V..rr.N.5......[IZ..&.d..3..\..wO..yP...n.

Chrome Cache Entry: 1156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ad.doubleclick.net/ddm/trackimp/N360801.1913355YAHOOADMANAGER/B23644564.322432492;dc_pre=CLv3xb6emIUDFYosiAkd31QDnA;dc_trk_aid=495505181;dc_trk_cid=127172993;ord=[timestamp];dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ltd=?
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 1158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65386)
Category:	downloaded
Size (bytes):	448900
Entropy (8bit):	5.502006424862447
Encrypted:	false
SSDEEP:	6144:V7dgOacnrewoUROgcboq6Vd92CQ5QxV7YgnxRl1qeP06qQr:JdmcrROgc7p5QXYgJ1qB6D
MD5:	43D66FFC63995DB9072A73A7061C524C
SHA1:	D964CC935A7DC5D2BEB9AC5A87AF682460F2E364
SHA-256:	0E6CD18826928BF01D43AFF8ED048E78CDBAE0B38D171DC711DD5ABAE49535CD
SHA-512:	21B1B55D0FC91B98C015C972B93EEAFF13C59CC7F2CA2F5CC77A5709036A4F2FF360768F4D0FE6F6BFD7C814FD75AE5D521B158DE756F3AB3661ACD489AF1BB9
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202403260101/pubads_impl.js?cb=31082224
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . SPDX-License-Identifier: Apache-2.0 .*/ .var ca,fa,ja,na,pa,ra,va,ta,wa,xa,ya,za,Aa,Da,Ea,Ia,Ja,Ka,La,Ma,Pa,Ya,eb,gb,mb,ob,pb,qb,rb,tb,xb,zb,Fb,Gb,Jb,Lb,Nb,Sb,Ub,Yb,ac,Zb,bc,cc,Vb,gc,hc,ic,lc,mc,oc,pc,qc,sc,tc,wc,yc,zc,Bc,Cc,Hc,Ic,Kc,Mc,Nc,Vc,Xc,Zc,$c,ad,cd,hd,id,jd,pd,fd,qd,ed,dd,rd,sd,td,wd,xd,Ad,zd,Cd,Dd,Fd,Id,Jd,Ld,Qd,Rd,Vd,Xd,Wd,$d,be,ae,de,ce,ee,ge,Kd,le,me,ne,qe,ve,re,te,ue,Fe,Ge,Ie,Je,Ke,Oe,Pe,Qe,se,Re,Se,Te,Ve,We,Xe,Ye,bf,cf,df,$e,lf,af,mf,Cf,Ff,Hf,Lf,Mf,Nf,Rf,Sf,Tf,Vf,Wf,Xf,Yf,Zf,bg,fg,hg,gg,lg,ng,og,rg,Gg,Ig,Jg,Og,Rg,Sg,Ug,Wg,Yg,Zg,bh,ch,dh,fh,hh,gh,jh,kh,lh,nh,oh,ph,qh,rh,sh,vh,xh,Bh,zh,Th,Uh,Vh,Rh,Sh,Wh,Xh,gi,ei,ji,ri,Yh,Ai,Li,Mi,Qi,Ri,Xi,Zi,$i,cj,fj,ij,jj,uj,xj,yj,zj,Aj,Bj,Cj,Dj,Ej,Gj,Jj,Hj,Kj,Ij,Lj,Nj,Uj,Wj,Xj,ak,Yj,dk,ek,fk,jk,kk,qk,rk,Dk,Jk,Hk,Ik,Ok,Sk,Uk,Vk,Wk,Yk,bl,il,el,Zk,ql,ol,pl,sl,tl,wl,Dl,Gl,Hl,L,Il,Ol,Ml,Zl,O,am,bm,cm,em,gm,hm,om,pm,rm,sm,xm,Em,Gm,Im,Jm

Chrome Cache Entry: 1159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34257), with no line terminators
Category:	downloaded
Size (bytes):	34257
Entropy (8bit):	5.374584949925769
Encrypted:	false
SSDEEP:	768:K+IV6H1XyQZ71NMAnH5F5mP5aAluBk4qDuNM7hxV2xCv6ptc8Oagrzo6whSd:KVdIvH5F5mP5MBk4E0C/ztwhSd
MD5:	A822A6E3BD612B3D1915E12B07C76BBE
SHA1:	BF1A33FA37F6A20CD6FC9AA6CC7ED8239D3068F2
SHA-256:	8496764DFC7DFE61FAF016991FEF7FF5389E697C090D998D617C9A5D38FEDC44
SHA-512:	4588E436B1EFFA3A3D19283D2D43B15A40732E69D8EF2512BF389172D6CEDEE476556D39DC40F7ED81F4C37F36C8A3517CBDAA64303D9F54289F6EFCCF8E6ED9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/nel/js/spotIm.custom.SpotIMJAC.seamless.a822a6e3bd612b3d1915e12b07c76bbe.js
Preview:	!function(){"use strict";var t=function(e,o){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var o in e)Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o])},t(e,o)};var e=function(){return e=Object.assign\|\|function(t){for(var e,o=1,n=arguments.length;o<n;o++)for(var i in e=arguments[o])Object.prototype.hasOwnProperty.call(e,i)&&(t[i]=e[i]);return t},e.apply(this,arguments)};"function"==typeof SuppressedError&&SuppressedError;var o="messages-count",n="navigate",i="scroll-lock",a="scroll-release",s="spotim_error",r="spotim_event",c="sso_api_ready",d="spot-im-renew-sso",l="sso_code_a",p="sso_login_error",m="sso_login_success",u="storage_update",h="spot-im-share-type",f="spot-im-comment-reported",v="spot-im-conversation-failed",g="spot-im-conversation-loaded",w="ow-error-event",y="spot-im-launcher-failed",C="spot-im-notification-drop-down-link",S="spot-im-user-notifications-click",_="ow-performance-event",A="spot-im-show-mo

Chrome Cache Entry: 1160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (2246)
Category:	downloaded
Size (bytes):	2247
Entropy (8bit):	5.353836387453616
Encrypted:	false
SSDEEP:	48:nsyjA7q7fnZzsHAEP92IEFs/0y7d6g5XK9kTGMvZMa5/8rtNv8xE:n5jA7q7fZYgu9FEFs/Ld/8Dv86
MD5:	2D453EA6A40806D9C7282CEF7F90DB88
SHA1:	1B660CA4AE9A0178C57AE1506C293F66FCF2EECD
SHA-256:	5BABE394AA1E2F1030DCF1A7B2939820F38F0EF7EA01945B1A0BBDF18097059A
SHA-512:	EAD4992FBE8CE4C835893A2725C73E7FC0B4EC26CCC98E9AF29A99821B996FDFE60695923E23030794545D0239AABC2F1ACC9E8A74F271001341D25A97959E43
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/Header.DBmnIB1k.js
Preview:	import{s as v,e as p,d as w,f as S,i as d,p as g,k as F,G as b,n as y}from"./scheduler.ErneftFr.js";import{S as N,i as R,c as C,b as k,m as A,t as B,a as Y,d as q}from"./index.DsErXEH0.js";import{n as I,h as T,g as x,q as E}from"./commonUtil.Bb2Cnbsk.js";import{R as H}from"./RMP.zPPn0o8p.js";import{g as h}from"./entry.CqbZzrN3.js";function D(c){let e;return{c(){e=p("div"),this.h()},l(t){e=w(t,"DIV",{class:!0}),S(e).forEach(d),this.h()},h(){g(e,"class","placeholder svelte-6nfr06")},m(t,o){F(t,e,o)},p:y,d(t){t&&d(e)}}}function G(c){let e,t,o;return t=new H({props:{key:"tdv2-wafer-header.HeaderYBar",$$slots:{default:[D]},$$scope:{ctx:c}}}),{c(){e=p("div"),C(t.$$.fragment),this.h()},l(n){e=w(n,"DIV",{class:!0});var a=S(e);k(t.$$.fragment,a),a.forEach(d),this.h()},h(){g(e,"class","ybar-sticky")},m(n,a){F(n,e,a),A(t,e,null),o=!0},p(n,[a]){const r={};a&512&&(r.$$scope={dirty:a,ctx:n}),t.$set(r)},i(n){o\|\|(B(t.$$.fragment,n),o=!0)},o(n){Y(t.$$.fragment,n),o=!1},d(n){n&&d(e),q(t)}}}function L(c,

Chrome Cache Entry: 1161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4686), with no line terminators
Category:	downloaded
Size (bytes):	4686
Entropy (8bit):	5.327677406811198
Encrypted:	false
SSDEEP:	48:sk9SbN5+8Jt4FwVtidEQ71HVHAq5vPAIMXtvPjyc2Op+eCisG8:Es8JtugtKvHnvPhMXt3jylOpPCisG8
MD5:	1F38518FD23317C7E8F5C7313814F31B
SHA1:	4DAFE5FF983E9A776369E9DE6426FB357A3D35C4
SHA-256:	C25A34ED5A8A5B078496452390E1DC7C1D1BD7F072E177995350DB722483826D
SHA-512:	73B111BB30BF15005F1605090A24770AB2CAC9D91036D5F172F19E13BF5B8E777B971190F3A9EDB818C4BB7DFAA44BF3659C057C8C23711EE53E1E76A1F62D92
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/css/react-wafer-featurebar.FeaturebarNew.atomic.ltr.1f38518fd23317c7e8f5c7313814f31b.min.css
Preview:	#atomic .Ai$c${align-items:center}#atomic .Bdc$t${border-color:transparent}#atomic .Bdrs$2px${border-radius:2px}#atomic .Bdrs$8px${border-radius:8px}#atomic .Bg$\$featurebarGradient-0${background:linear-gradient(255deg,#4e01ca,#2b64f7)}#atomic .Bg$\$featurebarGradient-1${background:linear-gradient(255deg,#1f61fe,#0c8df3)}#atomic .Bg$\$featurebarGradient-2${background:linear-gradient(255deg,#f94b37,#fea60a)}#atomic .Bg$\$featurebarGradient-3${background:linear-gradient(255deg,#ea145e,#ff2429)}#atomic .Bgc$--blurple${background-color:#5d5eff;background-color:var(--blurple)}#atomic .Bgc$--carrot-juice${background-color:#ff520d;background-color:var(--carrot-juice)}#atomic .Bgc$--cheetos${background-color:#ff6e0c;background-color:var(--cheetos)}#atomic .Bgc$--dory${background-color:#0f69ff;background-color:var(--dory)}#atomic .Bgc$--grape-jelly${background-color:#6001d2;background-color:var(--grape-jelly)}#atomic .Bgc$--hulk-pants${background-color:#7e1fff;backgr

Chrome Cache Entry: 1162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3078
Entropy (8bit):	6.94385762456431
Encrypted:	false
SSDEEP:	48:l8PXpinYXi4aeI+3zSdJR7cJRrMJRhFS8aQbI94Ewo2N90:lQkqIWTrMJRhFS8a394EwoG90
MD5:	D931F61DFD447A9344635C81DEC1F497
SHA1:	F1C13AECBB9578BFA84E6D01CCDEE7EDC4CC2065
SHA-256:	8F5653761179C556EEA7C566B0A1F0E6C0349B76212C7F5D4AFC8A0350B20FBD
SHA-512:	FEDDBD532BE57C20A4F9C88B9A33D7755F758D2F9F2AEDA9692811B40926C18A0B25301DAFE9C034411C2EE7EDAACCA9953A6FEE777816899C8039C7F83702FE
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/473513299895995753/images/lockout.png
Preview:	.PNG........IHDR...X............;....PLTE............................................................................................................898...iji......DED]]]..........PQP...vvv............#tRNS...DP..@`wp .1....W........8e..h..;.....IDATx.........................................................................`..@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU.=8........m.UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa........._.AUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU....... ..FPUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU...@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU.=8........m.UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa........._.AUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU....... ..FPUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU...m9U.......u......y.w.&.(tl..iB....7..I.....................$..6j....._",.......@X.~*.I...

Chrome Cache Entry: 1163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 500, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	24177
Entropy (8bit):	7.937836181573967
Encrypted:	false
SSDEEP:	384:7s0bdIJ8KofuMNkoHglezJn+WCvbRUwhWiSp6nmruHtl9AWQFmG+Dqqt+:7s00RuPNkwwFRUwspxCHtP1G+D90
MD5:	6ABDC799DC327FB9EC9172E99E821DB7
SHA1:	F95BA2D4013E13EFB298F021045C1FD5532D11C2
SHA-256:	D9A9CEDF5AEE200BE97CBD4363386B3C0E0BDCAAE158B3A0814752C5F4E54DD3
SHA-512:	B2918D4B5BCED119B95920AF4BA233CBBC1A19D581697366D1C11D56EDC6000685211E515929CD7FC015CECA6AF7F3D5181E377EAD332EFDB0044A53F79F5E05
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aa/yahoo/help/narrow/assist_yps/YahooPlusSecure_Assist_T1_2x.png
Preview:	.PNG........IHDR...X.........n2...^8IDATx...3.]....e..j../c.m..m.F...QEM..c......w..k....;O.............7......B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..&.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..W.\..oL..O.W\|.{""#?.>...BH....?..\|.M.-.8.....!.m..-...Y....02.yM.....[....`...... .!....B8.......!.U.....K{Q.....3.~.......!.<...<@.g..YS......S..../.3..B....th..A+!...TU...~..F..B.!.q1...\|...1..#....Z.!................wR......a..(h...%..@........A...47.!.(.aKs.}....o.;.`Y....k..z7..m..k....m..".E.:.3y.{.o.....nM.....3...l.Ao..^L...?Z\|.j.>.5<...T..#.FK..^.z.=.w._w..J.yk.I..e.W.8....p.....?W........q.......;2.>.~'\|...?V?uN..hl4.....Tl.J..U.,....VS...7.tEJ.z_..?.....M.v..f...aw..?S...[.#..H.....iF.....d..{.9.......}Io.{.`0"......).2[....X.v.,[uC{....7..z.L..4FnCS.........r......7.-.t).E.0W..K.Y..Ny_.@.+.m.......K.......A.......4..w.p....z..2.-7..Ku`0..N.c#.7..6.^\|..uT..K..eJ..B$W..l...;.

Chrome Cache Entry: 1164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuVgO1nVIEPoAXH8P0rqUyFLvWBYO5ToeXKjP4qG5AcaemA4Vzz5T8VWOGCan3zPrtr4pK_5TWGgh4ROLlQHj8GlBhT-OEfpvC4DChMffiGwAelaljnEpRd_sfkELmaQtC77XsCkDWfplRB1-1T2BLmyiKCiWjyKlo&sig=Cg0ArKJSzJrJFWqs60aSEAE&id=lidartos&mcvt=2149&p=84,146,334,1116&mtos=2149,2149,2149,2149,2149&tos=2748,0,0,0,0&v=20240327&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=19&adk=3690920304&rs=4&la=1&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=b&co=760569601&rst=1711672894724&rpt=36133&isd=0&lsd=0&ec=1&met=ce&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 1165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25683)
Category:	downloaded
Size (bytes):	27483
Entropy (8bit):	5.284515392726493
Encrypted:	false
SSDEEP:	768:IaJXZkPw7/PwL8F8mE3iqoHg/tzCsxoJOfv8wgR+JAZxmSvROpcTVzgIW86ggr85:tNRNHgngQL3863zrFAzb
MD5:	FF35E81C87E54C47BC1A504FC8847CC9
SHA1:	1734640147460A85EE7A361DE5181299D8DB3789
SHA-256:	334104FB4C63C12B1B876D4B65F0DB8FFC18E96353BF257D0D860F14885CF878
SHA-512:	C750F8105D8948B8B8FC13813F62192C8E078352E102F115A86299DC39C3510D467D51141CD64CAB690FE081A50E7BDCECCC6F4AE44A7B5A532EE5B9E4EC09BF
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/entry.CqbZzrN3.js
Preview:	import{n as q,s as lt,K as ft,v as ut,P as dt,a6 as ht,G as pt}from"./scheduler.ErneftFr.js";import{H as ne,S as _e,R as Fe}from"./control.CYgJF_JY.js";new URL("sveltekit-internal://");function gt(e,t){return e==="/"\|\|t==="ignore"?e:t==="never"?e.endsWith("/")?e.slice(0,-1):e:t==="always"&&!e.endsWith("/")?e+"/":e}function mt(e){return e.split("%25").map(decodeURI).join("%25")}function _t(e){for(const t in e)e[t]=decodeURIComponent(e[t]);return e}function ue({href:e}){return e.split("#")[0]}const yt=["href","pathname","search","toString","toJSON"];function wt(e,t,n){const r=new URL(e);Object.defineProperty(r,"searchParams",{value:new Proxy(r.searchParams,{get(a,o){if(o==="get"\|\|o==="getAll"\|\|o==="has")return s=>(n(s),a[o](s));t();const i=Reflect.get(a,o);return typeof i=="function"?i.bind(a):i}}),enumerable:!0,configurable:!0});for(const a of yt)Object.defineProperty(r,a,{get(){return t(),e[a]},enumerable:!0,configurable:!0});return r}const vt="/__data.json",bt=".html__data.json";funct

Chrome Cache Entry: 1166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1650
Entropy (8bit):	5.159978002033735
Encrypted:	false
SSDEEP:	24:tCbYLbGPGuXVGTTGzGeLGSoGQlnGMGl8YolNBa4xYZHnRDaHjjOtKwS7xDSyFYxT:Di+huqUGSbQMHmlNQulQKxM
MD5:	03C10F2C4E36A75805F7735D1F07C98C
SHA1:	DAEF61F97758BEF6CE593D34998F5F8EA7E20E7D
SHA-256:	0F7D51EA19F78212DBF64706C7CCEB771E3D7B6390057BD4E44355B2850B1DA5
SHA-512:	26C726B47435AAF67BA01633AA75F50E48718A494FF19C0E2BD9AD58D070508AE9C8A14255EA0BF5A754BFBA2F6C4BD4D20632A31464478DF74EE68F10C59465
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/weather-svg/MOSTLY_SUNNY.svg
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="-36.396%" y1="32.854%" x2="33.396%" y2="133.313%" id="a">. <stop stop-color="#FFF5B2" offset=".013%"/>. <stop stop-color="#FFDE00" offset="39.944%"/>. <stop stop-color="#FFA700" offset="100%"/>. </linearGradient>. <linearGradient x1="115.053%" y1="97.289%" x2="115.053%" y2="-17.557%" id="b">. <stop stop-color="#FFB92B" stop-opacity=".05" offset="0%"/>. <stop stop-color="#FF6900" offset="100%"/>. </linearGradient>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="c">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <path d="M20.464 26.12c-4.225-.75-8.257 2.1-9.051 6.396a5.422 5.422 0 00-5.252 2.062 5.67 5.67 0 00-.693 5.694 3.006 3.006 0 002.792 1.727h10.855c4.085.022 7.5

Chrome Cache Entry: 1167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	22744
Entropy (8bit):	7.613789213223302
Encrypted:	false
SSDEEP:	384:v0wlWugqpL1ilnhobfRvycAppyAzyDy1+JI5oaMTm6y6TkLqAFKfcZM:vjWbqpL1iln6NtAppT+m/HMT/VTkLxcF
MD5:	653533E78AC628ADB1387D3514CBD714
SHA1:	08BC08827BAAEDF2709A31CA04E808FC4770E298
SHA-256:	5C8C55E003DB8CD39710EDD029F94402E24AB3FB74B7B717498567595E5C81DE
SHA-512:	B46CC6ED9FE3716BB2DF30A36A66692075023C36A035B457CB57250C8D57D6FA9E55B12F69B7F10C5E8C19B15BAC2E655E3938158A15D2D5431FFE686F0D4908
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/13461938776524376467/images/lockout.png
Preview:	.PNG........IHDR...X.........'.4....CiCCPICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R...J5e?

Chrome Cache Entry: 1168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 580x326, components 3
Category:	dropped
Size (bytes):	112918
Entropy (8bit):	7.979737588034794
Encrypted:	false
SSDEEP:	3072:i0gysf5XSs/MQvXR1SlI5vdU8BOynIsDss+ZKUUL8o:i0J7s/xX+IM1gIsDsjI
MD5:	A031D34919D62FFF9C6EBD77219D1421
SHA1:	D56E4C54B753B87414E65170CAC4BC4DBD2E58F3
SHA-256:	7680C609D9B6F71D8E9DB4BA46FEF053EB3423996A2F78A6261665B51F4E6D6A
SHA-512:	B15E7A765EC83C01D8B463B77D8F1A0469DB9D86E63E3BBC906CE9C7592A73A0675CB9CDDE686341EE8582D76E6F90E511B8638E04BC25F6A190ED7014B3ACEA
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................F.D............................................L.........................!.1.."A.Qa..#2q.BR..$3b..Cr..%S.......&4D.Tcs...5.................................F.........................!1..A."2Qa#Bq...3....$R....Cbr..%4S.&Dc.s..............?..s8^....t_...D.0.........c.....a..d.....).....X.v.z..R6...E.:........G\+...z..]/~...s.a.IRjp.@.....:).]}.:..V.w.9=.........~a...p0W=up........A2.E..>.m..y.J...c.O..33..)?...SeJqF..S:.+WB.TQJ.}.....B.J...6F..-VU....b..+.%..:...w.S%........{.i.....lI.(..W.9..s.EPy..=.........{AJA.5.N$..v....u.6...\..Q=.......b.j.e`...G..`..s...m.l..._.q.L.G.<].."^..3.9...(..d.U..c......p.....#....h\|.-...@hZ.kDEh..v..0.MPV....S..[M...H.KE.`.......f.w..nd.....Q.Q.j.Ij..j:..w..8."...,pI....T..LOa.\|.8Wg..QmY.2.".s.6.}=%5.....$...\q.....9...I.._-.........g.d=GaJ...%.sj..H..0.n.(#

Chrome Cache Entry: 1169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 536x284, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	19046
Entropy (8bit):	7.98877442200464
Encrypted:	false
SSDEEP:	384:ZNvdLugF0t5UzvpOH/Xqt2q+I60Rg6n/Av6gcdQJTN4FysGgxoW:rdLXF+upWJr0W6n/Av6gB54FycoW
MD5:	3BA38D0225E50AB3BC2EA08462130835
SHA1:	F36ECF56B42F9CB18F2E27D7B1C9E99C2D5A96D4
SHA-256:	9F131768FFA2D033FAD5EB4DB1C9588D991684757B974A18505C04317A5890E5
SHA-512:	CFC89AB058C77E565049B56D83D65F6731DF53DF36098BEBA5FBF753965FAEC1DA2B8BAD1DBBC405FD0A824A8766A6C156F668889862917EAC50A1938ECD7181
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/9dljnlwsdNbAGRjDdt418A--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/90fc863b5fb5c3e128c401bc64cf10a1.cf.webp
Preview:	RIFF^J..WEBPVP8 RJ...b.......>y6.H$..#.......cm..[...&.L6......}=8....=..S......9.e_..i..t......\|;.[....3...A....v.,....~....v5.)....>..c....},,%.>.4...dd,w...e.....d.#.......3._..SOM.....n.......}...w. .Y...6E...C...x..;..fj..-jB...s..QO...E~....k..$Wx..2l..o%6............S......(BPI...eFhA......{...M...);.~....N.....y.7....]...I...J...&....<.$R...S.....}.......k.i..$`..b.C..)\|Mi..Ee..GM%@.1.VN...Z/..?..;$.sn.)......3.d..,...[h.&,[..e.....t..s.....u.._..d..7N.jN......gE..t.W......;.N&..b...w.0..G1...?.y=.,}..+D7..L ...`....y~#:.......YRW=...d..C..\|..[...v."...........x<#.l.....5.....y2........3....g/q5a.g.\|Gj..+..c.._...P.m..R?].5...?'.....?b"W.t..f...3o..I..R.H&...ji"...=..y.=......B............0M.^I.th.....Z...P?m.H?...\.{ .3b..........q...g+.bYY...j..Cv.{.....=.3....N..[.1....,$.....yP..5.W.@.p..`...B..=F..:....i...DZ]...0s.Q..NEaN?ti;....XJ...U1.4l.....b.x.."..u#.T.A./.v.T...1.....8Z.(...Z.v..j.......I.R...9...DR

Chrome Cache Entry: 1171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 124 x 124, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3666
Entropy (8bit):	7.9287624359007145
Encrypted:	false
SSDEEP:	96:NWqkbKK16fcFdfnhouuiKSW9kMVdi3MPVd3B69q:E+K16kFdf2NtJ4UVd3B69q
MD5:	5A75B8724EC6A79BA1E6A18B0457EC53
SHA1:	BFEF98E13AF529B45B80B93CB2D4B1C97A3AAB6A
SHA-256:	1C35B71D1ED046363CC82421A23091445B223DE80A3EAD41ED714C4767555D01
SHA-512:	BD0F063958718B6D124C4CEEB018F3D58D42DBE10B2C3134A294AFF6828768A105017BB3C85C17B99280421A28039A1404A54794056DC4025E69A417453CAF9C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\|...\|............sRGB.........IDATx..m........]E.mq.....R]...J..D..&.@lBK0.$..jTJ.H..m.J...jAH.QBC..JI....~h..%.....d..u.N.g.=...s....93w....y9....3g.....{.....;.hu[.."..k.,i.%....}:%....~.(.....+K.b{FZ...%gO.U........=.k..;!..D.#.K...f5"6............SC....~..xg..p.$+........F...A.w.9HoKA.\Z.Ny^g.A.w.X3...%...B.5.I..J........6.f....-k..Uy\..i.....9i\......+N.w.=.n.f.Q.._....em.$. .4...hO.. ...d.g...F8#.w.ju..e.R.z.....LDF...."...d........M....u......%V..-].........r..y.....z.....O..8b.....t...F.vl.:...x.Nk.pIv..7.v4...?X,.K..8#..pV..=!?...".....a..~...y.dK\.9......n.o....~.v..15A.{y...h;..};k...uG>.a.FIm....}U4g...+Y.V.D..%..........X..........+{./..L..'w.!R...@92i.<....I.G.\|.^k.....}O..6...sr.d..5.J...8?..,9.,\|N.F6._J.(Y..[d.g.f..O...:p..~U.G.lP.0,....0..$..r?......(....]sf.1T.\|.ia......l..x..q}....wv.;r.^.N......c......My//...:..P....>.o...R...}w...B*..=...!.p4.l.+U....=.........^4o.1...#w........{^....@..V/

Chrome Cache Entry: 1172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29228, version 1.0
Category:	downloaded
Size (bytes):	29228
Entropy (8bit):	7.9913276388054175
Encrypted:	true
SSDEEP:	768:A08yHVMfsohDPuFkFetIg2Yst7BNq95YvCTn:A08yHWUH1kG95YCT
MD5:	7C7C02DCEE2BF1C2528DB6092D4AD1FA
SHA1:	988A01F705C074261490625C70F94B2642413693
SHA-256:	D5312DACBE6F248C6C4B60251D7ACF77BC3BC891CD9B880DEAD36D9BABB288C4
SHA-512:	633A7E026AD4AC657CFB7C11932C3D138016B633126A43A72578F11314ED90D880C7F8242E9607AF12195D0F4326AEEAD96150909C5C0FF17DFDF48081D4ADAD
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2
Preview:	wOF2......r,.......4..q............................(..T.`..T.....s.....$..4.....6.$..0. .....,..B[.nq....WP.....S..b..m.@w u...`.^.6..B.....OM2f.F....U..1A.#...rY...b.....#..R..a.....{.c.....&]......O>^Xq...i.;W.L<.F...:>.....J\...%.6.1....,V.nTQ.9Q.E:..(p.R....<..k.\|.(.....).i6n..^2.......eV......b..I.....}P...d.4...\......K."..A...'Q\|...G..}.......1....a...eY\|....,,.1K b..b.'h.@L..A-.$D/.....?n....@...XM.......?........@ ..#..u...&.V.f.. .p.O..;..zyw{^y.../H.j..V..(@.pH.............[...r..s..A&.#.(.A...x..<.5mtTQu... .P.B.m.....t.._(.[.%..D..........l...P.V.PAB.RZJPQ..ra..U.(7..n.t.}D....M..A.C8..9.....w...S./.......tj&jd..d..$..$S.......i...z\|C....v..,..................-T...iR.!f..I.=....8s..D.....``.".9....\|.Op..2....EA.J.....'p....P6...%eal..N.>.....`{..m^...F..Q4..4....S.)7.. s..........^...t..^.B<.....Z...[....^!%..e..MSq..:YTb..oK....9..q j..<.I:em.Ps~...wE.xY1.JU.t...;...^E.....\|.[...t.m)mt.f.\].*.....p>B..d....h@..la

Chrome Cache Entry: 1173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 1174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	347071
Entropy (8bit):	5.54246199276538
Encrypted:	false
SSDEEP:	6144:QC1YnYpjkGlnYIYej1ssvc/9YZYPjQbYYYoj0WHYfYdjZ6HYzYBjngIZHHYVyfl6:QC1YnYpjkGlnYIYejKV9YZYPjQbYYYox
MD5:	C2CE1A59818FE8A6845A8B9D1BCA0A61
SHA1:	902CE752AAAEB91350DB232A020A312FA2FFF17A
SHA-256:	E42413989C81147206F8FF73C0CE73320C4774553F8C8959ADC1CF6C9C418599
SHA-512:	DBA56CDF9EF55B4334EF8B254AF26AA209E6B83C37E6276503EED4E4C3883D20E92868921939FC7912EB29CEB3F8318E1EE02D815CEDDB87DD4B4AC743B4D10B
Malicious:	false
Reputation:	low
Preview:	{"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"news;soccer;sports","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a077000000DAfMuAAL;revsp:us.sports.yahoo.com;lpstaid:d045bf6b-f631-471e-85f5-f96a61504456;pt:content;pd:modal;ver:megastrm;pct:story","site_attribute":"wiki_topics=\"Megan_Rapinoe;Korbin_Albert;United_States_women%27s_national_soccer_team;Getty_Images;Paris_Saint-Germain_F.C.;Social_media\" ctopid=\"2074500;2078500;2112500;2212000;2298000\" hashtag=\"news;2074500;2078500;2112500;2212000;2298000\" rs=\"lmsid:a077000000DAfMuAAL;revsp:us.sports.yahoo.com;lpstaid:d045bf6b-f631-471e-85f5-f96a61504456;pt:content;pd:modal;ver:megastrm;lu:0;pct:story\"","spaceid":"1197792446","site":"sports","enabled":true,"pos":"","showBodyAds":false,"showPhotoAds":false},"alias":"ymedia-alias:shadow=megan-rapinoe-issues-scathing-statement-after-young-uswnt-player-likes-post-mocking-her-career-ending-injury-233909947","canonicalUrl":"https://sports.yahoo.com/megan-rapin

Chrome Cache Entry: 1175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 656x369, components 3
Category:	dropped
Size (bytes):	111369
Entropy (8bit):	7.966173763123831
Encrypted:	false
SSDEEP:	3072:K99ep1y5/5fzVAIQLiv9+LarZdUPPRtAq:kUA5/9iIY69+LaNeROq
MD5:	70029C9184BD54AD7AD02C62924F360E
SHA1:	26315F0FEAA960584194DC3A9671C1530AD7EC84
SHA-256:	4B7916A4823E814AF49139AD00FF8585E75EC5E7005932DA8C24A92FEE271CF3
SHA-512:	F4FB946B72D756308EFD9CE4A3F88A9F01E2182B2A2B1CE4AF70FD279E1D72DF11C0B8CCD830CC88663952C3595AF21E54743697DFD9E1BEA8FFD3668AC85422
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 1176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	115781
Entropy (8bit):	5.90279692557482
Encrypted:	false
SSDEEP:	1536:Vubkx4xZnp+zUOE5M44Eylu50yfWGb9ZkLTF2oWtJIw4HobiLKO3inRxOJfHJoEP:Vu4wB8fEKNEycYtQncobiLKoHN
MD5:	FC27360FD2416C672010B12C6A2E2F4F
SHA1:	CBD73B4B3A23F5CB444662987E84308035BB5B0E
SHA-256:	6E6B023905F05D80D960D3CE09C90774E05D91CB4BD99F24251318659F064D90
SHA-512:	7B35F16BCB467D8D86ACF63E14287EDE7FEA0D321CE6050EE75EB8E078FA7C8EFCC01020238B9F23466DECA4CD381247E4494558499C32D9076EA2FBE1C72595
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-BBlWGhyLfQb5i9eQhhjvc1Rk_FM6_QtVo-kjdOF3AqPUC1jYzFMPCqWB7fRW0E2TclsS0I8p87T7LO8tIWgdmAVRXHJ0PopZgEPQjB7REoRFCsNIwaded2WEoBYekoOwvPBgdBSAUeRmIneTKFQCSeF2A2lvT5x1_uuWEqAv5LtUD6tiIXBY8HjNLvbTFxTXQUTTIPu_Ce1gxw95UumFd0LZReRw&dbm_d=AKAmf-D-eXMzLFrDQvj3P1MDs7z3by2zAk_9EFUtyg4tJM6FESkrWGr3mooAs6c6E5Q-NYVfSrvmodFGORyZS3N8RYfII5FsTqMjdZmq2kiL3mQtH4FfJvfSK9HKG5wqLyU-Nsw-BqYmpaeQ9KJn1dgWWJfu6B8rYw1A1hIShWHYmNea9RJjtWFJ2BPvLZsHxSJ7wYP7HIAjDllrb3JKcV1ZvgJ7kRLUpiKn_mrFXVS6vjVukKGeIPn5Yn28Be9TchxYUjUZBDDmDWMUrx1_sPgXhNAeDN66rd9rBeltRvhAZCjnOCtf_1qXcKH71HUTyvGLFRHLFQyj9S4yAGyOF4EE6HtWeha15UKGTZHUcGSudk7Qacd1ijmrEe2kHE9s_DX6ijpeQx8tQedB4sdYAyJ3jeAWHdrH4lg5ME8rxHNtwHucDR5Tub2TWjYQLPlZvsXsIZShdaiZsU3qW9YDNdMCSGJGKTyEop4h9VKrZ71scBInOfIO26kAa0SiHOOyw3d6ebwTnJ9ujdCIWDwOOu7FPrVixXpTbvK_wK1d61H8Xajh0mMhBVD8fur_dTE_PuPeiUKrxVMCAI12di7g7dT-htCJvlagWO7z9YpsKy3tfsC-BP5-OYEUbDsX3gXn-24Hk8MbJ6oy0OkxN6jfJk0BVbNCXb7dpsu5zNXB828S7WQ5EaOrkp7RjG-wjg7XfbJpvHmHAU3xIZdexJKx8bTzCjujO1q8pbVQ26BybEBFblGjzXWgeQ9kzbfr5FD7JrUGmxQJcsnyEsW6N05UIPt-Ihea7bJS4oPsF8BlOxoKvc_vsoe7zB7eij3OZth8yfANZoGMIORTjKs_IfWgMi4rWyTVIY2akKawvD6ejFpfL0z-j1hw_q3IKS6b5KmKtoHQgE5AUBlgKOKY2tBtjy_DM3Q_BZmmJmgEexINm7Em-Qfix9zCSsYvgfFQDVriV-E6qMurkqhJ5yI_3U0upXroSxE7qeHFrHRHVU8AhS2q0rClIpEISdgHGliJrF_4ZjVT9Bc2_X2gKGPPXVjhgEvaAtaJslThDNASizvACYJ1op5t8B8OvWcAS4C_HwVZ_x1Mrx-DoFPC91IUE7evgO2PluOSLY8yMKBVQNGmD1bZxceq9CgeITfZ-85SvLUJx03eFCefM0raorGcux5_wSD4eWwOqWO16SEHTkz7K1oRDHpGGhkju3yBO-uJCHguRpdZwc6uSQ1QWTjUWH5LRDq0K_L7n6U925InRUVny4NMw1mHV6MPWIQe-6vSnpwmtc7bhCl1C6aKUGY9zWqngecFjmhos_YVCK7CdhIF0RBcGfVOekST_PM2BS1ERXU7SrJz4mSF8AnD4vY2cUwNw2R7Dp5LL8JyH46Giczn_z0PGt389EHhbBXeHSQY6FIQghkUtsAjfWRF7YregztmSOcMRWLPqBdu-CS5XV5njjguRvpsCs2h55E7YmNZ2Ja_xetbVduVuFUVpl0o2zzrsyYQuG_rlfuTexKeBDcAdAapdu12BDkHI5bLdQ1Jp74B_lAKhoK_TDE2ekWcoRIUgLq4ltbhlgpeGEFpcEcdBq2hz--GaXCOXn3sdhPZP6hoHf5YKQBIZZXY-SW0JQU2g69XC_trEn2951872lgsqz1M5mENhLBncJwRivcYwhjClkhXP3yVQ6CRJtH1Mgk9p7HeIUddgr0sRVkd6vpHSvfO0WoD8R6b2AwpYrcQhAVIzo_dXgxfNyl-o1gLb1FJNHsWM2dQzhsD1qFuczD65mRlErWxQCc1s__qQqK2WPVL4Q29qvfAf0zSi71LxLa1gQM8QroLzofmaO56GWDtyQARdzJbE9UOyrZjrx45jTTIAngjdpBP0iNqn53g24zf1b2ZGkkoY-0z4tARULOVPn4cU2vG6cb1jXPozpjEWbDhr5lwUsnYj9pD3JWGo5bLu72jBXI6E2wuOoa2ap8nFNGMXFWajieJUD7-G1T5cFxxMqON4abfAE8SC8XyZDMkYMGGiWJC4bfSlGPybMdo1BvYzX86WWqtnfeDc1WDnSFU2KTaDtghWdn6H8NgyxltJib0U0LoLjq_cKHpc0Pz1wg3TOAA6SqPMnT7_BqFQ8s7p_x-5ExfeiL07V_otY8S1lL8W6XBHbMXXO35aT4Tj18ubNjX-Q1j9WdKifLsGzIRGxaGEpv_mN6rybcN542WwtVswYTMYZh6x1DmMKUHTzlT6e3DMxiGt0Pai18mRCNfXDB9fhCRG6TGIC2XU7p9cigc8PVY1m8mZGtEVmKUp7ucV1BJoi27Ny-b0SZwmZsAyJCY_i6hHnDoNcp77UvsCV16CzcabCWD92cJ1iBEsCwrVVrgQ8ZAZvQ9u4R6bDxCMsHaJadIdgN4inLeCfjbge9ph-To8-0wcWuSQCs30fCpA1Xygr2BArRHUatXjF7HCdplf1bedPDKB4dS4wkiqcFerNwqGIiX4qY7HqxLteTG0NGD8DFnRmTzQliXFB7i1NZBidwi-AKwSyPMEtd9l9mpBjq7vVITOxzo1gAYvbof_6Yi-JIN24iomfyTBOaHqq_HQnFd3qaIa5M3m3Dl-vKJko4XofBIBWGLZLbqMIZIL5GinlefivAdyTxHw4XyaXcfQsOqt3c_J6AuRVxrLs-8mYaC_YPSZ_L9PjrwrQmM1o4J_DN1ycld0FHO027PPhM0mn_4bQPmx5xGE8CiRrv5qmPNRMyB3M7TC5knJaHpQBWcqPnJzwi_jnuPN44H8WnBVXVbgFTkD94pFuz0hxqovfpJnchgaGYdnkvrNXIINY9se60R_GfkUSC3ZeTNotBefjnSVn3MFX2vDOJTBtEZiejj_3c5mKmyickWVxl1eRlJ1e4XwI92FAAeQkk5hjtfCj36yq6rhhLqCmswNvlCrlRzJ9u5uOBYPsZQ_nhcEWS3emMfhnwKxaulxwgi7E39ySKpyGrVNN6ijzv9XKLnple7g-ctph5F6G043fkqhDuAp_3IklkAH2bLWmSWK5-YJVxuNgEzTHWwufjuHW5R-y1iS60QBO7CmeEg46cuLa3hs3NpI4X0yDzKF5uJDhuAs7hU2uKUziahjDa_YreeEs0ELX8T0HhICqdxiuEu-bwKzt3cRg0hxN26f87ePG5fSK5X-MF3DmFS2aXo352TBWJIkXeRdhUm-XlJERn0oi_l0u_E6eu4roivQMK9pzyIhPkElXgK-KEGrlJllwBSttOzHZJf4QnWLrXV5ie5odlJAWXdfkNl7aM3CUZQD4QW977vCnFfG6TL29WzBucH03IeXSvtSbcuZeyBBRI4n_OiMvi-yMvUIzwrfdPC6a8h_qwoESz_mdtg0ykR9qC3YnC3m5M0sVAaEHlfPdUHCN5z0ty4_ZXHxw5LkQWoQ87amst9tluO3k_tHEt1zoPUsRycpgavexj9je4no4iGG1NvGuP5mH_l16SMu_PK1gChjNtddo4h6fjHWCM1Wyyq0DNnXWVxnPwWFPndqUR1-TV2OInBqA3lAvCCmu9QulCW1LmkmtUtdHvpX6Xo06E_R6Um8rsdxlUk7CCTaaHxI4QmMpzTS8CjPcx1W5rzbJWcqREeyG4nX6M-ENEied20Bl7F9R9XbjJceCIH64fQAmLHTzaDS7xhnjlLcJCm93axbiFt1-IDFzbXonKGn9B0ZI9z1_ugwBTAa6pHi5P2VMjnjYP-bUSuNMfwqm2I42kMn8De9S1zOn36FpUNcpiZOiRMto7wqvJRSNAo0wL_2ZjC8Lm6Qlsg1zGcTwFzNRpkIt46WffZdXwJU77yLmGlRtDuYLAy9M4yPT07p6mMiZ2Mz4tNRtfXn6oIAoxjWIQw-9UHuxZrNsxJ1WrI0kADN--c-DVR5_xgaLWzMcV-Zb2Px6j4iBYfxjd-UkJ_KeEAl7QJ5CH3&pr=13%3AZgYOPAAAAAA82sLIIxTNCSKTH3jb2L6duZ5lxw&cid=CAQSKQB7FLtqQxtKE0zpKS9aRfTkVd_nXvJ7s4ySx49bxHw6EqZaD6_3T1zrGAE&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&dv3_ver=m202402290101&nel=1&rfl=https%3A%2F%2Fwww.yahoo.com%2F&ds=l&xdt=1&iif=1&cor=8763441346180171000&adk=3663839224&idt=1117&cac=0&dtd=38
Preview:	document.write('\x3cdiv id\x3d\x22brand_safety_QQ4GZoXlJYi0oPMPiamTqAw\x22 style\x3d\x22visibility:hidden\x22 \x3e\x3cscript data-jc\x3d\x2288\x22 data-jc-version\x3d\x22r20240327\x22 data-jcp-jscd\x3d\x22[\x26quot;https://cdn.doubleverify.com/dvbm.js\x26quot;,\x26quot;ctx\x3d20006197\\u0026cmp\x3d31411294\\u0026sid\x3d5071708\\u0026plc\x3d388507207\\u0026crt\x3d211538221\\u0026advid\x3d3876771\\u0026adsrv\x3d1\\u0026mon\x3d1\\u0026blk\x3d1\\u0026dvp_cawf\x3dcrtwrp\\u0026cm360cw\x3d1\\u0026unit\x3d300x600\\u0026prr\x3d1\\u0026turl\x3dhttps://www.yahoo.com/\\u0026aucmp\x3d21039716546\\u0026auevent\x3dABAjH0gQDp_4c-0JAi6rZSx5hhRK\\u0026autt\x3d1\\u0026ppid\x3d103\\u0026aubndl\x3d\\u0026aucrtv\x3d553954458\\u0026auorder\x3d1015903071\\u0026pltfrm\x3d13\\u0026ausite\x3d2328226494\\u0026auxch\x3d13\\u0026aufilter1\x3d1982032\\u0026c1\x3d1982032\\u0026audeal\x3dIX3MPADScope3DISP6Kqa8MAC\x26quot;,null,\x26quot;doubleverify\x26quot;,null,\x26quot;QQ4GZoXlJYi0oPMPiamTqAw\x26quot;,\x26quot;https

Chrome Cache Entry: 1177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=media&google_hm=MzU0Njc0NDk1MDE4MDMwMDAwMFYxMA%3d%3d&mn_hm=MzU0Njc0NDk1MDE4MDMwMDAwMFYxMA%3d%3d&google_sc=1&google_push=AXcoOmRfsv4_8pkU0ex-p97Rp2HgPNurRaVIVhl4f0Rz5AjUPWZ3z78q56xqRfqG-a3HwM9BmyyxBt1Dr1q2Ky9_67-53N8d0s03&gdpr=&gdpr_consent=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8650), with no line terminators
Category:	downloaded
Size (bytes):	8650
Entropy (8bit):	5.299703358561654
Encrypted:	false
SSDEEP:	192:Rg4KScEc4DOw24TWZzhgn9oe4p4n4N42e4gEkebwkoGj3Gm3P36ATynVYKu6vuO:iBSDhaYTWtW9jwOQ6ej3fryVYK9
MD5:	2F7D675DE81D319944066D9DFCA13D72
SHA1:	4D93B1C0C766D68AF2C378C50CA6691CBAEA4DCF
SHA-256:	4E7FB4D436699C22E3830AEB0CF5942C0418C389ADD14F1E6C5ABAEC106F5F21
SHA-512:	4EE644E0A59F36B66E8B5258180290B3A4A2C6390AF184AB49A3D9F15C0B72FD045162327799F20F55AE1993266B5AD5B8C54042726657A030B00EC8BC4A8670
Malicious:	false
Reputation:	low
URL:	https://opus.analytics.yahoo.com/tag/opus.js
Preview:	(()=>{"use strict";var t=function(t){if(t)return t;try{return document.location.hostname.match(/[\w]+\.([\w]+\|co.uk)$/)[0]}catch(t){return""}};const n=function(t,n){for(var e="".concat(t,"="),o=(n\|\|window.document).cookie.split(";"),a=0;a<o.length;a++){var r=(o[a]\|\|"").trim();if(0===r.indexOf(e))return r.substring(e.length,r.length)}return""},e=function(n,e,o,a){(a\|\|window.document).cookie="".concat(n,"=").concat(e,";Max-Age=").concat(31536e3,";Domain=").concat(t(o),";path=/;Secure;SameSite=None")},o=function(n,e,o){(o\|\|window.document).cookie="".concat(n,"=;Max-Age=0;Domain=").concat(t(e),";path=/;Secure;SameSite=None")},a=function(t,n,e){try{var o=(e\|\|window.localStorage).getItem(t);return n?JSON.parse(o):o}catch(t){return null}},r=function(t,n,e,o){try{e?(o\|\|window.localStorage).setItem(t,JSON.stringify(n)):(o\|\|window.localStorage).setItem(t,n)}catch(t){}},i=function(t,n){try{(n\|\|window.localStorage).removeItem(t)}catch(t){}};var c="opus",d=function(t){for(var n=0,e=0;e<t.length;e++

Chrome Cache Entry: 1179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13778), with no line terminators
Category:	downloaded
Size (bytes):	13778
Entropy (8bit):	5.2842901333678345
Encrypted:	false
SSDEEP:	384:/JwTpCNwszoTDPohnGZA3exQUqxL/wwBVi:elCNw/XoR4A3eePbi
MD5:	4443A60B3D3645610C9E65B7CC9F15BB
SHA1:	DE3A0B8509362B37FB40D74A9883F366D161A8B5
SHA-256:	F271BF73D0EEFE04F56CB6390E07D7D2A4794787283D65221397B258CEF040DF
SHA-512:	6134E0CE99CC2128F03FF38713B7A88617EA9C1518F01C6D56CD725673C0F58B58572E4744C6254868D98BE8EF9AF352BA0B724290EB35D182AA5F57381048B0
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-action-1.8.1-modern.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-action",[],e):"object"==typeof exports?exports["wafer-action"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|{},t.wafer.wafers["wafer-action"]=e())}("undefined"!=typeof self?self:this,function(){return function(t){function e(a){if(r[a])return r[a].exports;var i=r[a]={i:a,l:!1,exports:{}};return t[a].call(i.exports,i,i.exports,e),i.l=!0,i.exports}var r={};return e.m=t,e.c=r,e.d=function(t,r,a){e.o(t,r)\|\|Object.defineProperty(t,r,{configurable:!1,enumerable:!0,get:a})},e.n=function(t){var r=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(r,"a",r),r},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="https://s.yimg.com/aaq/wf/",e(e.s="./src/entry.js")}({"./src/entry.js":function(t,e,r){"use strict";function a(t,e,r){return e in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,w

Chrome Cache Entry: 1180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	140
Entropy (8bit):	4.69869332015223
Encrypted:	false
SSDEEP:	3:YMsw/1OH/9cpHlLwxk8HHiJsMMg/eUtfYtlm2spn/Fx2VHfCkpHC+MZt:YMsw/1QuFcPMMg/ptQoXn/Fx2t6mHqt
MD5:	D328B1605246795A96107C0A6F60D8FF
SHA1:	53AF6BA62B81FAB853A3D86F3AF07EFC97793FEF
SHA-256:	5EC8AE0EE55B9E345CA4DA40144988D6ECEFF62744D8485E4549BDD3D6042677
SHA-512:	C03C4D6E6D246E972755A80C7F3EC4E6CE94B97190E73E0DEC5934118D1201E433A2562362744088CF77EA517E34E1459ACB7BF5FCCBC18DFD906EAA750A7477
Malicious:	false
Reputation:	low
URL:	https://guce.yahoo.com/v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid
Preview:	{"identifier":"1arkbttj0c3h9","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Chrome Cache Entry: 1181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	16262
Entropy (8bit):	7.894830891140211
Encrypted:	false
SSDEEP:	384:iYNg7tEqp//WRFLiEvxBBKL1o5zRH1H0IWQ:iYy7yFLiEJvKLu9jUIWQ
MD5:	E0D5BA6E6F2916B5233212B8D7694980
SHA1:	3A8ABFC8F3B37C87F4B520D2A3C1AAAAEEE015DC
SHA-256:	ED280FA35A73F64D5D732AA3687A47E48BE7B09A1B945F2D056F048DB27F31A1
SHA-512:	962BDEF1EDEADD8E64857A3025FA90E502C8B1F26FBB3894F14CDA3448EB85536C0C295554BAF5819B63FD31C97D2FF88D7B7F632E6C31358A5070BB16D681E4
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/BPa7X4VoEHL4dDVQk4vpcQ--~B/Zmk9c3RyaW07aD0zNjk7cT04MDt3PTY1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/4c8b7ef0-ed49-11ee-9dbb-ec3fcf432906.cf.webp
Preview:	RIFF~?..WEBPVP8X.... ......p..ICCPH......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 1182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	32281
Entropy (8bit):	4.5377915994954545
Encrypted:	false
SSDEEP:	768:qt68uqUhC3c7cJTiMmypcocQcBc5cHcZcBcfcick4cr5cQcAcIcRcwc8cfNcjcIW:g6cUhCL3R6zE
MD5:	2BCD33ABCF1D9B53E39084BEF961E404
SHA1:	D03ED6E7B587A9FFEC31D7CE468FEFCC763BC3AC
SHA-256:	1ADDFAE65F5AE5F79529B5D18E1A3AD6BFA2D6C11107725EF2377B4C040119BC
SHA-512:	D32EDA524708E5367B560C48C534847F36C94D2C1E23CD7CC6F74B1F92AE6272785708A275F8A67CB3C381F19564D7406B806F7C32317F9988BC84B3836F2351
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/kj/js/dispatcherWidget.js
Preview:	(function () {. var __extends = (this && this.__extends) \|\| (function () {. var extendStatics = function (d, b) {. extendStatics = Object.setPrototypeOf \|\|. ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) \|\|. function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };. return extendStatics(d, b);. };. return function (d, b) {. if (typeof b !== "function" && b !== null). throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");. extendStatics(d, b);. function __() { this.constructor = d; }. d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());. };. })();. var WidgetMode;. (function (WidgetMode) {. WidgetMode["AutoHide"] = "autoHide";. WidgetMode["Overlay"] = "overlay";. WidgetMode["Stick

Chrome Cache Entry: 1183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 580x326, components 3
Category:	dropped
Size (bytes):	48273
Entropy (8bit):	7.95082866548859
Encrypted:	false
SSDEEP:	768:KvnE+KY5GX3RVNli7PoKcFT1ffYM9xtcZ/G2F+fMRP/QZk/Rl4N6UoQkC8ynmKkW:KfE+7GRVN+/Yno1rP/Qm/Ri4QfWKeVFc
MD5:	BC511BA42B4E43D28A464CC19E81344E
SHA1:	E1E01EBF3F9852FE037D81A63FFD99C4FD26012C
SHA-256:	F518E68BC96DF0E298A23992FD54248CE37665FE2A04DFECB6D2F64537A597FA
SHA-512:	8F4EB8EF251567B0CC218C857E6837FCD4F244927DC511DF5B8B8931018D03E26577984FC376796FFAC4C36D66DBCFE8CE60D08772583F6F7B0EFA0E56743250
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.......................................................................F.D.............................................I..........................!.1..AQ."aq.2...#B.R...$3b.Ccr......%4Ss.&D................................./......................!..1."A..#2Qa3qBC..b...............?...J...2..&........F....W3.....#...(F...2...i

Chrome Cache Entry: 1184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20625)
Category:	downloaded
Size (bytes):	22993
Entropy (8bit):	5.330493147849342
Encrypted:	false
SSDEEP:	384:81xT0BVQ6GV4tv0lMGg2geQtfnHN5pOEAYfhO2Xz4wDQjZvy99qQWwY4RXrqt:ORcMtCGsOpYfkKz4wDQjZvy/qQWwY4RY
MD5:	88CB38EC1178905A1863ED41817AC11B
SHA1:	BA53C80F8E20CC0BB4E06510483E1FA8CF86C513
SHA-256:	80A5BE3A4DE3B523D36CF0591251B7CECA9AF1DCEA5CAFB3741A2FAA8887E763
SHA-512:	6A51C8774547D72BA5BF86D24ECEDFC3F395ED294885F5BDA82F51EE2A8107C13586BC59DD9654501577629C8C58F497DA8F7BFB6E7BEE670E6AD486BFEF140A
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/checksync.php?cid=8YHB97349&cs=1&cv=37&hb=1&vsSync=1&prvid=25014%2C25082%2C25113%2C25307%2C25308%2C25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=1&usp_consent=1&uspstring=1YNN&axid_e=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":26,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":15552000,"cc":"US","zone":" e ","coc":"NA"},"cs":"1","lookup":[],"ussyncmap":{"disable":[]},"hasSameSiteSupport":"1","csDelSS":true,"batch":{"gGroups":["apx","csm","ppt","rbcn","son","bdt","con","opx","tlx","mma","c1x","ys","sov","fb","r1","g","pb","dxu","rkt","trx","wds","crt","ayl","bs","ui","shr","lvr","yld","msn","zem","dmx","pm","som","adb","tdd","soc","adp","vm","spx","nat","ob","adt","got","mf","emx","sy","lr","ttd",58160,"mn","tlt","pub",55953,58301,"idx","dtm",57926,58267,56551,58259,58601,"ctn",58280],"ngGroups":[],"bSize":1,"time":7000},"csloggerUrl":"","optout":"optout","cslogger_host":"lg1.hb.yahoo.net","ck_del_sld_tld":false,"gdpr":false,"gdprconsent":"1","cookieDeletionList":[],"ccpa":true,"ccpaconsent":"1","info":{"domain":".hb.yahoo.net","cid":"8YHB97349","itype":"","pid":"

Chrome Cache Entry: 1185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.985902344426085
Encrypted:	false
SSDEEP:	3:YEOBHKMxMUy4RoGXRvbkHY:YEOBvy4RoGhOY
MD5:	7871909302625BED0E0C0F3987103514
SHA1:	AD47857B245FD83F7F03B09162AE55A037DFF2BC
SHA-256:	B7E7953671A37AADE7D16A6B93063318CA12598C1353D38E93184D3689D21F4A
SHA-512:	E5CB436B0E7AE6F7CF271452DF51C2F5898E34909C0BBAFDB0A27D638B0CAECB124DF49C9E15BCA7905B0E74BCF515D15AE984961617D9296C951C82D261BE44
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A"}

Chrome Cache Entry: 1186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rp&google_hm=TFVCWFVHVU8tMVAtODdHVg==&google_push=AXcoOmT32buY6HNJ2yieteijXeBzQOphgNIcqy1tiMR3FGPhT4pxNy8Lnl6-o2ZcDrqzM-zQ70cWQStuYPzzGPflTOsa5WbLn7E_
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 656x369, components 3
Category:	dropped
Size (bytes):	120890
Entropy (8bit):	7.969462481089656
Encrypted:	false
SSDEEP:	3072:K47oKg5BMM3Ox2lAYo8b2UYYaLnjFlLW62o/JE6W+h:vABMM+x2SxNYa7y628h
MD5:	43123D435619F288BF183D2560B313B5
SHA1:	B94FDE63C4F118902E10118E66CED61E287ABD1F
SHA-256:	38BDD5D6B5090B0D00DE025E0DF2D22D6B39280A9702A3E5B321C706B65149FE
SHA-512:	14BBDBE45B5BA254EF3DD8BE6F6273E76DE7B486A738506DBFD1467B926D3916EBB72A99840F5E3A36E204C966E4573EF491F9EB2E195BA987355B31165DDA0B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 1189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43476), with no line terminators
Category:	downloaded
Size (bytes):	43476
Entropy (8bit):	5.459317239782818
Encrypted:	false
SSDEEP:	768:AFKB66Xk2NKD8QobUmM0LyRAXloJwJFWET8TzswToQZjhoiyG+/H9Uy:AFKB/Xk2NKDDobU70+RAXlo6fWET2swa
MD5:	2A89F2588A8C2FB5A1419F6CA61ADCA6
SHA1:	A431F7BA560BFC5580FEA677817D168CE8E13328
SHA-256:	E66EA3D92F57880A1EB8220863A3DDC8E25FB4940E24B9D1B1B5064B41B6CC72
SHA-512:	F21DE70E38F0569AF1CBDC8E64E2CBAFF6EB9508809F4886AD2B59C52982A5ABD1A791B7D1988ECD1744E47466AF47F04EC67AD832D821C5D30ABD8D3591DA44
Malicious:	false
Reputation:	low
URL:	https://c.evidon.com/geo/ba.js?r231121
Preview:	var BAP=(BAP&&BAP.start?BAP:false)\|\|(function(){var l={},aR=1,at=true,H="on",aW=[],S=false,aK=false,aO=false,ap=false,ba="2",a7="2",A="us",B="1",u="_us",av="ci",m={CSS_COMMON:null,CSS_1:null,CSS_2:null,CSS_5:null,CSS_6:null,options:{}},aM=window.location.href.indexOf("http://")===0?"http://":"https://",M=aM+"c.evidon.com",J=M+"/a/",L=M+"/a/",K="https://l3.evidon.com/",o=document.getElementsByTagName("body")[0],P={},a0={},aZ={},C={},am=0,aL,ay=[],U={},an={},az={},ar={},aq=0,I=document.domain,d,p=(function(){var bf=navigator.userAgent,bd=Object.prototype.toString.call(window.opera)==="[object Opera]",be=bf.substring(bf.indexOf("Version")+"Version".length+1),bc=!!window.attachEvent&&!bd&&document.createStyleSheet;try{be=be.substring(0,be.indexOf(" "))}catch(bb){}return{IE:bc,IE6:bf.indexOf("MSIE 6")>-1,IE7:bf.indexOf("MSIE 7")>-1,IE8:bf.indexOf("MSIE 8")>-1,Opera:bd,Gecko:bf.indexOf("Gecko")>-1&&bf.indexOf("KHTML")===-1,Safari:bf.indexOf("Safari")>-1&&bf.indexOf("Chrome")<=-1,Chrome:!!bf.

Chrome Cache Entry: 1190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	4.15349601160441
Encrypted:	false
SSDEEP:	3:8PtZtL/MJRAzvn:4qJgn
MD5:	4862D5CE8B55D6F001CFE78E00EFAA88
SHA1:	EF28338C97EFA2B113517C2EC7FEC5AF15F2FC4C
SHA-256:	835DE1F070E4D3F5023796DFAF973C45C5A1810D6C084E5D048827540AEF7EC1
SHA-512:	D1A3D43995D0624EC31688FB9AD3D29B7B14BF625D0A8799BBA8C070623E08ED4364344DE4E78E9ED72F80DA8DE859441C634B821FDBAB3CF359C47DB8C2EFC3
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/PremiumLogo.vzvpcZ2p.css
Preview:	.current.svelte-1e4nn58{fill:currentcolor}.

Chrome Cache Entry: 1191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4056), with no line terminators
Category:	downloaded
Size (bytes):	4056
Entropy (8bit):	5.0696028224370515
Encrypted:	false
SSDEEP:	96:a6z95qj3hsfZMQLhHRmmXjLwL6+/OeTh0jUsoGb:a6x5WQZMKNRmmXjLkX/xTh0jZo8
MD5:	06078FED0E3985798C15D84CCE20D317
SHA1:	7F59F981476B2CA357D2CA594B367C27C2000B80
SHA-256:	DC5BDC8E59E8E21B09964358C9399B763F714B6A64814F6FECC2263644BD00F7
SHA-512:	A5C5FC535E96C793C5D7D108A7AF3206A2F1B7AAABD7C72A82CE4FE1E0E758E91298871EFDF2BED6B7E6CDF634FC4A670A9CA411CAF1FF5DAEC729D5240AD0E7
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/nel/js/tdv2-wafer-content-list.custom.06078fed0e3985798c15d84cce20d317.js
Preview:	"use strict";function _typeof(e){return _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},_typeof(e)}function _defineProperty(e,t,o){return(t=_toPropertyKey(t))in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e}function _toPropertyKey(e){var t=_toPrimitive(e,"string");return"symbol"==_typeof(t)?t:String(t)}function _toPrimitive(e,t){if("object"!=_typeof(e)\|\|!e)return e;var o=e[Symbol.toPrimitive];if(void 0!==o){var r=o.call(e,t\|\|"default");if("object"!=_typeof(r))return r;throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===t?String:Number)(e)}!function(){function e(e){e&&(window.wafer.base.destroy(e),e.parentNode.removeChild(e))}function t(){document.addEventListener("animationend",(function(t){if(t&&t.target&&"fadeOutGeminiConfirm"===t.animationName){va

Chrome Cache Entry: 1193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7375), with no line terminators
Category:	downloaded
Size (bytes):	7375
Entropy (8bit):	5.244662785249926
Encrypted:	false
SSDEEP:	96:8az39YKGW2G8niOXbm6ybon+FcApMXsrX3alJObhtQ:8O3vwsgJIi
MD5:	9F222CFEE734F3BDB20FBFA48448E353
SHA1:	709C916498F4E7E253023FCAEEB153353B469358
SHA-256:	5EBDD223F90B95AF973A211C55832A3042BB96C1C65400CDC270366C7912398C
SHA-512:	F20FAA9EF5801E156A7271DC08E9AC070C3D9885A3163844D23EBDC6E01A29F6DD893CC85B13A82D0512D8ACE3D2FBCB75C33F11BD57BADDC40532EE7B41762A
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/nel/css/tdv2-wafer-header.HeaderYBar.atomic.ltr.9f222cfee734f3bdb20fbfa48448e353.min.css
Preview:	#atomic .Ai$c${align-items:center}#atomic .Anim$none${animation:none}#atomic .Bd,#atomic .Bdw$1px$,.Bd{border-width:1px}#atomic .Bd,#atomic .Bds$s$,.Bd{border-style:solid}#atomic .Bd$n$,.Bd$n${border:none}#atomic .Bdt$sports-nav-dropdown-dim-bd-t${border-top:1px solid rgba(151,151,151,.2)}#atomic .Bdc$\#ccc${border-color:#ccc}#atomic .Bdc$\$c-fuji-blue-1-b${border-color:#0081f2}#atomic .Bdc$\$c-fuji-grey-e${border-color:#b9bdc5}#atomic .Bdendc$\#e4e0e9${border-right-color:#e4e0e9}#atomic .Bdbc$\#e4e0e9${border-bottom-color:#e4e0e9}#atomic .Bdends$s${border-right-style:solid}#atomic .Bdbs$s${border-bottom-style:solid}#atomic .Bdw$0px${border-width:0}#atomic .Bdendw$2px${border-right-width:2px}#atomic .Bdbw$2px${border-bottom-width:2px}#atomic .Bdrs$\$searchButtonBdrRadius${border-radius:0 4px 4px 0}#atomic .Bdrs$\$searchInputBdrRadius${border-radius:4px 0 0 4px}#atomic .Bdrs$0${border-radius:0}#atomic .Bdrs$18px${border-radius:18px}#atomic .Bdrs

Chrome Cache Entry: 1194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=8&external_user_id=0b2e56bd-231c-4ec2-ba2a-78dde1fe3a07&expiration=1743208899
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEF0QncNU7B8AeGA5Zvvza78&google_cver=1&gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (5574)
Category:	downloaded
Size (bytes):	5575
Entropy (8bit):	5.355389403336957
Encrypted:	false
SSDEEP:	96:kr7p7Z1vspuPY74c+7TL8xQgNdW7YsFH66xsly63JGisaXEvq5tJPu:WlhLLW/m0DlX4ipEvut1u
MD5:	2EAACF178467BE78A26990BE1EEA444C
SHA1:	07B60FD3733B4BA5446F5794CB0B47066F991F34
SHA-256:	B043F4E2ACFC0D404C71B4B20DCD072F9F405F1C173BCA1B689E402A725737EA
SHA-512:	592172C6E133C83A1E8A4131B088CA7D30BE06EDF9E621F6B372440E497ACAF89DEF9630C3440C2AD712FD7DD2C3D9AFB2EB3835A471BEC98BE8D75618E2DE1B
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/loadPortfolios.D7blfiZv.js
Preview:	import{b as C,a as A,E as Q,h as j}from"./commonUtil.Bb2Cnbsk.js";import{l as w,f as F}from"./logUtil.nPJvQAyt.js";import{b as z,p as _,E as R,P as T,D as N,Q as U,a as B}from"./portfolioUtil.CcwRjq7g.js";function D({action:e,getComponent:t}){return Promise.all([e(),typeof t=="function"?t().then(r=>r.default):Promise.resolve(null)])}async function K(e,{action:t,getComponent:r,key:s,immediate:u=!1,trigger:a="visibility"}){if(typeof t!="function"\|\|!s)return null;const[y,[h]]=await Promise.all([C(e),A(["lazy"],e)]);if(!(u\|\|y.bot==="1"\|\|a==="client"&&z\|\|y.mode==="failsafe"))return h.setEntry(s,{Component:r,error:!1,loading:!0,value:t}),null;try{const[d,L]=await D({action:t,getComponent:r});return h.setEntry(s,{Component:L,error:!1,loading:!1,value:d}),{Component:L,value:d}}catch(d){h.setEntry(s,{error:!0,loading:!1}),w(e,{},{data:d,isCritical:!1,perfLabel:`loadLazy:${s}`})}}async function X(e,{key:t}){if(!t)return null;const[r]=await A(["lazy"],e),s=r.getEntry(t)??{};if(!s.value\|\|!s.loadin

Chrome Cache Entry: 1197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.5 (Macintosh), datetime=2023:06:13 11:21:33], baseline, precision 8, 300x600, components 3
Category:	downloaded
Size (bytes):	68094
Entropy (8bit):	7.7796747085946825
Encrypted:	false
SSDEEP:	1536:pt8qt8ZoI3n5g/SNc2pmodGD9HO3fW5SIKuTR1W:ptvt49X+/SNcGmoF3fTIa
MD5:	6B6876A5DCF00224E1319A56932CFDFF
SHA1:	BA515EB8F445C0BFB5B833B9B5C7CCB702B36D5D
SHA-256:	6745982B231B1C6BAAF50BC51554CEE255B464A2139CEF059C0B967349A3200B
SHA-512:	0BA1616A5EBBDDBD2C87C4210D930E12ED53A34160751D9BD723D6A6831601BE6B6B9AEBB24264E45A221F633827E6D74169ACA19C4D1ED1A77DB0CA8F2B9791
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/simgad/6285427163810943659
Preview:	.....oExif..MM..............................b...........j.(...........1.....!...r.2...........i....................'.......'.Adobe Photoshop 24.5 (Macintosh).2023:06:13 11:21:33...........................,...........X..............................."............(.....................2...........5.......H.......H..........Adobe_CM......Adobe.d...................................................................................................................................................P.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....;.9.w.X...l...'.S:..@\|nh]..\|...G&.YUt......n~#-unq..Q....^.....$c.._3.R....Q..`S.Qz......W.Iz!.........M.,.9...>......?........?.....pq...U...@..oT

Chrome Cache Entry: 1198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (769), with no line terminators
Category:	downloaded
Size (bytes):	769
Entropy (8bit):	5.199967400001095
Encrypted:	false
SSDEEP:	12:PVkygJiwSNkyvWay0FiydOy3+v7XUmBr00R/ImHueasIgY:PV50DSN57y0Fnd947XP5/ImObsIgY
MD5:	7071768451DB14ED357ACA3116377C69
SHA1:	84847C9A0E1570DC5E88E2CC57546B4E13E00E33
SHA-256:	CB7C90D4A943104A782F36FF41C09D08A65BDB7CAAE0A471BC72FFA1B53D8C5F
SHA-512:	A5136443F515A03FE754E26F59EAEE2FF0E43DAD4CA87A52834BF9F1AE7ECAB614D950596B5F5AF172F006150F8C8B05C8FEB7EFAA9BB50B8F818045A7A52F22
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/art/css/sdacontainer.7071768451db14ed357aca3116377c69.css
Preview:	.caas-da #sda-LREC,.caas-da #sda-LREC2,.sda-yield-INBODYLREC{margin-left:-20px!important;margin-right:-20px!important}main #sda-LREC,main #sda-LREC2{margin-left:0!important;margin-right:0!important}.caas-da #sda-LREC,.caas-da #sda-LREC2,main #sda-LREC,main #sda-LREC2{background-color:#f5f8fa;padding-bottom:16px}.caas-da #sda-LREC #sdaAdvText-LREC,.caas-da #sda-LREC2 #sdaAdvText-LREC2,.sda-yield-INBODYLREC #sdaAdvText-INBODYLREC,main #sda-LREC #sdaAdvText-LREC,main #sda-LREC2 #sdaAdvText-LREC2{color:#979ea8;padding:8px 0;line-height:12px}.sda-yield-INBODYLREC #sdaAdvText-INBODYLREC{background-color:#f5f8fa}.sda-yield-INBODYLREC .sda-yield-INBODYLREC-iframe{text-align:center;background:#f5f8fa;padding-bottom:16px}#sda-LREC #sda-LREC-iframe{display:inline-block}

Chrome Cache Entry: 1199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 656x369, components 3
Category:	dropped
Size (bytes):	85079
Entropy (8bit):	7.9705702728607255
Encrypted:	false
SSDEEP:	1536:K6mOGNK+xntLSC+4Wi5lIyRyAoFU7znnXtAXJPPJMT8pIAp81:KAkKQ5n55sAwoTn6PPM8e62
MD5:	3A21F18463E311FA70B8D6EF76A95DEB
SHA1:	30E8B8907AFEF83CE4CD9E2F6B0DBDBD6A68DD64
SHA-256:	770CFBEC0F775D257670487DA499A3E4638FBF838CE54EA0C58262BDA7DFF7F1
SHA-512:	2FA590AA15AD9C708D90A805A72DC75732880DD6A3B74BF60C11386A90E4113465D5C91B27B24057C3469C072DE919258FA0DB8DF08CA4BBA79516577F6D0B42
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 1200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1918
Entropy (8bit):	5.477483918609393
Encrypted:	false
SSDEEP:	48:GNiOLRrPFZOiOLRrW3EiOLRrxCiOLRrmRVc+u4iOLRraN0oD:GYOLVFZvOLc39OLfOL0Vc+uxOLQNn
MD5:	0DB4DBAD4DC2D8D43CF543344619D372
SHA1:	4ABF6ED91AB167A2A9D372C5E08E4FE8CB2E7F05
SHA-256:	2C162014C40274A84CBCE7373ACA4AADECD99078A3D274668E812E3244A8DA01
SHA-512:	CBBCD750B74CB2A960D645F0050B921022042A679289C6211E2B506E5E3B10F56FCB8EACFB6EA569F351D8383E229528113F07034F65FD5D650BABF414EE8D7B
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Google%20Sans%20Display%3A400
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic /.@font-face {. font-family: 'Google Sans Display';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvr9oS_a.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Google Sans Display';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv39oS_a.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'Google Sans Display';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvH9oS_a.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169,

Chrome Cache Entry: 1201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 1203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156078&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&predirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dpub%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26axid_e%3D%26ovsid%3D%0A
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 1204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel
Category:	downloaded
Size (bytes):	2238
Entropy (8bit):	2.20822051335051
Encrypted:	false
SSDEEP:	12:susqeZyNQIfmwJ0osmoRvA+SNOFjTLpUdq9nQbAz6jB5UekYpXLimkBbKsVEtotx:survfwvpRUdq9nQjkYAJbK9tmq
MD5:	3A07174943F82046370997254100D870
SHA1:	ECB1E2E89AF0EC6F45F875C22DF0FBD45821BA80
SHA-256:	C6F7EE2CADAE2E121342A8C4245141175BFE887776206DEB17149D46CF3AA827
SHA-512:	0A589E20251F62F02C4B96B916FBD9359677A26379D46EEEF4E455464643DE0C9AEEF921AD563D970E7436805DD18AE974DE6942DFDF0C65089512D8A3B2FD35
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rz/l/favicon.ico
Preview:	...... ..............(... ...@.................................`...a...a...b...c...d...e...f...g...h...i...j...k...l...p...r.. s..$v..)y..+z...\|..0}..6...9...;...A...K...L...P...R...T...X...Y...\...k...l...o...p...x...y...~.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 1205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Picasa], comment: "ICC_PROFILE", baseline, precision 8, 181x181, components 3
Category:	downloaded
Size (bytes):	4416
Entropy (8bit):	7.8211394730457515
Encrypted:	false
SSDEEP:	96:tDTDr0ys9t//xKfxhKHNMytPDNasxgW0wnXmyz8SfHiWrWt2:tDTDgX9tRKWHNMErbGWuqit2
MD5:	6C2C34F40883F596810E7C4B0DF003CB
SHA1:	52F96630E32A3CC2F29F071BA14453525F9C47C9
SHA-256:	D1801D529550723918549FDB524098B389B6B9D9D7905AEC94BDF1028F60028E
SHA-512:	8B91C857F667831164B99CE67740024DF8DF41DEDAD4018534609AC82EC5C0E00EE53BDA24B1C8B4312DDD7CFEB1E2884A857A4424C2EF3FE5C8258FE5E87109
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/8703851305396385272
Preview:	......JFIF..............Exif..II*...................1.......>...............i.......F.......Picasa............0220........................ ...!...\|.......9f112f4d5976aea40000000000000000......ICC_PROFILE................................................................................................................................................."........................................P..........................!QTt......145Aq....."2Ua....r....$BDRbs...%3du.....#.................................9.............................1235AQRr...!Saq...4...."B.............?..HX..g...5.. ...KY.q.,.!.b;.....k.....7..h.....5.g....5..7..c./..b.&n..l.i......M.:..G..qi.Z..s.U....fvs,rW.....c...q......}c;...7sj..sI../7.........t..b7A.v(g.[...L_.<...a9.....C......n.c..v.........4..4....\|...\|h...T0g+.[.v..;..n1...moXM..\|h.qj..sH..S~Y....W.sm.v#n.c.C^[...."...........n..I_..e...b6...P....&.4...r.."7....f.Y_..e.7...tn1.P.V.]5.Lx.~].d...S3.z...t.yg......{.1..{.A......3...

Chrome Cache Entry: 1206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	76751
Entropy (8bit):	5.470144727924636
Encrypted:	false
SSDEEP:	1536:+FII9uq+8pFCE0ESuUm+SDdklKUjDV1bEfQvit9a+rGCxZ5BIix7h+CukzkRw6Li:+eGB+IJUm+SBkvV1Qcix7hnYT74Qfnxs
MD5:	D07E62ACCFDE3590A60F0E45FCC2EA7A
SHA1:	EBDAA7BFD6CA733361969259D2876E413C50663E
SHA-256:	3C9331B10D95FBF998CD52A1A055B622FF07D7A88A92B3FD55A777264C2F0AB5
SHA-512:	6F4C039370654979141BA7C87B75195AB24005C81611529B60D2243FD85F71AFC3792E970B22C188A9391DE18AA0FE5B10CA40BE9FDAB8B2492150FF569EBECC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uc/finance/srchjs/latest/js/finSearch.modern.js
Preview:	!function(){"use strict";var e=this&&this.__assign\|\|function(){return e=Object.assign\|\|function(e){for(var t,s=1,n=arguments.length;s<n;s++)for(var o in t=arguments[s])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e},e.apply(this,arguments)},t=1e3,s=60,n=60s,o=24n,i=7*o;var r={second:45,minute:45,hour:22,day:5};const l=1500,a=["https://query1.finance.yahoo.com","https://query2.finance.yahoo.com"],c={SEARCH:"/v1/finance/search",TRENDING:"/v1/finance/trending"},d="fin-srch",u="finSearchAutocomplete",h="nav",m="quotes",p="screenerFieldResults",g="lists",_="news",f="recommend",v="researchReports",b="finSearchContext",C="fin-search",x={ALL:"all",RESEARCH_REPORTS:"researchReports",QUOTE:"quote",HOLDERS:"instituationalHolders"},y={[m]:{title:"SYMBOLS"},[_]:{title:"NEWS"},[g]:{title:"LISTS"},[v]:{title:"RELATED_RESEARCH"},[f]:{title:"TRENDING"},[p]:{title:"HOLDERS"}},w={[x.ALL]:[h,m,_,g],[x.RESEARCH_REPORTS]:[h,m,_,v,g],[x.QUOTE]:[m],[x.HOLDERS]:[p]},L={[x.ALL]:{quotesCount:6

Chrome Cache Entry: 1207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4249), with no line terminators
Category:	downloaded
Size (bytes):	4249
Entropy (8bit):	5.242820679038457
Encrypted:	false
SSDEEP:	96:a6z95q7wimgV1H1BSaQg77uSy7hG1UrpsUtKkmxMtP7iCs5wqrtgfP7cujy/L4:a6x5Tg/C1cuS3W6kKpMtPeCPqrSfnjyk
MD5:	BCDA778B736C3A054AF62F437B536E78
SHA1:	08E2CDBD2D1CA160834B205D6748DC2CAB5FDD99
SHA-256:	892E2F5E07FEF6DE0428E4DCB284201B3D110C0A6F2D8EF899CD2CD2C61EB546
SHA-512:	A0D6449A03045E723D2F668898541625E36D7394E30327F5E89E1F0640F97A1A0268F500D89E804CD8DC8FBF395DBDFA71B429E89E737E3C2DAC7A2C196EA3A7
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/js/tdv2-wafer-utils.customErrorHandler.bcda778b736c3a054af62f437b536e78.js
Preview:	"use strict";function _typeof(e){return _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},_typeof(e)}!function(){var e,n,t,o,r=window,a=r.onerror,i=["apptype","rid","bucketId","bucket","device","osName","browserName","browserVersion"],c=/^resource:\/\//,s=/ActionScript\|Decompress\sfail/,f={beaconPath:"p.gif",site:"fp"},d=0,w=function(){var e=r.navigator&&(navigator.connection\|\|navigator.mozConnection\|\|navigator.webkitConnection)\|\|{};return{downlink:e.downlink\|\|"",downlinkMax:e.downlinkMax\|\|"",effectiveType:e.effectiveType\|\|"",rtt:e.rtt\|\|"",saveData:e.saveData\|\|"",type:e.type\|\|""}},u=function(){var e=r.YAHOO&&r.YAHOO.context\|\|r.Af&&r.Af.context\|\|{},n="";return i.forEach((function(t){"undefined"!==_typeof(e[t])&&(n+="&".concat(encodeURIComponent(t),"=").concat(encodeURIComponent(e[t])))})),n},g=function(e,n,t,o){if(!(d>3\|\|r.naviga

Chrome Cache Entry: 1208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 265x299, components 3
Category:	downloaded
Size (bytes):	4994
Entropy (8bit):	7.913131501691533
Encrypted:	false
SSDEEP:	96:d6q0NaIsu9oEICaamnsa3WYlRRyFfaOFB6WrcQXE3T8pfiNwePGQq:dR4Vo37amnsuWYrRyhaIpE3gpfslPq
MD5:	940F5744D3041E541F2B4296ADCFF517
SHA1:	A194453D58A6C6E27B0D73AC5C117C7267D3E09A
SHA-256:	125309ED9A17805B4B8927353E8E82DCC0573779ABD5312D35A42C449BF073D0
SHA-512:	A01906DA2F20057FAAA0F43F90F111443DA5A68A9644FFBBD2B8707E2C3032A078278F139DD323D75FC9E0BA0F60A5F605A76BB78B84D006F08750F2C5B7F445
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn2.gstatic.com/shopping?q=tbn:ANd9GcTkTIEY1Rdq45z-4BahZJWXBQTzQ8ASmUlZidHWlsoar2c6ggJS0hhsrCqFTPE&usqp=CAI
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......+....".......................................>.......................!..1."AQaq.2......#BR...%Sbs...$34r.........................................................!1.AQa."#q.....2............?...)..Tw,.%.Z.).n.`ST..R...Q..q.>......[..2(dA.......2(dP..i...D.......4.Cpc......g(.h..4.E.`1.....&C.I.O$"eRB&..HT.L.....I.2ES..#Bv.8c[..@".%.@..........`.`UD.....C......U.Y.+.;.n._^..T.l.\.W..==;.*..I,...:-....5D.....a.C..Hd@$.Q1....;....N.....9.q..d.'..$Q$)..$.C...Hh.Ds@4...HT.D.....s[..u..&.D.....4&h......DK.Bj#.}12...UDE.(...6...(8D6.....#.-....~.....K..^QK.%..iI....)..Q..F)...y.0..F$1#.~NH8....6......@&..p.&nL...r.8...B.`0.$-....J.....@"HT.D...&.'...U2y...<.=..b&...0c[....=.B.....bd6.(.;..J+D....ljF....w,~K..S..J>.LT~.\|......Fk.OhjA..F..FD\F..H$..h..;....%.z_.xT...3.T.!Uk2.o.P.....'..&q.6...G....no..L..[..t.u.!.].

Chrome Cache Entry: 1209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p2?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1711672891922
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	84587
Entropy (8bit):	6.0531042608506045
Encrypted:	false
SSDEEP:	1536:4EV0nyVT+cy33CRdJd5rYxhMtd111r0sES/YPvPPzZSkciEsEjc:fZtnDxTrLTm3rZSkp7
MD5:	6A414CA8ACAC706459B4206DC6169081
SHA1:	1FBDF5F505D22F4227730117FA8DC325C6293CB1
SHA-256:	31C7E5DA09199B5F0253FB6BC64EF9EAAD7D6A23A702AD812C356ED3E42C61F9
SHA-512:	0F19C7A3A873EB7A64E04E716B7D468A05781FE807E7330C6D29E125E298C65C01F5E074FF5B662079BCCB796B2E7576567ABAFBDF984EC5A61C8DFD802A4AF7
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-BR0olFOEF06lEcLBKWTbRTvWVAB4_QmrQ_uh1fDSJf6U4SrxQ3KqSWMmM6xO6uwpwANXkg9EeMlEkRENoSEUuY1hASKHsCqWgSHkbRrhFiXFj60EkawtREUk6fqKNpXbyBJzcfXljCMdKgJH7w_fgIIyqj8OrwNM_OP8H_P5MW9wHOjGoMcdjRvhGAuch6ztq2KNUxVagT04EoMCUNJnLAwuX4eg&dbm_d=AKAmf-A_0Tq7qYMkhEX_xREeoyiNzfou3vC1m-1cNipicQe01SboJ5Fa2FW97WdXpcnaasoE2zap2dgwgi4bqNwOkylWJzmRzAdUf3jRZBz6iRu-MkbMA_lY5VXCGIDm2XvIIpso6zEUVmup2G89FeSXhYAf431YKwd_gEUnu9atD9aSpqjWeUdnBe57NzJjx8Tn_NTb0I0-1znPIDY6r7gGR9Dz8ivUK-r6Kf1NHafC0wxbjiuyVTJyA-mKSWtgXzRQodID-8iwQZBV9Q4uLlbLgb_hjtTEdKjla0bq7LnwBC1oBkScpjzYuvXmCXKeVAeCrfundoj6C-D2SFl6Zo0ZU7FII4SpLQu2SW5Hr1YazzXETJAkN9WS4bTJWjIHQSCJJ__jNfpxFqjsjiHkyYBybdFs-v87m47bvCFK4gh6mlymojaxm-sC_e90HSQCN0PCCbx8ilBYsgJszdkJfIXhnctVi_uQ59T5T9uYM3TAkiVSLBuIQbo37XHne23epjZflH93fZgK19gkWz5y3JmiF15rZ9zkF-1H2xs-jnXjZkhGXTX6RX8lJuKgr1fc0y9-cBJR17N2whqKgjwkQEocbchzQZnEWCMn4u0AKInzZP1pIlqUVpLVCQxHLPgZlGF7553P_8CU2KG4dSLj2K2iObfpfO9YoACn2_liVggyEl8l6F1CiqYFpGhPXM0bVqwDFbFpk_4j-JI11kLmRn9trcoVeLp6xYXggBgvjeUGEHQs-rN6CQGM5myDH2XK46K-6g8p0W5lDAmgSJn9rfyNT7r6def35TSymnzrpH_ScLmCpdobnQn9-vvHV2RqHLYEPrnikkERem3CSLQRyTE6-zqsY7XMmzPc9sfdU0IsdP5cg91_XsAidVgsolC1sQSVhhpqzH832GTDSdwRaIJfB0LV9GrKlQ2yUAeRX5KI53jXRJjvg-kx8GmiFkEVuKiGsK-q1zPRTOTgxNhSeH-81se3wcmWF73x9TUZ6zbYpZKKJnXBlRsfnZv0Fz0eD0nrEQOtRaDl7xXkhGDTcq8hOncCI_Jb4Vl0lX-Cz6BL_jN-UD5UQTIq4qvYR8L3xs5C3Jtu12Mwu6JjSUbVhIn9pRIApERMs7CHGlq2rCJHGGQ-RQFWdG5kPfSApYIGN5b_Zu-6pjCqB3-a1-xxTuChkO2o3uf9qNK6DBiO2jz09gT-iruiXf4XYGDZxQHXA6fxD094sF3X4WX27n64nMlxftn8ms4ANzvjbhqjaTcS61YdQqf5Jh9x99pFUmmO-CrOK_6fxLBZ_dbh8juMbSQfrP2P33qFXa23G-301pctS6JBjn7evSfR2BX-Xs-G1PGzoV4qoUJ1OXaTzsO5ellxqhGXfTDYp7MADb8F4WHWN9wV4PQroW7GMRSNo3m1DBTzh-bkDSgqdfGsyUxVxuOjxmmHkCfYku-HCDrjfwyRUVp7JqAQ6LTM8BnQNvDCVvXNeZN6y-qUAk5m16inGa2-UZU0QnBHZhIbG8RbjUXz_7ILXg066RRVzpNQdx3QSqLz2LUxq1-3NeHPOpD1k8E0UwVwi0lokFYKXXygD7xX_b-6snX1UjHukLcYPt3Zc6crpow8AN0x5mJ0CHuqTVC37eMY9fpPi2OdUArgmSN7l6DOzvzZV4ULWVIZIu2WFoMr6M2HPTIM0DHdrqKajklsAksu0t-Y3oARJQ3Xk7WZuTelfbsz4fg9QMUhQ6KFX76TkTq1SxnsSw8poyAmxk6vaTS47KVuCluN4_24alvepay7Y0ItynXl0doYf5cyXNvxv0XjanFEYK6jRMx__jjF0c8m6u6VD1C-BCjIh0ru4ECg34Y8B1UeW0AmpRug6OjfbLVS32Od_y0XpefAoZqkknfLGKAUyfgaPzmHWiKRpH8MVAAqM2rDV6nLE0d7dNxEuA92IDjFX30qix0gOZauVdE_npNABJKhnHhQF3b0llZmhqBGwE08e3GbC7jA8obLlTgO14Yemkoubx2q0QkBDSV9LN_DbN1FHRB2Y17cAzUldmKdFUURGfqbGMR2e7xd5HO11UONEit4B8PMzxNcJs4Mcrjlami-j0w-NHRjtKfL3XQwEcHnMpD3Dn3VZABc3M1cUp939DCQrxnfboG4PpXHCY116yT5q-VN3821F8dCY1x88mEzrkKOt4_vE1v8xN3ZKmdt3Ss8KWOxohYaQS2CzRUXh99t8EF05yICAIRR7AmoNYbFFkMJ-xJTdmaVMWPsqBd5ppIdIReBv02IsLBjG1Mwc5fXG6HoNhHHOaqyUB-cRss5g7OimG314HVLi0Id6M4PVxpnn-clHsQIdD1WCzef2vfauwr5H3pD6zMuTAVNLS9DvPsQGoaBLoINz0qCZrAshtbKENZ8dVUYOPDXotwfUtZgLgdK9nSRbGys55wO-pS2L1pYSwsv8HFQ2CAd4GA0Ka74J_86KTjzu9DCwwCe9UHV9E798e7AWb7L1vvdYD7Z02uWKUs00FnLV4S4Rr9s7Jckx-R7KzNabElQaxD6gWWvi8zvxzYyK5RwZjD-u1n2TeexXAsUc8VMzzi0n6T8SI-4UaP3oL3H-OKjIX8MrabB5qdeKQJjbMXJy-Af43soLAxwIjJhnXU8fnY8ArPqnPfGB4388N9ZyNpPF5GWn0fZmoKz-neTJtYxZyn1SF_RY51Y_tYSP4GByK_hczytz95QJNoGJl6MpBNaKaZzqxYL-bMXuktWlvMQPoDiuq8GVOM5ZGCs4e288XzfqHsdWJ71ef7d4SIQd0ARzxiobljFOeW1DMr8cmsePaOvPSjrd_Bk_3lk5M_fuBhXvyNNDo1aja6KsexQuHYROL2fUm3LNt4au6ItQdHSUfLfeJXWEjCKf8970NfiSEVLEqahhQYZeLDirk-SMonxUCY108CWA7BQTf9-_xsuwhvz_E3ccVCh6zfLzmfVW7X37wmusoBQoWBRtIVntNkbQl1o_O4sSR9zx3AL_Pgwzi1q55Di9l6A8lXUzDeGHxcs1uvbcF-IpIjkZ2wQTUAet_HmCZzS0Vefa_ZHbWDOhRz0xngZD1TZVgyN3_lb6hY1MUZJkyE37y66edHZ-WtEmP2lordpPGYVKYxptuLq6GddzvxP2c_KPPDuS2-S3p2Xcuy_sGnFLBsIYEY-2Su-8dzXOY8pWsM8qUaP6Eh5-bVI-1IS7NlwcccNrxqVbEEGBVBTZx4py-1doSQfeC3m0JEDFI8paCdcf6Kf3IMejvxsNrSBvjISMhSN0HozyOqQi20DKysuHoQSu7wqQ5ex09lt0OcsKCP4HVf3B2LDrVkotgqRhSe_-qO11ooMoqha7HaT-drcM87CG31i8bXsNQtRLZFz6RARvMXkqRBYTMYPsTsyDwvR8-kIflkDYhQb76AaSORrsBxyYfyZ6FLdGguPDXURr6CQBCNAIr6B8K1Vqq_hsGhG17HHq5yiK2QubKSkraKeFjJV9Sclk7XXJZY7Lx6qi-fLjLXCUoTvFqMc1nWtF6QPo_pxAuwMfkE6BFxP8o6HBSVurRAISdTqMNtje5gFlWoM96w3qY4K9y9H6CnFzK9iNyNCWyleVB02niY_XMbPackXFZ6y_et8KDryyv5t1ZVi32Zb1g5-hPXe50HV_-1sYO5TSBggkMSf38U-8W5Q03Bx4Lxuyoi3tRDzmF1XwP6ldqO26uamtnlys8Xuw6jOvkt55_AYiqn829vr0KFhKtVCTSsU4rvNJaTN1bSwsTzD7ZbPuWxKA-NPNMxTlzCev69kvbYtiyejaov-M0NmZ9_FTnUPGClDchTde1i65EPGSTYuGoaBeBYhKhs&pr=13%3AZgYOPAAAAAB2m_3QsatYZTYYSiy_qBI09Znk9w&cid=CAQSKQB7FLtq13ZwJJtS7HPrmneK5TXmD0aXqP-GHDeL58ONsQB-G1N1wdXqGAE&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&dv3_ver=m202402290101&nel=1&rfl=https%3A%2F%2Fwww.yahoo.com%2F&ds=l&xdt=1&iif=1&cor=16289572052985119000&adk=1532088099&idt=990&cac=1&dtd=27
Preview:	if (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_3631931756"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_QQ4GZqmbKqKUoPMP-5SqsAw"\x3e');(function() {var m = document.createElement('meta');m.setAttribute('data-jc', '82');m.setAttribute('data-jc-version', 'r20240327');var ss = document.getElementsByTagName('script')[0];if (ss && ss.parentNode) {ss.parentNode.insertBefore(m, ss);}})();(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if("IFRAME"==a.tagName)d(a);else{a=a.querySelectorAll("IFRAME");for(var b=0;b<a.length&&!d(a[b]);++b);}}function p(a){return(a=a.ownerDocument)&&(a.parentWindow\|\|a.defaultView)\|\|null} fu

Chrome Cache Entry: 1212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	4.82554336623202
Encrypted:	false
SSDEEP:	24:2d6gomPLj/GECneaxMRcj57lKrqpGHQ3uOyxlwBo6FthZqycBy4OIlz0OzYB7tAv:c6gNjj/GRBj579phkqo6FFLoyo5IOv
MD5:	6619A7F44244BB4319C26A1DA673FF22
SHA1:	AF26952759537C20AC3E7E93268F2F1397BF7159
SHA-256:	BB89BBC42005CA6B6C10E791DB890398FBB456D31CFA05331309B8344E7B3ACE
SHA-512:	2E77842EC1D24CE801B90B105CB1BD14CA8B195B3D66400AB49AAF1CF5E0D80E31540F4BA2F5E8AAF2BB625CF7E71B9176688FD96D154739A211C2C6C496D945
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>icon-account-active</title>. <desc>Created with Sketch.</desc>. <g id="icon-account-active" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M12.375,11 L8.625,11 C4.97476684,11 2,13.8557762 2,17.4 C2,17.8006133 2.23908598,18.162562 2.60756131,18.3197782 C3.01090711,18.4918724 3.73979964,18.7352591 4.76551773,18.9739717 C6.4490293,19.3657707 8.37044131,19.6 10.5,19.6 C12.6295587,19.6 14.5509707,19.3657707 16.2344823,18.9739717 C17.2602004,18.7352591 17.9890929,18.4918724 18.3924387,18.3197782 C18.760914,18.162562 19,17.8006133 19,17.4 C19,13.8557762 16.0252332,11 12.375,11 Z M15.7811427,17.0260283 C14.241998,17.3842293 12.4720038,17.6 10.5,17.6 C8.5279962,17.6 6.75800195,17.3842293 5.21885727,17.

Chrome Cache Entry: 1213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	61390
Entropy (8bit):	7.969948920762238
Encrypted:	false
SSDEEP:	1536:2oYgRGaG+Mug6ROWgAKR9YE2ahc5c+gfUIOXbvvQ9Zr6fW2:2FMGaG+3hRGAK/c5/gfInQ9ke2
MD5:	FC2CA837B84FB2A28F06A3001FF46233
SHA1:	1E6B59E8EBC557B04FE718AAB4953BEA3C010F05
SHA-256:	F41D6A7CB08FA4101FE9F57399DB3B54559C251A6D666163B1FEBC6E8F59F03C
SHA-512:	24C51731277E2BF844B8C8C733BB1B6D96B34DE5B0FA52405134546A9B5C1EE280C98282A148767B569097DA118750108C19C1D8BEB98240BD1EFED652237C33
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C......................................................................................................................Y..........................!..1A."Qa.q.#2....BR...$3b..Cr.....%c....4DFS...&Tds'Ue.......................................9.......................!...1A."#.23Q.$BCa.q.4..R....Sbr............?.........v...FHu...

Chrome Cache Entry: 1214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2861)
Category:	downloaded
Size (bytes):	20380
Entropy (8bit):	5.524557919384581
Encrypted:	false
SSDEEP:	384:8zYtuquyl5//biWsLxAPE9uu+p7rz/Wjiv/UQadjBi/+wqwYzdcoXZacMTa4urMg:+YtuqLl1/bifdAquTp7rDWjivsr/o+w8
MD5:	F7BD3CD5853DA36DC063946D51551914
SHA1:	7CFEC18DD5F455EB7B84879ADE32F48A5C9DD06A
SHA-256:	0157527E01CB5EB07D42ABB8FECA608D1AC4275C73BF70B4FCF2BC07EE916975
SHA-512:	4B643D69AC244027941649895562BEC06D1478918BC2888C8DCAB3AB39BFCE234861F5D303BB4B3B7ED9FC48D5A0BDDEE8302EEE7F98484E5E994F0D320D0ED1
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240327/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var q=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=q,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function ca(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}} .function r(a,b,c){r=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ba:ca;return r.apply(null,arguments)}function ia(a,b){function c(){}c.prototype=b.prototype;a.O=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.P=function(d,e,g){for(var f=Array(arguments.length-2),k=2;k<arguments.length;k++)f[k-2]=arguments[k];return b.prototype[e].apply(d,f

Chrome Cache Entry: 1215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	4.985902344426085
Encrypted:	false
SSDEEP:	3:YEOBHKMxMUy4RoGXRvbkHY:YEOBvy4RoGhOY
MD5:	7871909302625BED0E0C0F3987103514
SHA1:	AD47857B245FD83F7F03B09162AE55A037DFF2BC
SHA-256:	B7E7953671A37AADE7D16A6B93063318CA12598C1353D38E93184D3689D21F4A
SHA-512:	E5CB436B0E7AE6F7CF271452DF51C2F5898E34909C0BBAFDB0A27D638B0CAECB124DF49C9E15BCA7905B0E74BCF515D15AE984961617D9296C951C82D261BE44
Malicious:	false
Reputation:	low
Preview:	{"axid": "y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A"}

Chrome Cache Entry: 1216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8127)
Category:	downloaded
Size (bytes):	8128
Entropy (8bit):	5.210425618876301
Encrypted:	false
SSDEEP:	192:ACdB+IPnzAWYJKh1zVQJzBAtU1Lo+sww9Z8l3TRgKB4v:fdAILkQVQpBBJsW7BU
MD5:	26831B6BD9EA430823F593B6A70C7375
SHA1:	01AA2FCC9820194D914DAEB4F5BF84F8447CBE4A
SHA-256:	BAA52E8AC769D702E14FD1FA5A4363A1FC7E6462115AB6BCDBB317CE0E99DA8B
SHA-512:	1F5F82EDA1CAB4518C172ABB7DA75556D1D49D0ADBEBF4F5EBC389317E428723D1E718E2510552A9061ADD5410819273364766EE57207FACFEDF08C976689BF9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cx/pv/perf-vitals_3.2.0.js
Preview:	!function(){"use strict";var e,t,n,i,r,a=-1,o=function(e){addEventListener("pageshow",(function(t){t.persisted&&(a=t.timeStamp,e(t))}),!0)},c=function(){return window.performance&&performance.getEntriesByType&&performance.getEntriesByType("navigation")[0]},u=function(){var e=c();return e&&e.activationStart\|\|0},s=function(e,t){var n=c(),i="navigate";return a>=0?i="back-forward-cache":n&&(i=document.prerendering\|\|u()>0?"prerender":document.wasDiscarded?"restore":n.type.replace(/_/g,"-")),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:i}},f=function(e,t,n){try{if(PerformanceObserver.supportedEntryTypes.includes(e)){var i=new PerformanceObserver((function(e){Promise.resolve().then((function(){t(e.getEntries())}))}));return i.observe(Object.assign({type:e,buffered:!0},n\|\|{})),i}}catch(e){}},d=function(e,t,n,i){var r,a;return function(o){t.value>=0&&(o\|\|i)&&((a=t.value-(r\|\|0))\|

Chrome Cache Entry: 1218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6179), with no line terminators
Category:	downloaded
Size (bytes):	6179
Entropy (8bit):	5.08247511424115
Encrypted:	false
SSDEEP:	192:Ma6NSahE4cG2vzIqRtQrzIqRtQda6NSahE4cG28:2LezoziLP
MD5:	14B81B9D43CC8EB81AE45EEBBAAE258C
SHA1:	282B11AB55C5F5160364E8EFC58D7F1F905F18FE
SHA-256:	C4785A51ADADEF034B8274F06CD3BA259F313F67269F1C8F06BB9CE88AE9137A
SHA-512:	E50862DC3483065FBF5E9F41C8F5422229A873248B5E138D27ECC6B76B53D901EF82307C0F4237B9FB9966251EB8A54E582361C70DAF0CF9BB0E39BA82FDD190
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/cprops/colors_1.1.27.min.css
Preview:	:root,html[data-color-scheme=dark] [data-maintain-color],html[data-color-theme-enabled] [data-color-scheme=light],html[data-color-theme-enabled][data-color-scheme=light]{--barbie:#f80e5d;--barney:#cc008c;--batcave:#232a31;--battleship:#5b636a;--black:#000;--blurple:#5d5eff;--bob:#b0b9c1;--bonsai:#00873c;--canary:#ffde00;--carrot-juice:#ff520d;--charcoal:#464e56;--cheetos:#ff6e0c;--cobalt:#003abc;--denim:#1a0dab;--dirty-seagull:#e0e4e9;--dolphin:#6e7780;--dory:#0f69ff;--gandalf:#979ea8;--grape-jelly:#6001d2;--grey-hair:#f0f3f5;--hendrix:#f8f4ff;--hulk-pants:#7e1fff;--inkwell:#1d2228;--kiwi:#00d15e;--malbec:#39007d;--malibu:#ff0080;--marshmallow:#f5f8fa;--masala:#ff8b12;--midnight:#101518;--mimosa:#ffd333;--mulah:#1ac567;--mulberry:#5015B0;--ninja-turtle:#00ab5e;--pebble:#c7cdd2;--peeps:#7dcbff;--playdoh:#21d87d;--ramones:#2c363f;--sapphire:#2f0060;--scooter:#0063eb;--sea-foam:#11d3cd;--shark:#828a93;--sky:#12a9ff;--smurfette:#188fff;--solo-cup:#eb0f29;--spirulina:#009c94;--starfish:#775

Chrome Cache Entry: 1219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	67
Entropy (8bit):	4.63450490745936
Encrypted:	false
SSDEEP:	3:C/F1LCMjADSRzHH6GM:C/FQgAeRzHH6b
MD5:	0D4D802057E477EE028B489E8F87AAC1
SHA1:	F2BD600B31ED1B94156A9DA23013706CA3884F86
SHA-256:	36EEAE28AF31FE42AF6C3C03695665D8B0415A3D9F460C40C06BFA01D2C9FF60
SHA-512:	703DB77400945695BF33748B6A0FE20DB1533D934C73FD60C263BA874899BD84264677F33210CC48FB167F10875624F955267C9B92B9EA6F8133FC2ACF22A1D2
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/ss/nes/hbc?callback=window.advBidxc.cobrandConfig&cobrand=none
Preview:	window.advBidxc.cobrandConfig({"code":"0","data":{"bAdvDms":null}})

Chrome Cache Entry: 1220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-DV8gvHyeWrGAODz7YLMMyl7Z5Rgz-RPh6nZr7qQbSS2c5a8YCVRPqO0aACe_GDV-dxpuNOKtNzglw7joZpo1S954VwwbcSiHkLRwgfm2J6AW36ero
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 1221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2764)
Category:	downloaded
Size (bytes):	2765
Entropy (8bit):	4.602363951659724
Encrypted:	false
SSDEEP:	48:1sp1zp6JuNb616lZPaIzvdzBMvMS9Af/2C:1sp1z+uNb616lZPaQvlBMvMEAfeC
MD5:	E76A39D9F6E47BA3F17230D30D4FBEC7
SHA1:	CAD9DA5A03CA89B2D2189E8F1AB414C949C2BC43
SHA-256:	2EC64AF4889A3A5039FE6A3595137864BCC11B2692A95E093F7D0E93B8B86A37
SHA-512:	DC88F1C64F457035397DD77B713D908171C5A1F696E4C992A38DED30B1E1D452A694E88E9C82A4966B0D2ACDECA39974FC969E96D624408F331F87DA00EC939A
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/AccordionItem.DZkfpZN2.css
Preview:	.container.svelte-10zi8b3{overflow:hidden}.acc-cont.svelte-fcthci.svelte-fcthci.svelte-fcthci{--_btn-padding-top:var(--space-3);--_btn-padding-bottom:var(--space-3);--_btn-padding-left:0;--_btn-padding-right:0;--_btn-font-size:var(--font-l);--_btn-font-weight:var(--font-bold);--_btn-color:var(--primary);display:flex;flex-direction:column}.acc-cont.full.svelte-fcthci.svelte-fcthci.svelte-fcthci{flex-direction:column-reverse}.acc-cont.full.svelte-fcthci .headerBtn.svelte-fcthci.svelte-fcthci{--_btn-padding-bottom:0;--_btn-padding-top:var(--space-5);border-top:var(--border-light);justify-content:center}.acc-cont.card.svelte-fcthci.svelte-fcthci.svelte-fcthci{border-bottom:var(--border-light)}.acc-cont.card.topBorder.svelte-fcthci.svelte-fcthci.svelte-fcthci{border:var(--border-light)}.acc-cont.card.topBorderOnly.svelte-fcthci.svelte-fcthci.svelte-fcthci{border-top:var(--border-light)}.acc-cont.card.rounded.svelte-fcthci.svelte-fcthci.svelte-fcthci{border-radius:var(--border-radius-m)}.acc

Chrome Cache Entry: 1222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (785)
Category:	downloaded
Size (bytes):	786
Entropy (8bit):	4.865264818742487
Encrypted:	false
SSDEEP:	24:FMbMELVEd32uRfY4kfqqVzCLMbMELVzNOS:+HgG2fY4TWzXHzX
MD5:	9CC0666E01D3DCECD2EC672BB7464769
SHA1:	70289CF47C6B043863BFF6121459122E61989FDA
SHA-256:	458583FAEDDD29C77CEC35A156DA233830CDDA8C76D43572DF94438E85151FD8
SHA-512:	2880D10D81FCA4264EC3CDCC55DB9B6B66991E4D24740CDDEFE1533DBF95FA6480E130122E9C558E329406D1902DD233759C877B85035AC45E37DE1ED40062D1
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/CarouselButtons.CrZuNGQK.css
Preview:	.carousel-buttons.svelte-seg5yl{display:none}.carousel-indicator-buttons.svelte-seg5yl{display:flex;justify-content:center;align-items:center}.dot.svelte-seg5yl{height:.375rem;width:.375rem;margin:0 var(--space-1);border-radius:50%;background-color:var(--ui-gray-200)}.dot.active-dot{height:.5rem;width:.5rem;background-color:var(--enabled-active-emph)}@media (min-width: 768px){.carousel-buttons.svelte-seg5yl{display:flex;justify-content:flex-end;align-items:right;gap:var(--space-4)}.carousel-buttons.hide.svelte-seg5yl,.carousel-buttons.slide.svelte-seg5yl{display:none}.carousel-indicator-buttons.svelte-seg5yl{display:flex;justify-content:center;align-items:right;gap:var(--space-2)}}@media only screen and (min-width: 1050px){.carousel-buttons.slide.svelte-seg5yl{display:flex}}.

Chrome Cache Entry: 1223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x600, components 3
Category:	dropped
Size (bytes):	57191
Entropy (8bit):	7.960932861162818
Encrypted:	false
SSDEEP:	1536:iUZTUYpCEYavY63QdRqaBkTvlw0gjhvDd4n:iUZP8z963QdRq46l/gjh7dA
MD5:	EFC3058CD92227066CE71E47370DC481
SHA1:	3A481ABC9397E8A98EEB3F7381C1F328ED36C652
SHA-256:	60A9F1D72B0D75B4D3C6DD6D07720C5377F1BBC7017161FFC3724CC0034843D1
SHA-512:	D9C11D53FE016AED50F8FA089C71BFA0B4AD64FBD6ECFA114707E119E5CECC8674F54BACD91D214AA3F03D000953508472F022A966754205C46F04FE1977DBBD
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......=......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0580117407206811A61396797EE4D8D6" xmpMM:DocumentID="xmp.did:1840AE9ACF9D11EE8137FF27797BBF91" xmpMM:InstanceID="xmp.iid:1840AE99CF9D11EE8137FF27797BBF91" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:078ee284-1fbf-4ce6-b416-ac8cb9e377c6" stRef:documentID="adobe:docid:photoshop:774fc835-3ecb-bd45-bacb-20d3199f7597"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................

Chrome Cache Entry: 1224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	271
Entropy (8bit):	4.8005718546517935
Encrypted:	false
SSDEEP:	6:aEYEt+vElDYRyXAWIuMzZ5Cv9YCUde0vRpBHi6XeobRV6okXI1ElDYRyXAWIuMzX:P3+vEtYRE1IZ5mBUVRvC65ZkY1EtYREK
MD5:	B6AA708E6AC38AE40AD39D12ACAACC55
SHA1:	74BD75BD0E6D21A0FA45FACC9EF0861ED78FAE2A
SHA-256:	2B8F5F02D358ED9AFEEFC4517C7E430E9AA249C183AD28C93EF5ABD0C2D4ED5C
SHA-512:	9FFB6963DFC123D938147ADD8FA298F34DA17BFDB4C16321F82CCFB584B92BE67734656986013733F2A78A278D8009BD762174E85F9FC58F5A10E71E025F3D23
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/xe/sports_ms/css/header.customYBar.b6aa708e6ac38ae40ad39d12acaacc55.css
Preview:	.ybar-dark.ybar-background #ybar-inner-wrap{--uh-max-width:var(--ys-page-width);background-image:linear-gradient(to top right,#1d2228,#1d2228);background-color:#1d2228}.ybar-light.ybar-background #ybar-inner-wrap{--uh-max-width:var(--ys-page-width);background-color:#fff}

Chrome Cache Entry: 1225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	22980
Entropy (8bit):	5.377678996534159
Encrypted:	false
SSDEEP:	384:xEXKTyWhZWsscgltyBvH/hl3KF6IrQSTC7L5GziTm04FFKrI+7G+mCYBTg01:+ypgzyBf/hdKFxrQSTI5GziiBFFgIEGB
MD5:	008CBC7A6FA2B266BFAAF8ED0ECE3960
SHA1:	5E05EE949943DF0AF2559FAC9D013C5FDA082527
SHA-256:	1052A8DEF8E290AA7FD167EE28219AC019152EF1E740F0BF462A0CB215A385EF
SHA-512:	902DA4F15E0633B668F50EEAD9083AC054E7696E1D2A0D8268FAD912E8344C45C0E6E038053B6CD16DEFD4C98CE1D14555EB70E95F3A0F054434D02779282F62
Malicious:	false
Reputation:	low
URL:	https://www.yahoo.com/service-worker.js
Preview:	/* version: 1.1.52 */.!function(){"use strict";function e(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function t(t){for(var n=1;n<arguments.length;n++){var r=null!=arguments[n]?arguments[n]:{};n%2?e(Object(r),!0).forEach((function(e){i(t,e,r[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(r)):e(Object(r)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(r,e))}))}return t}function n(e,t,n,r,i,a,o){try{var c=e[a](o),s=c.value}catch(e){return void n(e)}c.done?t(s):Promise.resolve(s).then(r,i)}function r(e){return function(){var t=this,r=arguments;return new Promise((function(i,a){var o=e.apply(t,r);function c(e){n(o,i,a,c,s,"next",e)}function s(e){n(o,i,a,c,s,"throw",e)}c(void 0)}))}}function i(e,t,n){return(t=function(e){var t=function(e,t){if(

Chrome Cache Entry: 1226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	21
Entropy (8bit):	3.403989446485262
Encrypted:	false
SSDEEP:	3:YBE+dmYn:Yvvn
MD5:	031A8B6F8BAEA1DF8DA69CAFED49D579
SHA1:	BA6C224B8AC88AD4368A30775BBD4CBAD9BE3BA5
SHA-256:	E5C0644466F49DFB193A225E813EB639BD14B0933EAA4CF457688BA716D49D95
SHA-512:	5B70D7F4F7B5A20657E835AEC1698BE17949EBA4E9B68E4DADD13B5BE9328A602CA815C9AD9CC6205F291199E18E7237CB4512CC840904F65AC4162F388B5801
Malicious:	false
Reputation:	low
Preview:	{"data":[],"meta":{}}

Chrome Cache Entry: 1227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2380)
Category:	downloaded
Size (bytes):	2381
Entropy (8bit):	4.721627708392218
Encrypted:	false
SSDEEP:	24:WiUVV5eGfWKwibkCU5J5mdg7+v5YZgIpvAz5Sx4U4ZD4Z49Ar7/n1udGMjwUwbJu:uSTK1QJ5med1/4U494jP1ijwUwlyR
MD5:	910BF3FB5F2E5DD5BD773BFA7277A429
SHA1:	07FE2765138D87944DFFB9615ACDAFE56B603F9D
SHA-256:	1377C7BCB49B22E7D98AEEDBB82BD22655E283590B9025632E903F8BE2E0E8ED
SHA-512:	6929A81F8CD3A23D9D4F5F13D7CFFBD3A2D0B74BD8AAFE820836AC1EF6F0900FD27A17D722F799726E9E0659A3114FCB477FC2D27C4267E3CD573A8695760794
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/Tabs.WO-8j5ao.css
Preview:	.tabList.svelte-ebdrzu.svelte-ebdrzu{--tab-border-width:3px;display:inline-flex;align-items:baseline;border-radius:var(--border-radius-s);border-bottom:var(--tab-border-width) solid transparent;scroll-snap-type:x mandatory;scroll-behavior:smooth;scrollbar-width:none;gap:var(--space-4)}.tabList.svelte-ebdrzu.svelte-ebdrzu::-webkit-scrollbar{display:none}.tabList.svelte-ebdrzu .tabBtn.svelte-ebdrzu{--tab-color:var(--primary);--tab-transition-duration:.15s;transition-property:color,border-color;transition-duration:var(--tab-transition-duration);transition-timing-function:ease-in-out;background-color:var(--tab-bg-color, transparent);border-bottom:var(--tab-border-width) solid var(--tab-border-color, transparent);border-radius:0;color:var(--tab-color);font-weight:var(--font-medium);font-size:var(--tab-size, var(--font-m));line-height:1.25;padding:var(--space-2) 0 calc(var(--space-2) - var(--tab-border-width)) 0;cursor:pointer;gap:var(--space-1);white-space:nowrap}.tabList.svelte-ebdrzu .tab

Chrome Cache Entry: 1228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (1829)
Category:	downloaded
Size (bytes):	1830
Entropy (8bit):	5.336700348665621
Encrypted:	false
SSDEEP:	48:eiwtB/OE4dKSp9ANKJ3JWW7gLVhXNEtv6RX7qpSwvn:ytNxtSp9vJ8W7gLVstk7q0wvn
MD5:	B2278B562784BB4B7ACAEAFB7EEEBE97
SHA1:	0710FA5CD97FCC6C169BF8358949E1F6B8D6C552
SHA-256:	0A3683F3F3DB7B386CE0EDFA42D6DF05EAE879D3F048C609BBCED5D9E637C470
SHA-512:	308D49A5BEFE11737067150C3A886785132E653A0D4CEA57AD1FCBA49A7359314C83B7AD57C2A33FEE27FD251F1FB62536EA9C8F0A51A4AB82C8AD2B3CBDBFD8
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/StatusTag.DDomeXTV.js
Preview:	import{s as g,e as v,d as h,f as b,i as p,p as m,k,c as y,u as w,g as q,a as I,n as N}from"./scheduler.ErneftFr.js";import{S,i as z,g as E,a as u,e as B,t as f,c as C,b as D,m as H,d as M}from"./index.DsErXEH0.js";import{I as T}from"./Icon.CDBsrPKz.js";const V='<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path fill-rule="evenodd" d="M4 11h16v2H4z"/></svg>';function j(r){let t;const s=r[3].default,e=y(s,r,r[2],null);return{c(){e&&e.c()},l(a){e&&e.l(a)},m(a,o){e&&e.m(a,o),t=!0},p(a,o){e&&e.p&&(!t\|\|o&4)&&w(e,s,a,a[2],t?I(s,a[2],o,null):q(a[2]),null)},i(a){t\|\|(f(e,a),t=!0)},o(a){u(e,a),t=!1},d(a){e&&e.d(a)}}}function A(r){let t,s;return t=new T({props:{icon:V,size:"large",type:"tertiary"}}),{c(){C(t.$$.fragment)},l(e){D(t.$$.fragment,e)},m(e,a){H(t,e,a),s=!0},p:N,i(e){s\|\|(f(t.$$.fragment,e),s=!0)},o(e){u(t.$$.fragment,e),s=!1},d(e){M(t,e)}}}function F(r){let t,s,e,a,o;const c=[A,j],l=[];function d(n,i){return n[0]==="empty"?0:1}return s=d(r),e=l[s]=c[s](r),{c(){t=v("div"),e

Chrome Cache Entry: 1229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text
Category:	downloaded
Size (bytes):	360
Entropy (8bit):	4.96401168665835
Encrypted:	false
SSDEEP:	6:Iw7tADvWN0S3tRvlslw725YoU1szw1/000uBgmeRLsRttnd+wjwHugFLvOHSSVoO:B7yg0oRvlsy7duzoX0X1UtdjjvESVuK
MD5:	128DAD624D4E9DEC7AEE1DC6802C3872
SHA1:	AD6E0E9CAA1D242530012436663E47A426F311A7
SHA-256:	6B50E76505F154305CDC11F3CD132BD7D8B50010A53FAEC4E69CC1101B4F8AB6
SHA-512:	7CEBB637F6616076FF9DA7B438E15A8919017639F4BB4FA8D823084492FA68C323B2AFC70964389FD0D5FAC7125825D413F82B6F00F3E335DB6E6102E6E1FBA1
Malicious:	false
Reputation:	low
URL:	https://c.evidon.com/a/1.css?r=0.12716348862773796
Preview:	.bap1 .bap-img-container {..margin: -18px 0px 9px 10px;..height: 45px;..position: static;.}...bap1 .bap-img-container img {..margin-top: 6px !important;.}...bap1 p {..font-size: .7em;..margin: 4px 5px 0px 10px;..padding-bottom: 6px;..line-height: 13px;..width: 259px;.}...bap1 .bap-close {. [if lte IE 7]>..top: 0px;..left: 273px !important;.<![endif]-->.}.

Chrome Cache Entry: 1230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6256
Entropy (8bit):	7.853273403056302
Encrypted:	false
SSDEEP:	96:WndElbw+iFH8BY5JYcOdC1C5IH4OAql/V4b39DOKnyRwi+WGNHVtYXZlRvT8K102:pwaKTYM2IZAY/V4bVyRbENHzYXZT5Fx
MD5:	15720613809F18854BFACE3ED2935FBF
SHA1:	22F1B4770A57C5C31B270E365A5F621531D59DCE
SHA-256:	F6DD579EC929AB80AF30286CFE8C28C86B47BE3F93EF133A2346848460008DB6
SHA-512:	0973F37215660AED9AB9CA6B0CABC074B26B8E7ACF84535039043668B6C5416D688AACD7C35937C19572968112F6440C187E6A238A05E4A020FC4CF67C719D93
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/6LV1xKkHvH8HX5CXwFuudA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/bb6d35a0-ed05-11ee-a7db-56d6ebe93ed1.cf.webp
Preview:	RIFFh...WEBPVP8X.... ...c.....ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6VP8 z....}...d...>y8.G....&......E..=`....=....a.\q.\|.E.O9.......?.=..X:.y..y........V/.wL....\|.......}.ho.W....g..T.{%.9.bG........ ..}.e..M...,............lr+.v......B.3.{..V.q...1S._y.N=&.p...F..I...L...~.1.a:..>.J\|j\|...,y......~&.p....[..0d..j...qlR....A...:.........c/P....2.[:...RC......i.{..j.y.r....&..zM._..u.Rf5P/.\9e.0D.E_.\|..N%.}.....i5...o[...[.-.-.\.G..0;.Y........,.R.c..$.fR.#[.n~.....2.0I.w.../2..X...]...b...\|a........7.....O..N-....i...v... ,............z:q .j.

Chrome Cache Entry: 1231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2310
Entropy (8bit):	7.307778288608409
Encrypted:	false
SSDEEP:	48:5ItpvL1w5y9sGi/tJZpxm5m2tPvfq9DOdws/o+d7pelXG:5Kl9ibnZpk5ma+DGws/B70G
MD5:	497CCD5997490B4E0575A19543A1F2E5
SHA1:	F8B14F24839437C2AA45EEC24D6E7D6DED240981
SHA-256:	8270ADDE2A92CA7FFD59E89740779259AC1B23BF944689F00EBBA9C184BFC30A
SHA-512:	67B7570B7566343CF227D89248080CC146AB19D64064A3F87FE69D6A03B53F8DC6A0B9C65E110603DF35B369A534809357886A77139775F95739A9F3DDA9FF04
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X..........):...0PLTE................................................c.M@....tRNS.Dw...3..fU."..Ov...vIDATx............................................f.~ri......%e..\....7.&....X..;..;.......3.0#6p.....>z....r..\|.A..M{..V.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$.qIg...._..bWy].E../......X....V..X.N.......l?......m.w.:.I..i$V2......c...r.g!.....b...+.!...c%.[...B.Ar.....^.t.;V.{..ho!.9$w.N...M.zr,..k.1.$..8..cU..u.v....,DZ.. ..u.....be.Vkx.........Q.....q~.k.fu.n(4..[.q..X.G.....p......^d..U.....q....X....<..s.....Da.z....Y..H(PZB$........F4.P.U.%...P..J...`+.Ht.....y.'sO....<..9w..o.=....../%z...u.um..?(./.y..:..zmI.t3.......}M..h.=tK.h....w.g/.x....XL.Nx1.d.. X....l.;..`=...,5,3%....#...;X+3.....C<..5..h..-.....le.T..J.....^.O...~...;X.....t..A..:}NDz.......O....k)a...C.\|KX.........jX._f..#H).Y...5....!...5&,.....3."..g....._...r;lj..a......j`9....\|4I..`..79-..%XS.[..).w,..a..w...aA...[.Vao.$`...o..mq...L.+.#..z.....KYX

Chrome Cache Entry: 1232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 58448, version 1.0
Category:	downloaded
Size (bytes):	58448
Entropy (8bit):	7.996586878132448
Encrypted:	true
SSDEEP:	1536:UkDg2Ywutyh7fPqnva9lX9MzIqEcrdVkgIC2SlulNArk/snzi:UwPYRoh7fPAv659GrHmlSUUBi
MD5:	3C71D2DD717D40FEE3A59365ECA4A591
SHA1:	414D6092CADD1E498664FD138C33AA920C5D4999
SHA-256:	05C5618D231B9BDB0AC571A5AE5AC3C8075732E546550C1AD0426365CD43B854
SHA-512:	CEB18E1E3CA74FAC398C5AD7328386061F5E833A199858C576B731A9AE499BFC3D515B796CEE66FD0DB09674EB1604AECDB4DEEC272F6F54BFEBAB702F45827C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/finance/fonts/GT-America-Condensed-Bold.woff2
Preview:	wOF2OTTO...P.......................................0..$.......`..j.6.$.......a. [....2....?..."%....._@.....f.p.}..T#7].8.."x.......5.D......m....\|.....&&.p.R...>p..l.KS.........hS.y..S...Z..S.E.7..{k.o.....]KI%URe..RJ.................X..s..O9.k.....,"...........i....>(M\|~Q$af...0.c.....k..ks.iH.P...R.G..+..z;0.z..k.....E..<s..ekWT...^..&.....Iq.....j.9j...c.a..ae.D.)..9?..........boZ.6..3..5?]8..t:..w.........7W.U..M...G?...O....O.(.............g.a!.Sd..c.cU...LI%;.../...........-.C+..{D.]?.Op.{.g.....P"Z.X.#....?<?.s..a.(.9.+1.P..=...I~.....8..QM. u.:.h....Ntnf......&...dR.h#DH.Jc....E...\T...F+i...F.S.."6..X)V....`.x..m...bs6?.N....'..[.....q..p.4.....e..2..r.g.w_5..UF.....BB.....dDw.&.....j~....O..A.....2@=.........d<Z'.....tZ....T..V.l.B.....!.+.J..o.........C.B....+......a.aZZ...q)yi.....o.]..Q..%..R...m...0:rkX.....m,..u..F_.L...J.C...).,.e%.W....Z.......=./...%&........V.m.O4.c..X.(.m;.1Z5df..E.Oq...Vi..y+....!!/!@...TtYn.Lu.\F..(Fq.

Chrome Cache Entry: 1233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2074), with no line terminators
Category:	downloaded
Size (bytes):	2074
Entropy (8bit):	5.260719431857589
Encrypted:	false
SSDEEP:	48:CEUG4rNVxugJTY7rRKLNqpH7q7HwDOq7br2yOuQ6qh:CdrNV0gVWvbq7eOq72yOdh
MD5:	93D5BB91C9A48C4EDBC164A65354B00C
SHA1:	EA8D8A5F20B4061A7581135B465F7D81F431390C
SHA-256:	E17075CF2F747253CB3C737891BE0F417B8F4330DDAB9D53013BDD4EBCA568EE
SHA-512:	3F0F5D520F75A443304ED277F73F050698029942A1A01B9B65A8F0D38846B7DFA04D126685A75436BC3534D94DD0C9B1BCCC6DB2C628C58FF74453FA92FD9D22
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/scripts/ifs.js
Preview:	!function(){var n="tsdtocl",e="!-#@",t="ul",i="https:",o=atob("aHR0cHM6Ly90c2R0b2NsLmNvbQ=="),r={},a=i,d=-1,c,u;try{var s=function n(e){r[e.id]&&(r[e.id](e),delete r[e.id])},w=function e(t){var i;try{i=JSON.parse(t.data)}catch(n){}i&&i.namespace===n&&s(i)},f=function e(t,i,o,a){if(c){r[++d]=a;var u={namespace:n,id:d,action:t,key:i,value:o};return c&&c.contentWindow&&c.contentWindow.postMessage(JSON.stringify(u),"*"),u}},l=function n(e){for(var t="".concat(e,"="),i=document.cookie.split(";"),o=0;o<i.length;o++){for(var r=i[o];" "===r.charAt(0);)r=r.substring(1);if(0===r.indexOf(t))return r.substring(t.length,r.length)}return""},g=function n(e,t,i){return f("append",e,t,i)},p=function n(t){if(t&&"string"==typeof t&&-1!==t.indexOf(e)){var i=new Image;return i.src="".concat(a,"//trc.taboola.com/sg/taboola-ifs/1/um/?uils=").concat(encodeURIComponent(t)),i}},m=function n(e){if(e&&e.success){if(e.wasAppended&&e.value)return p(e.value)}else window.__trcDebug&&window.__trcDebug("ifsDebug=".conc

Chrome Cache Entry: 1235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (786)
Category:	downloaded
Size (bytes):	1672
Entropy (8bit):	5.287698118276452
Encrypted:	false
SSDEEP:	48:bFj15XHuJcXl2E9R2jc2u8aYlPFs3v0YxnHS:FrVl2Emjc2u8bl9sfO
MD5:	391C73545274E78E6615C6449FF6FF1D
SHA1:	C9D581335ABDBFD51679827E8B24F9896CA1DA16
SHA-256:	41D2526E9C4595FC1FC747555BDA18A041033A863A9B2ED180E7B5836918FACD
SHA-512:	843D8CC8703AA9808F7D9807AB4CB24795279A015F1EEB2632C0A289C0427157FEDE3BB988FF857DC994BAD22EC5CA83654B6FBF0FA24390E14816F66072ECAB
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240327/r20110914/client/load_preloaded_resource_fy2021.js
Preview:	(function(){'use strict';let e=[];const f=()=>{const a=e;e=[];for(const b of a)try{b()}catch{}};function g(a=document){return a.createElement("img")};function h(a=null){return a&&"26"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="26"]')};var k=document;/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=()=>{var a=k.querySelectorAll("link[data-reload-stylesheet][as=style][rel=preload]");for(var b=0;b<a.length;b++){var c=a[b],d="link",l=document;d=String(d);"application/xhtml+xml"===l.contentType&&(d=d.toLowerCase());d=l.createElement(d);d.setAttribute("rel","stylesheet");d.setAttribute("href",c.getAttribute("href"));k.head.appendChild(d)}if(0<a.length&&!(.01<Math.random())){a=(a=h(document.currentScript))&&"true"===a.getAttribute("data-jc-rcd")?"pagead2.googlesyndication-cn.com":"pagead2.googlesyndication.com"; .b=(b=h(document.currentScript))&&b.getAttribute("data-jc-version")\|\|"unknown";a=`https://${a}/pagead/gen_204?id=jca

Chrome Cache Entry: 1236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17076), with no line terminators
Category:	downloaded
Size (bytes):	17076
Entropy (8bit):	5.305235037541812
Encrypted:	false
SSDEEP:	192:YTdtASK8iXIP5AvvbuV1ANtgIcDMGOqAU8Okdmc88HBOOTwRCwlgEsMhrsXJg9Ep:cP5AvcDsU8ehSpgSipa7n
MD5:	F14310FECEC652DBA0CF356F02E6B22F
SHA1:	3F25C332C7ED4CCEA995BEE402A71DFAC54A652F
SHA-256:	B57FF6B4D41B29DE30D4594E98660D09CF09B38CEE4563B5937EDBD7A9458858
SHA-512:	3E96D9AB4A03DB5CEDCF1E27923094D35B4A5AAA971527DCD6BCF6DF3AAB8840EBB22B9AB5B653C2CBC794D6ADDD825E6C782C966F1EDAEEB71489756E91B176
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/art/css/modules.atomic.ltr.f14310fecec652dba0cf356f02e6b22f.css
Preview:	#atomic .Ai$c${align-items:center}#atomic .Ai$s${align-items:start}#atomic .As$fs${align-self:flex-start}#atomic .Bd,#atomic .Bdw$1px$,.Bd{border-width:1px}#atomic .Bd,#atomic .Bds$s$,.Bd,.BdB{border-style:solid}#atomic .Bd$n$\:lc:last-child,.Bd$n$\:lc:last-child{border:0}#atomic .Bdc$\#1e1e1e${border-color:#1e1e1e}#atomic .Bdc$\#ccc${border-color:#ccc}#atomic .Bdc$\#e0e4e9${border-color:#e0e4e9}#atomic .Bdc$\#e0e4e9\.6${border-color:rgba(224,228,233,.6)}#atomic .Bdc$\#edeff1${border-color:#edeff1}#atomic .Bdc$\$finSeparatorColor${border-color:rgba(0,0,0,.12)}#atomic .Bdc$\$neo-opt-out-border-color${border-color:transparent}#atomic .Bdc$\$neoBorderColor${border-color:#dde0e4}#atomic .Bdc$\$titleColor${border-color:#232a31}#atomic .Bdc$\$c-fuji-grey-13$\:a:active{border-color:#f0f3f5}#atomic .Bdc$\$neoBorderColorActiveMobile$\:a:active{border-color:#3b077b}#atomic .Bdbs$s${border-bottom-style:solid}#atomic .Bdw$4px${border-width:4px}#atomic .Bdtw\

Chrome Cache Entry: 1237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12647), with no line terminators
Category:	downloaded
Size (bytes):	12647
Entropy (8bit):	5.207766081943398
Encrypted:	false
SSDEEP:	384:3iuQlq2TtwcbFesZ9+KnosE+wTzWTLxXUJsI5vxU8ZW:Shl1bFesZ9+KbTdE37U8ZW
MD5:	EA64A20375ABF74F7191D89062A7D4F4
SHA1:	C9BDEFA03E2D67328C222300AF7D588ADC045B11
SHA-256:	EE6AC88FCDDA8E39410E1E291495B9F5ADEB2EC3E95069FB4D50964093DE53A9
SHA-512:	C7D7C92942CCA382C7CF3CF968CA60044058EA33350DF765CE149F730E1D03028F352403B4BCA4F9AB69B7020E2AAF4171F14879BA7D468CD25B9778896B0133
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-rapid-1.10.8-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-rapid",[],t):"object"==typeof exports?exports["wafer-rapid"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-rapid"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var i=r[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}functio

Chrome Cache Entry: 1238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3791
Entropy (8bit):	5.5003703111733735
Encrypted:	false
SSDEEP:	96:GYOLVFZvOLc39OLfOL0Vc+uxOLQNJYOgzFZvOgl39OgGOgNVc+uxOgENn:G1Qc3oa+/Qy5l3zoZUk
MD5:	3C0D3A4285613B89B4DBD3CA53812742
SHA1:	EF88962FD6A37F379168034A6C3CDF65CCE8E47D
SHA-256:	662DBB2E9A1EAA62F25FD7D00ECA3D78B8112C88F96F064A49ACA4A6BE2892D5
SHA-512:	C22A6898AAA78B3928416C766C611F1CB6B28C6619FCDE65BF177F2E987BA782E0D115147B10EDE71D09EC6A5974FA00D4A1BE5B32C6D1E5828C350750AD1455
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Google%20Sans%20Display%3A400%2C500
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic /.@font-face {. font-family: 'Google Sans Display';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvr9oS_a.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Google Sans Display';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv39oS_a.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'Google Sans Display';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvH9oS_a.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169,

Chrome Cache Entry: 1239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5774
Entropy (8bit):	7.943553143014523
Encrypted:	false
SSDEEP:	96:AyMOZRQaUhyyPeV73Ww8r4ofSivR5UFoh+XIw31xEwZIaVyr1tkIk:cOZRehtep34r4o5vR5UFNl1xrZFyhed
MD5:	3A37F3D24FE68E35C1F239537FABAC9D
SHA1:	2EF6B79EA0C20CEE9899A0052AB54B1A19D6D1BC
SHA-256:	9D8AB0C55EA5657FB367CF598918A9461DE8DC7462710B17AC448E6CCF3A8984
SHA-512:	6A4CF5351D400E92DB46FD5E58E474F058B428ABE46901B13D55FE8ABCC3869810943F4F669C5305AD34A894D2957D4E0F111F186B240B0C4B09836AB99FBF1E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_144.png
Preview:	.PNG........IHDR..............F.....gAMA......a....EIDATx..]{xU..!.$@.I....<.AyT.@...O.B..."......Tf(3R;...1E..qt....X,....bA(...B..^!.!....N...}.=..s.s..[9..X{..Y{..=..iF...Yhr?.@...X.....-j..Y....sEFF.....e.rK...h_)x,.F. 0............=.....U..)I). ...zi...<.<...XP.#".....k......S...@.........I.......'.uJJ..4m.\|Z.i.......8.-.......&[#..@.N..<....g.);..G.\|1x!.t(D.y....p....?..,......y........3......a+....r...iG.6<!......^......\+Q.l.i[...Y]B...)..s.O.....,Z.E...H.B%......C9......U...=.......6..@...(a.xt...d.o..O.D..)w...'.........>.....!u.~vwr.....=!.;`.S).^..P.C.F.%.bn....h!...<.u5u.C.{.:()f.B... .....dSI...u..uL]..5..1..."...<&rQU.04..i...v&.<.%..@.O.H.....E....A....xY....x.Cx..N...k.N5A...=...N39;P...B.K.o.."t..Rx. .<....siBQ\|5.>X....>..r.9f3.....r....g..<W...JZ.\7.Te...z.t.@.e.W.5..<t...a.......X.. ..S..`.0{......(.(.)~.N4.. .........}..wQU... ..eF.U.0.n.Kf.....#. ............;.a......rU...................:.....-.jU=..'^...i(@..~..

Chrome Cache Entry: 1240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (594)
Category:	downloaded
Size (bytes):	595
Entropy (8bit):	5.025388786854213
Encrypted:	false
SSDEEP:	12:NjlB1ehyycBQIlFso0//9CEeU/D1+j8D1DTsqBu5GncWfohj:FgEyvCs1/VCY1+j8R3sq8qnfmj
MD5:	C991C68DA74E92C46EB953E037AC0962
SHA1:	3F0F0AB8BFE537260CA001BB3CC332BBC035AE6F
SHA-256:	540157E83523F141F8FE34CA44AF5B228B682816A64C0564B5C9E411DA0C107D
SHA-512:	46D4AA991D15A99132356E4430F0B605D3FB38C33C5C4A03CB50537299318682346166C84BD16F3EAFC310A25E926304FC1B87EA5CEBA8F19029F3F89BF835C2
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/nodes/0.DMSMgB-K.js
Preview:	import{s as l,c as i,u as r,g as u,a as f}from"../chunks/scheduler.ErneftFr.js";import{S as _,i as c,t as p,a as m}from"../chunks/index.DsErXEH0.js";function $(a){let s;const n=a[1].default,e=i(n,a,a[0],null);return{c(){e&&e.c()},l(t){e&&e.l(t)},m(t,o){e&&e.m(t,o),s=!0},p(t,[o]){e&&e.p&&(!s\|\|o&1)&&r(e,n,t,t[0],s?f(n,t[0],o,null):u(t[0]),null)},i(t){s\|\|(p(e,t),s=!0)},o(t){m(e,t),s=!1},d(t){e&&e.d(t)}}}function d(a,s,n){let{$$slots:e={},$$scope:t}=s;return a.$$set=o=>{"$$scope"in o&&n(0,t=o.$$scope)},[t,e]}class S extends _{constructor(s){super(),c(this,s,d,$,l,{})}}export{S as component};.

Chrome Cache Entry: 1241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2181
Entropy (8bit):	5.047822447833679
Encrypted:	false
SSDEEP:	48:UiiWQcSBL7CiWQeQSvq6LcqUQoysBJ/rm+rVTy4OrHxdUPy7rAMBvrF:TS38l2ysBJ/rm+Jy4O1SPy7fBvB
MD5:	3102D193613FB8196041EE5846E72EC0
SHA1:	72CDDE0B5CB4F5F0DA170AB03E5EA488DF1CA300
SHA-256:	74F78D2F2E32612DD50D6DCC3CBE695AA31AA2EA459000374E305E72FC84EDC0
SHA-512:	54E72EAF3240CAB404191133836F4B3A76270C22F8E3312730B02D9883A541562F601EF5FFC4F9CB9F9243975DD0593584CC532AF71C1726562CF93018A35CDA
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/13461938776524376467/styles.css
Preview:	@charset "UTF-8";......body{...vertical-align:baseline;...border:0;...outline:0;...padding:0;...margin:0;..}....img {.. box-sizing: border-box;.. .-moz-box-sizing: border-box;.. .-webkit-box-sizing: border-box;..}....#main_content, #main_content img {....position:absolute;....display: block;....width:300px;....height:600px;....left: 0;....top: 0;..}.....bg {...opacity:1;..}.....sub, .headline, .frame {...opacity:0;..}....#lockout {...opacity:1;..}......#cta-over {...opacity:0;..}....#main_content {...opacity:0;.. .background-color:#f1f2f2;.. .overflow: hidden;.. .box-sizing: border-box;.. .-moz-box-sizing: border-box;.. .-webkit-box-sizing: border-box;..}....#border {.. position: absolute;.. width:100%;.. height:100%;.. bottom: 0px;.. left: 0px;.. border: 1px solid #474b51;.. pointer-events: none;.. z-index:52;.. -webkit-box-sizing: border-box; /* Safari/Chrome, other WebKit /.. -moz-box-sizing: border-box; / Firefox, other Gecko */.. box-sizing: border-box;.

Chrome Cache Entry: 1242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7191), with no line terminators
Category:	downloaded
Size (bytes):	7191
Entropy (8bit):	5.256469183752045
Encrypted:	false
SSDEEP:	192:G6eXldCjWxitqQqZVZkS62Vl9rgiKzQcJM5rP5/hUdI2g7ygYPMKQuardyO:+fWUxzcJYrdB
MD5:	6F87F31580F10243BE504F60B683CD64
SHA1:	11484321CE8A678DD52F2757D0B4B09DCB694E13
SHA-256:	0E90BD58945294AB72143C51837A9E484A582CC20BA37654C73AF6F81F85B518
SHA-512:	910F4A00424D93B962B5160A13E8F1E0119D6ADBD59E875DFA7F65A2977C243F6E46B0D6F5BA78102FE02CD146B35BB34FC4DEAAE52A19A815E1AC8791E03D86
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/art/css/desktopweb.6f87f31580f10243be504f60b683cd64.css
Preview:	@keyframes placeHolderShimmer{0%{background-position:-468px 0}to{background-position:468px 0}}#Masterwrap .caas-full-bleed .caas-cover{max-width:1260px!important;min-width:unset!important}.caas-carousel.slideshowv1 .caas-ad-summary{display:flex!important;flex-direction:column!important}.caas-ad-slide .caas-ad-img,.caas-ad-slide .slide-description-wrapper{display:none}.caas-video-docked #AsideStream .sticky-active{bottom:220px;top:initial!important}body{-webkit-font-smoothing:antialiased}button{font-family:inherit}.pholder-bg{animation-duration:2s;animation-fill-mode:forwards;animation-iteration-count:infinite;animation-name:placeHolderShimmer;animation-timing-function:linear;background:linear-gradient(to right,#eee 8%,#ddd 18%,#eee 33%);background-size:900px 200px}.pholder{position:relative}.pholder:before{height:20px;content:" ";background:#fff;position:absolute;left:231px;top:60px;right:0}.ph-title,.pholder:after{background:#fff;height:13px}.pholder:after{content:" ";position:absolut

Chrome Cache Entry: 1244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=m1_dmp&google_hm=2a76b4ca64ed4b9dbe8faaecce219970
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 1245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1971
Entropy (8bit):	4.8444683069301435
Encrypted:	false
SSDEEP:	48:c6gNjjIz+5EgroECLNtWwa+XLBYzePgXJR:QdWWEgraZtWgXLoePW
MD5:	1C4B72A9B73582FBD57611D305213C19
SHA1:	A9BA6637BD2ACD2A0C306AA549AE99B28A01B1DC
SHA-256:	1F165A65C83A69747965C5EC452C21B4721535BAB4D0B5D889BA1AE7FC4DB125
SHA-512:	9B651CF4F3FB43C46A17501675ED1E8D30CFB749D70B14EDAFF769710BCFFD3EF4EA4A19F3B0A33C70585D6546D8AA91656A246BF3A4105FF18EC2D12EA72C2F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>icon_prod_subscript_select_gray</title>. <desc>Created with Sketch.</desc>. <g id="icon_prod_subscript_select_gray" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="icon-subscriptions" transform="translate(0.818182, 0.000000)" fill="#454545" fill-rule="nonzero">. <path d="M9.10044464,18.114527 C4.60108307,16.2526679 2.04260478,11.1993097 1.83098765,5.44934381 C3.59930758,5.19049998 6.30037766,4.40125335 9.09136236,2.10980428 C11.882347,4.40216157 14.5852335,5.1914082 16.351737,5.44934381 C16.081085,13.1238364 11.8678154,16.9946869 9.10044464,18.114527 M17.351696,3.73280051 C15.8249647,3.6265383 12.8005655,3.02801871 9.68897636,0.229780664 C9.51913773,0.0762908091 9.30570409,0 9.09136236

Chrome Cache Entry: 1246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	19078
Entropy (8bit):	4.21506063152983
Encrypted:	false
SSDEEP:	384:qPj/6/Ci20rQPA/6/CqGxZPE/Y/C9stPg/q/CS:I/Orrz/WGxa/kS/+
MD5:	ACF48CF27ED6FDB3A4D1CF76B615B6D7
SHA1:	0FEE18EEC3306F430D9AF30D48E308DF78F75022
SHA-256:	907F8AE2530BAD61B26B5BCA9AFE700D4F24DBB943CCB2681CFE12B0EC55300F
SHA-512:	4A85AACFFF8403E1B648D0B04BBA0214A38D75042F6BF18D3570B8EBD4BE9764418B9EDB99D936DBBA9B37CFE1EF76BA2A3FC7710319C50D31CD70E42F09DDFF
Malicious:	false
Reputation:	low
URL:	https://query1.finance.yahoo.com/v7/finance/spark?includePrePost=false&includeTimestamps=false&indicators=close&interval=5m&range=1d&symbols=ES%3DF%2CYM%3DF%2CNQ%3DF%2CRTY%3DF&lang=en-US&region=US
Preview:	{"spark":{"result":[{"symbol":"RTY=F","response":[{"meta":{"currency":"USD","symbol":"RTY=F","exchangeName":"CME","fullExchangeName":"CME","instrumentType":"FUTURE","firstTradeDate":1499659200,"regularMarketTime":1711659596,"hasPrePostMarketData":false,"gmtoffset":-14400,"timezone":"EDT","exchangeTimezoneName":"America/New_York","regularMarketPrice":2145.2,"fiftyTwoWeekHigh":2161.8,"fiftyTwoWeekLow":2132.4,"regularMarketDayHigh":2161.8,"regularMarketDayLow":2132.4,"regularMarketVolume":176984,"chartPreviousClose":2145.9,"previousClose":2145.9,"scale":3,"priceHint":2,"currentTradingPeriod":{"pre":{"timezone":"EDT","end":1711598400,"start":1711598400,"gmtoffset":-14400},"regular":{"timezone":"EDT","end":1711684740,"start":1711598400,"gmtoffset":-14400},"post":{"timezone":"EDT","end":1711684740,"start":1711684740,"gmtoffset":-14400}},"tradingPeriods":[[{"timezone":"EDT","end":1711684740,"start":1711598400,"gmtoffset":-14400}]],"dataGranularity":"5m","range":"1d","validRanges":["1d","5d","

Chrome Cache Entry: 1247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	35672
Entropy (8bit):	7.935200451744625
Encrypted:	false
SSDEEP:	768:KYynGNxY7ZeKxigA24v4xzqrps2uLQl863pqduUALLeVTBrd:KbGTY7Z3im4vMqry2ueETALLexBrd
MD5:	C17F5986C514D7E2BD017533D2BFE0B9
SHA1:	9B75669157447431138A60F65B9EF8C73D62664C
SHA-256:	3434D529B45CD63BC0C68A0EC111E52761D5FCC8FC3B9002E3C25E7DFFD82FB5
SHA-512:	11C33323C8877AC6FE55DE7907250AFD877A1113B74B4155F146F2EEFD48534A47E4D5359746D77A6756CC1E3EB17FC6A23D70803B95F9714F5FE3CAF49F35A0
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 1248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9528
Entropy (8bit):	6.613044715593243
Encrypted:	false
SSDEEP:	96:CllcHitlIxv9vk7C1+I4wWHLihk/xr6cMsaMuzn0My8qNNHCUu1k:pIIHUCD4waUjrvlqNNi2
MD5:	6E69F73DCA4D59A8D7E67EC6581F3065
SHA1:	5D4D36E7CCFE835574A77A2F9DF32F4C818C0E8D
SHA-256:	3B3281108ECD17AFBD7C6D9583B09A5FA51D7B91F1D9F58AE1140284BD59A86B
SHA-512:	17EFE476CE78B8B11FE63CED3AEAF3547D812D2BDA292241A74ECA1FA2411EB913B6D1FD3F577C2DC528F8520A0FB71D1E358E94206835AB97F788FF8E0013BF
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/13461938776524376467/images/cta_over.png
Preview:	.PNG........IHDR...X.........'.4....CiCCPICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R...J5e?

Chrome Cache Entry: 1249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 494x592, components 3
Category:	dropped
Size (bytes):	7370
Entropy (8bit):	6.9520471116525195
Encrypted:	false
SSDEEP:	96:DLyZmODxFH40Tfs1KnGjdoJ1GDwEOJsQh5OXFcv3G3L1wqhN:DLnix40A1K8OOQiqvWb2+N
MD5:	61902F6258A0CBF08203B1E252DFADCE
SHA1:	0C1D98C9A759F4B3C1C338E478A6D6088C04E988
SHA-256:	C88D40F8C0C097193EE29047920C3BBD90DED0C50AFE4247D54A88D731C75FC8
SHA-512:	FE7964B3B5E8F2C658B00B8701F64D3EEB730EFF634FE7E5FFBAE6863C68EF6FC910D257065E6983ECD22AB0F3BEEB31BE76C68EB2A8EE9A6DC68FE43C194F06
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................... ... .....0 &%...!;*%5+545.+7?917/52+...........7...+-77+++126710-+++-+-+++-+++777++-++778+++-78--+8--......P....".......................................<......................!..1A.Qaq...."2B...R..b....r..Scs..4..............................$......................!.1.A.Q"a2q.............?.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................5b.e....i..6.-Y.Du..1=7q.332....8W./..)O.....;t.....O..6...._.@R..h.MH..?U..&3.......... .....................................Z.._Y.......yG...<..s8.(.L+M}\....

Chrome Cache Entry: 1250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42867)
Category:	downloaded
Size (bytes):	489666
Entropy (8bit):	5.587042760228403
Encrypted:	false
SSDEEP:	6144:4LprmuWvXaQvEkNvcDHZrgrS6B+vWRMousS6v/q8Vi:urmuGa79OB+vWRMousSgpVi
MD5:	EA481464BA6569B3E2231A864005708D
SHA1:	11701FF5CF633E33B702623E6CAC4A5DBFFB9444
SHA-256:	298EFF68C8072FAB66A60D677784D66BCD6A0D77E112C50C9E9271A882209E63
SHA-512:	A7C99B9B38D7883AF4B18D2DBDAC977F4B7D06A01EAB8831DE1FB80A82DCF08D94DA6ABF630C8E89026879A1B757C6C042C9434A1E6759DDD02241AA3F039530
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/mbr/58dc9fe4f6c2083f38135ec31a4db5c11ab15bc4/yahoo-main.css
Preview:	@font-face{font-family:"Yahoo Sans";font-display:block;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot);src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot?#iefix) format("embedded-opentype"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.woff2) format("woff2"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.woff) format("woff");font-weight:200;font-style:normal}@font-face{font-family:"Yahoo Sans";font-display:block;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.eot);src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.eot?#iefix) format("embedded-opentype"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff2) format("woff2"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff) format("woff");font-weight:300;font-style:normal}@font-face{font-family:"Yahoo Sans";font-display:block;src:url(https://s.yimg.com/cv/ae/sports/f

Chrome Cache Entry: 1251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 124 x 124, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3666
Entropy (8bit):	7.9287624359007145
Encrypted:	false
SSDEEP:	96:NWqkbKK16fcFdfnhouuiKSW9kMVdi3MPVd3B69q:E+K16kFdf2NtJ4UVd3B69q
MD5:	5A75B8724EC6A79BA1E6A18B0457EC53
SHA1:	BFEF98E13AF529B45B80B93CB2D4B1C97A3AAB6A
SHA-256:	1C35B71D1ED046363CC82421A23091445B223DE80A3EAD41ED714C4767555D01
SHA-512:	BD0F063958718B6D124C4CEEB018F3D58D42DBE10B2C3134A294AFF6828768A105017BB3C85C17B99280421A28039A1404A54794056DC4025E69A417453CAF9C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/zz/combo?pj/sh/202403271817/img/closebutton@2x.png
Preview:	.PNG........IHDR...\|...\|............sRGB.........IDATx..m........]E.mq.....R]...J..D..&.@lBK0.$..jTJ.H..m.J...jAH.QBC..JI....~h..%.....d..u.N.g.=...s....93w....y9....3g.....{.....;.hu[.."..k.,i.%....}:%....~.(.....+K.b{FZ...%gO.U........=.k..;!..D.#.K...f5"6............SC....~..xg..p.$+........F...A.w.9HoKA.\Z.Ny^g.A.w.X3...%...B.5.I..J........6.f....-k..Uy\..i.....9i\......+N.w.=.n.f.Q.._....em.$. .4...hO.. ...d.g...F8#.w.ju..e.R.z.....LDF...."...d........M....u......%V..-].........r..y.....z.....O..8b.....t...F.vl.:...x.Nk.pIv..7.v4...?X,.K..8#..pV..=!?...".....a..~...y.dK\.9......n.o....~.v..15A.{y...h;..};k...uG>.a.FIm....}U4g...+Y.V.D..%..........X..........+{./..L..'w.!R...@92i.<....I.G.\|.^k.....}O..6...sr.d..5.J...8?..,9.,\|N.F6._J.(Y..[d.g.f..O...:p..~U.G.lP.0,....0..$..r?......(....]sf.1T.\|.ia......l..x..q}....wv.;r.^.N......c......My//...:..P....>.o...R...}w...B*..=...!.p4.l.+U....=.........^4o.1...#w........{^....@..V/

Chrome Cache Entry: 1253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7971), with no line terminators
Category:	downloaded
Size (bytes):	7971
Entropy (8bit):	5.315858022597701
Encrypted:	false
SSDEEP:	96:V5/60PYKmMuMhvkI2hasDAm2dhdlsjK0kEyF8:V5/dQBMhvn2h8TDQVkg
MD5:	1351353CF8129012A686E519608812D5
SHA1:	8172C8884CB116382CF53BAD5D8354032BCD6DBF
SHA-256:	7ABD2AEADBBE862C7F1FE58FDC02C86AB970E1A819162A06B6DC3C0484221895
SHA-512:	CCE83A99B5366D6E1B7CD60E8BD233C5CAF6B46FD34AB10B48425D3148D614EC5A662C6427C2A65A64C314453F00117D4E42D9D463B09A1ED718D10A03C3D147
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/css/react-wafer-games.GamesMini.atomic.ltr.1351353cf8129012a686e519608812d5.min.css
Preview:	#atomic .Ai$c${align-items:center}#atomic .Bdc$--dirty-seagull${border-color:#e0e4e9;border-color:var(--dirty-seagull)}#atomic .Bdc$--marshmallow${border-color:#f5f8fa;border-color:var(--marshmallow)}#atomic .Bdendc$--hulk-pants${border-right-color:#7e1fff;border-right-color:var(--hulk-pants)}.tabActive .tabActive_Bdbc$--grape-jelly${border-bottom-color:#6001d2!important;border-bottom-color:var(--grape-jelly)!important}#atomic .Bds$s${border-style:solid}#atomic .Bdends$s${border-right-style:solid}.tabActive .tabActive_Bdbs$s${border-bottom-style:solid!important}#atomic .Bdw$0px${border-width:0}#atomic .Bdw$1px${border-width:1px}#atomic .Bdendw$6px${border-right-width:6px}#atomic .Bdendw$8px${border-right-width:8px}.tabActive .tabActive_Bdbw$4px${border-bottom-width:4px!important}#atomic .Bdrs$18px${border-radius:18px}#atomic .Bdrs$2px${border-radius:2px}#atomic .Bdrs$32px${border-radius:32px}#atomic .Bdrs$50px${border-radius:50px}#atomic .Bdrs$8px${b

Chrome Cache Entry: 1255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	60
Entropy (8bit):	5.056564762130954
Encrypted:	false
SSDEEP:	3:YEOBHtGsz3B//wwKQ/3VfJofWQ4:YEOB73ZwYvVfWo
MD5:	49329E21BE0ACA182ECF55F9A9F6CE22
SHA1:	2B173EC1D1299C2109F0BC3B6EF8FECC495CEDBA
SHA-256:	F869AFB3C983A8CCB01236E5CC6A2574926C0972FA7C33C7E4A5CF25A9C10D35
SHA-512:	21B6239BCE645FB350952B3BA84E9D45E91F6792893FC0C3264049EAA6F39BFE63DD4853F32B1516B9AC8C377550EF2535066EC9C455564BB3CB7CC50675F299
Malicious:	false
Reputation:	low
Preview:	{"axid": "eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B"}

Chrome Cache Entry: 1256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	4.660001480021975
Encrypted:	false
SSDEEP:	3:0YEcA3FLVQuR7TmxS5pEOWoJCK3CJ3EcA3FLWbVkuX4t:bEcAB3yx+pEOJOEcABWbVkp
MD5:	CDD5050BA6288DF47182412E30E482A4
SHA1:	19D881F9D478DE895E602D6A908D9A3621160ECC
SHA-256:	0C4BAFD7F8E2A0C485CB3715F666EE47980FE1E22A7FDCCC84D213A13C058E26
SHA-512:	86AA7CCE16D0DC82BF7155D0C11911058E78F77D640F183E681220E71AEF7314D3AE7DAA78AC4728E37E3E011AA5010A9AAA3266A4D85FCDE3D88FC872B41C66
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/css/react-wafer-games.games-mini.cdd5050ba6288df47182412e30e482a4.css
Preview:	.games-tabs-scrollview .prev-btn[disabled]{display:none}#atomic .games-tabs>button:last-child{margin-right:10px}.games-tabs-scrollview .slides::-webkit-scrollbar{display:none}

Chrome Cache Entry: 1257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	788
Entropy (8bit):	7.653776569526602
Encrypted:	false
SSDEEP:	12:6v/7c1GKkaic3rT6oykkGBOGXqnEwOnSJG/bqmo8u0krwxyMegV+bDZApP4mR3:bFFiz5xH6qMsoba8w8VegYbDwl3
MD5:	7493AD531AF34952F2F2FD51BE7F47AC
SHA1:	DDE39ACD779629A611C3254FBB1BD1A1E5548E8E
SHA-256:	4B44ED347024891E41FF43C6BD50D045086365653736BC2F2F771F48317C738C
SHA-512:	4AFCA8F8C5B4F0B1A83BBBB773D0B4258672172EEF0AD762B8E0FA7EB6C73A5846C2B6EA263E89BC92AA01F333999420BA56192E478B7862FDC52D92BFB155CB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....... ......\|(.....sRGB.........IDATH...MHTQ.....$T.D..(B..E..(..+hS.$..8-.e..63....-*....+..V..U..7BP.I.c......g.i.....s.?..{...\...d}^..?...,.i..%.....+..W...b...1.<.PU..G.5...Rg.1.?.Nc..\|.7.y.vv..qN-CR...........\....s...w...Af.}e_.$p..1.B..,.[/....l.8F......S9i_....(r.T....lW.f...85.1..g.3..N...aq...........1.j/.......{NSj.6..6~.q... ul.--..x.0..7N'.84.1.b..95 {e.o9.6........g.u.d.....m>r.q..T..7x]./..w$.:..fL.v0.j...E.6.f.....z4..l....."....h.....6.....(..s..+...:.N\2_#.X&....;.W.C.....2..B../xY....v.H =......3..4...)h.....i...C......:SE. m#.9.q....}..j...j..2.tI.....Z.h.H[./.....}..3..,...PZ^.[.M.?..3.P._k........I.7.cBJ7..0.z.. . .=..Ri...r@....G/...6Pb_.[V.&.OD..0.....1&..9.<U2.5Wc.q...'...cV.....IEND.B`.

Chrome Cache Entry: 1258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1860
Entropy (8bit):	4.881734028936285
Encrypted:	false
SSDEEP:	48:c6gNjjn25dIL++HIZspbSGf/Hx3SqBDoaFhAOfV:Qdj25GPxt7f/R39B3AOfV
MD5:	AA45385F03B06634DDCE9FE567B154F6
SHA1:	CD1DE4401751BDF2AF0801B4BB3F883455DC5C51
SHA-256:	0F45068720A4E668E9CE715A490FA145C2E2ABCBA703E6E45E155B75CF7C060B
SHA-512:	A4F531260C10F81D4149BFF07F6B1E0821B634D63A46BB4F00719453D731FF344BDA93421E70CF88ED82E2C6E834BB91B64ECFADD3918431CB1812124D7C0320
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>icon_prod_fin_desk_gray</title>. <desc>Created with Sketch.</desc>. <g id="icon_prod_fin_desk_gray" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g transform="translate(0.000000, 3.000000)" fill="#454545" id="analytics">. <g transform="translate(0.000000, -0.000000)">. <g id="prefix__analytics-a">. <path d="M7.31625273,13.949828 C7.07716182,13.949828 6.84534364,13.8561916 6.67352545,13.6834644 L3.95898,10.9689189 L1.55352545,13.389828 C1.19988909,13.7461916 0.625343636,13.7480098 0.268070909,13.3934644 C-0.0882927264,13.039828 -0.0892018173,12.4634644 0.264434545,12.1080098 L3.31261636,9.04073709 C3.48170727,8.86891891 3.71352545,8.77255527 3.95534364,8.77

Chrome Cache Entry: 1259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel
Category:	dropped
Size (bytes):	2238
Entropy (8bit):	2.20822051335051
Encrypted:	false
SSDEEP:	12:susqeZyNQIfmwJ0osmoRvA+SNOFjTLpUdq9nQbAz6jB5UekYpXLimkBbKsVEtotx:survfwvpRUdq9nQjkYAJbK9tmq
MD5:	3A07174943F82046370997254100D870
SHA1:	ECB1E2E89AF0EC6F45F875C22DF0FBD45821BA80
SHA-256:	C6F7EE2CADAE2E121342A8C4245141175BFE887776206DEB17149D46CF3AA827
SHA-512:	0A589E20251F62F02C4B96B916FBD9359677A26379D46EEEF4E455464643DE0C9AEEF921AD563D970E7436805DD18AE974DE6942DFDF0C65089512D8A3B2FD35
Malicious:	false
Reputation:	low
Preview:	...... ..............(... ...@.................................`...a...a...b...c...d...e...f...g...h...i...j...k...l...p...r.. s..$v..)y..+z...\|..0}..6...9...;...A...K...L...P...R...T...X...Y...\...k...l...o...p...x...y...~.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 1260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13226
Entropy (8bit):	7.168007906109234
Encrypted:	false
SSDEEP:	192:pIIHUCD4waSK4yXuPOIwqAgYH5v3z2WiIihj+ntcsCIGx:v0wPKbXuDwqAgkD3i1Ktrk
MD5:	4ADAA4A7704835F3E7AD132CC9E218DF
SHA1:	4A22282F4D59E701B5CB44920BBD4535281F9B94
SHA-256:	3B1BF5A424B036EE32F369EFF44628A92A635DDB666A682D649CDD94F1509D79
SHA-512:	89F02D31F46EDBC564475C623FB9460943B0FC03443EE40E0ECCFFABF5DB600E0BEE732DFA6A6CADB82986E0C17054257C158260E5F6A3E31CD96BDCA6E520D7
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/13461938776524376467/images/disc_panel.png
Preview:	.PNG........IHDR...X.........'.4....CiCCPICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R...J5e?

Chrome Cache Entry: 1261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45156)
Category:	downloaded
Size (bytes):	58393
Entropy (8bit):	5.363736519561365
Encrypted:	false
SSDEEP:	768:Li0FPvdBZlod7A8wNAs/oJRY/1myebiJLnWJQXJ0pPcvslojhz9C:Ll71JWJ0dcR
MD5:	DD636D179CA1EF897B20C129060C6132
SHA1:	59B2E5AFD513926D6EC43FDAF34B2F2B25C69DD4
SHA-256:	6108FF240707985D384DF111DB27754ADE1DBC7AC71CE656B49407B1E857CEC6
SHA-512:	3E370D54B789D81DD35326D18745078BBE32247C6807012F3FCC43C892E34C02981E6D56074D3EF974FBBAC62B48578F96D9E40DCFC113CBCABE7EBE9A843595
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/entry/app.CUSguzUB.js
Preview:	function __vite__mapDeps(indexes) {. if (!__vite__mapDeps.viteFileDeps) {. __vite__mapDeps.viteFileDeps = ["../nodes/0.DMSMgB-K.js","../chunks/scheduler.ErneftFr.js","../chunks/index.DsErXEH0.js","../nodes/1.D0vNt2xZ.js","../chunks/stores.CtqIvex8.js","../chunks/entry.CqbZzrN3.js","../chunks/control.CYgJF_JY.js","../nodes/2.C4PT79rj.js","../chunks/index.BPtEJa1O.js","../chunks/_commonjsHelpers.Cpj98o6Y.js","../chunks/commonUtil.Bb2Cnbsk.js","../chunks/portfolioUtil.CcwRjq7g.js","../chunks/preload-helper.BQ24v_F8.js","../chunks/globals.D0QH3NT1.js","../chunks/i13nUtil.0wCphNmh.js","../chunks/each.DufB99sH.js","../chunks/spread.CgU5AtxT.js","../assets/2.B2V3kFk2.css","../nodes/3.BL_3FCqY.js","../chunks/index.g5YcAAdQ.js","../chunks/urql-svelte.B6s9M1Mc.js","../chunks/PostCardSkeleton.DTmQK8tB.js","../chunks/v4.BdarNhKT.js","../chunks/Button.C10y2YT5.js","../chunks/Icon.CDBsrPKz.js","../assets/Icon.5Pcv_1eF.css","../assets/Button.wzorZdtC.css","../assets/v4.CecCMaoP.css","../chunks/Ca

Chrome Cache Entry: 1262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 560x272, components 3
Category:	dropped
Size (bytes):	53750
Entropy (8bit):	7.97929134801897
Encrypted:	false
SSDEEP:	768:LmaDlknRIrWTvEt87+LCaoMzBTu+nfRvbHsMJK9QLrsftaU4sfuMgN7ibmwIYIEr:LthrWAPtBTZfRTHsMtEmHmbaEbTfNh
MD5:	C632550FED4AF2AA87E3E6DE36F93D53
SHA1:	EAA9D56F2CD29FD67AD69AD12EBF52AAD52B91BC
SHA-256:	E7E68683337F12B34EC38E9FEBF72244928AD169C1B7175F21BF3C33F95EA6F9
SHA-512:	CB5B11661B151B8FFFCC0C467C1BC7038DC2CB3B589F5D47EC1C4CAC38C22BD4AEE62ED6E17A3169EA275035F53EADA310376100025B76BA630C6E52CD4A28DB
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................0............................................J..........................!.1."AQ.aq..2..#B..R.....$3br...C..%4D..Sc.....................................4........................!.."12A..#BQa.R3q..CbS..r.............?..O2...;M..O.1._0....I\^.* nz.!<..+.\d4.u..L.(V[$s.w.s..{.vK...M.+.\|..s..G.....d...........}..G.4.in.8..Z.<.g.R..]@.j.j.d.....@p...P.....$.z...k;[p.g.-25;...`...h)hI...?:jy...a.^.....r9........3y(p........I.C....J.....OC.i.....7.....Hq.Z.F._.{....U+3..l.RR...A?Z..e'.6.n.8.......p6....n....=+..V.j..R....zO.6e.t...h....%.9...{....6.q.i...+'R.n......J.k......Y.F./.i-(%.V.5...u...B.....tyV.G\|Wv#ps_.%....#<}..J.\....4.iA^...T....S.s.$z..e.L...o.{.....SK....U.......i...N.G.....dH.r.."...i.d...r0A........g.}b.k.+%..yQ.8...q....T...3....<.F.{..v../hb.r..rlh...*SA$.q..@...q.#..g.2..

Chrome Cache Entry: 1263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	236815
Entropy (8bit):	6.004977778238659
Encrypted:	false
SSDEEP:	1536:e7mxoVSC5x1gFzhDQYBXT7mYAoVYC5x85j+fX5O7mKoV3cpC5xsJC3pTc10MsXmk:BygF1JEYqGvcVJCZTc1nE4+qCe4zB
MD5:	60609FC048685A14F4331402CCD0F6EE
SHA1:	4E4379B88981650BA04B941058CA84D928175943
SHA-256:	2F6DBD0D6D803082FF1167C166EF3F4BDAEE5D7AE5E375FF3EAA9C5889D1F1E2
SHA-512:	CD7B576FCED7F977B72701610014A7D77287177D3ECF10025F7B2C3C9FB5D9D4F6F4A497404CD89D3C1A903E9F20E1009DB156E028B106B60074B856E5A6E6B5
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=3964069192126952&correlator=278615944818197&eid=44809527%2C31081979%2C31082256%2C31082224%2C31079525%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403260101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Cyhp%2Cmain%2Cdt%2Cus_yhp_main_dt_top_right%2Cus_yhp_main_dt_as_mid_right_a%2Cus_yhp_main_dt_top_center%2Cus_yhp_main_dt_as_mid_right_b%2Cus_yhp_main_dt_as_mid_right_c&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F3%2F4%2F8%2C%2F0%2F1%2F2%2F3%2F4%2F9&prev_iu_szs=300x250%7C300x600%2C300x250%2C970x250%7C3x1%7C728x90%2C300x250%2C300x600%7C300x250&ifi=1&sfv=1-0-40&fsfs=1%2C1%2C1%2C1%2C1&fsbs=1%2C1%2C1%2C1%2C1&eri=4&sc=1&cookie_enabled=1&abxe=1&dt=1711672893064&adxs=951%2C-9%2C147%2C-9%2C951&adys=1012%2C-9%2C129%2C-9%2C1875&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1%7C-1%7C0%7C-1%7C2&ucis=1%7C2%7C3%7C4%7C5&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&uas=3&url=https%3A%2F%2Fwww.yahoo.com%2F&vis=1&psz=292x2601%7C0x-1%7C1280x110%7C0x-1%7C300x600&msz=292x600%7C0x-1%7C1280x110%7C0x-1%7C300x0&fws=4%2C2%2C2052%2C2%2C4&ohw=1263%2C0%2C1263%2C0%2C300&ga_vid=810279681.1711672893&ga_sid=1711672893&ga_hid=1559913255&ga_fc=false&td=1&topics=1&tps=1&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1711672884096&idt=7479&prev_scp=loc%3Dtop_right%26y_pgid%3D1%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_plcmt%3D827382134%26y_crid%3D827382134%26y_bdp%3D1.24%26y_sz%3D300x600%26y_act%3DheaderBid%26y_bid%3D25307%26y_scpvid%3D-3%26y_fp%3Dbhci%26y_ufr%3D1%26y_dp%3D0%26y_dt%3DO%26y_uid_mod%3DliveIntentId_on%26y_ref%3D0%7Cloc%3Dmid_right_a%26noads%3D1%26y_pgid%3D2%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_plcmt%3D258688600%26y_crid%3D258688600%26y_bdp%3D0.75%26y_sz%3D300x250%26y_act%3DheaderBid%26y_bid%3D-3%26y_fp%3Djhdi%26y_ufr%3D1%26y_dp%3D0%26y_dt%3DO%26y_uid_mod%3DliveIntentId_on%26y_ref%3D0%7Cloc%3Dtop_center%26y_pgid%3D3%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_plcmt%3D206512146%26y_crid%3D206512146%26y_bdp%3D2.21%26y_sz%3D970x250%26y_act%3DheaderBid%26y_bid%3D-3%26y_scpvid%3D25307%26y_fp%3Dchcj%26y_ufr%3D1%26y_dp%3D0%26y_dt%3DO%26y_uid_mod%3DliveIntentId_on%26y_ref%3D0%7Cloc%3Dmid_right_b%26noads%3D1%26y_pgid%3D4%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_fp%3Djhjb%26y_ufr%3D1%26y_uid_mod%3DliveIntentId_on%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_right_c%26y_pgid%3D5%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_plcmt%3D533126705%26y_crid%3D533126705%26y_bdp%3D2.50%26y_sz%3D300x600%26y_act%3DheaderBid%26y_bid%3D25307%26y_fp%3Dchik%26y_ufr%3D1%26y_dp%3D0%26y_dt%3DO%26y_uid_mod%3DliveIntentId_on%26y_ref%3D0&cust_params=bucket%3Ddrop_heimdall_homepage_control_bucket%252CMimicProviderListv2-copy%252Cseamless%26cobrand%3Dnone%26colo%3Dbf1%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3DUS%26site%3Dfp%26ver%3Dmegastrm%26pt%3Dhome%26spaceid%3D2023538075%26yrid%3D2vl5n89j0c3hk%26bka%3D0%26y_bx%3D1&adks=1481106528%2C3064630007%2C3690920304%2C3845938001%2C1006816889&frm=20
Preview:	{"/22888152279/us/yhp/main/dt/us_yhp_main_dt_top_right":["html",1,null,null,1,600,300,0,0,null,null,1,1,[["ID=c32c0374dd5baf6c:T=1711672894:RT=1711672894:S=ALNI_MYwb58aWk-8FI6FUQH1-2J5iCgo8g",1745368894,"/","yahoo.com",1],["UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw",1745368894,"/","yahoo.com",2]],[138432282719],[6297495559],[5307966191],[3200313979],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGskkjeo0QflMGjOe1AAJz--naVvUPCSQwh9ZBAPdQcyf1u4pqLjk9B6e0WLt2g4I3ThE6YDoPqqvsnMgYq5t6uTo-uhBu7ZSxWRs5nZB1eOe8DHbZvOGFyoLuw","CNzXyLaemIUDFfQUswAdmJMFoQ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qP-owkimu1mhwQXPpe65Rst_40eOHIHcQ4zANI05dcxfuer1CIPZM4WKtavRaS8mC80O4wV-B0",null,null,1,null,null,null,[["ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu",1727224894,"/","yahoo.com"]],[]]}.<!doctype html><html><head

Chrome Cache Entry: 1264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1137)
Category:	downloaded
Size (bytes):	2683
Entropy (8bit):	5.276245835033356
Encrypted:	false
SSDEEP:	48:NySdUR9DOjKa5lUGMXMPzOzfZOJ7T5W23C62jeZiuoJTesbfK:NtiVOjKTZUW23SjeZiuo+
MD5:	4C38D208D9D973925492B711FCBBF71E
SHA1:	CA9AECEF92ACF22B2234E16DBB52133E45A80CBF
SHA-256:	CDBE9B84C30A00229826B0B1E354C94D36DD6BF16E6580BBEF43877689C8F5BB
SHA-512:	24ED59D2DE3C055A0A64FFE7A37EEE094A8B7512489A04BE0FC53DE80BF21D16F2FFF68BE1CAC49F2E7B4F75CB7AD32793501494982C5723FE135A6D7D88E2FE
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240327/r20110914/client/load_preloaded_resource.js
Preview:	(function(){function h(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var k=Array.prototype.indexOf?function(a,b){return Array.prototype.indexOf.call(a,b,void 0)}:function(a,b){if("string"===typeof a)return"string"!==typeof b\|\|1!=b.length?-1:a.indexOf(b,0);for(var f=0;f<a.length;f++)if(f in a&&a[f]===b)return f;return-1};var l=[];function m(){var a=l;l=[];var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)a=b.call(a);else if("number"==typeof a.length)a={next:h(a)};else throw Error(String(a)+" is not an iterable or ArrayLike");for(b=a.next();!b.done;b=a.next()){b=b.value;try{b()}catch(f){}}}function p(a){a=void 0===a?document:a;return a.createElement("img")};function q(a,b,f){var d=!1;d=void 0===d?!1:d;a.google_image_requests\|\|(a.google_image_requests=[]);var c=p(a.document);if(f){var e=function(){if(f){var g=a.google_image_requests,n=k(g,c)

Chrome Cache Entry: 1265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.375
Encrypted:	false
SSDEEP:	3:HDAkIth+2YY:y31
MD5:	20E759789F105270F8076FC9E84E60B0
SHA1:	D07814790750452274A3BC1AA36E67FB6DBA56CC
SHA-256:	39B95308B67B27BEA48DAB6015ED5DBA39CD4E827467A70A5DA907AAE64F1046
SHA-512:	22FCE08A2ADF1277E74C9EDC1A764F5EFA2AB739C27F3F9BF803573FBC613C2AFEBED96970B52003E12A0BC3965C28BE570B05B49BC69C828FD226A05BE699E1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkqKG8GdPoLdBIFDahiksASEAlPyhKFRDm7rRIFDQbtu_8=?alt=proto
Preview:	CgkKBw2oYpLAGgAKCQoHDQbtu/8aAA==

Chrome Cache Entry: 1266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 48340, version 1.0
Category:	downloaded
Size (bytes):	48340
Entropy (8bit):	7.995961948732514
Encrypted:	true
SSDEEP:	768:sz46HkuLMNLrB62h1Wozok6WM6MWNFegbBJd2RQul8JwkH5QmfwKXPCkkAhHCUI3:A4EkuL0n1hck6VpW9b4RnlEwoQE9UA9U
MD5:	775987BE3C804E87E03973D02B25D0E8
SHA1:	D4DB949358DF33AB0EDAD20375DAC018586FF1BC
SHA-256:	328A01FA8476EBAE49A4D78CCF488E652C084CF8F0E30439335ECCC3360F9A25
SHA-512:	81A6DEEEE8B322AA616172A2BCD9E78B5C0D9AC06B0696D390486C1CCA9C3F67F9968315E5B4381856E2B1FEF5C26490E64ED029F7D7CD1E903A5CE35675137C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/finance/gtfont/GT-America-Bold.woff2
Preview:	wOF2OTTO..........WH...............................j.j...2..h.`....6.$..(....u. [nV...c.N6.T..nC....^....IH.my..7'):`..D...'2........%._..m...8...i...SJ!............"..;6.s.u.k.E.V.G......x.p.@J.&b..E.YI.G.E..jjQ.cs.dh.X.t.O..w....p..E.Tr....q....[...<TR%UR%...Q..k).....K.k.).if...f..Wr..f..zRl.:..J...;..T,.cM&.4.63....h)/../ts..&%..Xh.L.l.}...3.......@G3.pt..D...@ZO......(.u..S_?%.yOV.7..h\M1A...O}..k6.>..b.C.T.U..b3..h....C.6TS[U..g.a...L....hHW......S./n....JD..N.?....=.-.K..c.0@0..1z(.UC..#.f.....E>.o .....^`..%.0]...Hk.2.).>FF..S...G/..L....ECu..i\|d..[....e..+..V.m.....A...+.....N<..YWF....;.B.........[>.u..[f.....oO.....$.1. ...2A..\|...?....O.@......@.f.D./..!..K.H.:zV>.O. ..............Q..V!.5...,H....?].9.=v.}U}....:b.h..3"".!.3">b.....1b....D.8.ngu...TbGN.S...S.&...H..}...a..@S_g m..T..J.,.....O...j.u...]....S.F.....N4c..C."...0$...1.4....N.....A.Lur.\....+W...z...W..B....0-....k.<&Mr...>........P.C...#.$.Mcp.p Y.U.$.d;.

Chrome Cache Entry: 1267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62928)
Category:	downloaded
Size (bytes):	81459
Entropy (8bit):	5.497058636564031
Encrypted:	false
SSDEEP:	1536:p0ypzfYLuZrefDyK6/islz0qLb6B69xHlED5BTvRCqqs:p0ypzvAq/Zi3ilEFxqs
MD5:	73446AD7246A1E70A2DE9F0FB5CD3F74
SHA1:	9AF50D74F2311360A3B84C4DFE4399C58F99600F
SHA-256:	16EECA7F1A6D117F33DD94A9F50D0CC1F183AF5D3569BBEC22CAE6F016474C94
SHA-512:	39965C207F53113E7DB8308A5A9FFC3CBA478A0605BAFC6BF047A96EFC2C2478B152D4BDE43B0139D0F9989F1A4EA707F12B8D5336D0987733E391430562C5CE
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/nodes/15.CEyJcpyT.js
Preview:	function __vite__mapDeps(indexes) {. if (!__vite__mapDeps.viteFileDeps) {. __vite__mapDeps.viteFileDeps = ["../chunks/TrendingTopics.CFdECsxV.js","../chunks/commonUtil.Bb2Cnbsk.js","../chunks/scheduler.ErneftFr.js","../chunks/stores.CtqIvex8.js","../chunks/entry.CqbZzrN3.js","../chunks/control.CYgJF_JY.js","../chunks/utils.HyUTigHj.js","../chunks/datetimeUtils.wrzNH3Ed.js","../chunks/index.g5YcAAdQ.js","../chunks/initializePage.Bz59rdd0.js","../chunks/preload-helper.BQ24v_F8.js","../chunks/logUtil.nPJvQAyt.js","../chunks/loadConfig.UMts19oF.js","../chunks/i13nUtil.0wCphNmh.js","../chunks/loadPortfolios.D7blfiZv.js","../chunks/portfolioUtil.CcwRjq7g.js","../chunks/plusUtil.DbMydUBe.js","../chunks/index.DsErXEH0.js","../chunks/Dock.BCBFEHBF.js","../chunks/globals.D0QH3NT1.js","../chunks/each.DufB99sH.js","../chunks/initializeDock.IJCXFRBu.js","../chunks/loadPreferences.CwKDk-0h.js","../chunks/Button.C10y2YT5.js","../chunks/spread.CgU5AtxT.js","../chunks/Icon.CDBsrPKz.js","../assets/I

Chrome Cache Entry: 1268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29474), with no line terminators
Category:	downloaded
Size (bytes):	29474
Entropy (8bit):	5.324008437660466
Encrypted:	false
SSDEEP:	384:uovlRdRUxCGeGznRve7Le+kaV5XBbLG+iVCXiBGIKGQZ9GcG4:7lRdRonRG7LEaV5XtYkV
MD5:	7BEE2DDBA507C69E75F32DCCCC97E37F
SHA1:	C85BBCDD24D683361D5B87E79CD939B214CF58DC
SHA-256:	8456F4784AEE7EC88F77B4754688C4E473A70011B168AFF7E22473A773F81B3C
SHA-512:	8D3CCFD1C114CC08743842C641686689668EAC07FD629D98699E75214ED697EC8A4CB7BA586E473004BC78992F66E96A44EFACC12A621EEE7C4E8CC086CB66C3
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/css/react-wafer-nativeAd.NativeAd.atomic.ltr.7bee2ddba507c69e75f32dcccc97e37f.min.css
Preview:	#atomic .Ai$c${align-items:center}#atomic .Ac$c${align-content:center}#atomic .As$c${align-self:center}.active .active_Animdur$5000ms${animation-duration:5s!important}.active .active_Animn$\$carouselAnimationName${animation-name:slide!important}.active .active_Animps$\$carouselAnimationState$,.wafer-scrollview-autoswitch-paused:active .wafer-scrollview-autoswitch-paused\:active_Animps$\$carouselAnimationState${animation-play-state:initial!important}.carousel-ad-scrollview-with-indicators:hover .carousel-ad-scrollview-with-indicators\:h_Animps$p${animation-play-state:paused!important}#atomic .Ar$\$rectanlgeAspectRatio${aspect-ratio:1.92}#atomic .Bd$0$,.Bd$0${border:0}#atomic .Bd$n$,.Bd$n${border:none}#atomic .Bdc$--dirty-seagull${border-color:#e0e4e9;border-color:var(--dirty-seagull)}#atomic .Bdc$--dory${border-color:#0f69ff;border-color:var(--dory)}#atomic .Bdc$--grey-hair${border-color:#f0f3f5;border-color:var(--grey-hair)}#atomic .Bdc$--sky${border-c

Chrome Cache Entry: 1269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 56856, version 1.0
Category:	downloaded
Size (bytes):	56856
Entropy (8bit):	7.995864061019551
Encrypted:	true
SSDEEP:	1536:sLLiziFhfJL/gJw0X7KM3jK6WEKFRNY7T3oQfj5Z:mizixbgJw0XhTKlEKbNY3oQlZ
MD5:	B5A9112EB2580B5EF426431C256A1CB3
SHA1:	F6F67808551BDEB2904793E21680801B85CAF5DB
SHA-256:	FF65C7581B6B14184D2D6AB9EBE9416B06FCBB86C3A7A32CA30B3BC7871256A4
SHA-512:	367937666A5A8B2FE35727FD22F736C31AA2471D98C9431164526A9E60A16FE310782A674E7B5D57027B657630896317F3145D1B215BE33217D51427B0F62712
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/finance/fonts/GT-America-Condensed-Regular.woff2
Preview:	wOF2OTTO...........................................%..$...Z....`..j.6.$.......4. [......h.N..m..k.^.....ns.Y.:o..S0.r.t.<..........#.....m.....N.....=.{fQ...!...6..u.2.D.Lk..t....\..2..d.6B....do...~..J._......,.%.{......a..=.N...$gEUhr.....2..Y=......=..F....\|...XD..w..;......s.....y.8@......W..D./.2.N.s)2I....bH.....t'0."....p......JDz...)!...~..,..M}..g.f.2.~.$e......%.J....\........w...$$....H..c....5.;$K.Xd.e....F..Qm..A.....%....Q.E..x.h.....=x...z.8...;21D!b{+~....AUHe.. .."... :......{0....lv.r.\.8......@X..TI..!Vq.>..P....m.{..X[D.".."..\..%..BE..em....;m]y....c.P[w..qg.n.a5.........9Nt......1"...z..5j.XQ5.G.E..=.-O.8*..XH.lD....?.....;....%.-M.(.g.}...Bpdz#..........G.J..2..(...&.o.G:.........@..:.P...N.5.}.\|?....y..}]...r&\.Z'H..... ....`..M .I.4.A...=.[........w..9.u;....m.+..A..CY\..B..B.Z..wc .P..j..@D`.9/.....=8Nh@..u.k.........K^....b#..D.... ;....../../.pb.a.R:..H.1=U.R..Qt....7......o...{w.[....U.f....!bDHJ.h.(u{...-.s.MOs..;.O.l.r'

Chrome Cache Entry: 1270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29755), with no line terminators
Category:	downloaded
Size (bytes):	29755
Entropy (8bit):	5.264882021305187
Encrypted:	false
SSDEEP:	768:ojcTONfnLjfa9pKpwLhrnVrjDiiNW56vHEm6XfUyBZ4EfC5kCl:3TenvfEOwL9Vr7HhybPM
MD5:	798299E9FBB5CCB39C74E2CB1B118F39
SHA1:	D84D5EC5CDB5AB207C934C125D0F0759E044D085
SHA-256:	D79D1AF7581601236385A7A47F8E1E26579A54161EB0155F783C284E2D8941E2
SHA-512:	7E0E24A672231DD820A6CAE35FCD4990840F56A2738712635B08D890AD7D4C43A137EA3EDB645C97E03B279A26C8FC2C54069F13AED4CCDBD7EC5B6BDB548DFE
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-video-3.1.2-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-video",[],t):"object"==typeof exports?exports["wafer-video"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-video"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(a){if(i[a])return i[a].exports;var n=i[a]={i:a,l:!1,exports:{}};return e[a].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var i={};return t.m=e,t.c=i,t.d=function(e,i,a){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,get:a})},t.n=function(e){var i=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(i,"a",i),i},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,i){"use strict";function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}functio

Chrome Cache Entry: 1271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=17&external_user_id=P1GEqyyk_OouTnS49Tqs&puid=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1615), with no line terminators
Category:	downloaded
Size (bytes):	1615
Entropy (8bit):	5.020901609734713
Encrypted:	false
SSDEEP:	48:g5Ww5dw4MwlZEa09wmSitQjw4EHG9cBKtVns8RHtm:W5aUl/06mukja7Htm
MD5:	12732500BC8E47693F0D777BBE88001C
SHA1:	97865CCE1C0CD35BAC8AC4B42DC9C6C394DA4809
SHA-256:	A03F9A37E34771C42CF7930B2F466EA2077D149F6DBA0E81982E7715A87DD8EF
SHA-512:	9ED4368E2415EDEFA87BB461BE701E268F93C076852660B2F3B2E661C25D66CDDDA0DBC236410361935365DD954FE1DDF07541CB44557DE25E85FB73BC2FE2BD
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/js/react-wafer-featurebar.custom.modern.12732500bc8e47693f0d777bbe88001c.js
Preview:	window.addEventListener("load",(function(){var t="featurebarId",e=document.getElementsByClassName("react-wafer-Featurebar")[0];if(e){if(e.classList&&e.classList.contains&&e.classList.contains("auto-close")){var a=e.getElementsByClassName("featurebar-content")[0],s=a&&a.getElementsByTagName("a")[0],n=s&&s.getAttribute("data-uuid"),o=function(t){var e;try{e=JSON.parse(window.localStorage.getItem(t))\|\|{}}catch(t){}return e}(t);if(n!==o)e.classList.remove("D(n)"),Array.prototype.slice.call(e.getElementsByClassName("featurebar-close-button")).forEach((function(e){e.addEventListener("click",(function(){!function(t,e){try{window.localStorage.setItem(t,JSON.stringify(e))}catch(t){}}(t,n)}))}))}if(e.classList&&e.classList.contains&&e.classList.contains("auto-play")){var r=window.getComputedStyle(e).height,l=Array.prototype.slice.call(e.getElementsByClassName("featurebar-content")),i=0,c=(i+1)%l.length;function u(){setTimeout((function(){l[i].style.transitionDuration=".8s",l[i].style.transform="

Chrome Cache Entry: 1273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (592)
Category:	downloaded
Size (bytes):	593
Entropy (8bit):	5.049292960615784
Encrypted:	false
SSDEEP:	12:6Ah3M8huK/XNQM/4BrHWECXwSlSayOfHgt9cQpQRldPos5hDCDF:E8xGjxANywI9cZdjvD6F
MD5:	335C4AAFED025E78844BE04247069200
SHA1:	6045958144D7376FCBD05D5B62FBD21807849644
SHA-256:	82895B3D35694B838BEFC014CCC0E7DA35B1AC60E055A393F640A0E5BD98144F
SHA-512:	9BD8FB3A7927708901CEFB6D08EBE95B46A102581C14865BDFAFA52373045ED59CBA6BE39ECBC247D020B42FC3FBDFF9E54C0E91E1241A87D2ADBDF0C216E2BD
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/loadMonetization.C_YMBzud.js
Preview:	import{a as m}from"./commonUtil.Bb2Cnbsk.js";import{l as u}from"./loadConfig.UMts19oF.js";async function C(n,{device:i,page:f}={}){const[s,d]=await m(["ads","config"],n),g=f\|\|d.getPageConfig().page,e=i?[i]:["desktop","smartphone","tablet"],p=await Promise.all(e.map(a=>u(n,{name:"ads",session:{page:g,device:a}}))),o={desktop:null,smartphone:null,tablet:null};return e.forEach((a,r)=>{const t=p[r],{positions:l}=t;for(const c in l)l[c]\|\|delete t.positions[c];o[a]=t}),o.taboolaPosition&&(s.updateTaboolaPosition(o.taboolaPosition),delete o.taboolaPosition),s.updateConfig(o),o}export{C as l};.

Chrome Cache Entry: 1274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2105), with no line terminators
Category:	downloaded
Size (bytes):	2105
Entropy (8bit):	5.094108257224103
Encrypted:	false
SSDEEP:	48:D3erlGv7Tsv7svdQv7cF7bsF76F7AN7T/3er8:D3erEnBQ/3er8
MD5:	BA59D9668EE70EFD21B79A18C82A3E3E
SHA1:	A7ECE2F6CF89E8729076518DB7FBF099AA4A0FFC
SHA-256:	F3708FF0BD981DD933EFDF2F42955998D94F812AE152A5EC40FF29B0B995FD28
SHA-512:	498AEA2DE23E263EE37298987F372D8B2F951B9A11B407481C2B4F206A266357F3128C8878436A516C129AF0B121D9F8AFFFB0D5A7AE93790E0C732D1DC1576F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/art/css/gtamerica.ba59d9668ee70efd21b79a18c82a3e3e.css
Preview:	#atomic body,#atomic button,#atomic input,#atomic select,#atomic textarea,h1.header,h2.header,h3.header,h4.header{font-family:"GT America","Yahoo Sans","Helvetica Neue",Helvetica,Arial,sans-serif}.font-condensed{font-family:"GT America Condensed","GT America","Yahoo Sans","Helvetica Neue",Helvetica,Arial,sans-serif}@font-face{font-family:"GT America";src:local("GT America"),url(https://s.yimg.com/cv/apiv2/finance/fonts/GT-America-Standard-Regular.woff2)format("woff2");font-display:swap;font-weight:400}@font-face{font-family:"GT America";src:local("GT America"),url(https://s.yimg.com/cv/apiv2/finance/fonts/GT-America-Standard-Medium.woff2)format("woff2");font-display:swap;font-weight:500}@font-face{font-family:"GT America";src:local("GT America"),url(https://s.yimg.com/cv/apiv2/finance/gtfont/GT-America-Bold.woff2)format("woff2");font-display:swap;font-weight:700}@font-face{font-family:"GT America";src:local("GT America"),url(https://s.yimg.com/cv/apiv2/finance/fonts/GT-America-Standard

Chrome Cache Entry: 1275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (19021)
Category:	downloaded
Size (bytes):	21390
Entropy (8bit):	5.339106049211549
Encrypted:	false
SSDEEP:	384:81xT06qVQ6GV4tv0lMGg2geQtfnHN5pOEiXz4wDQjZvy99gYQWwY4RXrqt:OR1uMtCGsOvz4wDQjZvy/gYQWwY4RXrU
MD5:	84975F2E7062D37B15BEB49781203CFB
SHA1:	45937BCAEE39547BA302BA6C26E11A65673A4728
SHA-256:	B6EBA3D1F416C5A2244CDA184FD874BD38085F154FDCEB9350C18E6CAC44AE0A
SHA-512:	C4A2C74A66E2CEAB3F0FA671C43D8AB00EB7E9C94360DB9AD39DD8851EDA16B07F3D42E9CB0080B6B09E065EAAB64A1F9198BB28B24D2260B6429CA41D0FB5D5
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/checksync.php?cid=8YHBJ3BJ0&cs=1&cv=37&hb=1&vsSync=1&prvid=25014%2C25082%2C25113%2C25307%2C25308%2C25309%2C25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=0&usp_consent=1&uspstring=1YNN&axid_e=&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":26,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":15552000,"cc":"US","zone":" e ","coc":"NA"},"cs":"1","lookup":[],"ussyncmap":{"disable":[]},"hasSameSiteSupport":"1","csDelSS":true,"batch":{"gGroups":["apx","csm","ppt","rbcn","son","bdt","con","opx","tlx","mma","c1x","ys","sov","fb","r1","g","pb","dxu","rkt","trx","wds","crt","ayl","bs","ui","shr","lvr","yld","msn","zem","dmx","pm","som","adb","tdd","soc","adp","vm","spx","nat","ob","adt","got","mf","emx","sy","lr","ttd",58160,"mn","tlt","pub",55953,58301,"idx","dtm",57926,58267,56551,58259,58601,"ctn",58280],"ngGroups":[],"bSize":1,"time":7000},"csloggerUrl":"","optout":"optout","cslogger_host":"lg1.hb.yahoo.net","ck_del_sld_tld":false,"gdpr":false,"gdprconsent":"1","cookieDeletionList":[],"ccpa":false,"ccpaconsent":"1","info":{"domain":".hb.yahoo.net","cid":"8YHBJ3BJ0","itype":"","pid":

Chrome Cache Entry: 1276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 656x369, components 3
Category:	dropped
Size (bytes):	134030
Entropy (8bit):	7.967190722670383
Encrypted:	false
SSDEEP:	3072:Klo7jHBKA00DuR3V/6bj76CqKbqNPM+9DKVVEP:KlMHBKKCfybj76Cq24nKV2
MD5:	A098F11278401EC9C0A052FE0F260CD6
SHA1:	07768C37992AAE589A1FE24E41DB38D80D5646A6
SHA-256:	85524E53EF0819E4F34A2A6F8558D559CD8C5757ECA376EAA7EBB0B24F0A4A1C
SHA-512:	FA9865FC08F1D3BC0F5E265A38132966279F455852EBDC99BD8A949A2384D33ECE590E9A8B996403620EB40677FB51D5AB58C41424B807D5DDF26C1140549CF7
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.......................................................................q..............................................X.........................!..."1A..Q.#2aqB...$3R..6brt....457CSsu.......%v...8DTc.w....................................5........................!1..A."Q.#23a.$Bq..4R..5Cbc............?..R.......Y...f.._...^....g

Chrome Cache Entry: 1277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x222, components 3
Category:	downloaded
Size (bytes):	5210
Entropy (8bit):	7.734463280190189
Encrypted:	false
SSDEEP:	96:bI90R5hLQajN+inytNqZqpLFc8GpqX+ralAzN+snV2oA2jBztw16:agfd/nym00wuruQNtIoJn66
MD5:	6D13C25FAA29F83F8C888373B7865E22
SHA1:	25A85DE64AB132DB948C97466EC6433D1EBF54A8
SHA-256:	0851E532E38C9FBA73AA00AD17F467D27E7C9CCD94374AD27C0FC9DAB9C8BE87
SHA-512:	4A1FA069C067E729936D9DA354CE645CC8AFFE5B52D4A8CDE67BCF0279738CD7887ABA5E031B1E47698094F25E3CAF53CC4514AE2654F13A770080B626EC4DF3
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/shopping?q=tbn:ANd9GcQ6CYc5JqCDVcojt0B89pFPVOLHyyquccdk4QfD47XqGzQGlQJctj4EVXHjCAw&usqp=CAI
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777........,..........................................9.........................!1.AQ.."2aq....#B.34Rb.....$C...............................3.....................!..1AQ2a.."q........#Rbr.3BC............?..6x.......6A@..m.........l...l..m.v.P.......@.. ..F...........P.4.@4P....&.h.Q.(..P..@4.....(h...@...E..P......@h"...h.......P..H.. .. ......2]....T..(....P...(@.....(.................(.....4.... .B....2L...@..&...l...6. .........6.l..2L.AJ....J..R......t.....E....@M.4.4.@4.AM.t.....e.......B2D...(..B.E......2......@.D....h......P.........E..T.....E@R.@............h.....w..hl46......@......P..@.@..T.`M.T...@....(.....h......h4N.....%.........]...`64..h...@P(..T...(..o....nR.J5..}tnc.y.=.o.q..i...M.^....w.o..d.2......t.{p...........i..G0...4........].(.U..@...@...P..@. 2..(....mh.0{....<.}8..c.x......r..._..._....N.._=U

Chrome Cache Entry: 1278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29040, version 1.0
Category:	downloaded
Size (bytes):	29040
Entropy (8bit):	7.992433370956388
Encrypted:	true
SSDEEP:	768:m8KN5bgLz5ZH/qWx4tta3t3/QuRogw/LPmm0CG:+5gL9ZfJ4za3BIn/zL0p
MD5:	AF9FDAD7698452697B016850FFF96423
SHA1:	710130C79BF56297F8ABCC6D6C575172590133B0
SHA-256:	B8989E0BE6A0C3A8A407D8B69B7884EB5EBF401B7EEE8B8B98C5EEEC3BA497FA
SHA-512:	1C4C05B01117C2EAEEAC48E010B856B8C491FA318E600343AF5C28A454D083908724881C26F5C13F3E604ED81855AF3548F19D062A80881CB87F2CE51DE9D213
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2
Preview:	wOF2......qp.......(..q............................0..T.`..T.....s.....h..O.....6.$..0. .....,..^[_mq...\$..fU.Y...U0.T.Rw....pb%....AhJ.e....z..C......k....b...K...K.}Q4.1..+....~l......3.x.qdf?.s.A......./(D.Ph....o.-=.Q{l..k......XN..B.'r^.zU\|..3o....\.....R.........p.BuQ...gz......y..z...)..9.b@.0..w...z....=,...'.B'.q...o..h)..k...aF.Q\|(Y.....E..I.f.f....4..7.wbS.Zbv.SV...f..u......Y..f...eP"..........z.ggfgw...p...s!.l..({2B....2.........d&2..!:I.. x.......R].j.............D..?...Tb....66.kX...e....,..a..%..(`$.}...^sz^\|.....^....?....W..,..z7D.0a~..[..W...'..G..#JnO........W....."......-.....(.je.40P.."a..E............'....U.E...:.4.......8j...s....`.T..Kp...Yu..{.i...6..}.E.U{..}...9m..[...\|..f0&.c....H.I ..}U......a..HiuJ..<f..6.........[@.V.-.4.H..-7..&.V..^.A4.Cr..e...72\|....%...-5..C..<..v..k..k.".=`.`..2.3...{..>....Y....B.....B.(5...v...R.....Uz{.,..fx..y..N8...,U..r..~..u..N...[5.O.y!I&F.M..jY...-.B.~.... .hig4.....f.....y...

Chrome Cache Entry: 1279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	119470
Entropy (8bit):	5.304900138564538
Encrypted:	false
SSDEEP:	1536:r4g3D3Aeq/dcMxv4ZPb7Oia5dHpTGQHaQJm672jdHO2Wd/5YE1yaf5Y9A3H9zvE7:y2g7udu2Wd/s60jJex0hb
MD5:	EED1BF80ADE27D2E55FAF25804222E25
SHA1:	EE3F6D32B89FC7AE87E102CC0E4D74D5EA0FE677
SHA-256:	B29232E4D03620799877AE23D536234340565614598CB55C1EB6938EE0F8E6E5
SHA-512:	B5AB2ABC94319F4DF841B89FCA42243DE77A01C9571ACCD9A9EFAC5740AE9E33F8C0267B5C3622019BFC072FF3A451669CAB706EA2AD9ABDDDF49D7F5093439B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/c/ee3f6d3.caas-finance_web.min.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS",[],t):"object"==typeof exports?exports.CAAS=t():e.CAAS=t()}(self,(function(){return function(){var e,t,s,o,a={"./node_modules/@vzmi/caas-static/src/lazy/js/index.js":function(e,t,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var o=s("./node_modules/@vzmi/caas-static/src/util/js/index.js");const a="loading"in HTMLImageElement.prototype,i="data-caas-lazy-loading-init";let n,l;function r(e,t){return e.nodeName.toLowerCase()===t}function d(e,t){const s=e._util,{pendingClass:a}=e.options;return()=>{if((0,o.elementInView)(t,e.options,s._viewport)){const o=s.elements.indexOf(t);e.load(t),s.elements.splice(o,1),s.count--,0===s.count&&e.destroy()}(0,o.removeClass)(t,a)}}function c(e){const t=e._util,{pendingClass:s,successClass:i,timeout:n}=e.options;for(let l=0;l<t.count;l++){const c=t.elements[l],m=a&&r(c,"img"),u=!m&&(0,o.

Chrome Cache Entry: 1280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.184482755717443
Encrypted:	false
SSDEEP:	6:otqWtxbQLZVVi7GeqlAGmwbQLZVZYZ7qT:o7xbK95eqKVaKiM
MD5:	B54D0452E2FDB8C0D91C455D1C5495F9
SHA1:	DDD85730B9CB4CB9905B1D7E7643F595D2F33CB8
SHA-256:	F4138D99EC6E17514BB87CEEAD1C1D2A204219C970864FC85BFF00949EE18082
SHA-512:	6883DE3ABB2A7B71CBDE6EDA0854D5B9EC696A0656735843BBB6329007D758B502D2557CB36D5A1CEFC7B4D0AB5DCBC227C88DE9163662741C60F9D561F5A367
Malicious:	false
Reputation:	low
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">. GSE Default Error -->.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 1281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32006)
Category:	downloaded
Size (bytes):	111633
Entropy (8bit):	5.457263385097518
Encrypted:	false
SSDEEP:	1536:jf6fJZjIbDJjzglHP0VH4dLk2IrVpcXIKXkPxbnNku87CWWCut+7u5zO6:jrZkFjGXgojNICWWCuq4
MD5:	643D6911392A3398CB1607993EDABFA7
SHA1:	977D58073A6341E762924214F04D722DDA3CA811
SHA-256:	36C0EC05D79BD9D3164EFFC3ECA0F1962CD6F82BB1F41CB212E080910BE24153
SHA-512:	23E723AAD340BB20FFBAE7C74A667053D1ED21ED0C563678DFC80B196C93B5FDCD1428069441DBCA3D1C7B744D7891554A626EA7FC3281D72F0C478B5FC859CE
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/gsap/1.19.0/TweenMax.min.js
Preview:	/!. VERSION: 1.19.0. * DATE: 2016-07-14. * UPDATES AND DOCS AT: http://greensock.com. * . * Includes all of the following: TweenLite, TweenMax, TimelineLite, TimelineMax, EasePack, CSSPlugin, RoundPropsPlugin, BezierPlugin, AttrPlugin, DirectionalRotationPlugin. . @license Copyright (c) 2008-2016, GreenSock. All rights reserved.. * This work is subject to the terms at http://greensock.com/standard-license or for. * Club GreenSock members, the software agreement that was issued with your membership.. * . * @author: Jack Doyle, jack@greensock.com. **/.var _gsScope="undefined"!=typeof module&&module.exports&&"undefined"!=typeof global?global:this\|\|window;(_gsScope._gsQueue\|\|(_gsScope._gsQueue=[])).push(function(){"use strict";_gsScope._gsDefine("TweenMax",["core.Animation","core.SimpleTimeline","TweenLite"],function(a,b,c){var d=function(a){var b,c=[],d=a.length;for(b=0;b!==d;c.push(a[b++]));return c},e=function(a,b,c){var d,e,f=a.cycle;for(d in f)e=f[d],a[d]="function"==typeof e?e(

Chrome Cache Entry: 1282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 57076, version 1.0
Category:	downloaded
Size (bytes):	57076
Entropy (8bit):	7.996502989210408
Encrypted:	true
SSDEEP:	1536:Wl4PAbyXWrt/+vf134e7U7VGBrAN79fonS2BDm3xjq+b:Wqvmrt/+vf1Ie7UV22QnDBD67
MD5:	63DC66A0ACB63F7B9C52D3A1996896DC
SHA1:	648035EC31BBF68B9795FA108DA99146193771CE
SHA-256:	500BA18736D9E2FC79546B0F1FF540B8D022A0405718C9C460E6DA300F18F7D3
SHA-512:	F2D3A92D904D763BDD58D61D7E0CF1F8784ADA82F9087F66A3BBF4172EA8ACAB0285D04CFC5F077E7C5407B39F3E81CAD740CD626B178FF7148781F3BCEE18DC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/finance/fonts/GT-America-Standard-Medium.woff2
Preview:	wOF2OTTO..........................................i..$...^....`..j.6.$.......K. [....!..nk.....)..S....`..]..sc........M..-u.".m.....oJ&1..........V..j.n....!e.G..O.ep.Y.ZQ.1N L.a...L&..,....p<..T....?...uq.e..rl....1!w.....bqo.\|......z...D..O.....O..X..pw.e...R.&L....Yd.....J...>.}.....S..O.....w.b.S...k......}B\|..J.........,.s........L\.....1"i.i.M.j..P.".1..<...4C5.&JB2.)..}._?0.........^.G2..@..8t..m.r6u..S..F..:....1I...rLZ.........i.......F.T.TT...=..xJ.8.^.v...b.v...}\{....L..4.S...x...F...=..b.S.\.v~f..J.\|....`..!.].F.O.7..O.....T.4..2 ........O..<,x......:n.N.TV>.....7.:z ~.k.?n...jTuj'.....7.f.9L;.......}.J..E."....H.....J.tL.w...q3_<.g./_,S.....5.._.)...ri....R..B....S...O.<..1f.&....2.WXD....X>n..M..L>.).,.k,B...M..'0..{T[.S..F.6.. ..s.....wp.-.L..D.c.9{&.....].e.Fc..m.e.........c.)].lWn.s:...u..I. .Ei...........w~...5.WW.t..j.zZ`....."..E.6.Q.......N..ENB.aY.I.(...)#.....]T.h.\|.........i.....~..qby..0.k..<o[....z......SU.(f

Chrome Cache Entry: 1283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28108, version 1.0
Category:	downloaded
Size (bytes):	28108
Entropy (8bit):	7.992351824245756
Encrypted:	true
SSDEEP:	768:o6m1WFrUPQJP0/BW6+Vg3dLCwJqMFkAY3dNh5r8uvp:W1coPQ6Fig3FCiqMu9
MD5:	58B9E3CA84ACCC5D50AC893317CD6705
SHA1:	FD393C1F50FD2F771DEB92BF8B26BD39F97DB2C5
SHA-256:	22E9E86D745200109FBCB3E96695307FEA67880FCA509728194B2CFCE3906FA7
SHA-512:	B28EC5CF5199E84F0CD3404BD3521850132B462F3587F0FA8B85805730F6A35627C16F0101246DD2FCFEF43BA20C9002B21AD6566B44E2016CF556127ECFAF4C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.woff2
Preview:	wOF2......m........,..mj..............................T.`..T.....s.....h..X.....6.$..0. ..d..,...[.nq...D.QP.m.P......8'.s;..m...`.^.6....cf.....IE.L:L.m.PED.....HAQ3.#..}.J..L_:\|.\.[...........C.=.wS2]2.Y2e...O8".Hr.+.#-_.j..4.Mpw..\|h){.b..<.e`...,.I.YxXx....S.....Lp.....f{..5...c.]....{#......c.a.....Oj,.gA"....6RA....jXQ.\d....).......J_<.5.A...;5r\|...J-.E....qt...i..E.F...M..(...HVN.$_...._..7...tiAT.R.KJ..n.{Ds.....$.K......)&m.TD)5....F.Z.P....R3.I...o3..5w....'......5p..h.....Bk..U.l....=..=. iV.H....,X.o....b.w.>....2....A.....d~A..~..+..@d....A@B)Q...E..h..g..\..h....6...-"...o.E.Z..=...g.Y....%..#0$......%9......!0`...Y....Y=q...Zb]...l.Dd`..N..V.r\...t....y.@#N(\.'N}?....p.z..V..@.<....V[CB..N.u....c6x...S...{.....z).l:./{t.a.P..3.\......3..X1Y..W.;......<q...,...._9$6......b-.r..QA...$..DCj.S~`]^..}.O.oc.......J .&..m........&,A4Hn.....f.\y.%YYIV.D.KV.K.i....Q ...u._3.[.R.T*.J%..<y....4..0..6...........F.\.6.`6.=.......m...zi..o.X.

Chrome Cache Entry: 1284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1652
Entropy (8bit):	4.82554336623202
Encrypted:	false
SSDEEP:	24:2d6gomPLj/GECneaxMRcj57lKrqpGHQ3uOyxlwBo6FthZqycBy4OIlz0OzYB7tAv:c6gNjj/GRBj579phkqo6FFLoyo5IOv
MD5:	6619A7F44244BB4319C26A1DA673FF22
SHA1:	AF26952759537C20AC3E7E93268F2F1397BF7159
SHA-256:	BB89BBC42005CA6B6C10E791DB890398FBB456D31CFA05331309B8344E7B3ACE
SHA-512:	2E77842EC1D24CE801B90B105CB1BD14CA8B195B3D66400AB49AAF1CF5E0D80E31540F4BA2F5E8AAF2BB625CF7E71B9176688FD96D154739A211C2C6C496D945
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/yahoo/help/icons/icon-account-active.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>icon-account-active</title>. <desc>Created with Sketch.</desc>. <g id="icon-account-active" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M12.375,11 L8.625,11 C4.97476684,11 2,13.8557762 2,17.4 C2,17.8006133 2.23908598,18.162562 2.60756131,18.3197782 C3.01090711,18.4918724 3.73979964,18.7352591 4.76551773,18.9739717 C6.4490293,19.3657707 8.37044131,19.6 10.5,19.6 C12.6295587,19.6 14.5509707,19.3657707 16.2344823,18.9739717 C17.2602004,18.7352591 17.9890929,18.4918724 18.3924387,18.3197782 C18.760914,18.162562 19,17.8006133 19,17.4 C19,13.8557762 16.0252332,11 12.375,11 Z M15.7811427,17.0260283 C14.241998,17.3842293 12.4720038,17.6 10.5,17.6 C8.5279962,17.6 6.75800195,17.3842293 5.21885727,17.

Chrome Cache Entry: 1285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 72, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.763598788410441
Encrypted:	false
SSDEEP:	24:tE18rshgbc3xtnee6jtTln6li6OvjcARaInltdmmGG0I5kCr/G7:rrsCbc3xtextl6pObcARaIXmmGhIG7
MD5:	DD31F56B9E4DFF40EB87447C3DC55B84
SHA1:	1908B34AF2D15440D33DFC81FCB93AA9B271DC58
SHA-256:	4F47EF8FF3DAD2A78360AB207CF35FF2905622511C0426109F6E225052CF5637
SHA-512:	057D2DCD66C48A2BB43D7B62BC38E4DACD3D7F3FDAA103AF178FDBC737BE91A81A369158BF02AB59C46F507F538536D01D5FC179D681375F9B77EE814E544407
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......H............3PLTEGpL..................................................a....tRNS......=..T.v.h.#......IDATx^... ..9J...?m.....eL.ig..w.8.O.I.U.....(.S....R..I8N...\...=...yw`..I...(p...P...k.....<d...)oP{..;p..N...C...X).....,.v.N..>..9..0.,....>.....w1K........0......}.B.....&.J.......t..Q.....mn...,....=. ..<.)4.1..(.(H...O.....[.u^~c;.L...8."....k.q...6d....X.....wFs.,y!..b....j.........,.'F..C....CP2.'.$.M..A.].>.`m9.`...H<..Va.%SD6.0......a...W..p".q.P..a..yik...f..e..fe.<>.s..S... .%...N....<zaX...4..A..\lV.K......<'.G.D.duq..i........{.......M..f.3......?...4..d!..k.........C$...b.Y.RwC.Q.a....'..p.k..@x..{`o.r..7..K.-..D.k.J.....R"..0E).p../..0X...N....J.2.....n..j~v..HuA.sK._..feg....Ib...0....\...U....0k.J.....'....s.+5.k1...!.x^wl..&....P.6...\~....E...^..'wm...#U..p{.l.~.....i.......t..?..q..<%...d....WN\."[........5...Y....[.QH..$.k>....."........t#..W........&..</.y...+ .w.X...!...}..G.......q...E$..:..v..

Chrome Cache Entry: 1286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	36208
Entropy (8bit):	7.985495555305319
Encrypted:	false
SSDEEP:	768:Oroq7bdqrI73aW9Ed83NWA7PNKkaRmNQomqpKo90eSqqFwVEyVUwBu:OrpBTaWc89WzNMGoa1ySeu
MD5:	60517C3E806C8C162E0FFB11298404A9
SHA1:	52A389DB8DEF771A0C8DEFFD8F3F3F0FC61A5770
SHA-256:	5CCF10D3FFCEF4229E881FFFCC241FCC416D14EA243BB202F3BD6CDDBA1C9387
SHA-512:	E5511A90D693405816FD84356AECDFF90DDF01F3417E1CA623E9152051ABD7BD213D06D43296920CC9216A0847A9523BF59D053A78051712CA0AA0BD131BDD60
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/GTuvlSfJJwEHzeXQ21vB1g--~B/Zmk9c3RyaW07aD0zNjk7cT04MDt3PTY1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-images/2019-03/ef688b90-472c-11e9-bf67-80fe9f089a49.cf.webp
Preview:	RIFFh...WEBPVP8X.... ......p..ICCP0......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 .....E.....q.>y6.G..%%)S....cm.....~..O4/...-........A...M.G....C...^v..........?.z)....._......P...R....^.......z........~W...?........;.w@}.._..?..!.....\...k...._....o\|......G.....o....-.-.^}..............._.a.'../.}.?b.c.].C..#p9.P..`e.l....G.~C....1..'..pjf..........m.O....#.....i...'s1....g.....r.0.;..e.v.!.\|.C......+..n.(..........?..Dxm-n2a.n..i....^@.....G....\|d.

Chrome Cache Entry: 1287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (632), with no line terminators
Category:	downloaded
Size (bytes):	632
Entropy (8bit):	5.27920394527398
Encrypted:	false
SSDEEP:	12:kxP4L8BM4ZpbqWGZc+L8BM4ZeDWGQL8BMnupbqWGBfJHJO8KBGmUSaOWQ:kDB/GZqBtGVBZGltKBGmUjNQ
MD5:	9F61D7D3DC9F18E4A5695E58FFFDD2DF
SHA1:	2A37104FE7B9938A00B30260F75F976F513ABDB7
SHA-256:	E34F3C96E1EAE99E2FC8B8F0C8F608BF3D8822872BF36246C4360A024A8527D5
SHA-512:	CABE582ADF4D25BF66C5C1A13BDA17AC8F0A12C1EEE3CA50902B9D010DCEC29AF160CFE2CE3287EF00D329D8AA9073DE5877D9FF5824966B19FF76B2E3CCF993
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CND8eBCBy4EBGJrZkogCMAE&v=APEucNVPmxiGAzZGDfnGTcdfk3OlBhTt0syHjVETXEKyidvHNoScv6rUQ-6h853HUNOm4q1Bl7p-xTPNavnFWGTIJsG39gGobO3ZE-g--boFJzJINV0KsBA
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://us-u.openx.net/w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&gdpr=0&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D" style="display:none;"/></body></html>

Chrome Cache Entry: 1288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 1713, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	12068
Entropy (8bit):	7.942160239495707
Encrypted:	false
SSDEEP:	192:ZTVBJIhPQbVDBi2yMmpM4WWcj2V27uhsPac8NA1pWhhwRMm/He0fKFbSBt4PpUiC:ZT1sPQq2ARcXaM1ewbe0fZBtu8yPcVzT
MD5:	49422090C836F9FEF41EC35497BA622E
SHA1:	615432BC9E228E0A0A98E950A36E68742F52ADEA
SHA-256:	C38AD659D5C95DC2E75B9A79247D9B40EF1E00B9B377A9919B54D8E03024B20B
SHA-512:	AAAE3A9A275BD148050A475F49087369165BA6180ED6E12247F037458FF5F847A45DDAE62394701DDE4F8260DF4EE1AEF29AF01590AAE349B2BD34394A19A576
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/kr/assets/spritify-sprite-dark-fd484ded-615432bc.png
Preview:	.PNG........IHDR... ..........Nz.....gAMA......a.....sRGB.........PLTEGpL`..d........MA..A:@s.H..............d..d...........c.....e.....h..d..a.....d..d.....b..d.....d.........f....."'......_......)(...d.....e..-,0.... %..._..^.........!&......d..b.....b...$&..7..!..............!d....q...c.....3.^....&$......\...h.d...!&.%(.").i...!.. ...?..../j......4..&%./#.h.. %>........3.^.#c.._...(!..A....#'.....4.....G.4..._d.....h........ZZ^.!'..Z.)...........f..%&[Y^.h.......ZZ^....h.YZ^.5.%@.....4....#.........'0.....4....`....Z..!1.K....Z...:....A..Z..Z..3`..%.....4.^HJN...YY].4.0.0.@........2....a.... ..!..!\].4._`..,.}..3...'.s...\|....3........2..3.\|.-....2.Z.....Kd.........)...6]^.m..@.....")....d......Z.....!.....34.^.......4.....j.=>...^T..r...q.......B..H.....&%x$ !D..2.d...7.7.c...7..7.d......OP...5..w\|..%2.*77.dn.....!....tRNS.................4.S... 1.9F....d.EE.(....'....T.>.t....d.p.'....p\|N.Z..........Lg9%{.]....@C..N2...V..rr.N.5......[IZ..&.d..3..\..wO..yP...n.

Chrome Cache Entry: 1289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (335)
Category:	downloaded
Size (bytes):	336
Entropy (8bit):	4.701410411486409
Encrypted:	false
SSDEEP:	6:ySXE0HajRBeFZVKZIJFMrESDMXPJdMJ8CrGmpbkPRVYBNZyFCF2zvn:XXE0HyRBe5sjE8MXsJ8CK8bkrmUGWvn
MD5:	42E6A599D599E2C94EFB45DC3736636C
SHA1:	7757F8535A81F05A9C9EC40822EAFBB455408566
SHA-256:	C086EF0BCA9C11B161E96BB18BAB524FF65E9EC9B8DE64CC5CB615E070A81A32
SHA-512:	918EF6A5ABC1B168F56AA77BA34A8B681C6C22E3BE1C3A4957A6851BFAF7FC842A1C4F8936AED0FF60E01F500F09E4A56676517B1E43B4C993552D9E1A9829DF
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/control.CYgJF_JY.js
Preview:	class i{constructor(t,s){this.status=t,typeof s=="string"?this.body={message:s}:s?this.body=s:this.body={message:`Error: ${t}`}}toString(){return JSON.stringify(this.body)}}class o{constructor(t,s){this.status=t,this.location=s}}class a extends Error{constructor(t,s,e){super(e),this.status=t,this.text=s}}export{i as H,o as R,a as S};.

Chrome Cache Entry: 1290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 1291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	3.5465935642949384
Encrypted:	false
SSDEEP:	3:YHAXW2Vn:YglVn
MD5:	97EFE0B7EE61E154D57E80758BB797D8
SHA1:	810B4E115FE9F5AE697666FEBF2A9ABF0B21C9EC
SHA-256:	EFABBA3678B85FCAB831B778EA2DDAAD1E2A1E952584D3566BC39B7CCB3429D9
SHA-512:	AA02209CF80FC2564CE0DB0BF9F30241E92EA33101B55FFE5E26D617F90B74277AE68D714A7B00C792EF2B88B582E3F299213A5C3C9BF9AFE6C6C1800FC276AF
Malicious:	false
Reputation:	low
URL:	https://rp.liadm.com/j?dtstmp=1711672943550&did=did-004f&se=e30&duid=5fb552a76ef3--01ht3tgrdyh133kh4xvpvzxaty&tv=8.38.0&pu=https%3A%2F%2Ffinance.yahoo.com%2F&us_privacy=1-N-&wpn=prebid&gdpr=0&cd=.com
Preview:	{"bakers":[]}

Chrome Cache Entry: 1292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12660)
Category:	downloaded
Size (bytes):	12661
Entropy (8bit):	5.007991279592627
Encrypted:	false
SSDEEP:	96:jssrKwWUA5zQdhNpfIbGzUd7diPLVYfL4npEo3/lfzT8VSSFeYYeZdU5q9FOr:gYM2bwJVYyTeiG/lfzlHeZdU5q9FOr
MD5:	3825DA36DC5F897B769B2DDD64E2ADFC
SHA1:	B881E94026C931B097765157D67CEC65D5FDB9D4
SHA-256:	E2A52040245A908929FADBF38F101C45CC345D809A9144B1F28C2B3C33F0B50E
SHA-512:	8E04ECA5C875C3D353E4D30242B581D6140A5FA26A7665CC21A10467D471451E5F02256B7AAC84D24E6B97437E6659B1799694D3C19E132C8E4490AC72EC5708
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/WatchNow.BUgTN-dp.css
Preview:	section.svelte-gz4x9{aspect-ratio:16/9;width:100%}.loader.svelte-gz4x9{background:var(--black);display:flex;height:100%;justify-content:space-around}.watch-now-lead.svelte-1z05da5.svelte-1z05da5{display:flex;flex-direction:column;gap:var(--space-4);border-radius:var(--border-radius-m);background-color:var(--surface4)}.watch-now-lead.svelte-1z05da5 .player-container.svelte-1z05da5{aspect-ratio:16/9;background:var(--black);overflow:hidden;transform:scale(1);border-radius:var(--border-radius-m)}.watch-now-lead.svelte-1z05da5 .player-container.fullscreen-sm.svelte-1z05da5{margin:0 -1rem;border-radius:0}.watch-now-lead.noBg.svelte-1z05da5.svelte-1z05da5{background-color:transparent}.watch-now-lead.noBg.svelte-1z05da5 .lead-content.svelte-1z05da5{padding:0}.watch-now-lead.svelte-1z05da5 .lead-content.svelte-1z05da5{--gap:var(--space-2);display:flex;flex-direction:column;text-align:center;padding:0 var(--space-3) var(--space-4);border-bottom-left-radius:var(--border-radius-m);border-bottom-ri

Chrome Cache Entry: 1293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1221
Entropy (8bit):	5.055527013428358
Encrypted:	false
SSDEEP:	24:tCbYLdLGSKGQlnGMGlTIqdhg1a4x0KKGSyFzxIS6rjAdIS6CPAiIS6iAytgI:DJGSdQMH76k96/zLd
MD5:	9398FFA95E2FFA35A1335A00D6E40260
SHA1:	F13702824ED73C7275405F64EEB50F77A7477C32
SHA-256:	DCD70A9273FE1599DC9528B90566DC1421E1CCB6AACF178C6D3085D8DF2A194E
SHA-512:	D4C3432D6B1BC70697C083286D58A7EE462E8486CAECD1CACE4153EBC8E427FF9274EC73C902001AC8F6B9AFA5E96364EE8563233CEEFF6B4B375DC6E99DEECF
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <path d="M44 15.23c0 8.462-6.77 15.232-15.23 15.232H9.307C4.23 30.462 0 26.23 0 21.154s4.23-9.308 9.308-9.308c1.523 0 3.046.339 4.4 1.185C14.892 5.585 21.154 0 28.769 0 37.231 0 44 6.77 44 15.23z" id="b"/>. </defs>. <g fill="none" fill-rule="nonzero">. <g transform="translate(2 2)">. <use fill="url(#a)" xlink:href="#b"/>. <use fill-opacity=".05" fill="#7DCBFF" xlink:href="#b"/>. </g>. <path d="M41.914 42.972c-.612 2.255-2.858 3.485-4.9 2.87-2.244-.615-3.47-2.87-2.857-4.92C34.565 38.87 39.67 36 39.67 36s2.857 4.921 2.245 6.972zM27.914 42.972c-.612 2.255-2.858 3.485-4.9 2.87-2.244-.615-3.47-2.87-2.857-4.92C2

Chrome Cache Entry: 1294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 1295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11988
Entropy (8bit):	7.05894225033086
Encrypted:	false
SSDEEP:	96:CllcHitlIxv9vk7C1+I4wWHLihk/xrkg1pMsaR1JzKAJovZ9guDMr+0K6FMXoXyi:pIIHUCD4waUzrz/JorsY0yR+WVGv3Axq
MD5:	0A392C0F0116C9EAA643C4FB421B553F
SHA1:	E4B0356393963E75AE511E9CA7DBF5AC7D4610CE
SHA-256:	31DDEE91F01105797EB9F6682DDA873BB1E483317864C4E32AE2CED77088B47F
SHA-512:	A2B937D86546E87C791D99F85F97FF4A30103AC21A1BC59F4E903A8412F68D9E11DB85A5D492667DEDE47FB59CA25C56355D23AD5FAC5C777246B1247EE2925C
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/13461938776524376467/images/model.png
Preview:	.PNG........IHDR...X.........'.4....CiCCPICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R...J5e?

Chrome Cache Entry: 1296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5821)
Category:	downloaded
Size (bytes):	5822
Entropy (8bit):	4.923024241344572
Encrypted:	false
SSDEEP:	96:nAMDr8lblql8/AYloV8A372altPfrhnStUkt6UtdftLtLtytNpfHtnt9t1ppt4tQ:nAMDrG5waRoV8ArhltPjhnt3Sc17svG
MD5:	AC145146BC2C4A27EC9B2E2FCBDE2BEE
SHA1:	BBB2930492A32B8FEB452330E8630DF57A5E9AF2
SHA-256:	03E8BB27EA5D282168F267EAEE5E7BC0864E8499F57F2D6D3F5EBECC65194BB7
SHA-512:	52BC18AE03602121F21464A3185210D76F9368D30D56EC9E3E4448F964EB5625514E7BA0A89B6669F811EE3E49C6D9419C3CC7ABCCA880AC002014B464C86C32
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/FilteredStories.DSRs990Z.css
Preview:	.feedback-menu.svelte-1aplcbz{min-width:190px;padding:var(--space-4) 1.5rem;border:1px solid var(--separator);border-radius:var(--border-radius-m);background-color:var(--surface4)}.feedback-item.svelte-1aplcbz{display:flex;align-items:center;gap:var(--space-2);padding:var(--space-2) 0}.feedback-item.svelte-1aplcbz button{font-weight:var(--font-m);padding:0}.feedback-options.svelte-1grrhhv.svelte-1grrhhv{padding:var(--space-4);background-color:var(--surface3);border-radius:var(--border-radius-m)}.feedback-header.svelte-1grrhhv.svelte-1grrhhv{font-weight:var(--font-bold);margin-bottom:var(--space-4);display:flex;align-items:center;justify-content:space-between}.options.svelte-1grrhhv.svelte-1grrhhv{display:grid;grid-template-columns:1fr;gap:var(--space-3);margin-bottom:var(--space-4)}.options.svelte-1grrhhv label.svelte-1grrhhv{display:flex;align-items:center;cursor:pointer}.options.svelte-1grrhhv label.svelte-1grrhhv:hover{color:var(--link-active)}input[type=radio].svelte-1grrhhv.svelte

Chrome Cache Entry: 1297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	206
Entropy (8bit):	4.748805071873871
Encrypted:	false
SSDEEP:	3:HZ8sqDmJS4RKb5ykKcvXjXRHoNcHXDFhCTL6lRcoFU6uSvHBXheF/cazTPH8KFAh:H69mc4sl3O4zDQL6Akd/Bg+fb
MD5:	14EA00F1960955017A2D326CE7DD4901
SHA1:	9E6218631E95A6197E972A28CFF3F6CF12996DBE
SHA-256:	0D1B099D5A0C41A08AF16526735EA6A3C14FF505892302D1D5588A9FED26CEFB
SHA-512:	AE2CDC29D7B7E03D9245858B251BC1E8F13E0D38B4A664B45F36E1A82DF74D6624E9BDAA749D2C8F40D8E892E0F2EBBECEA9CA915D28C53D34FB87FCC2178D21
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/close.C3ug6nNR.js
Preview:	const s='<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M19 6.41 17.59 5 12 10.59 6.41 5 5 6.41 10.59 12 5 17.59 6.41 19 12 13.41 17.59 19 19 17.59 13.41 12z"/></svg>';export{s as C};.

Chrome Cache Entry: 1298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 56524, version 1.0
Category:	downloaded
Size (bytes):	56524
Entropy (8bit):	7.996279556397038
Encrypted:	true
SSDEEP:	768:USOjjAcqBwjR0NVAB181/fmrg87L2UQDCeZkWut6OW6r2jQnP7UCSytmVv:USMqBwjqVG181/fnJCbjt6OW6noCYp
MD5:	27647D7921581BA107F01132400E678E
SHA1:	06E610CD7ABE86BF573693E6729568BAB65E1834
SHA-256:	8F7F3452B31E9566182CB0D980E940544C18A43102C2146F87F0B02AFBEDF495
SHA-512:	5AB6C7BF0E60A47F4455D9E44B4EF530047ECE08C5B511B05189BCBAE5F0D3650D493D66619CB21CDAA1B5C52CEAC48B1BAF6DB9A8291FE6F2A8AE0DAA3B0034
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/finance/fonts/GT-America-Standard-Black.woff2
Preview:	wOF2OTTO...........h...x...........................6..$........`..j.6.$.......A. [....5ex.Q....m......J.O\|.....[.T.%.=0.e..v...W.......W$...K.K..-. ...._'a...K..Z.K..s..$b<G.......%Y..:Wdu..6.$n...j.uy<{)....UR%UR%.[)....x........53..bZ.`...$.tJx.[q.$.+.y.@i..{Wbp..LG.^8._....S.2.. i..zU..........p...E.v.......@qis..-.g'...jD.....X...S......~....)L%U..;..Q...$...3..?n...8[QD.H.U.H.............K47K.._...>oWl.0...Z..........e,3.(.%+..P.J6...? &A..(..=.v...W.\|.u...}F....O.8X..Ms..-.7.1........e.p.~~R.D....oX..uR.UR%5...Mm.KE..=..r....^2..[b;.x.k........)........#..D,....(.BL...........C....`$j$V}..Uj.bW......n.,"Y..F..c..e..........ot.+...Q....c....}.O.n5.&...8. k.?.K%l..Y.:q.&.{`.o..Og.5...DIfvy&a)D.&E..@...]`.......< P.....M..E...........{.........p <...u.[...=.....#.....w=n...0.u...c....$A3.":...``Dl..,4...AL$.... b..(.........\...Q.........^6t.........hM.qP...?.0.!&CQ....S ..<(<.1...!..4..q...s......c...$.M.~......^....=.m...=....

Chrome Cache Entry: 1299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23973)
Category:	downloaded
Size (bytes):	24071
Entropy (8bit):	5.2770226710942785
Encrypted:	false
SSDEEP:	384:juYn1207/S2coevQ0UfL1HSAiljqfjG2fKTE7cGkMZNyCSC+bi+S6mxEUAidIJdk:JnR+2o68AileLG2fKTE7cw7yBCIi+S6+
MD5:	DDFB615B720E1B73E1C2E87AB6EF63EB
SHA1:	E94BC534BA7145794163740DA11326399E5CEFAA
SHA-256:	9DAA6E7673D4FDAAB133F400273F1E3DCDCBDB154244F76179BFD47F5BAFFAA5
SHA-512:	ACBCE719B71722802755E2A054182B4A7832FA4D5F96366035DAEA22A44EC9B482B6BCA902930BBCFF22428EAF1F4FE580C7C7AB3ED9FB23D8E1977FC7723ACA
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uc/finance/webcore/js/_staticFinProtobuf.0c5bdcae45da9ec4f59a.mjs
Preview:	/! For license information please see _staticFinProtobuf.0c5bdcae45da9ec4f59a.mjs.LICENSE.txt /.!function(e){"use strict";var t,n,r,o=e.Reader,i=e.util,a=e.roots.default\|\|(e.roots.default={});a.quotefeeder=((r={}).QuoteType=(t={},(n=Object.create(t))[t[0]="NONE"]=0,n[t[5]="ALTSYMBOL"]=5,n[t[7]="HEARTBEAT"]=7,n[t[8]="EQUITY"]=8,n[t[9]="INDEX"]=9,n[t[11]="MUTUALFUND"]=11,n[t[12]="MONEYMARKET"]=12,n[t[13]="OPTION"]=13,n[t[14]="CURRENCY"]=14,n[t[15]="WARRANT"]=15,n[t[17]="BOND"]=17,n[t[18]="FUTURE"]=18,n[t[20]="ETF"]=20,n[t[23]="COMMODITY"]=23,n[t[28]="ECNQUOTE"]=28,n[t[41]="CRYPTOCURRENCY"]=41,n[t[42]="INDICATOR"]=42,n[t[1e3]="INDUSTRY"]=1e3,n),r.MarketHours=function(){var e={},t=Object.create(e);return t[e[0]="PRE_MARKET"]=0,t[e[1]="REGULAR_MARKET"]=1,t[e[2]="POST_MARKET"]=2,t[e[3]="EXTENDED_HOURS_MARKET"]=3,t}(),r.OptionType=function(){var e={},t=Object.create(e);return t[e[0]="CALL"]=0,t[e[1]="PUT"]=1,t}(),r.PricingData=function(){function t(e){if(this.indices=[],e)for(var t=Object.k

Chrome Cache Entry: 1300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2709)
Category:	downloaded
Size (bytes):	96160
Entropy (8bit):	5.518629584665947
Encrypted:	false
SSDEEP:	1536:NGutnTqYCDzPzJeUAU3zSy8PFu+3sgUD1LL6WfQg:nnTq7zkUAwzS9L3sgWLLLfN
MD5:	E5DB9525F3D7EFD966AE63ABA86669E0
SHA1:	EF9DADB1023BAC903273F17E8DDE163D0FD7CF1E
SHA-256:	CDB7911DD984DC9B0840A0A94E711600B05DD72D612465FDB18ECFB67EA9E66C
SHA-512:	988E944410D6700C1265A5F2BF315F5B4A9051DE79ADEB38D43B38F0B0E43326D2CB3F87C750C9C5F0C8175BEE4625BA4F3FF6234A8D05CEB83AB4471ECF76FC
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/dv3.js
Preview:	(function(stc){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object"); .},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}; .p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Mb=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Mb};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=fun

Chrome Cache Entry: 1301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1455), with no line terminators
Category:	downloaded
Size (bytes):	1455
Entropy (8bit):	4.9844346716798205
Encrypted:	false
SSDEEP:	24:7oeyO8Rt5V+3J/94Z3bZJWLvQWLbzIHrr3B0hHvExBMgZlw:Me3At5V+3J/UdoLr/0fB0hHvExBZlw
MD5:	888132CB49EB61157282573521D113FB
SHA1:	417E5B97C05FD5E83C45B3E338C046A74AF92D61
SHA-256:	2BFBCF113648110F321DD1468E63BDC43C2E8F2FEE7E4B964630D299E2B9A3DA
SHA-512:	8EC833B81A599BB91A54E445907E6139C13FC07B56B3CB79B5A668E52C654C973F0B281E0B4223F935C83B7B0A28E8F9B358005B30FDC5AB8B61B9E37B274FDB
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/nel/css/tdv2-wafer-content-list.custom.888132cb49eb61157282573521d113fb.css
Preview:	@-webkit-keyframes fadeOutGeminiConfirm{0%{opacity:1}to{opacity:0}}@keyframes fadeOutGeminiConfirm{0%{opacity:1}to{opacity:0}}.wafer-yvideo{position:absolute;top:0;bottom:0;left:0;right:0}#atomic .wafer-playlist-active .border{-webkit-transform:translateX(0);transform:translateX(0)}#atomic .wafer-playlist-active .item-content-wrapper{padding-right:16px;-webkit-transform:translateX(16px);transform:translateX(16px)}.show-then-hide-gemini-confirmation{-webkit-animation:fadeOutGeminiConfirm 3s 3s;animation:fadeOutGeminiConfirm 3s 3s;will-change:opacity}.nativeShareButton,.reactions a{position:relative}.nativeShareButton:after,.reactions a:after{content:"";position:absolute;top:-12px;bottom:-12px;left:-12px;right:-12px}.ad-type-MON-LREC2~.simple-list-item:last-child{display:none}.sponsored-moments-in-view #product-drawer-fab{visibility:hidden}#product-drawer-fab{-webkit-transition:opacity .3s ease-in-out;transition:opacity .3s ease-in-out;-webkit-transform:scale(0);transform:scale(0);opacit

Chrome Cache Entry: 1303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 1304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1784
Entropy (8bit):	4.640964665729478
Encrypted:	false
SSDEEP:	48:TtT4eQ7M0Vk677M0Kk6+7r10Sk6H72X10ak/7e0kk7Z:5TNQ7nVb7nKe7rKSn72KaC75k2Z
MD5:	877792D86D801176269A36AC7B4E6E02
SHA1:	AFDBAD37D52084701E3E299D1F95AD7478B466A9
SHA-256:	5CB2B348029A5C8CAD5342D73F5F78AC09AD0CF6EBDE80B5A1ED069F08332DDC
SHA-512:	0FA0A811BFEF6D83808022369BF9462EB57FB06F5E6B4672F313AAC04D2C85A5CB6A55A9D0F7359E608E6ECD90925E3F77784700882E3F5F93ADBD5FC22D6A3D
Malicious:	false
Reputation:	low
URL:	https://edge-mcdn.secure.yahoo.com/ybar/exp.json
Preview:	{. "expCount":5,. "selection":"individual",. "uploadType":"group",. "runProb":10,. "expList":[. {. "name":"vpixiea",. "beaconRegex":"^https:\/\/v-([^.]).wc.yahoodns.net\/i.gif",. "target":"https://v-a<RAND>.wc.yahoodns.net/i.gif",. "trials":1,. "uploadEndpoints":["https://ybar-<BEACON>report.wc.yahoodns.net/cs/"], . "timeout":5000. },. {. "name":"vpixieb",. "beaconRegex":"^https:\/\/v-([^.]).wc.yahoodns.net\/i.gif",. "target":"https://v-b<RAND>.wc.yahoodns.net/i.gif",. "trials":1,. "uploadEndpoints":["https://ybar-<BEACON>report.wc.yahoodns.net/cs/"],. "timeout":5000. },. {. "name":"vpixiec",. "beaconRegex":"^https:\/\/v-([^.]*).wc.yahoodns.net\/pixel.gif",. "target":"https://v-c<RAND>.wc.yahoodns.net/pixel.gif",. "trials":1,. "uploadEndpoints":["http

Chrome Cache Entry: 1305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	140
Entropy (8bit):	4.69869332015223
Encrypted:	false
SSDEEP:	3:YMsw/1OH/9cpHlLwxk8HHiJsMMg/eUtfYtlm2spn/Fx2VHfCkpHC+MZt:YMsw/1QuFcPMMg/ptQoXn/Fx2t6mHqt
MD5:	D328B1605246795A96107C0A6F60D8FF
SHA1:	53AF6BA62B81FAB853A3D86F3AF07EFC97793FEF
SHA-256:	5EC8AE0EE55B9E345CA4DA40144988D6ECEFF62744D8485E4549BDD3D6042677
SHA-512:	C03C4D6E6D246E972755A80C7F3EC4E6CE94B97190E73E0DEC5934118D1201E433A2562362744088CF77EA517E34E1459ACB7BF5FCCBC18DFD906EAA750A7477
Malicious:	false
Reputation:	low
Preview:	{"identifier":"1arkbttj0c3h9","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Chrome Cache Entry: 1306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	downloaded
Size (bytes):	2684
Entropy (8bit):	7.312089486802539
Encrypted:	false
SSDEEP:	48:Hy2JSJMlCPAI9eI7N7miqiZov00hnp07om47jSW3lAm0loMX7nR1wKp:Hy2JSqCDsIbTov00hnp07om47jlHevnR
MD5:	953C1AC7E3B4E3D58367E20B064034BB
SHA1:	FE8BE09EEE45EBF11C4C46918879725C85FE41E0
SHA-256:	123988D9B5968899975FF52A55B198E7209D4EC023F3A7462FDA68B52AC2B463
SHA-512:	70CFDA1C11AC079F51B971C9DD0426895990E350C041DDA60E13D86D38B0D043B5D647F750B7F479270BBA439A7375775BFCEAD62BA210F1E0F8FFE52791B420
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/ok/u/assets/img/spinner-24x24-anim.gif
Preview:	GIF89a.................................................................................................!..NETSCAPE2.0.....!.......,............%...%eZ..4Z............<.a ..&...x..w..........8qT&...aH0D...P\.....1....~.J...`#..B.5....5..\|%..V@.@....Z@....'....5........)..q)...)....n.....#....n....D...\|......g.?..?.......Z.9......$.."..".......q..0 .,E........@..T.)....:L!..!.......,............%..3.".(s...P<>...Rb.........U9...AL..,/......@.........Vp.O.DB.t.&..A.........M}........u......'tA.....i6..g,...i.~';2..\|h.W......\|.../'..g....W".'zW.....1....#.6....."J.6J'."...0A!.!.......,............%..E.(:........V2.7....A.$..^I.q.....RH.....`...........nDR"@ ...k1..0.E!.....H7......../....q~~...0.l/....KXc%...M".)......S..D......"......c.4.\|#..$.."."..0..#../..Y.4O.=.....B.0!.!.......,............%..u@e."$..B......\.<.(.....\|..A(b.f....{...kJ..D/.H..p\.N(eq0...ds......^..S}.........P...Czy.f.$.......%......).....Z......p;.....e$7"...dQ....3.._.7..r\|..#..E>.1....*.$.

Chrome Cache Entry: 1307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 87a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.8739754318490536
Encrypted:	false
SSDEEP:	3:M3ntzl7/lHh/:cplf/
MD5:	65786C291A4603AA5150A1884452838D
SHA1:	612B96A8FE9F1C36E8349696A608780E6089AC77
SHA-256:	DE3A7CA2F8AE592AAE2652335B755B0D0B65DF663DDA8776387CAE7339B76D64
SHA-512:	F0DCF63AAB5264F143B8B012800D771615669D4B833ECCABF8A78449BC2571E8A331992C3A92936FAE8D5F3E1A5DCB940B7921B6A74318187107BAC93C863C9F
Malicious:	false
Reputation:	low
URL:	https://c.evidon.com/a/4.gif
Preview:	GIF87a.............!.......,...........D..;

Chrome Cache Entry: 1308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 15, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	581
Entropy (8bit):	7.53980940925687
Encrypted:	false
SSDEEP:	12:6v/77ZD226FOUDK4PA/mtr51RHwtU4B+borxJFMlu0qv4r:CVmTpYuz/IUDElSuNY
MD5:	2697F4B848D2400CD051312585A6BF42
SHA1:	4704E96C89391D96F6BA1999C727CE8661A36F23
SHA-256:	528B6B3E8EDB272A61E1D3B10F11AF0D241680684143FB5339FA2758A3E65187
SHA-512:	1BFB0F7A646FFC61B0C98CA1D91AFA4FE426DB0025FA70167BD1B229E2F4013E3358E285B2E5674A4F102CA35C80D8B6D52E9BDD4B35CD140FDE03C40CF79E89
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............D.,....IDAT8...=HUa......\..J..Q..b...H...ii3...=... ....B..Z"htQ[...!...D.)~.W.y. .....O..........A..._........N<y...Z.9.....V.Q2F.t...I...u.f...fu.."..&J.@...s.^\..CI.+..U...j.03..l.k.......K.....]..C.F_b..D.-(...Y\| v..i...[..f.w>..>..y........3.s.S.y.r.fMu.4....B...<.MB.w.....C.%K`..J...D$..r.1....."...dl:X.x.-.Dd..R0.._....b..+......[..\|6Z...=..H....p...H...}...M..O.....q..c/.a.2.... iq.T...o...1W..10X../.H.."2..5..N:......l...V+c.F)....Ela.[...................C.r..'..E.B...v~...S8*1...A.L.......[)......IEND.B`.

Chrome Cache Entry: 1309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 356x180, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	13432
Entropy (8bit):	7.9869617143988565
Encrypted:	false
SSDEEP:	384:4O8uQnaddkg1phvlh0p+NGvXX+I8gRry6x:4h9gtlhArX2gA6x
MD5:	400604C45EFF6A0377A76E61EA570EBF
SHA1:	BC5C096A46BAC19DCB8FA23D70B6C5F90498C7E0
SHA-256:	1E833A197D15CA3B3368A742EFE35CD6BC1B1C9C295221A7F73E02E04D9A6057
SHA-512:	238536AD4908AA1282E3EBE7C06F202F4389FAF8D507C62F6998B97BAD1B1D1F662C8EB040FFCE0369C5C9E2DB3A3435EC1B8201A9074722815BD3C320434470
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/tWcwFX8HQlVWon2w5cWwwg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/nbc_news_122/ec4ca8639c46e06de9e43dd9c84991cf.cf.webp
Preview:	RIFFp4..WEBPVP8 d4..p....d...>y4.G$.!....H...c.....b.Bm.]..gw.o.O.....~...z@tt.9.....3.7........~.>^>....zS..e..o....z.+.C......_.~...........D.o.1.......@.r>...........{.....o....~...q...[....w................:.u".A<.......0~v[Qn....=j..Pd:.Wy._..IZh..X(q..2..x3...z$...g..P.md.k.9........>Ya..Qa...."{F.-.....)S...o.......(h.X.E.....J.jM,.....n....U..W....#.\|...~.4..m..>]Av...{.X....E>.j.XF..wu}.-z.HN.kIoc.@s2u..]9......D..&.T.\......j..N...k...6_.0.......p...X......q..1........]..u.f..2y....d..8.x\.Uu..D...Q!:./LO.0.tl...?[...7......Jr7.q.....kA$....,....UC%.I....)xu.Y...R.......[....D../[m...&...~<.{n. @`.._"..Mh...r.m..LL99..h.s.<E..?..OV..H...)..4...672.. !.\|4.. `Y......,^..C.m....)...s...l%..K.hx.7.K..6...'j....:.T..5..D<.4.0..9..7^..z.W...R..&6....N.f......?;t.pL...M..^.~.z6.>y.f...jJ\|.3..+/.H...p...B..C.^..u....k`a..c.m..Y...v.?......fp.....M.3/.c.F.v..I.../ey..j....p..I..e...O.....y{6np\K.e.j..s..ALO.j....YI1.0K...2;C;......(7N..T...

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5750
Entropy (8bit):	7.574189703556205
Encrypted:	false
SSDEEP:	96:XAQDpP5FfYqqeTqQz1S2rO7lPaAm+MilgzxSAuKwNclOs+am:5pB6BPQpS2r4SD5rK
MD5:	14E5156BFC61CD19EBFD7532036DDCD7
SHA1:	A8A21310ADEDB1F15A3BE0EE799E21767B4D2DDF
SHA-256:	A4ECE14163590F39CBDE3774232F05864BC6037C6362E2C511F9D9486E328A3E
SHA-512:	C7970B502068149206A1AD057F2322786DE847380256270F6B8BE64D368C79B0D2EFC690EB8D04738637AE08B31785C138EC06B8B203545146A249F1EB8F0E3B
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/473513299895995753/images/headline4.png
Preview:	.PNG........IHDR...X............;....PLTE..............................................................................................................................................................................-..*...9tRNS....;..g.........r^.mC>.H.w.2.6..L.b.\|!.Y...T)%P....\..8...>IDATx.........................................................................`..@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU.=8........m.UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa........._.AUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU....... ..FPUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU...@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU.=8........m.UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa............................\b..z...(..."..h..G....&~......V.N..E'...I yg.pq.aR.....6.,..\|...A....%..X..5....$u..u....Pl...s...v.n8..]..]. b.;.."v.x....]....U.=0.+Dl....B...`.1DlZ...y.....

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156078&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&predirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dpub%26refUrl%3D%26vid%3D16729006893546744890180387000V10%26axid_e%3D%26ovsid%3D%0A
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	25014
Entropy (8bit):	6.2388895644841185
Encrypted:	false
SSDEEP:	768:ViNuigMBRv5MBRvwbpR/TmoNXLmVomRzzII+dmY:QNujOv3Tmo5mVXY
MD5:	BA61AD641DB8F075D5B02E3EF6B767A8
SHA1:	99FE0BA5D6456E2FF33662B8C542E369072B9127
SHA-256:	3F38969046BC7F2703D7DC4D33F6FB02F08681F74611BBB1DF80EEE740226FDB
SHA-512:	F0F22B4D8915604FC598E1EDC0803CEA789E3D3C3B1116E5EC87B755A4DC80C5FCED61BC5B801C0672F4A1E5AFAE9DD7C68030B9D93A38A39225676A6AF048BD
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=3964069192126952&correlator=278615944818197&eid=44809527%2C31081979%2C31082256%2C31082224%2C31079525%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403260101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Cyhp%2Cmain%2Cdt%2Cus_yhp_main_dt_top_right&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5&prev_iu_szs=300x600&ifi=6&sfv=1-0-40&fsfs=1&fsbs=1&eri=4&sc=1&cookie_enabled=1&abxe=1&dt=1711672933158&adxs=951&adys=572&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=6&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&uas=1&url=https%3A%2F%2Fwww.yahoo.com%2F&vis=1&psz=292x2601&msz=292x600&fws=4&ohw=1263&psts=AOrYGslAPAu98lGG3XgKrr7V-R_vTYpvBM463yiazzZNAw3rzegT_jzjPr6juc6MP-Caw7WHOcYRuz_z0h0UsFG6yhPGTTiHtbu2Q0--lEPGmjpFtd9U%2CAOrYGsmmRpw4LvY1NuCbHvvNEGS1kxb5BfAuoK4o6TPmDLng0EO6P2MteY-yvtQpC87U6h1UGkTs0kj3gHFmqc9ELh_EEPpycsQfgz-0gpmeWQwF_UVBoyxWuEJ8DA%2CAOrYGsnVww0uwehfymDpZJednZOwVq3D1tiGQEWF8G9JZ5uonlEbLvqT-KZSmMMJ8qD6_BsuI5Tmp8TAOELB4yYaMPaGOJaOFKr5kYoTcIi61CO-IZn9%2CAOrYGsklMvnM7RrB1DePilU65nvjVKDG2OeQqO2gmSZN2n66toDi1VBbbw1cTcTCeKvHvCzuDBjpv1Qk4d_3-zKv0CVRcWJAaR3vZmD54L_8JzGkhcjvNmI7kdIUqQ&ga_vid=810279681.1711672893&ga_sid=1711672893&ga_hid=1559913255&ga_fc=false&td=1&topics=3&tps=3&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1711672884096&idt=7479&prev_scp=loc%3Dtop_right%26ri%3D1%26y_pgid%3D6%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHBJ3BJ0%26y_abt%3Dyhb%26y_plcmt%3D827382134%26y_crid%3D827382134%26y_bdp%3D0.68%26y_sz%3D300x600%26y_act%3DheaderBid%26y_bid%3D25310%26y_scpvid%3D25307%26y_fp%3Djhek%26y_ufr%3D1%26y_dp%3D0%26y_dt%3DO%26y_uid_mod%3DliveIntentId_on%26y_ref%3D0&cust_params=bucket%3Ddrop_heimdall_homepage_control_bucket%252CMimicProviderListv2-copy%252Cseamless%26cobrand%3Dnone%26colo%3Dbf1%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3DUS%26site%3Dfp%26ver%3Dmegastrm%26pt%3Dhome%26spaceid%3D2023538075%26yrid%3D2vl5n89j0c3hk%26bka%3D0%26y_bx%3D1&adks=3559193298&frm=20
Preview:	{"/22888152279/us/yhp/main/dt/us_yhp_main_dt_top_right":["html",0,null,null,1,600,300,0,1,null,null,1,1,[["ID=c17838da47b8e036:T=1711672933:RT=1711672933:S=ALNI_Ma1p-mVFL_LnvK_jGGK7KTMpi-vEg",1745368933,"/","yahoo.com",1],["UID=00000dd6af4af3ca:T=1711672933:RT=1711672933:S=ALNI_Ma5D7cjVdSKOPv0CZBOPKVzHKvXkg",1745368933,"/","yahoo.com",2]],[138462851948],[6275051704],[5285812218],[3186246143],[539868],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"COPI0cmemIUDFUjS4wcdlQsC0g",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"6",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=e0237ccb140a7e71:T=1711672933:RT=1711672933:S=AA-Afja3p4p1XDxKa4M76qE0J9Go",1727224933,"/","yahoo.com"]],[]]}.<!doctype html><html><head><script>var jscVersion = 'r20240327';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><div class="GoogleActiveViewInnerContai

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	7057
Entropy (8bit):	5.08526045681123
Encrypted:	false
SSDEEP:	192:KAUErh9Xatgq/ILBYce7nalVMaFnYI2mk7qs/ztgV+P:KAnQc3fDE
MD5:	FDCB5D8147FD0AF75062A826E21EB372
SHA1:	AFA53CBC51B03D26B61C7366EF48B8A0AAE116CD
SHA-256:	74F9A4A2414069E7FA871E873C84D6800C86A90804443519B1F1284A14410570
SHA-512:	8F025DF712EDB315EE5B858FF3991004410280E0325CB0ECB90BCC2320EC63276065A673A4F7AB42A0447DD9476BD7E0CE48184541C3A0CF42A9B56CD464A606
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250
Preview:	<!DOCTYPE html>....<html lang="en">..<head>...<meta charset="utf-8">...<meta http-equiv="Content-Type" content="text/html; charset=utf-8">....<meta name="ad.size" content="width=300,height=600">...<meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no, maximum-scale=1.0">...<title>2024.Blazer EV..CW.LS.None.MT Range.Blazer EV Spring Acceleration.H5S.US.ENG.v1.300x600.NA</title>.....<script src="https://cdnjs.cloudflare.com/ajax/libs/gsap/1.19.0/TweenMax.min.js"></script>.....<script src="script.js"></script>...<link href="styles.css" rel="stylesheet" type="text/css">.....<script type="text/javascript">.. var clickTag = "https://www.chevrolet.com/electric/blazer-ev?cmp=OLA_DISPLAY_%ebuy!;%epid!;%eaid!;_%ecid!";.. ..var clickTag1 = "https://www.chevrolet.com/electric/blazer-ev?cmp=OLA_DISPLAY_%ebuy!;%epid!;%eaid!;_%ecid!";.. </script>..<script type="text/javascript">. . (function() {. var MAX_URL_PARAM_LENGTH = 34;. var CL

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 656x369, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	26996
Entropy (8bit):	7.993122443068858
Encrypted:	true
SSDEEP:	768:X3m9lLp0NJZADmqW/fbSPwJFqlJtD1nA6F/ECTlQj/Fjw:m9d2NJZHqW/+h2g/O/FU
MD5:	9599873611AA98D89459D0A496EFEC46
SHA1:	3A1AA466A2D47ADAE1F3C6DB8CF597EA6EED4338
SHA-256:	796B6FFE096A36D16FB5B55F57F262621AAA849F5685F5A5AD1F987AD967B76C
SHA-512:	2329B163A653AD649B991669375B1324C74FDF59AF95AE3C26F3C1D58840AAF352CA234739E1F04D79E96C35E43A1DED54F342A1F6A26B49CDD7C80DA25DA45A
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/EqbEGtvop22bpqFy8sUtvw--~B/Zmk9c3RyaW07aD0zNjk7cT04MDt3PTY1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/bloomberg_markets_842/4454d5cb457add7be7828fc5a55e4ff1.cf.webp
Preview:	RIFFli..WEBPVP8 `i..p+.....q.>y4.G$."&..=P...h-...^...-].#.................'.?.............7.....a...g.O..W?..........c.W............../._..y_...}H.........1.].......{...;./.O.7...nux......._..._X.......o..<.....z...ts.#....zQ....A..i..9..]c........T.'..=........./....f./...._.........(.?..._.6w....N...@..3....z.....N_55...gN./G=..u... ..k...:.`..._.b..z.71j..N....ES..9.%q(F......CV\..a,..RA.....4<V.lQ...u.a.$c....C..X....A[.;...O.I.FiA..$..\|..)k..:..r....r.2../..J..3.....:...+9c.0"...+WK&...L.n.b.n...+DY...`......`.6.3e.......X.7....; y.d.J6.38.S..S...o.-F....M..........{..:..j9$)l...y......<...e..=-.H.j;....{9W....66....0.....DJ...j.........n.~Ag...U..Z...\|...&......T..{...(....Z.kA?.m..9...sg.....4..)yXT...=.&9.[.{...7.G~...U.$b....:..`..P..gv2.N....W.}..fW.....s....W..[...Q..}..dgT....)..$.....7g.....;....b.$>=.p.7.-...0c.....d.k".. ..R.K.\Ih........D..T..:o.J.uG..d.q._y....q.....#.s..".^SQ.B.a.O..*...2....!.R9....J.qY...c...k.

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=109&external_user_id=0bf86f4e7d934cb7b5daae7a5c7d8db5&expiration=1714264899
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	1.6826987302732233
Encrypted:	false
SSDEEP:	6:ZM6MdN4jF8VGH0xnYOqEiCNc/+O1t+KbAzNct/XTXP0zyQ59:ZM6gyh82eqExk+uvbAzNc14d
MD5:	B6814AE5582D7953821ACBD76E977BB4
SHA1:	75A33FC706C2C6BA233E76C17337E466949F403C
SHA-256:	4A491ACD00880C407A2B749619003716C87E9C25AC344E5934C13E8F9AA0E8B3
SHA-512:	958268F22E72875B97C42D8927E6A1D6168C94FE2184DE906029688A9D63038301DF2E3DE57E571A3D0ECC7AD41178401823E5C54576936D37C84C7A3ED8EF6B
Malicious:	false
Reputation:	low
Preview:	..............h.......(....... .................................`...d...f...i...k...m...p...q...s.. s..$v..*z..?...D...M...V..._...b...c...l...v...y...\|.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://a1653.casalemedia.com/impression/v2/964909/85/co30srvj5on9aqje0to0/eeeddcaf-36cc-4d4a-9e2c-280092c39486?verifieD=1&userID=ZgYOPsAoJI0AAAi4ADlhawAA&cmpro=1617&deviceType=2&expiryTime=1711673543&profileIDs=&creativeID=1e7c128&pubID=195918&format=banner&channel=site&ap=ZgYObwAHj6AITwUDAAjB9HdtnSzZAyLL9EOGnA
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12307)
Category:	downloaded
Size (bytes):	12308
Entropy (8bit):	4.7482672051769494
Encrypted:	false
SSDEEP:	96:8j5EpTbcEd9lZ9UI3Sm9Dy11hso/T7XGwuITbfkbOTbgUkTbFyGVuIIRZXr1vbjg:+EpHtvifT7dHf6OHgUkHrVul1DjmUm
MD5:	1D2B2BAA5B963DC91CFF877CAA2E926F
SHA1:	9148FA1A6595C7CE644F5A11593DA114CB080148
SHA-256:	307C1E23BC2D706B8BBEFF4A61B6BB239FB8F394C6CC2BDA41E7F74EDE2648B7
SHA-512:	B7D8FDB6C3F06F80A5E74D45CABFE6054ED4BDF59D022C552A54B5192F7DBFF6E5103AF93A80C35FC46106C3B7774F48D963B8CFC4A281183B39BBAC1489FA9A
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/Link.zOM28wTY.css
Preview:	a.svelte-wdkn18{--link-transition-duration:.15s;transition-property:background-color,background-image,box-shadow,color,border-color;transition-duration:var(--link-transition-duration);transition-timing-function:ease-in-out;height:-moz-fit-content;height:fit-content;font-weight:var(--link-font-weight, var(--font-bold));text-decoration:none;display:inline-flex;gap:var(--space-1);align-items:center;line-height:1.25}a.primary-link.svelte-wdkn18,a.loud-link.svelte-wdkn18,a.subtle-link.svelte-wdkn18,a.none-link.svelte-wdkn18{--link-transition-duration:60ms;padding:var(--link-padding, 0)}a.primary-link.fin-size-x-small.svelte-wdkn18,a.loud-link.fin-size-x-small.svelte-wdkn18,a.subtle-link.fin-size-x-small.svelte-wdkn18,a.none-link.fin-size-x-small.svelte-wdkn18{--link-padding:0;font-size:var(--font-xs)}a.primary-link.fin-size-small.svelte-wdkn18,a.loud-link.fin-size-small.svelte-wdkn18,a.subtle-link.fin-size-small.svelte-wdkn18,a.none-link.fin-size-small.svelte-wdkn18{--link-padding:0;font-si

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1098), with no line terminators
Category:	downloaded
Size (bytes):	1098
Entropy (8bit):	5.501289218227114
Encrypted:	false
SSDEEP:	24:2HSJpuadP1GYcT1nGyk5RQ1QX0q/Fyx3yVAuN94gNY:2yzt+ThGykD8Qkuyx3+3NOf
MD5:	29440176698326BC20A63130BE2AB510
SHA1:	1E387C3DC886D2445C391E034CBD9162A1B7B061
SHA-256:	E6E6D52339F36F8DE848D190B9FF3CB114D96CD6691F2B4B38E68A480C600F61
SHA-512:	C11FC17313F8F0CD04EDF5B708CD91AC0C49E409738FA5A5531D9B25641E73C69D52F80FAE3536234C72E760D4AE97A09173C12B917854AEA59078A13E3957DB
Malicious:	false
Reputation:	low
URL:	https://tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=1&ttmms=972&ttfrms=1092&brid=3&brver=117.0.0.0&bridua=3&bds=1&tstype=128&prndr=1&eparams=DC4FC%3Dl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETauU2%3F4r92%3A%3Fl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETar9EEADTbpTauTau_ag%60%60376g%607572335_6_6ce_h%60c%60fa6h%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3E&srcurlD=0&aUrlD=0&ssl=https:&dfs=6353&ddur=3&uid=1711672942402597&jsCallback=dvCallback_1711672942402692&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&htmlmsging=1&chro=1&hist=1&winh=600&winw=300&wouh=984&wouw=1280&scah=984&scaw=1280&jsver=5684&tgjsver=5684&lvvn=28&m1=15&refD=1&referrer=https%3A%2F%2F02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&fcifrms=19&brh=1&dvp_epl=225&noc=4&nav_pltfrm=Win32&ctx=20006197&cmp=31411294&sid=5071708&plc=388507207&crt=212200008&adsrv=1&advid=3876771&unit=300x600&turl=https://www.yahoo.com/&c1=1982032&bsimpid=e3c57e9b511b4b489b89376c48fb1875&prr=1&errorURL=https://tps.doubleverify.com/visit.jpg&ppid=103&auevent=ABAjH0i0yoUwlkeVmzcj-GmykGOd&aucmp=21039716546&aucrtv=553954458&auorder=1015903071&ausite=2328226494&auxch=1&pltfrm=1&aufilter1=1982032&autt=1&mib=0&mon=1&blk=1&dvp_cawf=crtwrp&cm360cw=1&dvp_rcp=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=244417929409.6999&ee_dp_sukv=244417929409.6999&dvp_tukv=66112681563.639656&ee_dp_tukv=66112681563.639656&ee_dp_dvtpurl=https%3A%2F%2Fcdn.doubleverify.com%2Fdvbm.js&dvp_strhd=0.5&dvpx_strhd=0.5&dvp_tuid=702374577348&jurtd=1253763117
Preview:	try{var dv_win = window._dv_win \|\| window.parent._dv_win; dv_win['dvCallback_1711672942402692']($dv,window,'1272e5b7a9f346648eb6fb44822a26b7','tpsc-ue1.doubleverify.com',{"ce":{"ddt":1,"dt":1}});}catch(e){try{var image=window.document.createElement('img');image.src=('https://tps.doubleverify.com/visit.jpg'\|\|(window.location.protocol+'//tps30.doubleverify.com/visit.jpg'))+'?ctx=818052&cmp=1619415&dvtagver=6.1.src&dvp_cbError='+encodeURIComponent(e.message)}catch(e){}}var dvObj=$dv;var impId='1272e5b7a9f346648eb6fb44822a26b7';var dup='';dvObj.pubSub.subscribe('ImpressionServed',impId,'ResearchIPv6FromAkamai',function(){ var tagObj = dvObj.tags[impId]; var serverName = tagObj['ServerPublicDns'].substr(0, tagObj['ServerPublicDns'].indexOf('.')); var tpsServerUrl = 'https://cdn.doubleverify.com/redirect/?host=' + serverName + '&param=akipv6&impid=' + impId + '&dup=' + dup + '&eoid=1000'; dvObj.domUtilities.addImage(tpsServerUrl, null, true);});$dv.tags[$uid].set({"bgm":1});try{$dv.p

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65514)
Category:	downloaded
Size (bytes):	438190
Entropy (8bit):	5.361615797339372
Encrypted:	false
SSDEEP:	6144:VG5dww6ayTv4qTEdrvtxeYaADl7gAjJSSSWfv8cTNgu+gnRt+qF06ODN0BdCa:edD6ac+1xeYfljbR8nDNU
MD5:	824BAB9C3B7B6C05450818962DAB235A
SHA1:	27C63259592A8B4E5879F203D601B0E0697D92A2
SHA-256:	61B95DFE73EDC5B90E339EFDCA7D112E81D2D08054326CAD5B000AF0AAED2657
SHA-512:	B6134F27C1DD2A6A08B880511CF3255E40B5E23AFCAB0A5D40D3A4B9462F5DADDFBDD3463798DB87C359CA45471D5E367CE79511D6A93C4F267E0157F24A6E5E
Malicious:	false
Reputation:	low
URL:	https://cdn.doubleverify.com/dvbm.js
Preview:	/! v5684 0821dc27 /.var __dv_global_script_start_time__="undefined"!=typeof performance&&"function"==typeof performance.now?performance.now():void 0,__webpack_modules__={2328:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.DATA_NODE_KEY=t.MONITORING_TAG_ON_TOP_LEVEL_KEY=t.TRACKING_RATE_KEY=t.TRACKING_EVENT_CATEGORY=t.TRACKING_BASE_URL=t.MAX_WINDOW_DEPTH=void 0,t.MAX_WINDOW_DEPTH=20,t.TRACKING_BASE_URL="https://vtrk.doubleverify.com",t.TRACKING_EVENT_CATEGORY="data-transparency",t.TRACKING_RATE_KEY="dv-data-transparency-tracking-rate",t.MONITORING_TAG_ON_TOP_LEVEL_KEY="dv-data-transparency-top-level-monitoring",t.DATA_NODE_KEY="dv-data-transparency-data-node"},9522:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Container=void 0;var i=function(){function e(){this.container={}}return Object.defineProperty(e.prototype,"size",{get:function(){return Object.keys(this.container).length},enumerable:!1,configurable:!0}),e.prototype.i

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, Unicode text, UTF-8 text, with very long lines (8057)
Category:	downloaded
Size (bytes):	8060
Entropy (8bit):	5.403370216888628
Encrypted:	false
SSDEEP:	192:Xc5qL5IsvFSA7YOxbaLTuZh+bSj8jhnlSrFZb9hnySIP3wzpk1J1jW7ZpTtOhOWx:Xc5qCxQ+LWhSjh6Z5hG3w1iQKhRXWRm1
MD5:	CAE51E68CBB7464FF604133207813504
SHA1:	9352D68DDD95E69466CD832A54038412DCAE31FF
SHA-256:	F75F8E1F27AC406CEDF903C5980B9577FCAE5F54D52FC8F5F42420A9D7A20C4D
SHA-512:	11913711E3123553C051560B4E50E93EB0467FCBD09CA8EA3FC6E3574B0FAF497C8106CCFFBAD54005EF3E3A60B04B2889ED60BD58CC8E24963C531610783799
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/Card.t2hG1sMc.js
Preview:	import{s as ie,c as V,e as z,b as q,d as y,f as I,j as w,i as b,p as E,M as N,k as L,l as H,u as B,g as M,a as O,Z as se,L as Y,w as Z,D as te,t as ae,h as fe,O as P,n as R,C as ne,P as oe}from"./scheduler.ErneftFr.js";import{S as re,i as ue,t as h,g as T,a as v,e as A}from"./index.DsErXEH0.js";import{g as le}from"./spread.CgU5AtxT.js";import{g as U}from"./i13nUtil.0wCphNmh.js";const _e=i=>({}),F=i=>({}),ce=i=>({}),G=i=>({}),de=i=>({}),J=i=>({}),he=i=>({}),K=i=>({}),me=i=>({}),Q=i=>({}),be=i=>({}),W=i=>({});function X(i){let e,s,a,t,l,f,o,_,g,u=i[14].attribution&&p(i);const D=i[16].header,C=V(D,i,i[15],Q),k=C\|\|ke(i);let n=i[14].subheading&&$(i),r=i[14].topCta&&ee(i);return{c(){e=z("header"),s=z("div"),u&&u.c(),a=q(),t=z("div"),k&&k.c(),l=q(),n&&n.c(),f=q(),o=z("div"),r&&r.c(),this.h()},l(c){e=y(c,"HEADER",{class:!0});var m=I(e);s=y(m,"DIV",{class:!0});var S=I(s);u&&u.l(S),a=w(S),t=y(S,"DIV",{});var j=I(t);k&&k.l(j),j.forEach(b),l=w(S),n&&n.l(S),S.forEach(b),f=w(m),o=y(m,"DIV",{class:!0

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	672867
Entropy (8bit):	5.447176931581874
Encrypted:	false
SSDEEP:	6144:3I+Rb6ZIk1C0nHjoZVD1pdoqDGuY8BpaVQmfISxfTrdpGoUs6gYdZl/ZK4bf6nO2:3IEk11oSVQ5COpvmtg6P
MD5:	DF6713F0DD37B81EFCF9EAD60768343F
SHA1:	E5B4655C14059D9E86D6B32A0F74E256DD356A6F
SHA-256:	F80F79A23B10AD35F147FE16FFA4F9747C9706C5E169A6D6A55FE55E76FA9C3B
SHA-512:	D436D47AC4906465443BDB1863F19EC82B33DF821438A786CF0D1587C94B1EC4AF6E11AC8C2974244487E8ADE37A92C83AA1927D7B07AFF571F4F025FD020E97
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/bidexchange.js?cid=8YHBJ3BJ0&version=12.1&dn=www.yahoo.com&ysection=main&yregion=US&ylang=en-US&ysite=fp&ydevice=desktop
Preview:	try {(()=>{var e={4764:(e,t,i)=>{"use strict";i.d(t,{QE:()=>r});var n=i(8386);n.eP.getConfig("abpWhtlstUrlsRgx");const r=n.eP.getConfig("AbpAcptPrm")},5364:(e,t,i)=>{"use strict";var n=i(859),r=i(3277);const s=new class{constructor(){this.trackerMap=new Map}add(e){return(0,r.DM)(e)&&this.trackerMap.set(e.id,e),this}each(e){this.trackerMap.forEach(((t,i)=>{e(t,i)}))}find(e){const t=this.trackerMap.get(e);return(0,r.DM)(t)?t:null}remove(e){return this.trackerMap.delete(e.id),this}};var o,a=i(4612),c=i(8626);!function(e){e[e.TRACKING=0]="TRACKING",e[e.DISABLED=1]="DISABLED"}(o\|\|(o={}));class d extends c.Z{constructor(e,t){super(),this.stateMap=new Map,this.detectorMap=new Map,this.id=t;for(const t of e)this.stateMap.set(t.type,o.TRACKING),this.detectorMap.set(t.type,t),t.startTracking(((e={})=>{this.isActive(t.type)&&(t.isOneTimeEvent()&&(t.disable(this.id),this.stateMap.set(t.type,o.DISABLED)),this.emit(t.event,e))}),this.id)}getMeta(e){const t=this.detectorMap.get(e);retu

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://bpi.rtactivate.com/tag/?id=20909&user_id=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (1880)
Category:	downloaded
Size (bytes):	1881
Entropy (8bit):	5.406102692506359
Encrypted:	false
SSDEEP:	48:a8uSrL+89JgcVWZAzqWsNUFtqOqLWVOq0eqkr90sTwyD:tuH89J98ZADsqFtqBKVOq0eqAhJ
MD5:	1188D8DA473D5E822A783AA8E5ABFFBE
SHA1:	11343B733EB32904BF89EAF9637A785225D2096B
SHA-256:	37B1B264BE2FAF26BA02361AE143F98EBEB1CDACC1900F4990FA7295735D9C99
SHA-512:	A028AA3859334FA0B6C9500876BC0092C09459D34953B6628054C0A627BF8A072C1E10572C512D60A757D31F9BAA8F489C2EB6291EB907D833C9F63BC6A8FE99
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/ViewMoreLink.B3HK46JX.js
Preview:	import{s as u,D as c,t as d,h as g,k,m as h,i as M}from"./scheduler.ErneftFr.js";import{S as z,i as E,c as N,b,m as T,t as w,a as L,d as S}from"./index.DsErXEH0.js";import{g as V,a as A}from"./spread.CgU5AtxT.js";import{A as I}from"./arrow_forward.DGeI3yUB.js";import{L as R}from"./Link.DZ6I_oHl.js";import{t as j}from"./commonUtil.Bb2Cnbsk.js";function q(i){let t;return{c(){t=d(i[6])},l(a){t=g(a,i[6])},m(a,s){k(a,t,s)},p(a,s){s&64&&h(t,a[6])},d(a){a&&M(t)}}}function C(i){let t,a;const s=[{className:i[4]},{href:i[0]},{"aria-label":i[6]},{size:i[7][i[5]]},{i13nModel:i[1]},{title:i[6]},{variant:"subtle"},{icon:I},{"data-testid":i[2]},i[3]?{"data-sveltekit-reload":""}:{}];let r={$$slots:{default:[q]},$$scope:{ctx:i}};for(let e=0;e<s.length;e+=1)r=c(r,s[e]);return t=new R({props:r}),{c(){N(t.$$.fragment)},l(e){b(t.$$.fragment,e)},m(e,n){T(t,e,n),a=!0},p(e,[n]){const m=n&255?V(s,[n&16&&{className:e[4]},n&1&&{href:e[0]},n&64&&{"aria-label":e[6]},n&160&&{size:e[7][e[5]]},n&2&&{i13nModel:e[1]},n

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5026
Entropy (8bit):	7.775875829670363
Encrypted:	false
SSDEEP:	96:5R+ZkStpf1hHOdd60KN6TzdS7wAgL5lTl5Eu6nl2EB:5R+ZrHHY606hEfLWZ
MD5:	EE180E570547399CF0DAB1653FFDE945
SHA1:	0BB34C6AACA0B1884B4B1B96C26157F6133253D1
SHA-256:	F4546800C027DB3FDEC855B4A1B1ACF87DB7BC9464ABB50118EB9F0AAD02F2AE
SHA-512:	7A9344EBD0CB534A5F8A992133D5DA10F367E1D35826E9681EDB78558A1F4D217AEBFF97FC8F964E706E9DE89D7A2BCBAF321100C07D4E3D8B01CC971F1B4C44
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/473513299895995753/images/disc_panel.png
Preview:	.PNG........IHDR...X..........):...0PLTE.................III......lll%%%...777[[[}}}...........tRNS.................1.....IDATx...o#E...I...5.b....@.f`...!..`...r..H\@F..$.1a9 ..r.N1..F.....8. ........%..W.&vl<......3SU..U.7r...i..h4..F..h4..F..h4..F.....NI....O.../d.!..o..4M...+.,O.R..W.7 $...I.j.4Q(..J.o..I...=.2.\...&..D...&....(w.b1]...8....:.D.'.Y....4...i..V..Y..,4..../.B.E........ah...72......ah...a.2..&4.d..,.o..YC.=h.l......r..A.E........)h.\|.?...#..ZNB....y.td......o.xc.x..zE.{........R.+.>.3%S...-x..F..h4..F..h4..F..h4..F...]...12...7......u4x..#4...XA;.....= p.-.._[......G..wo.@.M\|.I.z.[f."...2..\.4..Z...F0XG!.p.C..2.Z....T.{..8.Yi.._..b\.K....Z...2mY}..#...U......!.....G.,..[..0..Q..c...b:.....e.. .4...j.D..E.].......Hq..<U..v...N.......Za.c.....j(........e..Se...j..t.C...B.....R1....U:g.5]....Gg2....K9q..a..x...;...p......b...v....,K..d..1U;r6....L...e4o._.&GKI.m.k...5.*#...Y)5T8/j~\|Y\|...RR5.....J......x#....gqL.e.y..L....O./

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 700x420, components 3
Category:	dropped
Size (bytes):	109393
Entropy (8bit):	7.974024574913382
Encrypted:	false
SSDEEP:	3072:Kp8ri0iXYVBWOZPOaM2ctBV7g5wT9mAI3oShL5Yvv:SQtNMXEeMAI2v
MD5:	10B9505B1132CB78ECA32DB24252E064
SHA1:	B7FF4D52A71371342F96A0F07CB78E02563668FF
SHA-256:	6C4422323C12F77F9860C99DA08D8BF8CF98644B7907B7D29FB52E94ED405CB6
SHA-512:	2D79A82CFD871BC91DC360DB52E2BCADDAA83314DF79B71936783475790925302C179963ED0BB72956EC7165D80A994892345F434738AEDAB71B72B739C96793
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (3000)
Category:	downloaded
Size (bytes):	3001
Entropy (8bit):	5.381424019509307
Encrypted:	false
SSDEEP:	48:qkgDOV2IVBFsqIDUvfUKn96rHL5uaaB6E+zDfaYGwtcbMRvOMKPrIV5JyXqJSes8:7MOV2IVBF3Hrn96H5uay6PDyrw5vbV5F
MD5:	8779C31C316B83CF0424EA4B1E046993
SHA1:	3831F12DD75C9AB2C2A6798CAA63235CD7A6D189
SHA-256:	17E1A7A698E94CC961BE0D569DD0EF0D6C9295E8432E383B427894EBCC8A60DF
SHA-512:	AE5592C3B5B92D13E734AD804B09479274F1A6532A82FFBDC30667F9B9D2B4E63D2F41401F6BDBAB96BD0B79470F65C31EEB5AA62F7F10548AE7D3018041BADC
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/Link.DZ6I_oHl.js
Preview:	import{s as q,D as k,e as A,b as C,d as E,f as O,j as P,i as U,O as M,M as d,k as Q,l as R,Q as N,R as Y,c as y,u as B,g as F,a as G}from"./scheduler.ErneftFr.js";import{S as H,i as J,t as u,g as v,a as h,e as D,c as K,b as T,m as V,d as W}from"./index.DsErXEH0.js";import{g as X}from"./spread.CgU5AtxT.js";import{I as Z}from"./Icon.CDBsrPKz.js";import{g as I}from"./i13nUtil.0wCphNmh.js";function L(s){let e;const a=s[11].default,l=y(a,s,s[10],null);return{c(){l&&l.c()},l(n){l&&l.l(n)},m(n,r){l&&l.m(n,r),e=!0},p(n,r){l&&l.p&&(!e\|\|r&1024)&&B(l,a,n,n[10],e?G(a,n[10],r,null):F(n[10]),null)},i(n){e\|\|(u(l,n),e=!0)},o(n){h(l,n),e=!1},d(n){l&&l.d(n)}}}function j(s){let e,a;return e=new Z({props:{size:s[6]\|\|s[5],icon:s[4],type:"inherit"}}),{c(){K(e.$$.fragment)},l(l){T(e.$$.fragment,l)},m(l,n){V(e,l,n),a=!0},p(l,n){const r={};n&96&&(r.size=l[6]\|\|l[5]),n&16&&(r.icon=l[4]),e.$set(r)},i(l){a\|\|(u(e.$$.fragment,l),a=!0)},o(l){h(e.$$.fragment,l),a=!1},d(l){W(e,l)}}}function p(s){let e,a,l,n,r,t=s[0]!==

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMIxYmjuJ6YhQMVCBpoCB2J1ATFEAAYACCtou9kQhMI35T0tZ6YhQMV0aWDCB2LCg5k;dc_eps=AHas8cBBS7AbsAhXSz4VuXwYVc6GI7OpQpSZZ3klPfoBj_whNQmH1WvCHdfXSW-BkeGsRN30KVPru2q-HRW2nHP8Cls;met=1;&timestamp=1711672932277;eid1=2;ecn1=0;etm1=8;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	21
Entropy (8bit):	3.403989446485262
Encrypted:	false
SSDEEP:	3:YBE+dmYn:Yvvn
MD5:	031A8B6F8BAEA1DF8DA69CAFED49D579
SHA1:	BA6C224B8AC88AD4368A30775BBD4CBAD9BE3BA5
SHA-256:	E5C0644466F49DFB193A225E813EB639BD14B0933EAA4CF457688BA716D49D95
SHA-512:	5B70D7F4F7B5A20657E835AEC1698BE17949EBA4E9B68E4DADD13B5BE9328A602CA815C9AD9CC6205F291199E18E7237CB4512CC840904F65AC4162F388B5801
Malicious:	false
Reputation:	low
URL:	https://www.yahoo.com/tdv2_fp/api/resource/WeatherLocationService.favoriteLocation?returnMeta=true&lang=en-US&region=US&site=fp&ssl=1&crumb=VCpNxEjFVPV
Preview:	{"data":[],"meta":{}}

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5636), with no line terminators
Category:	downloaded
Size (bytes):	5636
Entropy (8bit):	5.265735267819504
Encrypted:	false
SSDEEP:	96:RAnbGg2U2OUK1yZ4YHPEppcIzvxpJ3xIzpNxv+S6hmAPm6UO5OUK3YvE0m6i5xDc:eCgl104YHPEppc+vxpJ3xMpNZgdWGEiv
MD5:	0CCB51BC1DD6980920DA39E008A599E0
SHA1:	929B21AC5A628A05E9F87A8E734954D90F1EE093
SHA-256:	B168BE397AC36DBCA02B07547DAD2A928427E765DF9B49A931F05DB057F3A83C
SHA-512:	665527069009017AB5B2ACAB0EE764052C84672451CCE9189961420E38239C3C63852D60366952BDFF92DECB3610BD8ABE6BDD44A5B8F89CF51CEF04445F2267
Malicious:	false
Reputation:	low
URL:	https://edge-mcdn.secure.yahoo.com/ybar/cerebro_min.js
Preview:	var WORK_SERVER="https://edge-mcdn.secure.yahoo.com/ybar/exp.json",TIMEOUT=2e3,Cerebro=function(){function e(){this.uploadType="individual",this.expCount=0,this.pending={},this.complete=0}return e.runExperiment=function(){(new e)._fetchWork()},e.sendBeacon=function(){this.runExperiment()},e.prototype._extractResourceTiming=function(n){var t="",t="[";return["startTime","redirectStart","redirectEnd","fetchStart","domainLookupStart","domainLookupEnd","connectStart","secureConnectionStart","connectEnd","requestStart","responseStart","responseEnd"].forEach(function(e){t+=n[e]+","}),t=t.slice(0,-1)+"]"},e.prototype._extractHeader=function(n,e){if(0==e.length)return"{}";var t="{";return e.forEach(function(e){t+='"'+e+'":"'+n.getResponseHeader(e)+'",'}),t=t.slice(0,-1)+"}"},e.prototype._fetchWork=function(){var n=this,r=!1;new Promise(function(n,t){var o=setTimeout(function(){r=!0,t(new Error("Work Order Request Timed Out"))},TIMEOUT);fetch(WORK_SERVER).then(function(e){clearTimeout(o),r\|\|n(e)

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9086)
Category:	downloaded
Size (bytes):	9136
Entropy (8bit):	5.281895806813602
Encrypted:	false
SSDEEP:	192:ifE7g81emMfvWf6G13/Oqj/Aa1A1V1sVD9J8Go/MMBnzD+Anq43sjx1Y3GGWGamg:+E75WfvWf3ZOqTAaCzuR9iG+BzD+8q4k
MD5:	03A469D5D4FAD4BE3B7B8CB906EB5A54
SHA1:	111EAAE47E88932C29A0B884AF0BAB50FFA0A28C
SHA-256:	BD9E7C9CD9FAD09294557A8BBB608D4221843D63B70E5A576A44451CC8ED698A
SHA-512:	253A3424B978F4723194529FCA8857CB8E9CF92EBE3B11A2ECE2F5B53C40C3CF1F7B96F1D7767ACBB12AC75C241F604EFBF54D0F53A2D2595A243D8AE79F932F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/c/9911_20c9aada89.chunk.js
Preview:	(self.webpackChunkCAAS=self.webpackChunkCAAS\|\|[]).push([[9911],{"./node_modules/intl-messageformat/dist/locale-data/az.js":function(){IntlMessageFormat.__addLocaleData({locale:"az",pluralRuleFunction:function(t,e){var a=String(t).split(".")[0],s=a.slice(-1),o=a.slice(-2),n=a.slice(-3);return e?1==s\|\|2==s\|\|5==s\|\|7==s\|\|8==s\|\|20==o\|\|50==o\|\|70==o\|\|80==o?"one":3==s\|\|4==s\|\|100==n\|\|200==n\|\|300==n\|\|400==n\|\|500==n\|\|600==n\|\|700==n\|\|800==n\|\|900==n?"few":0==a\|\|6==s\|\|40==o\|\|60==o\|\|90==o?"many":"other":1==t?"one":"other"}}),IntlMessageFormat.__addLocaleData({locale:"az-Arab",pluralRuleFunction:function(t,e){return"other"}}),IntlMessageFormat.__addLocaleData({locale:"az-Cyrl",pluralRuleFunction:function(t,e){return"other"}}),IntlMessageFormat.__addLocaleData({locale:"az-Latn",parentLocale:"az"})},"./node_modules/intl-messageformat/dist/locale-data/fa.js":function(){IntlMessageFormat.__addLocaleData({locale:"fa",pluralRuleFunction:function(t,e){return e?"other":t>=0&&t<=1?"one":"other"}}),IntlMessageF

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	downloaded
Size (bytes):	87803
Entropy (8bit):	5.30727769072708
Encrypted:	false
SSDEEP:	1536:SWe4NOZr5D3PaSXVCuEA/ZUxpvk4L+Y+NycIzLH8/S8J89A:SvVSSlC2f4LL/H8/S8J89A
MD5:	FE135B6E7222948159657C8CF35DEDAB
SHA1:	6AD58BB4E66543ACEDB50C34F709EEC86FC250DF
SHA-256:	3EF22EF08DF2E0A1183EB6C0652641745892A6E6100289CACA8D1A8DA173D197
SHA-512:	FF776D9234E3D3B1C7F15378451C1AB32732C7E234E7F29BEE25611EAE3FF2A6362616FD6B1154716997D54928B3F7EB1FB6B618DEFD6F63D0273B189EEC566C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/finance/nr/assets/nr-spa-1.246.1.min.js
Preview:	/! For license information please see nr-spa-1.246.1.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.246.1.PROD"]=self["webpackChunk:NRBA-1.246.1.PROD"]\|\|[]).push([[111],{9139:(e,t,i)=>{let s;i.d(t,{m:()=>r});const n=new Promise((e=>{s=e})),r=Object.freeze({onReplayReady:s,sessionReplayInitialized:n})},1199:(e,t,i)=>{i.d(t,{R:()=>r,z:()=>n});var s=[];function n(e){if(0===s.length)return!0;if(void 0===e.hostname)return!1;for(var t=0;t<s.length;t++){var i=s[t];if("*"===i.hostname)return!1;if(a(i.hostname,e.hostname)&&o(i.pathname,e.pathname))return!1}return!0}function r(e){if(s=[],e&&e.length)for(var t=0;t<e.length;t++){let i=e[t];if(!i)continue;0===i.indexOf("http://")?i=i.substring(7):0===i.indexOf("https://")&&(i=i.substring(8));const n=i.indexOf("/");let r,a;n>0?(r=i.substring(0,n),a=i.substring(n)):(r=i,a="");let[o]=r.split(":");s.push({hostname:o,pathname:a})}}function a(e,t){return!(e.length>t.length)&&t.indexOf(e)===t.length-e.length}function o(e,t){return 0===e.in

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (2721)
Category:	downloaded
Size (bytes):	2722
Entropy (8bit):	5.4168349045059605
Encrypted:	false
SSDEEP:	48:P2T/wYyQnnqMrMDVAd08dCrzaIiGbnti9Iitnza3itGbnFGbndj/Gbn0iWqXmdLd:P2TpywnqyM8GPz9cz2qxw0iUY+A6U0
MD5:	6400C79698808B7B47E26F97CFF08026
SHA1:	9F03F46EAF0928371FAEF594A69DA06238BBBAE8
SHA-256:	AE108DEF4F6EFCC0328B56523941C25130592ED5F75EF9C96ED0EFBBF6613612
SHA-512:	BB262F6B821DDB36AD1D349DEC305B4245E4FF904CFDC7986ABD48D84DEFC835CD5B4F2E4AF90E69728B58953BBBB9C2A15C8F993F62716CCD491F9D057628FC
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/Carousel.Du3F_O3u.js
Preview:	import{s as T,c as p,e as C,d as B,f as W,i as g,p as S,L as w,k as D,l as P,u as k,g as q,a as A,G as V,a0 as X,I as G}from"./scheduler.ErneftFr.js";import{S as j,i as x,t as z,a as F}from"./index.DsErXEH0.js";import{v as J}from"./commonUtil.Bb2Cnbsk.js";function K(d){let a,n,f,i;const u=d[8].default,s=p(u,d,d[7],null);return{c(){a=C("div"),n=C("div"),s&&s.c(),this.h()},l(l){a=B(l,"DIV",{});var r=W(a);n=B(r,"DIV",{class:!0,"data-testid":!0});var t=W(n);s&&s.l(t),t.forEach(g),r.forEach(g),this.h()},h(){S(n,"class",f=w(`${d[0]}-carousel`)+" svelte-1vfmff0"),S(n,"data-testid","carousel-container")},m(l,r){D(l,a,r),P(a,n),s&&s.m(n,null),d[9](n),i=!0},p(l,[r]){s&&s.p&&(!i\|\|r&128)&&k(s,u,l,l[7],i?A(u,l[7],r,null):q(l[7]),null),(!i\|\|r&1&&f!==(f=w(`${l[0]}-carousel`)+" svelte-1vfmff0"))&&S(n,"class",f)},i(l){i\|\|(z(s,l),i=!0)},o(l){F(s,l),i=!1},d(l){l&&g(a),s&&s.d(l),d[9](null)}}}function O(d,a,n){let{$$slots:f={},$$scope:i}=a,{updateEnableScrollLeft:u}=a,{updateEnableScrollRight:s}=a,{variant

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8282), with no line terminators
Category:	downloaded
Size (bytes):	8282
Entropy (8bit):	5.195578186302987
Encrypted:	false
SSDEEP:	192:3XumTufAC6+AjK90Q+qU4Pwf+fdOZ00HY+Zy4+X71:3emif3GK90KUxudhx4+L1
MD5:	66DD7E9082B2F37836DF08D0C25D4947
SHA1:	672C6ED2D02FC3C45F0231CBE7996B0958721938
SHA-256:	5DF38664779AE737BA7E379597410AE785F40B41914F8E912B48E76259B88935
SHA-512:	995F065E4E29C7D52026BA7C151D6ED3B5733CF14D8CB2CC21C05AE3D74E1F0B1F2D7CB059F885C97ADE3C921773637224AC0971674748F4E261E1655BB72101
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-benji-1.1.3-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-benji",[],t):"object"==typeof exports?exports["wafer-benji"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-benji"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var n={};return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,n){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}functio

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1582
Entropy (8bit):	4.931793664064342
Encrypted:	false
SSDEEP:	24:2dzNbLjFFE46eaxM2PZZYh0RObDQka8HBOEbnpc7ifybyOUOULWadFRp31:cBnjFFrh0J9cppOiEMFD1
MD5:	EFEE36F4AEAB976D622EA7A9B91DA859
SHA1:	B6BE1CC5C97161D2969A691656058184E5B60C72
SHA-256:	567CC823B1ECA80861686524BC59F5A93931AEE50E80113B437A89D4CD82D7AD
SHA-512:	16733332B15281C6F35E7325944E008CA9A68FA803CFD4D356529436340FF57A9A1AFF410A703794CFF57E6275FA12DF44A7B8CE8712FB1E634C0D22E26DC1D6
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/yahoo/help/icons/icon-signinhelper.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="16px" height="18px" viewBox="0 0 16 18" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>person</title>. <desc>Created with Sketch.</desc>. <g id="CURRENT" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="simple-fix-version" transform="translate(-687.000000, -308.000000)" fill="#FFFFFF">. <g id="Group" transform="translate(687.000000, 304.000000)">. <g id="person" transform="translate(0.000000, 4.000000)">. <g id="Shape">. <path d="M7.8749125,1.8 C9.3230375,1.8 10.4999125,3.0114 10.4999125,4.5 C10.4999125,5.9886 9.3230375,7.2 7.8749125,7.2 C6.4276625,7.2 5.2499125,5.9886 5.2499125,4.5 C5.2499125,3.0114 6.4276625,1.8 7.8749125,1.8 M7.8749125,9.9 C12.8694125,9.9009 15.7499125,12.8322 15.7499125,14.9121 L15.7499125,14.91

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	153
Entropy (8bit):	4.900914610645091
Encrypted:	false
SSDEEP:	3:JSL06LZLM2OSS8yXxEQNI4XXAwL6LNRN0NjWQAdVKBUpFR:0ZA23Q1GxRN0cQ4VKBUF
MD5:	0162C573FA28FCE054BCE39D245ACB14
SHA1:	FF87F3E1A34A95C175A546134479F6F36487543E
SHA-256:	20B69CA179DF151E25AEB12FD8442D68290DD90931B73A71063A046539542A94
SHA-512:	3AC306180A6F836A9B2FC6D66F340427D598546446590FF11CF67F00BE7E79A677C35200CA8EF2537582DCD8EC8F7B26AB2336EA003BAE6233055314754559EE
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/loadMeta.U-hYHIk2.js
Preview:	import{a as o}from"./commonUtil.Bb2Cnbsk.js";async function n(t,a){const[e]=await o(["meta"],t);return e.updateMeta(a),Promise.resolve()}export{n as l};.

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62377)
Category:	downloaded
Size (bytes):	71184
Entropy (8bit):	5.431117150165566
Encrypted:	false
SSDEEP:	768:2X9VkuxBu/k8nFeA2FVd5vI8r4p0twtHSltlgPCEOGtK03FJZXqSaviMryLs4guH:aVk4mh2x6iQ0tgybsjbavpryLs4L5t
MD5:	CA6C03A0104A0556DE35624AA3065B70
SHA1:	0DA2E6D4B24D15F3FA7026D911F6D94E10E1FF1E
SHA-256:	2CA181F5F8781EACA01C4E8A41D1334700378302662F1BD7FE31EF9EE4C1BFDE
SHA-512:	68A34599F981803E0EC99880F1351E5C345F5B9D99D12902BBC8A90846220ECB55471B2F79179773B693216CC5DFAE5C941B669D1A37CEF4684977EFDF009834
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uc/sf/0.1.360/js/safe.min.js
Preview:	/! SAFEFRAME 0.1.360 . 2023, Yahoo Inc. All rights reserved. /!function(){var t={8545:function(t){var e;(e=void 0===e?{}:e).close={name:"close",height:48,width:48,path:"M37.98 34.827l-9.9-9.9 9.9-9.898c.78-.782.78-2.05 0-2.83-.78-.78-2.047-.78-2.828 0l-9.9 9.9-9.898-9.9c-.78-.78-2.048-.78-2.828 0-.78.78-.78 2.047 0 2.828l9.9 9.9-9.9 9.898c-.78.78-.78 2.047 0 2.828.78.78 2.047.78 2.828 0l9.9-9.9 9.898 9.9c.78.78 2.048.78 2.828 0 .782-.78.782-2.047 0-2.827z"},t.exports&&(t.exports=e.close)},1323:function(t){var e;(e=void 0===e?{}:e)["decline-fill"]={name:"decline-fill",height:48,width:48,path:"M24 1C11.3 1 1 11.3 1 24s10.3 23 23 23 23-10.3 23-23S36.7 1 24 1zm9.8 32.8c-.9.9-2.2.9-3.1 0L24 27l-6.8 6.8c-.9.9-2.2.9-3.1 0s-.9-2.2 0-3.1l6.8-6.8-6.7-6.7c-.9-.9-.9-2.2 0-3.1.9-.9 2.2-.9 3.1 0l6.7 6.7 6.7-6.7c.9-.9 2.2-.9 3.1 0 .9.9.9 2.2 0 3.1l-6.7 6.7 6.7 6.8c.9.9.9 2.3 0 3.1z"},t.exports&&(t.exports=e["decline-fill"])},1690:function(t,e,n){"use strict";var r,o=n(6489),i=n(8861),a=n(8220);fun

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1670)
Category:	downloaded
Size (bytes):	11107
Entropy (8bit):	4.763658733478644
Encrypted:	false
SSDEEP:	192:9pEI3tlomlXK2dXKn2SYp2wJZBSUSERCPckJpgjPysqNkEW:BFd6M1dqRW
MD5:	9D74878D53CA54F3AAEA45CCA980ED1A
SHA1:	7C1F9DDC90F45B172264ADE9925DB9C1112306D4
SHA-256:	E5F09689459B999585BC07817D4CD733303ED18E0513286D50E2A928926DA976
SHA-512:	93BF4418364DA2EBBC2BEFBDF8B372287498B83BDBA84377F37C82F705A64CCCAB41A7C0CE3D2B110C2DEF4C7CB4BB56FD52BBD265347A28D42E40E756F7206F
Malicious:	false
Reputation:	low
URL:	https://dbrd449anfbv4.cloudfront.net/insync_iframe_webchat_js_prod.html
Preview:	<!doctype html>.<html>. <head></head>. <script>. . var isMobile = false;. if(/(android\|bb\d+\|meego).+mobile\|avantgo\|bada\/\|blackberry\|blazer\|compal\|elaine\|fennec\|hiptop\|iemobile\|ip(hone\|od)\|ipad\|iris\|kindle\|Android\|Silk\|lge \|maemo\|midp\|mmp\|netfront\|opera m(ob\|in)i\|palm( os)?\|phone\|p(ixi\|re)\/\|plucker\|pocket\|psp\|series(4\|6)0\|symbian\|treo\|up\.(browser\|link)\|vodafone\|wap\|windows (ce\|phone)\|xda\|xiino/i.test(navigator.userAgent) . \|\| /1207\|6310\|6590\|3gso\|4thp\|50[1-6]i\|770s\|802s\|a wa\|abac\|ac(er\|oo\|s\-)\|ai(ko\|rn)\|al(av\|ca\|co)\|amoi\|an(ex\|ny\|yw)\|aptu\|ar(ch\|go)\|as(te\|us)\|attw\|au(di\|\-m\|r \|s )\|avan\|be(ck\|ll\|nq)\|bi(lb\|rd)\|bl(ac\|az)\|br(e\|v)w\|bumb\|bw\-(n\|u)\|c55\/\|capi\|ccwa\|cdm\-\|cell\|chtm\|cldc\|cmd\-\|co(mp\|nd)\|craw\|da(it\|ll\|ng)\|dbte\|dc\-s\|devi\|dica\|dmob\|do(c\|p)o\|ds(12\|\-d)\|el(49\|ai)\|em(l2\|ul)\|er(ic\|k0)\|esl8\|ez([4-7]0\|os\|wa\|ze)\|fetc\|fly(\-\|_)\|g1 u\|g560\|gene\|gf\-5\|g\-mo\|go(\.w\|od)\|gr(ad\|un)\|haie\|hcit\|hd\-(m\|p\|t)\|hei\-\|hi(pt\|ta)\|hp( i\|ip)\|hs\-c\|ht(c(\-\| \|_\|a\|g\|p

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4611)
Category:	downloaded
Size (bytes):	4652
Entropy (8bit):	5.2403816369569745
Encrypted:	false
SSDEEP:	96:PU35ZPlmHI9ulpgagHPAwCkuqGZC6K+sM2aAiyqY8eUKX0RBFZBxhdy:PU3BH9ulpga1wWfC6xseAiyqY8eIRnZO
MD5:	5BA7D9524DC8B093C7D925116E2DC7FF
SHA1:	A3694B9F7660C8DCF141F0267D8D96EE7461DF47
SHA-256:	D799FA66D2E5DA4ACD600E1F2CB8AF7D41893C55B3EBE2D34997277B87AD955F
SHA-512:	F93F2762EDA9A07F0CE9F1CD741F6F7FC8F819CC0CF777DCF3942C07EDA5B7A4294B6A2CB68D8C76125604C5C8C4ABCA9F6FD372F08B657434D962BD0B0CC5F5
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/art/js/finComments.5ba7d9524dc8b093c7d925116e2dc7ff.js
Preview:	!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var e,n=1,o=arguments.length;n<o;n++)for(var a in e=arguments[n])Object.prototype.hasOwnProperty.call(e,a)&&(t[a]=e[a]);return t},t.apply(this,arguments)};"function"==typeof SuppressedError&&SuppressedError,function(e){var n,o=e.YAHOO,a=e.wafer,i=o.context,c=i.device,r=i.feature,s=void 0===r?"":r,d="spotIm-conversations-module-wrapper",m={},u={},l=function(t){var e,n={},o=t.getAttribute("data-ylk")\|\|"",a=[];return o.split(";").forEach((function(t){a=t.split(":"),void 0!==(e=a[1])&&(n[a[0]]=e)})),n};function f(t){var e=t.meta.data,n=e.uuid;if(n&&!u[n]){u[n]=e;var o=t.elem.getAttribute("data-comments-id");o&&(u[n].commentsNodeId=o)}}function v(t){-1===s.indexOf("enableCommentsCountInViewCommentsCta")&&-1===s.indexOf("finRedesignMorpheus")&&I(t),f(t)}function p(t,n){void 0===n&&(n=!1),(n\|\|"renderedArticle"!==t.elem.getAttribute("data-wf-caas-type"))&&(f(t),function(t){var n,o=t.meta.data,a=o.uuid,i=null===(n

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29565)
Category:	downloaded
Size (bytes):	183550
Entropy (8bit):	5.375897981973807
Encrypted:	false
SSDEEP:	1536:CE9TaOeZnqw1/ANiMK1BNOX4iVI/epHhF2MkZ2WLAe5O07W+LrigraTQa+bmlIyT:Z9Tfe4ediVbps2RMqlNpJxYo7
MD5:	9D0D35EEB38380D91DBB5F4514DD867A
SHA1:	41292BF95C6D373B4F57FBC158A8F37BD522B3C1
SHA-256:	60D695EBFB8891875444D4F4B8FB0ED3983A25B6FF0521E88AD8E28A83979394
SHA-512:	8EBB94E79C51D6D3FB452E6A1FD4D5E29FF892F9E49B4EA390E63236098025BBC9F14AE7E2D654FD306744DE88C70E466F7545054FC13EFD78C0FDD5407CCA2F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/mbr/58dc9fe4f6c2083f38135ec31a4db5c11ab15bc4/bundle.js
Preview:	(function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}};e[i][0].call(p.exports,function(r){var n=e[i][1][r];return o(n\|\|r)},p,p.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}return r})()({1:[function(require,module,exports){.!function(e,t,n){"use strict";"undefined"!=typeof window&&"function"==typeof define&&define.amd?define(n):"undefined"!=typeof module&&module.exports?module.exports=n():t.exports?t.exports=n():t.Fingerprint2=n()}(0,this,function(){"use strict";var e=function(e,t){e=[e[0]>>>16,65535&e[0],e[1]>>>16,65535&e[1]],t=[t[0]>>>16,65535&t[0],t[1]>>>16,65535&t[1]];var n=[0,0,0,0];return n[3]+=e[3]+t[3],n[2]+=n[3]>>>16,n[3]&=65535,n[2]+=e[2]+t[2],n[1]+=n[2]>>>16,n[2]&=65535,n[1]+=e[1]+t[1],n[0]+=n[1]>>>16,n[1]

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	152442
Entropy (8bit):	5.864156546289807
Encrypted:	false
SSDEEP:	1536:aOGNzmzrM7rJUzs4vmK0HiWdZzf7jjrSFbAzqq5E8gSn6UI:aJkHqzDjjrS2qq4f
MD5:	F49A4EE2C66883AF94DFC024B8F98725
SHA1:	FA329F0633C0936EAFAED4FD456697C95AF0DEF2
SHA-256:	06A9E32923947D9C2EE2595E0D35A5FBDDF51B06D81D7D337072C09D61DBC2F3
SHA-512:	9B55708CCA36ED5CE01208F85D78B847DE116875FDA30E8532A9E1547697BE22383EE5EC237419C378810DE578D5F6CA1135504801DC95D93608F41BE8E0479B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/f10d509c/d1ccw66oyq8ex2.js
Preview:	(new function(){var c=['BMf2AwDHDgu=','C2v0','we1mshr0CfjLCxvLC3q=','CNvU','yxbPvxnLCNnJCMLWDa==','DxnLCKfJDgL2yxrPB24=','ruXftuvovf9ot0rf','D2vIA2L0qxvKAw9ezwnVzgvKqNL0zunVDw50','C3lrGq==','Dgv4Dc9ODg1S','C3rHy2S=','lcbUBY1LDMfSoIa=','y29UC29Szq==','BM9Kzu5HBwu=','zMv0y2G=','Aw50zxj2zw50Aw9U','iL0UCNvUkhT3BMq6D2LUzg93lhnQCZO=','C29Tzq==','rLjbtuu=','yMLKuMvXq291BNq=','y29UzMLNlNnLzwr0ywCUy29Tl3n0yw5KyxjKlwLMCMfTzs9PBMrLEc52mq==','CNvUvgfYz2v0Aw5Nqvbo','qxvKAw9cDwzMzxjtB3vYy2voB2rL','rKjmuG==','q09j','qvjfqsbcuIbdt0WGru1cruqGsfiGteLosYbqqvjbtsbtt1vsq0uGvfjbq0SGv0jsifnuwuXfifrjveXf','C2vSzG==','C2HPzNq=','v1nytYaVia==','B2jZzxj2zq==','kgmPienSzwfUlMLVieLUyY4SidiWmJiUiefSBcbsAwDODhmGuMvZzxj2zwq=','y2zJB21Wyxq=','Bwv0yq==','yMXVyJO=','y2HPBgrfBgvTzw50q291BNq=','jMnOzwnRzwq9','v2LUzg93lMnSAwnR','jNf1B3q7','C3jJ','CgfYzw50','ugfNzq==','qurtveSY','zNjVBq==','rg9JDw1LBNq=','Ahr0Chm6','lMrVy3vTzw50la==','C3DY','Bs5OyI55ywHVBY5UzxqVCNrIl3LOyG==','ksbTzxnZywDLCW==','ksKUCNvUka==','Dg9mB3DLCKnHC2

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20625)
Category:	downloaded
Size (bytes):	31365
Entropy (8bit):	5.567286888422311
Encrypted:	false
SSDEEP:	768:OGjhGUMtCGsOpYfkKz4wDQjZvy/gYQWwY4RXrqt:O0GNtCG9YfDQjZK/gYQWwY4RXrU
MD5:	F945ED84A6E360B18A4FE4852D4D3D23
SHA1:	B110EA6A1955A4B4E421977AB10F0BBD586252CD
SHA-256:	8899FD510F5547A7865A855079E1F8EB180A0F9F7034E79DD924649EFB65793C
SHA-512:	24BDC112BF03E87CE6339582FAE642B9D2F2BDC50D51483376BD873EBFF34EBBD30757B4B3ED896EEC8D63276A6EE2DC013A8C0856FCC5C808F5B71CC8D8100B
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/checksync.php?vsSync=1&cs=9&cv=31&https=1&cid=8YHBJ3BJ0&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25235%2C25036%2C25278%2C25237%2C25159%2C25038%2C25118%2C25239%2C25117%2C25318%2C25317%2C25270%2C25072%2C25031%2C25030%2C25198%2C25274%2C25276%2C25071%2C25202%2C25003%2C25127%2C25006%2C25204%2C25126%2C25007%2C25208%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25243%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25250%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":26,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":15552000,"cc":"US","zone":" e ","coc":"NA"},"cs":"9","lookup":{"mn":{"name":"mn","time":180,"cookie":"data-mn","urls":[{"type":"other","url":"https:\/\/cs.media.net\/cksync?cs=3&type=yhb&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&redirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dmn%26ovsid%3D%3Cvsid1%3E%26axid_e%3D${AXID_E}","eu_url":null}],"pvid":25001,"isBl":0,"g":1,"cocs":0},"tlt":{"name":"tlt","time":45,"cookie":"data-tlt","urls":[{"type":"other","url":"https:\/\/eb2.3lift.com\/getuid?gdpr=${GDPR}&cmp_cs=${GDPR_CONSENT}&gpp_sid=${GPP_SID}&gpp=${GPP_STRING_142}&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D%3Cvsid%3E%26type%3Dtlt%26refUrl%3D%3CrefUrl%3E%26vid%3D%3Cvid%3E%26ovsid%3D%24UID%26axid_e%3D${AXID_E}","eu_url":null}],"pvid":25006,"isBl":0,"g":1,

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3429
Entropy (8bit):	7.6093346537149635
Encrypted:	false
SSDEEP:	48:p7SOSiETXnOQKNfMRmxLbwmryL58hpWDcBYwd/gpxRVKK+SFgGao3y1Cmc0YXasQ:p7xShOlNptlS58yDciwWplTfXy59qi
MD5:	C18614A6C435B6FEEC08C7FD7E613CD5
SHA1:	6AF0599C05E96902C4D23C89D0669222767FDB32
SHA-256:	AAC6385F67985D6B495DA79A52C952EE8A0A2E4AEED7D86B142A0F0B359490AB
SHA-512:	9C0D15B1B36D03AD84B929F0F7424882D9FC14DDACB69328CA528CCD3141916557B84FC1ED02C073900297DEBB63E505CA3464D7B109EDEB6DED3DCC7A5D0829
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X..........):...0PLTE................................................c.M@....tRNS..w..D.."f.3U.........IDATx.........................................................................`..,....o.tI.QQq..+."...D..E.JPP0. ..x.....BD..N/.QPolEp...../....pW.B.d4K..%...4Q...$.9..o..s...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...o.>..1..Y9..x...@.<..;K._.0....H.^..@..0.'!..Xb..eH....m...bD\)........H.^.}I..C(..,R..C.1.PF.'..:..B%...\C.M...6....!L..,>..E.0.y.W..6..:..&.'..R\Gq^...d....>(.Fu....LCA&%BV=...Q..,.eap.R....j.]Y......4..1.G...F..L.7hHh..I.D..L.}..)..Oe....5c......#deT.~.'.%}./.;..6Y.....7......,K.D@.!6.CV......"....x..W.We).....?...#l}d..w.{..@I.Y7..g.%..^<..]..(%.KLD6..H\."..yE...G..q...IV....c. ....y.(..B.$.D.C..6@.\|...Tp8....^Yg..V.8..M.I......^..F..PD...7AY..P+.......V.;k...\Y.lc....f....Y...,!.$.%.`&.Uv.........r</.....g...r.'+.../:L.)..h\...,..2....=.=..b.S\..<....n...te..d..,...K.M.F.2Q..6??mo....w.m..K...@@....u

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://ads.stickyadstv.com/user-registering?dataProviderId=1025&userId=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB&gdpr_consent=&us_privacy=1YNN&gdpr=&gpp=DBAA&gpp_sid=-1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	34808
Entropy (8bit):	7.938563962970601
Encrypted:	false
SSDEEP:	768:8RJy3lWL9Zz7T50muNt31iJ1BvxZgJPHLHs6ShFlE7NkYdr1+7hL:8soLvgF1q1n2PrHsXbE7NTdr8d
MD5:	2153335E82C66F85C57205D6B6441654
SHA1:	AF1C26C3879C8C0C9C8C892980B04FD54E75F83F
SHA-256:	9308E4E6AE8F9F93ADC05BF8D706ECDA1AA5E737B80F3A4C1AA19D01C08521E1
SHA-512:	716F047DD1E902796B111171DA6FB95BD0C2803230CF2F25A379B0306307D8D6AE655FF065074333B3ECD211521B0492A50DD825415B310FDE83798B4C4A9538
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C....................................................................C......................................................................................................................E..........................!1.AQa."q..2..#B....3R.$b....Cr4...%S.c..................................-......................!..1.A.."#Q.3.2Baq..$............?..Y....f...6.]w......\Y..g....z}7..$t......2..PX...]%........'./!W..+..>...j.}.o.5...

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (31357)
Category:	downloaded
Size (bytes):	104442
Entropy (8bit):	5.4742082370693765
Encrypted:	false
SSDEEP:	1536:tYagKkecz5adb1NG/8QXBLU/v4lR3mEvFU+kwFdWSgB3DL8P+:B3uwG0Q5UHYR3f1kwFxFG
MD5:	A2683C6C56E60EF2E4B6A1B186452E93
SHA1:	DFDD345D21AB911ABA04DFFF716B44817A88F99F
SHA-256:	C6F34801476F2580689387FB88B6348241F3F0C256EA23B40347C92E397E81CB
SHA-512:	82F6A235F98877A77C34772B8828741C6025C93B30F4CAE41FE7888B0575EE935F2BEC4C90BD9458D8A34C82D5FA9B48637AED38B5393CAF4D5BD5DA1D65ECBA
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title>Topics Frame</title>. <meta. http-equiv="origin-trial". content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=". />. <script>. ./.. Copyright 2022 Google LLC. SPDX-License-Identifier: Apache-2.0./.var m,aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	17276
Entropy (8bit):	7.9571563801249985
Encrypted:	false
SSDEEP:	384:c6hZu+RaFOdqfoo2i2uZI69pDTQanC/8ZYgOaSgXJb:c66+RaFOd1o2Nu7kThY
MD5:	94CFA0839913629E3E24CE03165FE3DA
SHA1:	F895064AEC2057FA4287EB7622116C55DC2462BE
SHA-256:	62A37216488AADB50B7EB3735D770C7A4D646E4CE1D340B48425BF50223E46C7
SHA-512:	F2C7E09B4E9EE39C3747559F58935738391D534BD96ADFB325FE83BEE2B2F12CA9E51CDA085B43C94C617DB2B28C02A9636BDA8EC09BFE39BCABDC62DBEBFE6F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/XsltcyfTY_CAjaZLv.UNqA--~B/Zmk9c3RyaW07aD0zNjk7cT04MDt3PTY1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/2f864150-eb9b-11ee-afbb-d9a7c2cd76d3.cf.webp
Preview:	RIFFtC..WEBPVP8X.... ......p..ICCP0......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 .A..P....*..q.>y6.I$..,..\|!...gmW(u.}.....s.....k3..,\.....}/..8{.v.......O.}z.KA....S..."...!.}.@.GU3.@..j&......)...HQ.%a.3y.N..t..F.......[......<.8.....z.R......_{z.......z...........2.1.x(+h.z..Y....`.:P..'.1.0.~..P1...]....+.W......\|D6Q....i.1.A..D..#..F.e.8..6{.!..:7..............w.i..A....p.i...'t...Z..\..]4.^!I._...S..F..#..J...e...._.2GL.l.J.A....^D.d..}..,..6.."....g.

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	158
Entropy (8bit):	4.994787172741404
Encrypted:	false
SSDEEP:	3:yLRmcpZ6CdPtpOq94IhXVHws6Tac3mDDpKfFsLGD/DNKv:yL/pZ6CVCq9JVHwJW1iFqt
MD5:	CA243B22264DCA7A4A899C51CC2DC963
SHA1:	CF47310BBB10F981E5735CBCB6196F688782A625
SHA-256:	95FB5A5390AFDA7B7734B303C9F724039FDA305313CE9517AA5F7A544A208AF0
SHA-512:	704E626A74A47B560B3316788B46F7CAF94E1E831B9290551C52DBF4D1E8DD8B72BACBBF6164EAA393BD97DABA0C351881B2F9D83A92F3BAAC49322BF9B5040B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/nn/lib/metro/g/myy/advertisement_0.0.19.js
Preview:	document.write('<div id="advertisement-thamba" style="display:none">Display Advertisement</div>');/* Copyright (c) 2020, Yahoo! Inc. All rights reserved. */.

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8787), with no line terminators
Category:	downloaded
Size (bytes):	8787
Entropy (8bit):	5.18863330580164
Encrypted:	false
SSDEEP:	192:/ZtSSViMOpQGb9yjWipq4Z8Yib8Py50D3X2neFaY5E6ZYrlfxBMn:/rs4Q9egLey5uAHjrlfIn
MD5:	446C3635A0812F8C988A5E9CA3FC96A2
SHA1:	0EFCF277E84D7433A893A01D66CF753705A5F1A8
SHA-256:	5F0321E77CA2276D46ACBECA4AFDE142BDD748A373B43F89D3740DEC8AFF091D
SHA-512:	8597616D6CEB0607556F4F80279E93D727863DFD7BB53EDAE03DAD9C781A17B8D81E518D9403031B97F68BCC835A7E70F7601237391C1ED803ABEF4C55B6D992
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-sticky-1.2.6-modern.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-sticky",[],e):"object"==typeof exports?exports["wafer-sticky"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|{},t.wafer.wafers["wafer-sticky"]=e())}("undefined"!=typeof self?self:this,function(){return function(t){function e(i){if(o[i])return o[i].exports;var r=o[i]={i:i,l:!1,exports:{}};return t[i].call(r.exports,r,r.exports,e),r.l=!0,r.exports}var o={};return e.m=t,e.c=o,e.d=function(t,o,i){e.o(t,o)\|\|Object.defineProperty(t,o,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var o=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(o,"a",o),o},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="https://s.yimg.com/aaq/wf/",e(e.s="./src/entry.js")}({"./src/entry.js":function(t,e,o){"use strict";function i(t){if(Array.isArray(t)){for(var e=0,o=Array(t.length);e<t.length;e++)o[e]=t[e];return o

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15264)
Category:	downloaded
Size (bytes):	15697
Entropy (8bit):	5.53729719471769
Encrypted:	false
SSDEEP:	384:uQTCfjv99mW+911+Fl0YD0Dew/X2q5ulRIUeT:uQTCfGZ1+Fj9w/XuuT
MD5:	E2202E6ED6EF52CEC2C4A875C99225BA
SHA1:	FD48D3157CFA6B6E6FEC3E50787E357AA3288C88
SHA-256:	F2CFBD195DFF011843F93E2D32979F6F07926211CBF3EDDDC3B708B0BB04C8A2
SHA-512:	4E2AEFD87D89F4D5C00CFCAC8EE2D7748F84979BE9E66272475A621A19BA8FC884737DF604B3B7344FE4EB0C1154819880BC3769E25798BB4ABDDEF76EDC9B4F
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/__rapidworker-1.2.js
Preview:	/* @preserve. * $Id: rawdeflate.js,v 0.3 2009/03/01 19:05:05 dankogai Exp dankogai $. . Original:. * http://www.onicos.com/staff/iz/amuse/javascript/expert/deflate.txt. /./ @preserve. * Copyright (C) 1999 Masanao Izumo <iz@onicos.co.jp>. * Version: 1.0.1. * LastModified: Dec 25 1999. /./. @preserve This code contains an altered version of the original source and is not meant to misrepresent the original software.. */.function base64(r){if("undefined"!=typeof btoa)return btoa(r);for(var t,e,n,f,o,i,a,l="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",u=[],s=0;r.length>s;)t=r.charCodeAt(s++),e=r.charCodeAt(s++),n=r.charCodeAt(s++),f=t>>2,o=(3&t)<<4\|e>>4,i=(15&e)<<2\|n>>6,a=63&n,isNaN(e)?i=a=64:isNaN(n)&&(a=64),u.push(l.charAt(f)+l.charAt(o)+l.charAt(i)+l.charAt(a));return u.join("")}function lzw_encode(r){for(var t,e={},n=(r+"").split(""),f=[],o=n[0],i=256,a=n.length,l=1;a>l;l++)t=n[l],null!=e[o+t]?o+=t:(f.push(o.length>1?e[o]:o.charCodeAt(0)),e[o+t]=i,i++,o

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 656x369, components 3
Category:	dropped
Size (bytes):	83849
Entropy (8bit):	7.977748895081354
Encrypted:	false
SSDEEP:	1536:5NXdmztUVFnlfFSH/3yG2Mr1yRuwTLhFOwC88wNhR:zQtyOascNFO96Nr
MD5:	95C31A18FB46C781837D7410F8280FC3
SHA1:	F2432074D530F4A73359B2587564FDF062A55B64
SHA-256:	AA37123884C92DA0EC9189E90B95A2CD3CEA2FB22F0BF2ECC2232A8F1C3B962A
SHA-512:	F73A8760C3492FC35B65A97CDA4990DD6D4516113E856C6F143D1EFC25DE2EE6913D42008837F9138FB806263D663C1F8AC218A4E86372175F3CCF6E6A14CB7D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................q..............................................N.........................!..1A.Qa.."q..2..#BR...3br......$C.45.67DSsT..&Ftu..................................A........................!..1.A.."Q.#2a3q$4B......CR..5D..br.%S.............?..^.#.....Y........%.?..x.........H>..En~.2LN=.k......./z.1...qX+...R?#K...G.,......C..;.R.G...z.i..bA..O.gD..v.L....a.g.....k..J<......dIT.d`.._.O.J.E.........-B.<........W..,....5....!.Z>.-.....KG...P..SP.8.J..k..px..}A./.k]..u...]O.-.?.....g....OG.h...k.M...$Fm-$.By...I..F:+.Q....IP..=...rc.w.;R9%.1..B.._.,..i.s\...j......i.\ffs..\|....i..P..MV.ya.;%...a..^5..........!.o..eWf.e.+.0..Q.Xl6..=.\|..y.z....z...B....tlUX..r.\.W.U...~b..p.w..k....R..?Sj...LC.!.....W.u.u-.F<..G......z.%.2]9..Z.[Ia....~.L.L=3l.JN....=db.l.m......v.-HOR.\|.=o.tj...3..4......3......&...T\..'.

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20681)
Category:	downloaded
Size (bytes):	20920
Entropy (8bit):	5.382951729807628
Encrypted:	false
SSDEEP:	384:W4Oh1nYxEHnaDSA9O3gcXpe62Oaqz66VSwyKTWf6S6hYrJBq91D:Wtewg6dcOWyS66I
MD5:	F4BA31A6A1D636440EB73ADA2C312201
SHA1:	92A49D852D46B7E66DB1679014C692589D9803D4
SHA-256:	596842C18CBF89B94E83E196E6B2A68DC4899B568C4129E2930C00797B8CC65C
SHA-512:	6ADB18F26D737F5AC85EE1D35757DA9352A859C6766D4CB345B500EDB3AFDD3589EE2696526BE1008AE65E0E08EC590459ECA2E85F1E652FA54336AD9BD4BBAF
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/protobufjs@7.1.2/dist/minimal/protobuf.min.js
Preview:	/!. protobuf.js v7.1.0 (c) 2016, daniel wirtz. * compiled thu, 22 sep 2022 17:16:11 utc. * licensed under the bsd-3-clause license. * see: https://github.com/dcodeio/protobuf.js for details. */.!function(d){"use strict";!function(r,u,t){var n=function t(n){var i=u[n];return i\|\|r[n][0].call(i=u[n]={exports:{}},t,i,i.exports),i.exports}(t[0]);n.util.global.protobuf=n,"function"==typeof define&&define.amd&&define(["long"],function(t){return t&&t.isLong&&(n.util.Long=t,n.configure()),n}),"object"==typeof module&&module&&module.exports&&(module.exports=n)}({1:[function(t,n,i){n.exports=function(t,n){var i=Array(arguments.length-1),e=0,r=2,s=!0;for(;r<arguments.length;)i[e++]=arguments[r++];return new Promise(function(r,u){i[e]=function(t){if(s)if(s=!1,t)u(t);else{for(var n=Array(arguments.length-1),i=0;i<n.length;)n[i++]=arguments[i];r.apply(null,n)}};try{t.apply(n\|\|null,i)}catch(t){s&&(s=!1,u(t))}})}},{}],2:[function(t,n,i){i.length=function(t){var n=t.length;if(!n)return 0;for(var i=0;

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1695
Entropy (8bit):	5.177312516380945
Encrypted:	false
SSDEEP:	24:tCbYLbGPGuXVGTIshQGzGeLGSoGQlnGMGlsXGlbvOu3aYrpRDnOG3KwS7x7SyFYb:Di+hVdqUGSbQMHNDq8glIyxI
MD5:	93DC53D369DCA8F09877C3ECC9A41DE3
SHA1:	346D07BC2A3B65CD75CF0B3F938348969CA1A7C5
SHA-256:	E689333AEAB6ADA00BE85106F30DEDD1E069EFCF70B78E13CE407CC04B1B1189
SHA-512:	9D084CFA903CA9B6C253937B5F5628582C2080826124613CB5F70E6869ED472DF8541DF52E69DCDA55AFC11ED015BC0083DF5C1074717979544168F1E80ECB3E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/weather-svg/PARTLY_CLOUDY_DAY.svg
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="-36.396%" y1="32.854%" x2="33.396%" y2="133.313%" id="a">. <stop stop-color="#FFF5B2" offset=".013%"/>. <stop stop-color="#FFDE00" offset="39.944%"/>. <stop stop-color="#FFA700" offset="100%"/>. </linearGradient>. <linearGradient x1="11.357%" y1="56.982%" x2="74.1%" y2="26.47%" id="b">. <stop stop-color="#FFB92B" stop-opacity=".05" offset="0%"/>. <stop stop-color="#FF6900" offset="100%"/>. </linearGradient>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="c">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <path d="M29.428 9.083c-4.944.213-9.017 4.055-9.642 9.094a6.54 6.54 0 00-5.162.923c-1.899 1.144-3.201 3.098-3.552 5.33a7.336 7.336 0 00.435 3.706c.46 1.083 1.502 1.7

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 72, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1346
Entropy (8bit):	7.811113028134073
Encrypted:	false
SSDEEP:	24:DzhV0C4bz+BXH/Adox88K9LDNiF6/LodoLopZYGBLn4AcXGKgF13+2HBoHVMnozC:D9jXBFxfKFljRL0YGBrLcW7F13+MBoHC
MD5:	CD166981C96C6D0F4B5A7D798C25878E
SHA1:	09031C4013138BB8BD54AB9092AC59AA47D7C60C
SHA-256:	0FDEFE26BAC6A6B0B06FE67984582F887AF70B7DA25D6CB1B401F9074DB58338
SHA-512:	6D217A81DFDCFD601C3F6D9CDE3F1BE0C4D4FFEF85B02B06208014101456CA730EF759BD51637966C9F2572080B79E8A2F9D45A2087DDC40DF015F8C052DA501
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......H............PLTEGpLa..a..a..r..`..`..`..`..b..a..`..e..`....l.....tRNS.T{j....=...Pau>....IDATx...#).F........'.&.1..5.-...t.....9....]0.......3..........,o..8p...r^<v....v.n.....Z.....;..p...%kw..y.;p..~w.H..m..%kw`.....)%...V.z....n.%.}.........G.C....Q...W......G:_]..r4..^.Bh.$.F.;R.,+.R........."s..l.T. ..I.5..H..N.c>.Q......<...G.w........U.]R.!pP.Y.:T..Q.H.qU.......t....\|...hD...'...?.YEe......A.U.t........F.,1.:...:lU....k M.b...;...{.........b..F..O...i_.?.V..~."....>..h.da...e.I.....5.\..#..../7....1...t.8....U...... g9nZ..lR..d.\|...l.T..@.$J......E.J.....%kt.j.s.J.0.d..7...3O.........I..u..1p6$.X....$f .N.b.j..t................ZqI...A)@...9qn..zj.\|F...<...S\...$.t.$3=.C.....lV.....mIm....eKo.A.E.`.......do.._..(FRg..[....<~...a...Y;..-`o....2...s..ZK\~/G.g.-Z..p0..m..../H.......%....o.;.xU_.q^.(......&%..jn...n:..dE.g6..y-2'n..... .q..e``.^.$.^...X\| ..(>!.EvI.......r.I.N...;........Q...+....x.Uw....

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21428, version 1.0
Category:	downloaded
Size (bytes):	21428
Entropy (8bit):	7.98902982301693
Encrypted:	false
SSDEEP:	384:Ga2PJr/Lbhbzz4UzqkvYtAXFsBry2xzz1kdta3OX01k+M5o2Fw4eMeQokBl1ypzv:Ga2Br/L1DVzq6XFozz18teOX01/pYtN+
MD5:	965BBFEA8A5DB5AEA3A63DA8C5B3D570
SHA1:	CE645F4ADF18C4FF26251610878969C9562DE69F
SHA-256:	92A7F8224A1BA2CCFA92D3E1FC55EE5AA7AE20A0FCD80D3331BD660878A090F5
SHA-512:	17BDB764F190F97907462B8D0526474E0BA903A07A3FA3E71968115CC5E2D9E1629979398C6B6E664580B8F294D62F855F8BBF5F3FCCCF3A40D90521E15B186E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBD7TA.woff2
Preview:	wOF2......S...........SO.............................b..@.`..~..v..u.....X........6.$.... .....X....p.5.=,...x.^?.#..A.~..8....D...g....R....!...)..R.II......U.?.gZ.\..Z&.J...+V..M,!..-KUj;.....A...J<~Fj.o.D.EN....Q$.p.wGO..s....<An26............7]......D........s.s.....)......DU.....?..../...f..c..........J.......Q \|.bT!b'~?F..>...y[.Z...]8\|-^1.K.`7.......S5. .v.....?a&.$............t....&...h...Z..L.4.7!......M. 6...r6.. ..:../. .8E.T..#......\ .S..).t.:L....s.7g..lI.e..A;....rWR8T=..]K...XZ....y.zf.o{9.E:sO...d.}b9qQ.k.A$.CTQ..........(G.qD.."..........u.p..}..W.......V........W..z....L..O...U.....S.B."....?..g.....4g.M..O.j..>..B.C&.....,.#.h^#S...A......_{.......a......Hm.6...7...R.w...y.r.P2.).....I.......].....,o.w..3.:@..1..9.rC.b.l.e.r.W.KS_..;.......P......2..`!(:.l.Y.c..\..G.....U.f'.Z..~.(^....'...F./uJ.*j.+..........ev....4.X...V7...k.BZ(.`..Vm..h6&{.D...p........\....5....../.,..-9...C"d....7...._.o...E......r..B.LJ.k)^. ."..

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34717), with no line terminators
Category:	downloaded
Size (bytes):	34717
Entropy (8bit):	5.225647173907698
Encrypted:	false
SSDEEP:	768:D5Uh0svV2RBjYjVEBtjrph+FM/CD/Rnrd/ATNlQr9hGEnMtGb/Ce:Ds0svV2RBjiEBt/ph++/Cprd/ATNlQrb
MD5:	AEEA17ACE82479B8F0C0B6583C4B49AB
SHA1:	783CA76F76E21061C7D9FB59542D7633B7771D5A
SHA-256:	AB0E7CC4A8E3370256DB06DE8D04320C3EBD14C85728D0281A614E91F6F31E0B
SHA-512:	523FF26C07A08D363BFE8033FFD1B24BD32B2013FABB67D515D7A8730D435281DED2C4EE8A0AC2BDE8FDE8D4A94DD82469449B9B682A47B59A514A6A8A579BE1
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-scrollview-2.22.6-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-scrollview",[],t):"object"==typeof exports?exports["wafer-scrollview"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-scrollview"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(i[r])return i[r].exports;var s=i[r]={i:r,l:!1,exports:{}};return e[r].call(s.exports,s,s.exports,t),s.l=!0,s.exports}var i={};return t.m=e,t.c=i,t.d=function(e,i,r){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var i=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(i,"a",i),i},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,i){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a fun

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2740), with no line terminators
Category:	downloaded
Size (bytes):	2740
Entropy (8bit):	5.2744010022818335
Encrypted:	false
SSDEEP:	24:GtSqBV8OZ57nhuvEmrOTT6pzMnOAcLsQC+t2CU1pD2IC2Nx+8r9UCBJdMsHOGvrJ:Fs54vd6TWMOAcyAVEQ8r9pzOsHGQv
MD5:	E8B3A341599A5908BFAC693D1ED5DBA8
SHA1:	73B62214E838563209D35D4DD8BF46794401D0F3
SHA-256:	C06CCEC90F7BDB0591FFEBF084699F912AF7ACFF6F9A5AAED211937CACAB2821
SHA-512:	141F3065C466AE3CAA97DB15E0B0104D4FD016BB18BCEFCCAEDC669E17B40FBCCEFCBF5595B5FC5077DEBE0765C796C66A3EB1842E51CB92ACF262F27C2E10C2
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uc/finance/dd-site/modules/css/react-finance.NotificationAlert.atomic.ltr.e8b3a341599a5908bfac693d1ed5dba8.min.css
Preview:	#atomic .Bdtc$\$seperatorColor${border-top-color:#e0e4e9;border-top-color:var(--seperator1,#e0e4e9)}#atomic .Bdrs$4px${border-radius:4px}#atomic .Bdrs$50\%${border-radius:50%}#atomic .Bgi$\$cryptoNotificationGradient${background-image:linear-gradient(45deg,#ffca20,#ff9523)}#atomic .Bgc$\$hiringBgPurple${background-color:#5c00d0}#atomic .Bgc$\$linkColor${background-color:#0f69ff;background-color:var(--link,#0f69ff)}#atomic .Bgc$\$lv1BgColor${background-color:#f0f3f5;background-color:var(--surface2,#f0f3f5)}#atomic .Bgc$\$negativeColor${background-color:#eb0f29;background-color:var(--negative,#eb0f29)}#atomic .Bgc$\$positiveColor${background-color:#00873c;background-color:var(--positive,#00873c)}#atomic .Bgc$\$storyOrange${background-color:#ff8c14}#atomic .Bgc$\$white${background-color:#fff}#atomic .Bgc$\$hoverBgColor$\:h:hover{background-color:#e0f0ff;background-color:var(--hover1,#e0f0ff)}#atomic .Bxz$bb${box-sizing:border-box}#atomic .C$\$negativeColor${col

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1256), with no line terminators
Category:	downloaded
Size (bytes):	1256
Entropy (8bit):	5.846066946159835
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccA01s+KVCLTLv138EgFB5vtTGJTlWtqbs11j2sLqo40RWUnYN:VKEc51/KonR3evtTA8d15HLrwUnG
MD5:	5A1DDA435A9615F759184A02E8D8488B
SHA1:	4176D543C83F032F068FA6FA8AF0939E876A603A
SHA-256:	E40ADDCD8A8231B7776A0D0139FACF5035458E55AF54EF4ADC64D6D55F3EAACC
SHA-512:	D4CB869F2D2CEDD775C7AF3BF15D3A9CE02498B1CE7B9F667BD274A95C2F36A256F15D4A13378F1B3848A8365EDB3B4828A86260916FB666FC8D1EEFD83C13A9
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=6LdoZd8UAAAAANMGa28bG0guQMGqqaP0Wtuedy7o
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LdoZd8UAAAAANMGa28bG0guQMGqqaP0Wtuedy7o');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-wEVSdq

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x600, components 3
Category:	dropped
Size (bytes):	48771
Entropy (8bit):	7.949364151909664
Encrypted:	false
SSDEEP:	768:fVb2d4AJifmdIOihmb21eKgLrYEHEwmBrRZbpWSTBj6UhMBIhOXSINO7JR2oPd7q:fVcxMcIhGbrYEkwmBjdjphgIhOSdJPVO
MD5:	C405D6C82F1731A9C123186A541980C5
SHA1:	F73D860955C3DF98621FAF013C35EA2B15D23D41
SHA-256:	819D7F281EE9DE76963F59E23F94DFA3A130B3B5C6B7063755875F397E948A0B
SHA-512:	057B0D01D401564259EF5B6DAA5E0A2B713B8CA4DBFA8C21118788145A67ABA0B2C98C875BA4E074532780936A373D799EDA9CF8BFE0AC357BD3CEEF5EB42C14
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......=......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0580117407206811A61396797EE4D8D6" xmpMM:DocumentID="xmp.did:1840AE9ECF9D11EE8137FF27797BBF91" xmpMM:InstanceID="xmp.iid:1840AE9DCF9D11EE8137FF27797BBF91" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:078ee284-1fbf-4ce6-b416-ac8cb9e377c6" stRef:documentID="adobe:docid:photoshop:774fc835-3ecb-bd45-bacb-20d3199f7597"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	51141
Entropy (8bit):	5.3656059346715415
Encrypted:	false
SSDEEP:	768:DC6LVVI4DFtXHdj9b1pbNUoLrsQInWw4IpdIp9FL92ed8HysJm9Sf2TDN:Ph+4bHd5b7qoLwLh4Ip2p2Q8HyWmF
MD5:	3AD90205296656E070371A83D5201160
SHA1:	2A9ABD973C356F4DFDC318BA3B7B1B45D304F0D6
SHA-256:	322863EFDB222250F660A04127F8AC343CC74DED9EE6DEA49E88605C80F46EE1
SHA-512:	4846D786A517EB1E91EAE0C4F824516C3C9CDD9FC4F9F8AC9A932CD830DB48A7E125F10C2580081A2CE2241B0DE5907C92421889FEFA753F475EF377E4DD018C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/ss/analytics-3.53.39.js
Preview:	!function(){function le(l){var c={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:"aol_utd",filter:function(e){e=e.match(/((?:\\|\|^))gd#[^\\|]+/g)[0].split("#")[1];return 24!==e.length&&console.warn("_utd value may be malformed"),e}},RSP_COOKIE:{log:!0,key:"aol_rsp",filter:function(e){e=e.match(/(?:(\&\|^))sn=[^\&]+/g)[0].split("=")[1];return 24!==e.length&&console.warn("RSP_COOKIE value may be malformed"),e}},GUC:{log:!0,key:"_guc"},OTH:{log:!0,key:"_li",filter:function(){return"1"}}},u={};this.getCookieByName=function(e){return u[e]},this.setRxx=function(e){var o=-2,t=(document.domain\|\|"").split("."),r=t.length;function a(e){return"."+t.slice(e).join(".")}function s(){var e,t=a(o),n="rxx",i=u[n];i\|\|(e=(new Date).getTime()-14383872e5,i=parseInt(Math.random().toString().substring(2)).toString(36)+"."+e.toString(36)+"&v

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	3.459431618637298
Encrypted:	false
SSDEEP:	3:Q:Q
MD5:	981CF18CC783FEF189353F3A906D9350
SHA1:	58C21A93EFC05C58D7AF2A51B6D6314B31A7C2CA
SHA-256:	E65E9660AA2C196F986DC5145E7474E53B90278F4E4BD7FE3E230C4C95B2B260
SHA-512:	3639C72BD437041E474EF8ADC421984D0445C0992C9EFEB700A8D7F59CD0A78152999DFBFF180180BC01D5666A2046C197773399E0CA98816BB4C880DD5BA55A
Malicious:	false
Reputation:	low
Preview:	YS6PlBuVeHG

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	639842
Entropy (8bit):	5.550155640843463
Encrypted:	false
SSDEEP:	12288:xBY5y9l6LYhyDliIZzY5yDlk7YZYdju0FYuYAj/LYUyEloS1YGYAj4C/Yiy0lK5I:jIj0d91Oic4/n2KA1Cn8RS
MD5:	F8F554397835989FB58112D24B8600B1
SHA1:	7750F2A33C1B4024DD51F990DB778F9689D98CED
SHA-256:	EABBA5B887C212C2AF2521AD3AA6D5FF89DE4A5E877F2F970BAAD060527DEA42
SHA-512:	83EAAB87F2F62EC79AAD75BBB87BA1BFE5360D9F9F9A80222808E37C5E12DEF39BC549135E80E295138D20DBABAD2894C50A97BECE36985A7A223595D3C07D2E
Malicious:	false
Reputation:	low
URL:	"https://www.yahoo.com/caas/content/article/?uuid=742c2e0f-6948-3d4f-9b25-8519b485868c,4a1da1fc-247f-3458-9f80-595e9ebabd07,315ec9d5-2c30-3dd6-91e7-283df7c28d1a,bdfa16b4-1c8c-446f-b3d6-5774a1e6188c,9bcd113d-71df-4a3d-a934-a61254bdc0e4,4a9adca9-cd26-384b-87f2-3372b00ad06a,4abbeabc-fcfd-44a3-b6d9-63a5da05c452,029f5683-400d-494c-b56e-55f216472a39,79932e4b-67c6-4356-b79b-5ee7902e8a91,cffc80bc-7ebd-4f76-ae5a-5f9a3328558f&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=2vl5n89j0c3hk"
Preview:	{"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"yscamarch;collegebasketball;basketball;sports","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0a0W00000MsLYKQA3;revsp:usa_today_sports_articles_558;lpstaid:742c2e0f-6948-3d4f-9b25-8519b485868c;pt:content;pd:modal;ver:megastrm;pct:story","site_attribute":"wiki_topics=\"Brad_Brownell;Atlantic_Coast_Conference;North_Carolina;Colorado;Los_Angeles;Armando_Bacot\" ctopid=\"2074500;2078500;2080500;2212000;2231500\" hashtag=\"yscamarch;2074500;2078500;2080500;2212000;2231500\" rs=\"lmsid:a0a0W00000MsLYKQA3;revsp:usa_today_sports_articles_558;lpstaid:742c2e0f-6948-3d4f-9b25-8519b485868c;pt:content;pd:modal;ver:megastrm;lu:0;pct:story\"","spaceid":"1197792446","site":"sports","enabled":true,"pos":"","showBodyAds":false,"showPhotoAds":false},"alias":"ymedia-alias:shadow=down-acc-think-again-conference-004546426","canonicalUrl":"https://www.usatoday.com/story/sports/ncaab/acc/2024/03/27/acc-sweet-16-teams-ncaa-tournament/7

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yieldmo&google_push=AXcoOmRlVFEx4za4Sx8pdDFBRH3aJpuwcGOEDcNEzfzvuy6OTbh9mcHmw6tfT6rPCTCRYQp9Kqc66_5Ij-YY6CF8ui2qmPYpLdXc&google_hm=VnFVUXQzM3Z2UTNWVDVLWmRweUk=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	46834
Entropy (8bit):	5.987045758143629
Encrypted:	false
SSDEEP:	768:h0Q+9Zh+Clpxixm7yhemwuaSyqCH8CxtAoTUVgO7WVCzlxxm/+PR+aaomRzzII+7:hF7mzoVNyC5xxmM8aaXS
MD5:	866AE54E581E59EEC55CB4CD6139B1C9
SHA1:	9FDC91F11B798C06C0869E6D398C7EB489C73CA2
SHA-256:	99D5A41CA8F70CBBA841765BFC103C3E8E70B17E9B5B1311C7E9F641094D6D28
SHA-512:	015FD00746FC1DF44180C9EC119122C598F64415FA3C716BCED8D4824BD1CA08D85BE1AEB8DF4920FA3533A48F07ECB755A22603447DAD1CBBDD4C781262F082
Malicious:	false
Reputation:	low
Preview:	{"/22888152279/us/yhp/main/dt/us_yhp_main_dt_top_right":["html",1,null,null,1,600,300,0,0,null,null,1,1,[["ID=5b5561010855c324:T=1711672938:RT=1711672938:S=ALNI_MaTzI7PvnLPY_pLWcYnKo9w3Mkq7g",1745368938,"/","yahoo.com",1],["UID=00000dd6ae91234a:T=1711672938:RT=1711672938:S=ALNI_MYtCsbLyUmmgTHZBPxZxu0HP1Ihwg",1745368938,"/","yahoo.com",2]],[138432282725],[6298056374],[5307966191],[3200313979],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGsl1jLhyCinL977N3lyWsPsHgjsS6Dp65lKG59hFmMS6CJApA9SgJz-7Atocl4RgM-z23K8xQv2ii3gTo5qyEle0sodTUcM45p4Wsy2FoyetGHW55gt_61LJPA","CL-9gcyemIUDFUUkswAdFq8IsA",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"6",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=b68f44f924f72cc7:T=1711672938:RT=1711672938:S=AA-AfjaoiZJwDEbzSNv0rXjauma4",1727224938,"/","yahoo.com"]],[]]}.<!doctype html><html><head></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (569), with no line terminators
Category:	dropped
Size (bytes):	569
Entropy (8bit):	5.0283202315881415
Encrypted:	false
SSDEEP:	12:kxP4L8BM4FoCpbsWGYsz8KBG6FkKOWGQL8BM0bpbsWGpkIZcSAhWQ:kDB7FowGf4KBG6FkKNGVBXGpeSzQ
MD5:	F093360C100AD4BB937ED533CFAB5DEF
SHA1:	CFABE7E104E08128E4A0128D7152CD402B9BE7FC
SHA-256:	4DB037A21525D5C1416994664735811F73B7380727023AE411CD318F8073D0F4
SHA-512:	A52D0244D5C289F3D955BC380D62C77442F5DF2D93DC37A01095866634D85315F07AD3CF582394522D2BB47C811CD8A859B75FE552C48140A692CF7ABAD775F7
Malicious:	false
Reputation:	low
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_awbid" style="display:none;"/><img src="https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_cm&google_awbid" style="display:none;"/><img src="https://token.rubiconproject.com/token?pid=2249&pt=n" style="display:none;"/></body></html>

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://9f63816b6fa6b7ed16065f5a3df168ab.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3190)
Category:	downloaded
Size (bytes):	113329
Entropy (8bit):	5.5425534745301075
Encrypted:	false
SSDEEP:	1536:sEo6wmPpFI51aHP0/+MzVnks85XU3GkwE+nprJd0x5qFtSR37LyT/mCm:sIBFaAMm2ks85k3iEqw/R3/yHm
MD5:	B96023064158A454A208A49620C0734C
SHA1:	E3C1CC046EFDFABF65D41A8A3CB4EFC63E3C6C46
SHA-256:	1642DD5DC126DF4FEFF2255CBA0988528507973D842D0A73331A5873F6B9D4E5
SHA-512:	44F33B8D6FFFABBFC6FEF7AF60DC2D7A07EF59B6969F828C177AC5814C5D07C2C103ADFC165F07CE4B6D9B55928A913BEB5BFCD854BE09596E401A41B884585F
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/879366/express_html_inpage_rendering_lib_200_278.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var h,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ea=da(this),fa=function(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.fa("Symbol",function(a){if(a)return a;var b=function(f,g){this.j=f;ca(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=functio

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2937)
Category:	downloaded
Size (bytes):	219590
Entropy (8bit):	5.417751116201984
Encrypted:	false
SSDEEP:	6144:KdEQmJ1czbrKWehWXp7T21homAbas7J9UaOl:9zHgaU7JmJ
MD5:	BF18FBE8845812C2A5531EDAFE8B94B1
SHA1:	833CDE93A2199FACD32AC560913EA02F5E8AB1B4
SHA-256:	F2BB46EFF3A507B385FCF4CE0295CD00837CDDB4CD187AC4FEC01EC8413BB444
SHA-512:	431B7B6FEB5E0226BB30E685B7B6D92F26E8F4F2C05098E1B8864A045F5F6DE6591ADD335DA53E9335765F6886DAD9BEDC8F363EE6E17743E0444930D337F6FC
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js?cache=r20110914
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),q=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(f,g){this.dh=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.dh};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://a5589.casalemedia.com/impression/v2/1057984/85/co30sf1lk6ksdr06ud1g/5b9350cb-0895-4b93-8784-111a03fe0aea?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1711673492&profileIDs=&creativeID=c4ad37&pubID=201422&format=banner&channel=site
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, WAVE audio, IEEE Float, stereo 44100 Hz
Category:	downloaded
Size (bytes):	189160
Entropy (8bit):	7.422217355234855
Encrypted:	false
SSDEEP:	3072:e9wzBZw8XQP5WSNXh/gxEuIwb26S+Q8A89FVA4CmtB59JtjIcAqOCJxoHStwNp+b:rw8gP5WStapIO2j+PA8bPJXfx2SGsTH
MD5:	8ABFE6DFA7B0D9A5A4B7268155054740
SHA1:	FE841D96C94923C7732014A81BCB574FE2C10584
SHA-256:	75799B61C8D93B46365AE3A603EF508ACEE921ADBF2ABF4ADA583FC4E0E4BB82
SHA-512:	A6A475C64D5E0BC3CB94BD38B38DA66F5B4470F50738286F2D42030D2E32EF15D6C795DFA8DA36502E536819DABABE9386CA7419F2C6CB0E8580053ACE1166D4
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/misc/voice-start-202105050733.wav:2f73582f48548b:0
Preview:	RIFF....WAVEfmt ........D... b.... .datah...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (3575)
Category:	downloaded
Size (bytes):	3576
Entropy (8bit):	5.417257505061507
Encrypted:	false
SSDEEP:	96:f90ElpqPy+xd3PIHU8ecDOQIvAFki0NxA01:5pqPy+P3PUU8emOQIvAFYd1
MD5:	FBED3DC6A653C3C96044022F8FD17CF9
SHA1:	9297FAF84E49B446F2E44D5D901880698DE52DE9
SHA-256:	1E80A44536E7F1A3D1ECBE78DFAB614AC720D6A6E64B335FCCDA76BF66997B56
SHA-512:	84C68353C5EE4ED2191AEBAC1716921F66067FB7BFCB63E9E6D61805013B1C59CD459EDB6C7217EC29708EECC39F07FC7102CB2BEB06B97692D4306BA9201742
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/CarouselButtons.BCbZQoyp.js
Preview:	import{s as F,P as M,e as v,b as R,d as B,f as L,j as z,i as g,p as S,M as m,k as N,l as k,L as I}from"./scheduler.ErneftFr.js";import{S as G,i as H,c as w,b as y,m as A,t as C,a as E,d as D}from"./index.DsErXEH0.js";import{e as P,u as J,d as K}from"./each.DufB99sH.js";import{B as V}from"./Button.C10y2YT5.js";import{L as O,R as Q}from"./chevron_right.BNCVu0EK.js";function j(l,a,e){const s=l.slice();return s[11]=a[e],s[13]=e,s}function q(l,a){let e,s;return{key:l,first:null,c(){e=v("span"),this.h()},l(r){e=B(r,"SPAN",{class:!0}),L(e).forEach(g),this.h()},h(){S(e,"class",s=I(`dot ${a[13]===0?"active-dot":""}`)+" svelte-seg5yl"),this.first=e},m(r,o){N(r,e,o)},p(r,o){a=r,o&2&&s!==(s=I(`dot ${a[13]===0?"active-dot":""}`)+" svelte-seg5yl")&&S(e,"class",s)},d(r){r&&g(e)}}}function T(l){let a,e,s,r,o=[],_=new Map,d,f,c;s=new V({props:{"data-testid":"carousel-btn-left",variant:"icon",icon:O,size:l[0],disabled:!l[8],title:"prev","aria-label":"prev",i13nModel:{...l[10],...l[3],slk:"prev"}}}),s.$o

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21224)
Category:	downloaded
Size (bytes):	24203
Entropy (8bit):	5.349731623672621
Encrypted:	false
SSDEEP:	384:PLX1wtH+NTv0vDckjUhzU0ZppJeiUGg2TD7eC43YU/Us3ZYNbHG3W5AJdME9oPaV:jKtPQOaG3WFaoPaIK/zn
MD5:	F1DFC75C82E12DFE846D5593978E422A
SHA1:	12E580A708B09C9A8F4CA7CCBE9DD7DF32EDEE60
SHA-256:	08204982C484FAF6890C60557A4E642971F17625DDDDC0559DC0E3CA728AC9E0
SHA-512:	623412E6D454104251215E38A0F365F879EC70F77306769F5FA40E144C0EAB43237D1FE13B92031AD5848071A6A8910F01576F079E1A0904F4D8DD8959D922A5
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/safeframe/1-0-40/js/ext.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},ea=function(a){return a.raw=a},fa="function"==typeof Object.assign?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)Object.prototype.hasOwnProperty.call(d,e)&&(a[e]=d[e])}return a};da("Object.assign",f

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	43520
Entropy (8bit):	7.964884122184134
Encrypted:	false
SSDEEP:	768:sdhsuzFPbKsZOuV4gnatx7k9oIAINt8w6TQEjwhC:KCWBbjOiatx7t8f6TQEkE
MD5:	579EAC93CA47F224329A31B8D878F571
SHA1:	360B6B4A2CBAEA888A8D55E67E504325E8433392
SHA-256:	17CCB110140A38E703239767E9B1C849A114BBA4CCADB28F164E4B1B23A4D4F0
SHA-512:	357D609DD0EE44D5C23727CB17D71D7451BC878349A97082F19CFFA5FCB1C6C10E433CD25D65F39F3F46D8F7AFC546F45484878BA2D146E87C7EDE3B1271B143
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE.......appl....mntrRGB XYZ ............acspAPPL....APPL...........................-appl....8.G.m..Oz../................................desc.......0cprt...,...Pwtpt...\|....rXYZ........gXYZ........bXYZ........rTRC....... chad.......,bTRC....... gTRC....... mluc............enUS.........D.i.s.p.l.a.y. .P.3mluc............enUS...4.....C.o.p.y.r.i.g.h.t. .A.p.p.l.e. .I.n.c...,. .2.0.2.2XYZ ...............,XYZ ..........=.....XYZ ......J....7....XYZ ......(8.......para..........ff......Y.......[sf32.......B.......&.......................n...C....................................................................C......................................................................................................................Z.........................!.1.."AQa.2q....B....#Rbr...3C......$4DScs....%TU.....5Ed.&.t..................................*........................!1.A.."Q.2.#3Caq............?..#2:...._.?q....P....b..Ti.......E94.c.i.~..J...."...

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=4&external_user_id=3118679036834831413
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	dropped
Size (bytes):	2684
Entropy (8bit):	7.312089486802539
Encrypted:	false
SSDEEP:	48:Hy2JSJMlCPAI9eI7N7miqiZov00hnp07om47jSW3lAm0loMX7nR1wKp:Hy2JSqCDsIbTov00hnp07om47jlHevnR
MD5:	953C1AC7E3B4E3D58367E20B064034BB
SHA1:	FE8BE09EEE45EBF11C4C46918879725C85FE41E0
SHA-256:	123988D9B5968899975FF52A55B198E7209D4EC023F3A7462FDA68B52AC2B463
SHA-512:	70CFDA1C11AC079F51B971C9DD0426895990E350C041DDA60E13D86D38B0D043B5D647F750B7F479270BBA439A7375775BFCEAD62BA210F1E0F8FFE52791B420
Malicious:	false
Reputation:	low
Preview:	GIF89a.................................................................................................!..NETSCAPE2.0.....!.......,............%...%eZ..4Z............<.a ..&...x..w..........8qT&...aH0D...P\.....1....~.J...`#..B.5....5..\|%..V@.@....Z@....'....5........)..q)...)....n.....#....n....D...\|......g.?..?.......Z.9......$.."..".......q..0 .,E........@..T.)....:L!..!.......,............%..3.".(s...P<>...Rb.........U9...AL..,/......@.........Vp.O.DB.t.&..A.........M}........u......'tA.....i6..g,...i.~';2..\|h.W......\|.../'..g....W".'zW.....1....#.6....."J.6J'."...0A!.!.......,............%..E.(:........V2.7....A.$..^I.q.....RH.....`...........nDR"@ ...k1..0.E!.....H7......../....q~~...0.l/....KXc%...M".)......S..D......"......c.4.\|#..$.."."..0..#../..Y.4O.=.....B.0!.!.......,............%..u@e."$..B......\.<.(.....\|..A(b.f....{...kJ..D/.H..p\.N(eq0...ds......^..S}.........P...Czy.f.$.......%......).....Z......p;.....e$7"...dQ....3.._.7..r\|..#..E>.1....*.$.

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1577)
Category:	downloaded
Size (bytes):	54046
Entropy (8bit):	5.447977081602177
Encrypted:	false
SSDEEP:	1536:3xGFqVpFo0iHgUYk9/sXQInc3Yt48VUWeYcX:h5nq93BYI
MD5:	F3CB92769B53FD8B1EF85D8F657E48F8
SHA1:	D9DDD2B3B02572702FEDE79B83A9782277630604
SHA-256:	86511C4D73C76A630EECCC828398800E92CD0708B1A79F2F9465F8025530DA84
SHA-512:	D4A9DC144CFB823E7412FA19334E4CE11E73B4CA6146747405A595E1B0FA93985311D02CF67243B30906E1339D4FEE7BCDE68FAFCEA921FD3D34E78BE4F39678
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/mysidia/f3cb92769b53fd8b1ef85d8f657e48f8.js?tag=mysidia_one_click_handler_one_afma
Preview:	(function(){var r;function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var t=da(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(g){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(g\|\|"")+"_"+e++,g)}function c(g,f){this.g=g;ca(this,"description",{configurable:!0,writable:!0,value:f})}if(a)retur

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	154
Entropy (8bit):	5.063452167873521
Encrypted:	false
SSDEEP:	3:HZ8sqDmJS4RKb5ykKcvXjXRHoNcHUXpWFUXJISILRU4GUSyvAZIAdSbFS:H69mc4sl3O4UXpCU2x8wvAZ/b
MD5:	827499D87703971F05522FDAD0D0936D
SHA1:	9D77F07F4C14B6A96B3914BDE2873B76818B96AD
SHA-256:	383A86B47F8C4B9CAC4035415C5C2F66E2B254A26A507614CBA67EB7230DAF57
SHA-512:	DBF2DADC523E7264254C082573F60D5F6EE21E720DE6A49E3222D4F4B11F5433C38CB17C6590172521F3C8CCB0A50C0D3E7AE6DA81385BDB74A75A4CEC119565
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/check.21reEWCG.js
Preview:	const s='<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M9 16.17 4.83 12l-1.42 1.41L9 19 21 7l-1.41-1.41z"/></svg>';export{s as C};.

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (369)
Category:	downloaded
Size (bytes):	370
Entropy (8bit):	4.947247575385212
Encrypted:	false
SSDEEP:	6:QjxfyXu5wR0LKv6GrxCVvKcTXjI4oU1DwefjuHGGnVcEfE:QjxfmulL32pcTXKBef6Hbn5fE
MD5:	382B567C1533719B477BA1988575D8E9
SHA1:	C7EE4A12033A119185BEB0CEC152B3904BAC9170
SHA-256:	E70E30D0AE7F07A5790CE3E8AFFF59402D17131182CE643800DBE6A9BEE75309
SHA-512:	B266823849ACF3104DA601FA0CBAA20BAE58CEC7A3BBA554C5DDA3D626478D77A94DD5B52292B34B74163BAF13BF0AA8788B9624122D6E706A36B8A17A24EB59
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/StoryMetaPublishing.BUSP_NGR.css
Preview:	.publishing.svelte-1k3af9g{align-items:center;display:flex;font-size:var(--font-s);gap:var(--space-1);line-height:1.25;white-space:nowrap;font-weight:var(--font-normal);letter-spacing:.015rem;margin-top:-1px;flex-wrap:wrap}.publishing.bolded.svelte-1k3af9g{font-weight:var(--font-bold)}@media screen and (min-width: 768px){.publishing.hide.svelte-1k3af9g{display:none}}.

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, WAVE audio, IEEE Float, stereo 44100 Hz
Category:	downloaded
Size (bytes):	149336
Entropy (8bit):	7.496490218548733
Encrypted:	false
SSDEEP:	3072:1SERAbS2HYOmf1uZYB58lwhf+sNdkSWHGcZOqDsAF:1VW7HYOvZA58XMdfWfZCU
MD5:	8F1C7F5187E8E78FDB31A5E6C688E803
SHA1:	64B1EF52851B1C5B130BD7FC12576329D1738F0D
SHA-256:	0598E13041B04BD01DC5E5849ABEBAC0E253BBAC3EC6BDC71CA62B84100717F4
SHA-512:	B5F744E0AF9D4736B542060471404E074FCA5769FFEBEF2BECD0A311329BAE985B97FFB52247E571EE0C2A9B7A99CB3FD5D91F21BD807A09D0A45FB651D12217
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/misc/voice-close-202105050733.wav:2f73582f4aa8e3:0
Preview:	RIFFPG..WAVEfmt ........D... b.... .data.....r.6.>.7..6!'.7...5...7BU...O.7...FE.7D...7Ud...MQ7.;J.7&.7..t.j..6. ....)6m...x..O...?..eH..........7.5....m.........P..........L...%J....9...u,.........H=......H=..j0..>....3...Y.......+..Ud........ ..>..G".M..r.".....!.....s......FE...v......._..~....Pz..L....O.....r.".....k..5......y............5m..?.6.....6&.`.\|.$7..-..MQ7.>..{7...._.7....v.7.k.6..7.\.6y..7..7..7$.<7D..7k.j7...7..7...7m.7...8.n.7 ..8...7...8.~.79..8k..7.x.8.1.74i.8...8...84i.8.+.8Q..8...7...8...7...8k..7~..8...7._.8...7...8G..7o..8...7[..8Ud.7C..8.L.7...8..o7.C.7j.E7.>.7A..7H..70F.6.@.7..6j..7BU.5.O.7Ud..m.7..~.. .7.!..>s7.~..~.H7..=.K..7D.e.0F.6......6#R.....5.J......&..............`...w...?0.h8!..".;.O.;i..<7..<+L.<..<.(.<...<...=6#.=..9=.\:=J.T=F.U=.:h=..h=..s=..t=.x=..y=..y=+Rz=Kzw=p.x=\.o=QMp=..d=..d=..\=.e]=..d=.Xe=.Q~=..~=...=.g.="{.=..=..=.#.=N.=.(.=4.=.1.=...=.i.=...={..=p.=.,.=[..=..=.O.=...=.e.=J.=...=...=...=

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64457), with no line terminators
Category:	downloaded
Size (bytes):	67717
Entropy (8bit):	5.404608504229257
Encrypted:	false
SSDEEP:	1536:2UI64yjnvD+FnD6Ug0NAohpuGKOGALvCqk8B4B3OYJKnGvK:TzvDAgoqi
MD5:	6EA12FCCBED15820786C87F0B9B67D61
SHA1:	0B1945893B1F90112CB7B1615DD751A17F0BE14F
SHA-256:	CBEEE7DA6CC21D0D3394C55FAB07C9005D10405A505117CB41C2A1B013773B97
SHA-512:	D06684BA7C541FA5CE2879FAE1632B1996475A3CCE1E7384F396E07010BFC336F2A9A976D07E9A1F97C2620D70B6F465F216E6EDF4243C0245C8FA51772CF072
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/hc/homepage-pwa-defer-1.1.6.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("HomepageClient",[],t):"object"==typeof exports?exports.HomepageClient=t():e.HomepageClient=t()}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(o[n])return o[n].exports;var r=o[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,t),r.l=!0,r.exports}var n=window.webpackJsonpHomepageClient;window.webpackJsonpHomepageClient=function(t,o,i){for(var a,s,c=0,l=[];c<t.length;c++)s=t[c],r[s]&&l.push(r[s][0]),r[s]=0;for(a in o)Object.prototype.hasOwnProperty.call(o,a)&&(e[a]=o[a]);for(n&&n(t,o,i);l.length;)l.shift()()};var o={},r={1:0,2:0};return t.e=function(e){function n(){s.onerror=s.onload=null,clearTimeout(c);var t=r[e];0!==t&&(t&&t[1](new Error("Loading chunk "+e+" failed.")),r[e]=void 0)}var o=r[e];if(0===o)return new Promise(function(e){e()});if(o)return o[2];var i=new Promise(function(t,n){o=r[e]=[t,n]});o[2]=i;v

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1782), with no line terminators
Category:	downloaded
Size (bytes):	1782
Entropy (8bit):	5.273131691295873
Encrypted:	false
SSDEEP:	48:kiSDY5hNw0wYNXT+0wYRfDYevDYOMFDYuWz3/DYDot:EY5hNw5Y1T+5YR7YmYv1YFz3bYDot
MD5:	5B9BF9F5D0E641E8B3BDCA8021D466D4
SHA1:	082F52187F14D4FF770662D45921FC6853B11339
SHA-256:	31655C11B0EC0F50CBE22B441B7CAE9FDEB74677551F6C6F53FA35C47EC75BB7
SHA-512:	C4B64DEEBAF72F718C845E89696455FADBAF5698D99B155D20003B2BED347E67BBCE698BAB734A8726D232154288D1176428ECD2DC091E3AC779F29FB1B96142
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=183875&gdpr=0&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	<html><head><title></title></head><body><img src="https://match.adsrvr.org/track/cmf/casale?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://ups.analytics.yahoo.com/ups/55940/sync?_origin=1&redir2=true&uid=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB&gdpr_consent=&us_privacy=1YNN&gdpr=&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://ads.stickyadstv.com/user-registering?dataProviderId=1025&userId=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB&gdpr_consent=&us_privacy=1YNN&gdpr=&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://match.prod.bidr.io/cookie-sync/ie?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://cm.adgrx.com/bridge?AG_PID=casale&AG_SETCOOKIE&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1" sty

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1650
Entropy (8bit):	5.159978002033735
Encrypted:	false
SSDEEP:	24:tCbYLbGPGuXVGTTGzGeLGSoGQlnGMGl8YolNBa4xYZHnRDaHjjOtKwS7xDSyFYxT:Di+huqUGSbQMHmlNQulQKxM
MD5:	03C10F2C4E36A75805F7735D1F07C98C
SHA1:	DAEF61F97758BEF6CE593D34998F5F8EA7E20E7D
SHA-256:	0F7D51EA19F78212DBF64706C7CCEB771E3D7B6390057BD4E44355B2850B1DA5
SHA-512:	26C726B47435AAF67BA01633AA75F50E48718A494FF19C0E2BD9AD58D070508AE9C8A14255EA0BF5A754BFBA2F6C4BD4D20632A31464478DF74EE68F10C59465
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="-36.396%" y1="32.854%" x2="33.396%" y2="133.313%" id="a">. <stop stop-color="#FFF5B2" offset=".013%"/>. <stop stop-color="#FFDE00" offset="39.944%"/>. <stop stop-color="#FFA700" offset="100%"/>. </linearGradient>. <linearGradient x1="115.053%" y1="97.289%" x2="115.053%" y2="-17.557%" id="b">. <stop stop-color="#FFB92B" stop-opacity=".05" offset="0%"/>. <stop stop-color="#FF6900" offset="100%"/>. </linearGradient>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="c">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <path d="M20.464 26.12c-4.225-.75-8.257 2.1-9.051 6.396a5.422 5.422 0 00-5.252 2.062 5.67 5.67 0 00-.693 5.694 3.006 3.006 0 002.792 1.727h10.855c4.085.022 7.5

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMIxYmjuJ6YhQMVCBpoCB2J1ATFEAAYACCtou9kQhMI35T0tZ6YhQMV0aWDCB2LCg5k;dc_eps=AHas8cBBS7AbsAhXSz4VuXwYVc6GI7OpQpSZZ3klPfoBj_whNQmH1WvCHdfXSW-BkeGsRN30KVPru2q-HRW2nHP8Cls;met=1;&timestamp=1711672914591;eid1=871060;ecn1=1;etm1=0;eid2=2;ecn2=1;etm2=10;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel
Category:	downloaded
Size (bytes):	2238
Entropy (8bit):	2.20822051335051
Encrypted:	false
SSDEEP:	12:susqeZyNQIfmwJ0osmoRvA+SNOFjTLpUdq9nQbAz6jB5UekYpXLimkBbKsVEtotx:survfwvpRUdq9nQjkYAJbK9tmq
MD5:	3A07174943F82046370997254100D870
SHA1:	ECB1E2E89AF0EC6F45F875C22DF0FBD45821BA80
SHA-256:	C6F7EE2CADAE2E121342A8C4245141175BFE887776206DEB17149D46CF3AA827
SHA-512:	0A589E20251F62F02C4B96B916FBD9359677A26379D46EEEF4E455464643DE0C9AEEF921AD563D970E7436805DD18AE974DE6942DFDF0C65089512D8A3B2FD35
Malicious:	false
Reputation:	low
URL:	https://help.yahoo.com/favicon.ico
Preview:	...... ..............(... ...@.................................`...a...a...b...c...d...e...f...g...h...i...j...k...l...p...r.. s..$v..)y..+z...\|..0}..6...9...;...A...K...L...P...R...T...X...Y...\...k...l...o...p...x...y...~.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 656x369, components 3
Category:	dropped
Size (bytes):	52323
Entropy (8bit):	7.968810683455206
Encrypted:	false
SSDEEP:	768:2qc+9Fis8K11A7OpkLrUIMyh867Jgzkg5VPF/3+7z+EVcftB6plNH6TQps2Ui/:2qc+903K116OmUIFBuVla4tC2TQp0i/
MD5:	5351576FFD6D4F5F2376363EAAC37070
SHA1:	D466ABA38310753F2707E52E0EDF07E39AAC8F69
SHA-256:	00776FE365BF2810708631E9F1B2850AEE511D66085E2F8034A0CEDB888A2576
SHA-512:	7550EBD28BAB5C6B7AD168C253DA27EE59E6FC64B2BCEF5B20FDF4715BCB311C59668F81717B6C9EB6AAB1C77C5A0D5A9B457CD3BF669075140B40C7574EB507
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.......................................................................q...............................................O.........................!.1.AQ.."aq2B....#3R...br..$4....56...%CSs.Tt..DEu..................................*......................!..1.A.Q2."Ra.#Bbq............?..U.z}.T...t.(..M..8<.S&5........\...v..8...

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4866)
Category:	downloaded
Size (bytes):	4916
Entropy (8bit):	5.283192920338877
Encrypted:	false
SSDEEP:	96:T4F5sDF9jQ9viy0E4xQ2bL1f69Un/MHddzldBv9D9lM6l4WU/KI2xlE9H9H1qTUW:T+56F9j0VGxQoL1f69UnOzDM6eRS1A1k
MD5:	D837387132682FD0311847FBBFEFFCCB
SHA1:	93DA92156F4A3EDFA49A01857CAB56D7DC6B3F69
SHA-256:	B8948611FE9939A8B96C6D2E95DCBCEFBE158B5F0FE3BD32389CBCA033AF9840
SHA-512:	7C2B1E7CCF54747594F51E56E11445FDF108E6670150ECE8376A73E42648DF5EEA64185B734C8B6504278BABC3CE3F0AC803DEC30F946CAB12E91678EE67C8C1
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/c/6652_20c9aada89.chunk.js
Preview:	"use strict";(self.webpackChunkCAAS=self.webpackChunkCAAS\|\|[]).push([[6652],{"./static/modules-default/default-xray-lib/js/tickers.js":function(t,e,a){Object.defineProperty(e,"__esModule",{value:!0}),e.initializeFinStreamerElements=e.initializeFinStreamerElement=e.initializeFinPillElements=void 0;var r=a("./node_modules/@vzmi/caas-static/src/util/js/index.js");const n="caas-xray-entity",i=`${n}-fin-streamer-error`,s="https://query1.finance.yahoo.com",l="/v7/finance/quote?symbols=",c="xray-fin-streamer-type-watchlist",o="xray-fin-streamer-percent-change",u=`${o}-negative`,d=`${o}-positive`,m=["oneDayPercentChange","regularMarketChangePercent"],f={"Content-Type":"text/plain;charset=utf-8"};let h,g;const y=t=>{const e=t&&t.getAttribute("data-lang")\|\|"en-US",a=(e.split("-")\|\|[])[1];h={lang:e,region:a}},b=()=>new Promise(((t,e)=>{if(g)return t(g);const{fetch:a}=window.CAAS.utils\|\|{};return a(`${s}/v1/test/getcrumb`,{withCredentials:!0,headers:f}).then((e=>(g=(0,r.get)(e,["data"]),t(g)))).ca

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	72712
Entropy (8bit):	7.99434035172996
Encrypted:	true
SSDEEP:	1536:YggKnjMbu0PUYuohZ1zvMMIFEOW81TWQiTUAo3519If9l5:Ygpn4bu0PUYuA+MepyQi4AoT9Ij5
MD5:	BCB08BA8869D7C1B36A98E74BF518D65
SHA1:	3C1BFDBB7ACCD32486BC9961F2D656933D0A5712
SHA-256:	D9DF6B3FF028E4A541CB20D671B2B222C9297698D432EF46FD654319977523DE
SHA-512:	96F6F2A1F2D0D2F341670BAE9EC20AC598C0C7374E798A411337A11A220882CE6D92EDC750020069DF0D3A88F136722238819204F1D2F74F0A62DE967F9036F4
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/oafsMbzvfoNKv9WJV9z7Pw--~B/Zmk9c3RyaW07aD0zNjk7cT04MDt3PTY1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/dc639b30-ed61-11ee-bdfd-8d738ae4263d.cf.webp
Preview:	RIFF....WEBPVP8X.... ......p..ICCP0......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 ...........q.>m.F$".!6{.x...e;^."P.(#=..?./..<gr{.L..m.....7........~.?......c......../.../D?...O._....%..v{..K......#..._..=._........E..._..C..........'./........o...?....U...W.....~...>..g...}........=..?.....?e......i..{..Q.....?...?........S............}.......?.\|..E......./..........p....x.e&b-..*.>.....n.<..._.m..;.......\|.q../...F7.....f..FK!..].....4...p.l.......-jce]TH.

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=540245193&val=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3063)
Category:	downloaded
Size (bytes):	3064
Entropy (8bit):	4.84149760233296
Encrypted:	false
SSDEEP:	48:8PE06PgDPSDPgDPrPlPqLPq98xIp3koEdfltFse8o4x9xwCUVs4iFUAUHwC1wc8C:8eIDKD4Dj98i9d3xEdfuxo4x9jUVsFFw
MD5:	67E92A866ABDEA5D76D477B3F797B2D5
SHA1:	F9A486D140AC1EDE563E1153418B328A5F26D49B
SHA-256:	04F6192170A9A69D7EA5534B354C77431CEB39C4AABA6186C0BD3DB637FBBFF2
SHA-512:	3D236609E1DCE383A59CBC8E015243CE10B3DD4FC637054D43216A4186C2B6D79D2475F47C955E4A06826EF94179229F24CBE7CE643B306C899BD5D0AD0B16E3
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/Switch.C38o_CYo.css
Preview:	.switch-label.svelte-1ntiyho{--thumb-size:2rem;display:flex;align-items:center;gap:var(--space-2);cursor:pointer;-webkit-user-select:none;-moz-user-select:none;user-select:none;-webkit-tap-highlight-color:transparent}.switch-label.sz-xx-small.svelte-1ntiyho{--thumb-size:1rem;white-space:nowrap;font-size:var(--font-s)}.switch-label.sz-x-small.svelte-1ntiyho{--thumb-size:1.2rem;font-size:var(--font-s)}.switch-label.sz-small.svelte-1ntiyho{--thumb-size:.75rem;--track-padding:.125rem;--thumb-shadow-radius:.25rem;font-size:var(--font-s)}.switch-label.sz-medium.svelte-1ntiyho{--thumb-size:1rem;--track-padding:var(--space-1);--thumb-shadow-radius:.5rem;font-size:var(--font-m)}.switch-label.sz-large.svelte-1ntiyho{--thumb-size:1.5rem;--track-padding:var(--space-1);--thumb-shadow-radius:.5rem;font-size:var(--font-l)}.switch-label.sz-x-large.svelte-1ntiyho{--thumb-size:2.8rem;font-size:var(--font-2xl)}.switch-label.labelRight.svelte-1ntiyho{flex-direction:row-reverse;width:-moz-fit-content;width

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (830)
Category:	downloaded
Size (bytes):	831
Entropy (8bit):	5.172878652091773
Encrypted:	false
SSDEEP:	24:JFCFnXfGELpXLqdtysALYk4voFbqwuAd55VuWj:JFknXfZSYsALYhvkbum55wWj
MD5:	4C4808CFCEDB8577C999D70DA7D67757
SHA1:	426FA683FA991DF0160F57C2A0CB643284730C27
SHA-256:	2F58A1F8BDF8DFA78AEB845DF4E12382C73A8176DAB0EE3F55E0798B86C7DD39
SHA-512:	AB8A56974B863002B8014AF2EEE87D30F570EE3F3C7EBDD446E8904F35FD50B7E175C833876D1AEF42E8ECA4E10006486DBA1BBD00F79C9DCB7AAD0FD48249FC
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/nodes/1.D0vNt2xZ.js
Preview:	import{s as x,e as u,t as h,b as S,d,f as v,h as b,i as m,j,k as _,l as g,m as E,n as $,o as k}from"../chunks/scheduler.ErneftFr.js";import{S as q,i as y}from"../chunks/index.DsErXEH0.js";import{p as C}from"../chunks/stores.CtqIvex8.js";function H(i){var f;let t,s=i[0].status+"",r,o,n,p=((f=i[0].error)==null?void 0:f.message)+"",c;return{c(){t=u("h1"),r=h(s),o=S(),n=u("p"),c=h(p)},l(e){t=d(e,"H1",{});var a=v(t);r=b(a,s),a.forEach(m),o=j(e),n=d(e,"P",{});var l=v(n);c=b(l,p),l.forEach(m)},m(e,a){_(e,t,a),g(t,r),_(e,o,a),_(e,n,a),g(n,c)},p(e,[a]){var l;a&1&&s!==(s=e[0].status+"")&&E(r,s),a&1&&p!==(p=((l=e[0].error)==null?void 0:l.message)+"")&&E(c,p)},i:$,o:$,d(e){e&&(m(t),m(o),m(n))}}}function P(i,t,s){let r;return k(i,C,o=>s(0,r=o)),[r]}class B extends q{constructor(t){super(),y(this,t,P,H,x,{})}}export{B as component};.

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 162 x 82, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7324
Entropy (8bit):	7.854163891509903
Encrypted:	false
SSDEEP:	192:iknrEB/tBTdMmhFbXmNtKh2zPHe73PnLq9P/Hu4:hnrUrTBmNtKh27eLPLq9PW4
MD5:	08E7E42D20A324381D05381B43BD496C
SHA1:	489C492B09849FBD0D0AFD9D6969EE2FFED5868B
SHA-256:	FFBE68D155920D39932B9EB4C1A4B436F595F448A5EBFEC23EDE37D7C2442700
SHA-512:	D0E0E72A0589362066857582C36BB0BA35C42867772D32CA884757303C425DE07EBDE4FE6DB8F5B606DFAC8734C9C2586CEAC4EFD289DAFD46BCBFAA74C5D716
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/dv/static/siteApp/img/privacy-choice-control.png
Preview:	.PNG........IHDR.......R......`......pHYs...%...%.IR$.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.1 (Macintosh)" xmp:CreateDate="2022-11-16T11:59:04-08:00" xmp:ModifyDate="2022-11-16T12:00:19-08:00" xmp:MetadataDate="2022-11-16T12:00:19-08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:96771fda-fa8c-4ecd-a4fa-391e4700fa02" xmpMM:DocumentID="xmp.did:96771fda-fa8c-4ecd-a4fa-391e4700fa02" xmpMM:OriginalDocumentID="xmp.did:96771fda-fa8c-4e

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15264)
Category:	downloaded
Size (bytes):	15697
Entropy (8bit):	5.53729719471769
Encrypted:	false
SSDEEP:	384:uQTCfjv99mW+911+Fl0YD0Dew/X2q5ulRIUeT:uQTCfGZ1+Fj9w/XuuT
MD5:	E2202E6ED6EF52CEC2C4A875C99225BA
SHA1:	FD48D3157CFA6B6E6FEC3E50787E357AA3288C88
SHA-256:	F2CFBD195DFF011843F93E2D32979F6F07926211CBF3EDDDC3B708B0BB04C8A2
SHA-512:	4E2AEFD87D89F4D5C00CFCAC8EE2D7748F84979BE9E66272475A621A19BA8FC884737DF604B3B7344FE4EB0C1154819880BC3769E25798BB4ABDDEF76EDC9B4F
Malicious:	false
Reputation:	low
URL:	https://www.yahoo.com/__rapid-worker-1.2.js
Preview:	/* @preserve. * $Id: rawdeflate.js,v 0.3 2009/03/01 19:05:05 dankogai Exp dankogai $. . Original:. * http://www.onicos.com/staff/iz/amuse/javascript/expert/deflate.txt. /./ @preserve. * Copyright (C) 1999 Masanao Izumo <iz@onicos.co.jp>. * Version: 1.0.1. * LastModified: Dec 25 1999. /./. @preserve This code contains an altered version of the original source and is not meant to misrepresent the original software.. */.function base64(r){if("undefined"!=typeof btoa)return btoa(r);for(var t,e,n,f,o,i,a,l="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",u=[],s=0;r.length>s;)t=r.charCodeAt(s++),e=r.charCodeAt(s++),n=r.charCodeAt(s++),f=t>>2,o=(3&t)<<4\|e>>4,i=(15&e)<<2\|n>>6,a=63&n,isNaN(e)?i=a=64:isNaN(n)&&(a=64),u.push(l.charAt(f)+l.charAt(o)+l.charAt(i)+l.charAt(a));return u.join("")}function lzw_encode(r){for(var t,e={},n=(r+"").split(""),f=[],o=n[0],i=256,a=n.length,l=1;a>l;l++)t=n[l],null!=e[o+t]?o+=t:(f.push(o.length>1?e[o]:o.charCodeAt(0)),e[o+t]=i,i++,o

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4261), with no line terminators
Category:	downloaded
Size (bytes):	4261
Entropy (8bit):	5.107063209991654
Encrypted:	false
SSDEEP:	48:dB7ZSmDaP0/tpxoUi+rft9ZeTLRHKFZSEGDnXqGngtmXNvsFojX4in5MpngebA1l:dB4m2MxoC5jeZHKEXfgwvVGpgOA1ITc
MD5:	48D7308E4275C0F4F18A9587768F0468
SHA1:	C60A6D5428CCC3950763CFABD85D1C7D32F8294B
SHA-256:	DFDFD45FF45DF936750142130AFA1FD5781410A300088470C0B54849E96CAC44
SHA-512:	063773B12AFA7AF61D2138C43C36C648EC1D522EDB02D46E511107A2CFD658C8217145400F1D8FCF0BA01A43B7F01D4282B18FB3AE75410D290C5FA6C9C29265
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/os/yc/css/bundle.c60a6d54.css
Preview:	/! normalize.css v3.0.2 \| MIT License \| github.com/necolas/normalize.css /html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;f

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&expiration=1714264899&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=DBAA&gpp_sid=-1&google_gid=CAESEBlRho78gpmMlRUqfBGx8XY&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.5465935642949384
Encrypted:	false
SSDEEP:	3:YHAXW2Vn:YglVn
MD5:	97EFE0B7EE61E154D57E80758BB797D8
SHA1:	810B4E115FE9F5AE697666FEBF2A9ABF0B21C9EC
SHA-256:	EFABBA3678B85FCAB831B778EA2DDAAD1E2A1E952584D3566BC39B7CCB3429D9
SHA-512:	AA02209CF80FC2564CE0DB0BF9F30241E92EA33101B55FFE5E26D617F90B74277AE68D714A7B00C792EF2B88B582E3F299213A5C3C9BF9AFE6C6C1800FC276AF
Malicious:	false
Reputation:	low
Preview:	{"bakers":[]}

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13318)
Category:	downloaded
Size (bytes):	13319
Entropy (8bit):	5.422076782326331
Encrypted:	false
SSDEEP:	384:qDWwKXq2+KwyYJaRFCa8fSDUXcS23q6oHtFj8EpuoHeYmTwkj0EMUc:qx95RLfa8I3pUp7HNv6fMZ
MD5:	1328FBA163D38911F82DB63CFBD2E85A
SHA1:	80C7969E97D53D21384E264BD09392050BDA30F8
SHA-256:	DA0E9BC6B0C589F7658AE8571E2214797B5BBF3C257E447A70259A5AC0C0F090
SHA-512:	927D921D4397E3DCF909F9331C98ED7F54A5DA610D0149CBC20B83B35E46D5C797480F4FA59BCEDB0EE3B2A849467EB0EDE9A857268D675727534C4CC2CAA412
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/Dialog.Cq9rVjnc.js
Preview:	import{s as j,w as U,k as C,i as k,c as me,D as Ne,e as S,b as V,d as E,f as z,j as G,p as b,M as _,a5 as $,l as D,u as de,g as ce,a as _e,a3 as O,t as q,h as B,L as T,n as ye,A as ee,m as Y,G as Ce,a6 as le,I as we}from"./scheduler.ErneftFr.js";import{S as he,i as ge,t as P,g as H,a as L,e as J,c as Ae,b as Me,m as Pe,d as Se}from"./index.DsErXEH0.js";import{g as Ee}from"./spread.CgU5AtxT.js";import{g as De,k as ze,z as Le,A as Ie,t as te}from"./commonUtil.Bb2Cnbsk.js";import{g as Oe}from"./i13nUtil.0wCphNmh.js";import{A as Ue}from"./a11y-dialog.esm.CGJeMRyW.js";import{B as Fe}from"./Button.C10y2YT5.js";import{C as Te}from"./close.C3ug6nNR.js";function qe(i){const e=i.slice(),t=e[2]\|\|!e[8]\|\|!e[17];return e[29]=t,e}function ie(i){let e=i[12],t,l,a=i[12]&&Q(i);return{c(){a&&a.c(),t=U()},l(n){a&&a.l(n),t=U()},m(n,o){a&&a.m(n,o),C(n,t,o),l=!0},p(n,o){n[12]?e?j(e,n[12])?(a.d(1),a=Q(n),e=n[12],a.c(),a.m(t.parentNode,t)):a.p(n,o):(a=Q(n),e=n[12],a.c(),a.m(t.parentNode,t)):e&&(a.d(1),a=null,e

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	441
Entropy (8bit):	7.342351860318296
Encrypted:	false
SSDEEP:	12:6v/7BNipNeLqa1oVTecT8S2Ny/NU8Pymomd79X7:qipY+a1onUfVmomdJ7
MD5:	1B94DFF87A916CE0A949B09EEC3884C2
SHA1:	DD5E6C67D01084008E09EFB93DD3AAFF98983D6C
SHA-256:	0F1E6E58C6EDC6E7C6F4C00D610CE034D3263CC9ECB52A1F6E33098EFF3809E3
SHA-512:	44C82197E8832DC20737074904AAE35C783DDA27A9C22DB55F6CE0A62278F6D070C1D4FC1BF19857E57D2E2940C74CAAE8EBAE276D2B8DC850EA69DA2115CF2C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/zz/combo?pj/sh/202403271817/img/largeX@2x-dark.png
Preview:	.PNG........IHDR...(...(........m....sRGB........sIDATX...=o.0.......K%@0Ru...P$....@{o.B.....E..O.\|X.[H~H.%7...,.O.....~..&.U2*V..U../@.s.....`9K.......N..E...7..L.2.{'.5....@..<..q..j.%........i..B.\|..q5H7...;.....A....9.N.>.<.u.&.D...x.c.j..[.......8i;=...../&....N{ .c.A.z...vO.".p..0djX....Y.s..987d.....g.l.k...5CZ.k9.....slln-~Oz.xQ...\6.k.^.J..zr.?b..S#V.{.m......XM'.5...b..X..j:...k...[i.0../'..,..~....IEND.B`.

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	115749
Entropy (8bit):	5.129658951705793
Encrypted:	false
SSDEEP:	3072:OVmWfms5BWIADLyuDs8rSpDlDFT12tZSwNiRD3OYsu:imWfms5BWIADLyuDs8rSpDlDFT127Sw6
MD5:	06C51628A3BF91D8E0E9DB81FED856AD
SHA1:	E24258F1B2D0A32DFDB15CE559C875FE59E456BD
SHA-256:	2E53CB3C11EC838D7069091A921246A4B0B6507E84873FAA7F161EEBC52197A4
SHA-512:	DF92186EF8C430EC00A947240FC7D8733489145B344BDB06383BF6E49CAD8ABD2A8EE90AB9EAC563011E2DB4910176C54CF351A3A5D7DFF83BF9BB5F75FC53DE
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/zz/combo?pj/sh/202403271817/css/slick.css&pj/sh/202403271817/css/stylesV1.css&pj/sh/202403271817/css/sbi.css
Preview:	/* Slider */..slick-slider.{. position: relative;.. display: block;. box-sizing: border-box;.. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;.. -webkit-touch-callout: none;. -khtml-user-select: none;. -ms-touch-action: pan-y;. touch-action: pan-y;. -webkit-tap-highlight-color: transparent;.}...slick-list.{. position: relative;.. display: block;. overflow: hidden;.. margin: 0;. padding: 0;.}..slick-list:focus.{. outline: none;.}..slick-list.dragging.{. cursor: pointer;. cursor: hand;.}...slick-slider .slick-track,..slick-slider .slick-list.{. -webkit-transform: translate3d(0, 0, 0);. -moz-transform: translate3d(0, 0, 0);. -ms-transform: translate3d(0, 0, 0);. -o-transform: translate3d(0, 0, 0);. transform: translate3d(0, 0, 0);.}...slick-track.{. position: relative;. top: 0;. left: 0;.. display: block;.}..slick-tra

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65484)
Category:	downloaded
Size (bytes):	184464
Entropy (8bit):	5.449610683212188
Encrypted:	false
SSDEEP:	1536:CmzNNlFchunXBo4P5/vurL73G8HbREzC1H9RrMrjbJPySO+/U+wSS60ibrLr2pmx:CmzNNlFchunXBhPh90iWglWO/
MD5:	6863CE0703CE4F482389F8A7E640E4E6
SHA1:	7554A71C742AD65ADA09C7819E853F2F71D88D52
SHA-256:	D08DEDFB38AA5AE7DEDADCAE8425F632C17CE61ABA51990D9275FB71A2B28387
SHA-512:	36FA691795A4125FC052D4A75FEAB5B83059676B66C8D927E28EE56AC66B0BFA73021CB26C66953E49C3BDE0D41005D67D6F15D26AD8DA6140C5153EB9488390
Malicious:	false
Reputation:	low
URL:	https://consent.cmp.oath.com/version/6.4.1/cmp.js
Preview:	/! CMP 6.4.1 Copyright 2018 Oath Holdings, Inc. /.!function(){var e={4184:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}e.exports=function(){for(var e,n,r=[],i=window,o=i;o;){try{if(o.frames.__tcfapiLocator){e=o;break}}catch(e){}if(o===i.top)break;o=o.parent}e\|\|(function e(){var t=i.document,n=!!i.frames.__tcfapiLocator;if(!n)if(t.body){var r=t.createElement("iframe");r.style.cssText="display:none",r.name="__tcfapiLocator",t.body.appendChild(r)}else setTimeout(e,5);return!n}(),i.__tcfapi=function(){for(var e=arguments.length,t=new Array(e),i=0;i<e;i++)t[i]=arguments[i];if(!t.length)return r;"setGdprApplies"===t[0]?t.length>3&&2===parseInt(t[1],10)&&"boolean"==typeof t[3]&&(n=t[3],"function"==typeof t[2]&&t[2]("set",!0)):"ping"===t[0]?"function"==typeof t[2]&&t[2]({gdprApplies:n,c

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	300
Entropy (8bit):	4.695315939555151
Encrypted:	false
SSDEEP:	6:F/J2rMCK4FdhD94oRzQywXEXyw3n94Epnt9vVD:FB2rzKYDRR8ylXyqn5pXv9
MD5:	970B506A6E0BC7158BF9E52BEF807A73
SHA1:	40C93B235AA9157C365D2E7B81E932AE531EB2CE
SHA-256:	CCE17E3AEA5E05213E8A89D7C1F03F08811B69BDC8956404580BD0FC8E25C726
SHA-512:	DF83DC79F0398ADFA8D22E8614A6CD76EB68E3C7D5A69822C70C88B87045492498B4EF5340DA9FB71164A152C395EE083295A654AA01C2E9D7092EA2D9143AB6
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/stores.CtqIvex8.js
Preview:	import{s as r}from"./entry.CqbZzrN3.js";const e=()=>{const s=r;return{page:{subscribe:s.page.subscribe},navigating:{subscribe:s.navigating.subscribe},updated:s.updated}},n={subscribe(s){return e().page.subscribe(s)}},i={subscribe(s){return e().navigating.subscribe(s)}};export{e as g,i as n,n as p};.

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=196&external_user_id=4433599061245380871&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3429
Entropy (8bit):	7.6093346537149635
Encrypted:	false
SSDEEP:	48:p7SOSiETXnOQKNfMRmxLbwmryL58hpWDcBYwd/gpxRVKK+SFgGao3y1Cmc0YXasQ:p7xShOlNptlS58yDciwWplTfXy59qi
MD5:	C18614A6C435B6FEEC08C7FD7E613CD5
SHA1:	6AF0599C05E96902C4D23C89D0669222767FDB32
SHA-256:	AAC6385F67985D6B495DA79A52C952EE8A0A2E4AEED7D86B142A0F0B359490AB
SHA-512:	9C0D15B1B36D03AD84B929F0F7424882D9FC14DDACB69328CA528CCD3141916557B84FC1ED02C073900297DEBB63E505CA3464D7B109EDEB6DED3DCC7A5D0829
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/473513299895995753/images/headline1.png
Preview:	.PNG........IHDR...X..........):...0PLTE................................................c.M@....tRNS..w..D.."f.3U.........IDATx.........................................................................`..,....o.tI.QQq..+."...D..E.JPP0. ..x.....BD..N/.QPolEp...../....pW.B.d4K..%...4Q...$.9..o..s...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...o.>..1..Y9..x...@.<..;K._.0....H.^..@..0.'!..Xb..eH....m...bD\)........H.^.}I..C(..,R..C.1.PF.'..:..B%...\C.M...6....!L..,>..E.0.y.W..6..:..&.'..R\Gq^...d....>(.Fu....LCA&%BV=...Q..,.eap.R....j.]Y......4..1.G...F..L.7hHh..I.D..L.}..)..Oe....5c......#deT.~.'.%}./.;..6Y.....7......,K.D@.!6.CV......"....x..W.We).....?...#l}d..w.{..@I.Y7..g.%..^<..]..(%.KLD6..H\."..yE...G..q...IV....c. ....y.(..B.$.D.C..6@.\|...Tp8....^Yg..V.8..M.I......^..F..PD...7AY..P+.......V.;k...\Y.lc....f....Y...,!.$.%.`&.Uv.........r</.....g...r.'+.../:L.)..h\...,..2....=.=..b.S\..<....n...te..d..,...K.M.F.2Q..6??mo....w.m..K...@@....u

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1134096
Entropy (8bit):	5.492429459403277
Encrypted:	false
SSDEEP:	12288:SsW3wFTOLe4WUI3h0x7rBPHysg3zQMejaxpTqVbI9a1MKKNfykJXwV95j2SYjnr:7WiKLe4Wrh014sg30560VbII2hhykRb7
MD5:	F82ACBD6C3B563914D46FD6F7ABA372F
SHA1:	3B15084605F606A559266D5B1C33F159C80804CA
SHA-256:	375EA07C8BCFC59B5A5D035162B1F0E442B998FFEF7CEF4F2916988EE36DBEC2
SHA-512:	E07129CE6C331EC15DEE01BD5BA40D0F646A2A72C64E09E7D2DEDA48FB989503C87BA5BB80504E46E215C2D55827FBABC6E181D76E23223C664AE73F152AC1C8
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/6415665815001/RiVAoaoIb3_default/index.min.js
Preview:	(function(t,i){if(typeof define==="function"&&define.amd){define("bc",[],function(){var e=i.apply(this,arguments);t.videojs.log.warn("DEPRECATION: Using the default named RequireJS module in the Brightcove Player is deprecated. See: https://support.brightcove.com/requirejs-and-brightcove-player#Future_implementation");return e})}else if(typeof exports==="object"){module.exports=i()}else{t.bc=i(t)}})(this,function(e){var t='.vjs-svg-icon{display:inline-block;background-repeat:no-repeat;background-position:center;fill:currentColor;height:1.8em;width:1.8em}.vjs-svg-icon:before{content:none!important}.vjs-control:focus .vjs-svg-icon,.vjs-svg-icon:hover{filter:drop-shadow(0 0 .25em #fff)}.video-js .vjs-big-play-button .vjs-icon-placeholder:before,.video-js .vjs-modal-dialog,.vjs-button>.vjs-icon-placeholder:before,.vjs-modal-dialog .vjs-modal-dialog-content{position:absolute;top:0;left:0;width:100%;height:100%}.video-js .vjs-big-play-button .vjs-icon-placeholder:before,.vjs-button>.vjs-icon

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (7558)
Category:	downloaded
Size (bytes):	7559
Entropy (8bit):	5.491361524744029
Encrypted:	false
SSDEEP:	192:AjZTSAs5yudARqjvsOsxc2x3O4kxsKsHsUj4T4R9aJnBPtEu+9lvHZX4Th4US:AjVSOa0qmx+4kXE9UnUu+214d
MD5:	0F6E4A72A091DAC0B1A89E71BC52C1F4
SHA1:	0DA6568F065CDD8F365597BFE9D5FA47D9870E6A
SHA-256:	81C9F9A280560F53F2CAE46BC02BFDAEBB91E218B08EB80C63CAA3FA9608E564
SHA-512:	04E5506F224AC30EAACFB42936450810532E4450D862D9DB4D75357E3A4C57F64CD19AB95875872B40947B0A55DE69D2537D4844DC4AE622E30BB7EF5E0C70C1
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/AccordionItem.BVPgX5F7.js
Preview:	import{s as K,c as j,e as S,d as A,f as V,i as I,p as h,L as T,k as P,u as q,g as L,a as Y,I as te,b as G,j as H,M as B,l as R,D as J,R as x,a5 as $,C as re}from"./scheduler.ErneftFr.js";import{S as se,i as ne,t as N,a as z,g as ce,e as ue,c as me,b as he,m as be,d as _e}from"./index.DsErXEH0.js";import{g as ge}from"./spread.CgU5AtxT.js";import{g as ie,r as Be}from"./i13nUtil.0wCphNmh.js";import{I as Ce}from"./Icon.CDBsrPKz.js";import{C as ve}from"./expand_more.DscV4c36.js";function Ne(l){let e,s,a;const c=l[3].default,d=j(c,l,l[2],null);return{c(){e=S("div"),d&&d.c(),this.h()},l(r){e=A(r,"DIV",{class:!0});var m=V(e);d&&d.l(m),m.forEach(I),this.h()},h(){h(e,"class",s=T(`container ${l[0]}`)+" svelte-10zi8b3")},m(r,m){P(r,e,m),d&&d.m(e,null),l[4](e),a=!0},p(r,[m]){d&&d.p&&(!a\|\|m&4)&&q(d,c,r,r[2],a?Y(c,r[2],m,null):L(r[2]),null),(!a\|\|m&1&&s!==(s=T(`container ${r[0]}`)+" svelte-10zi8b3"))&&h(e,"class",s)},i(r){a\|\|(N(d,r),a=!0)},o(r){z(d,r),a=!1},d(r){r&&I(e),d&&d.d(r),l[4](null)}}}function

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	dropped
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	347995
Entropy (8bit):	5.547521454074637
Encrypted:	false
SSDEEP:	6144:sw1YnYpj4DYnYIYej1sdvcK9YZYPjrbYYYojXRHYfYdjylHYzYBj3rIZ9HYVyflN:sw1YnYpj4DYnYIYejKF9YZYPjrbYYYo9
MD5:	CBB679AC2C7CD5BCE3DC30959E9878BA
SHA1:	C84D004AFB7660CE5E1733878C3F895BD9DB795A
SHA-256:	60982AE71DBB110D471E079AF143E6FB965F7ED47F7F24CDDA8AD63AB413626D
SHA-512:	4E280F7F26540EE7C88614A7250C96E0E643B72617677D295917597F04B71E33A0811F4D0B73E86BF5C05B4A6A7E39591334796621C4F84F394E183F496DCFC4
Malicious:	false
Reputation:	low
URL:	"https://www.yahoo.com/caas/content/article/?uuid=d045bf6b-f631-471e-85f5-f96a61504456,747d213d-feeb-344b-9f11-46ff213b038f,5b9c2182-9890-3c45-9adc-de7f18290b6a,3a1dbd93-3944-31c4-9897-57e5492bdc58,51d79ed4-e44e-374e-933d-c1e0adc2ae91,ddb65e10-dda4-3026-b3ea-45ba16328ad9,dd5e065f-7870-3aac-8d1c-ff5e94237f9a&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=2vl5n89j0c3hk"
Preview:	{"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"news;soccer;sports","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a077000000DAfMuAAL;revsp:us.sports.yahoo.com;lpstaid:d045bf6b-f631-471e-85f5-f96a61504456;pt:content;pd:modal;ver:megastrm;pct:story","site_attribute":"wiki_topics=\"Megan_Rapinoe;Korbin_Albert;United_States_women%27s_national_soccer_team;Getty_Images;Paris_Saint-Germain_F.C.;Social_media\" ctopid=\"2074500;2078500;2112500;2212000;2298000\" hashtag=\"news;2074500;2078500;2112500;2212000;2298000\" rs=\"lmsid:a077000000DAfMuAAL;revsp:us.sports.yahoo.com;lpstaid:d045bf6b-f631-471e-85f5-f96a61504456;pt:content;pd:modal;ver:megastrm;lu:0;pct:story\"","spaceid":"1197792446","site":"sports","enabled":true,"pos":"","showBodyAds":false,"showPhotoAds":false},"alias":"ymedia-alias:shadow=megan-rapinoe-issues-scathing-statement-after-young-uswnt-player-likes-post-mocking-her-career-ending-injury-233909947","canonicalUrl":"https://sports.yahoo.com/megan-rapin

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1642
Entropy (8bit):	5.528894946696052
Encrypted:	false
SSDEEP:	24:Vn+0EpHeEpHeEwIFr/BHCdpn1f/HM8QhC0Vtn8oIM:l+Xpwsr/NCX9HMThPtxn
MD5:	B74B37E40EAAC216573199B31F9B4B8A
SHA1:	DAE74154C89E7BF7B8F451E71C9199BD9F1359FD
SHA-256:	F47955FB79A1FA64C851013CFBA0094A85250A4D5D8B1C166141EAAF48B08600
SHA-512:	78C7F8FCA8234EF21BBBF79B124C956AA5D1103699AEF7C06B2B24451E54B599EF7D19C95DD62C060E16A6F9AD1D283F5D04ADF48AEC47411D331C0A746C8368
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/473513299895995753/images/cta_over.png
Preview:	.PNG........IHDR...X............;...6PLTE......898...cdc......BCBXYX...yyy......MNM...non.............tRNS.@..f....IDATx.........................................................................`..@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU.=8........m.UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa........._.AUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU....... ..FPUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU...@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU.=8........m.UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa........._.AUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU....... ..FPUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU...@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU.=8........m.UUUUUUUUUUUUUUUUUUUUUUUUUUUUU..........7=.{.I[......>.p_...:(..A....uP....}....p_...:(..A....uP....c..V[..(.fM.m...?{....B.-..C....4.....'9.

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	1.6826987302732233
Encrypted:	false
SSDEEP:	6:ZM6MdN4jF8VGH0xnYOqEiCNc/+O1t+KbAzNct/XTXP0zyQ59:ZM6gyh82eqExk+uvbAzNc14d
MD5:	B6814AE5582D7953821ACBD76E977BB4
SHA1:	75A33FC706C2C6BA233E76C17337E466949F403C
SHA-256:	4A491ACD00880C407A2B749619003716C87E9C25AC344E5934C13E8F9AA0E8B3
SHA-512:	958268F22E72875B97C42D8927E6A1D6168C94FE2184DE906029688A9D63038301DF2E3DE57E571A3D0ECC7AD41178401823E5C54576936D37C84C7A3ED8EF6B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico
Preview:	..............h.......(....... .................................`...d...f...i...k...m...p...q...s.. s..$v..*z..?...D...M...V..._...b...c...l...v...y...\|.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	34476
Entropy (8bit):	7.967749991141053
Encrypted:	false
SSDEEP:	768:PYy4eLJ/OFMAcB370sQhlSpdUVG5K0hWH+eB7IbHDdK7l:P/J/7B370sQhm++e2bHDdKl
MD5:	5932E685C1D1F5EA76202408A3C4EEED
SHA1:	B3A97E9800EA6FB1B374FC816344C5D01CE585E4
SHA-256:	F47C8176C146A76CF45E6982E4197C3369509E3D186747430AE2575A8B7D4FC3
SHA-512:	CB2B9093C9223FBAA54E1AA449451AAEBD178EDD31B701D9AC52E59307BE8778D4500B4E722332C8B394F6A65F48926E272512779DBC0DF02EEE5189C507D7DC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/NhkQAh5iRdlm.0JUwPjkRg--~B/Zmk9c3RyaW07aD0zNjk7cT04MDt3PTY1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/reuters-finance.com/c69555ee2aefd55c23c2ba7b01ddba0c.cf.webp
Preview:	RIFF....WEBPVP8X.... ......p..ICCPH......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://tags.bluekai.com/site/19505?id=y-M5CU46VE2pKQ0CgwrfMIsdT_mjt7Wc1dhhg-~A
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3236)
Category:	downloaded
Size (bytes):	11824
Entropy (8bit):	5.311081802817346
Encrypted:	false
SSDEEP:	192:OdjQ65BplhSyXfHfFWTeEiURvyVOYuFexihBZEgBgm952jC73R/U5gFVTB0F:O2oxhSJR+OYuFDg0JsgFl2F
MD5:	55A902A4558B7FC8B0FC7DF9FEBDF20A
SHA1:	6DD6488D6D9276C0A4D139E3665B14001861FDE5
SHA-256:	9159FF44D7094B8C99C902B187018A7E1115252E3C0438F9D4622295CD00D287
SHA-512:	96A5ECA04A366E0DF8B3EE0BE140602F7F7495CF6C77264527425808320D663DE9138A68C4494F3DE73D2513B3D0BD5CFC6BBEDF9628B89A118714ED7204161B
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20240327/r20110914/elements/html/omrhp.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this);function k(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .function m(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function n(a){for(var b,c=[]

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.831212416381637
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKq3TPMQZgWaee:PLKdXNQKqb5gL
MD5:	9F9C09E710BF4B791F895D28BCA13B4E
SHA1:	E83642A8B6872CEBBACD4A3902A7C55D7E6B89BB
SHA-256:	BFE921737A9444EA43003FCEE8F7BA1F9BFA429502ED435976605A5A87FA6A18
SHA-512:	968CE1F65ED431F79030A0C566326A0D0B973C04E6FB56726B4B9ED9BEBCC5255D4DF232D456D836165C15F92C7685C3986FBF7786D7E2FD0B3F099C10ABF387
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js');

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum.casalemedia.com/crum?cm_dsp_id=191&external_user_id=08726e86-cf36-54f6-8d6ab380
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (1279)
Category:	downloaded
Size (bytes):	1280
Entropy (8bit):	5.325079670986371
Encrypted:	false
SSDEEP:	24:ICrbng50cEn9Xg6aT6E7Eg3TbRVOoKqIvnswITG2kA2XY6fflZAajIQ+VDMkYLvn:IObM01BaT6qHTNqqUs7Tpz2rf9WajwVO
MD5:	32F4796D0F224D243318A4E1D213FE2F
SHA1:	2F0EC0EED2B5639E3DB576F1CEBF7EB7FD62D7D5
SHA-256:	34255F85E04905336C702C97E4248268227F0B4B475B5C74CB8A95657ACAE221
SHA-512:	91B264AA2DC2060BCA50FF362184574FC05D545B4E52C407D4430618BDDCC185DBDE5348563A3AC5022CC30BA2D4150ECA45D988C057A81F34C88BF6881202FB
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/SectionFooter.oRve59uq.js
Preview:	import{s as g,D as m,e as p,d as h,f as v,i as c,p as f,M as _,k as S,Q as u,R as y}from"./scheduler.ErneftFr.js";import{S as k,i as C,c as N,b as q,m as V,t as b,a as w,d as D}from"./index.DsErXEH0.js";import{g as M,a as j}from"./spread.CgU5AtxT.js";import{V as E}from"./ViewMoreLink.B3HK46JX.js";function F(l){let t,s,o,a;const r=[l[2]];let i={};for(let e=0;e<r.length;e+=1)i=m(i,r[e]);return s=new E({props:i}),{c(){t=p("div"),N(s.$$.fragment),this.h()},l(e){t=h(e,"DIV",{class:!0});var n=v(t);q(s.$$.fragment,n),n.forEach(c),this.h()},h(){f(t,"class",o="footer font-condensed "+l[0]+" svelte-1qpyi02"),_(t,"os",l[1])},m(e,n){S(e,t,n),V(s,t,null),a=!0},p(e,[n]){const d=n&4?M(r,[j(e[2])]):{};s.$set(d),(!a\|\|n&1&&o!==(o="footer font-condensed "+e[0]+" svelte-1qpyi02"))&&f(t,"class",o),(!a\|\|n&3)&&_(t,"os",e[1])},i(e){a\|\|(b(s.$$.fragment,e),a=!0)},o(e){w(s.$$.fragment,e),a=!1},d(e){e&&c(t),D(s)}}}function I(l,t,s){const o=["containerClassName","onlySmall"];let a=u(t,o),{containerClassName:r=""}=

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1239)
Category:	downloaded
Size (bytes):	1240
Entropy (8bit):	5.343342467489584
Encrypted:	false
SSDEEP:	24:c6B4M5aqrDQ9ZPOrT6LT7LbSKhDn400YE4TmqLi/DVg1bXRHasIPcfr5:PBSqriS6zHRBfE4TsG9R6s9
MD5:	79A0874B52C0C38ADD16385EB1A694E7
SHA1:	99831AF571CAB5B4AFEA34FBFE54996AF2DDE1F3
SHA-256:	1AE0492D9FBAC257DB08C85F493A6F37F7A1B432315B2850E8682E41FE3FD833
SHA-512:	0C8D72DC276B802D68B51EC68CA46080316643B1B7338532CFD106C9AB3563F06CAD62910FF810640BFEBF38228EF72893965940D19A88154E99A6A6F29DD021
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/vzm/cs_1.5.1.js
Preview:	!function(){"use strict";var c=window,e=c.document;function n(e,n,t,r){if(!e\|\|!n\|\|"function"!=typeof c[e])return r();try{c[e](n,t,(function(c,e){r(c,e)}))}catch(c){r()}}c.COMSCORE={_version:"1.5.1",beacon:function(t){n("__uspapi","getDoNotSell",1,(function(r,o){n("__tcfapi","getTCData",2,(function(n,i){var p=JSON.parse(JSON.stringify(t\|\|{})),s=n&&n.gdprApplies\|\|!1,a=c.YAHOO&&c.YAHOO.comscore\|\|{},f=c.rapidInstance&&c.rapidInstance.getRapidAttribute;p.c1=p.c1\|\|"2",p.c2=p.c2\|\|a.c2\|\|"7241469",p.c5=p.c5\|\|f&&f("spaceid"),p.c7=p.c7\|\|e.location.href,p.c8=p.c8\|\|e.title\|\|"",p.c9=p.c9\|\|e.referrer\|\|"",p.c14=p.c14\|\|a.c14\|\|"-1",p.gdpr=s?1:0,p.gdpr_consent="",s?i&&n&&(p.gdpr_consent=n.tcString\|\|""):o&&r&&"boolean"==typeof r.doNotSell?p.cs_ucfr=r.doNotSell?0:1:p.cs_ucfr=0,p.cs_ucfr&&(p.cs_fpid=p.cs_fpid\|\|a.cs_fpid),p.ns_c="UTF-8",p.ns__t=(new Date).getTime();var u=[];for(var d in p)if(p.hasOwnProperty(d)){var _=p[d],g=typeof _;"string"===g\|\|"number"===g?u.push(d+"="+encodeURIComponent(_)):"options"===

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	51344
Entropy (8bit):	7.974075382634181
Encrypted:	false
SSDEEP:	1536:PIrDdzyA+JAjrNrXv52s4TNaAvStLNo7J:udZYk5Lv52bExOJ
MD5:	070410700A405F90CE06997BE050183D
SHA1:	CCD124D36FBB361FAA1B2C29D00CA992B14CE5DA
SHA-256:	E810D0442F5E8ACA1ED9AA2ABEC9880829E4ADAB104289B388C0FFA2BE0B27FC
SHA-512:	4E92BB0D728599F2AEA2DC2FE1254D6832BF8A484D562C18852B9C9445B74CE6778267F92A73FA9BFBA5DA7B133D8475C7EAAA37B8865E81B57C258868802DCE
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................................................................I.........................!..1.."AQa.2q.....#BRb...$3Cr........%45Ss.Dc..................................2......................!...1..A."#.2Q.3a$BRq.C%4.............?...3.-C....A..o..\|I.pG......V[..8..W.^.._.8>..8.L_...x.I....9.......fN.pa.3O....5.]qv.C.I.....\|............R...~........,....ELDJBq..+..h..sE.d....iH9..Qc.D....rn...Y;....h..+..r....&......>.....I....w5..k...^.I.$.....#'#.....}..........r...E.%.6......,..;z(n2..R....../..c9.g..4s.Y:+...kh..#n.QLl....#.t...(!.8.Q`%.L(...A.Q.....;5_..]..v.....L..a!o,'......nj.F3.ob...dv.../..c.U...+NB....yHB<..>....;QVY...C.6.p4f.E.....y.I...*)..:o.uf.S.Y...U.\./j.:.X1...v!.......N..=....&.....HR..$.(N.....[.!.....&1.2..s.4/"...n....w...R..-.......S2....4.n\|{...k..d...}+.,.:_..0.-.JBG..

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4917)
Category:	downloaded
Size (bytes):	4918
Entropy (8bit):	5.153210541388255
Encrypted:	false
SSDEEP:	96:9mj6J7MXQbO3R9XAeSAleMS58e/j+8R9N84VORu+VIh0b7zqqSmhFbw:AW7Euejheb+PE+V0ENE
MD5:	B6D48BD3E943F7FDBD3BBD156D377353
SHA1:	BA2A9ECE155E74B9AE73C15E1B62A1367535BB58
SHA-256:	1C66F9E4F11ACF02043A6C6C88332213A5EC4904991BE821535243EB38943A37
SHA-512:	890F83B5BCD5AB175B6A4A05F142DF6C41C2370363454158AF51B83D41F3BE69C4BEBF5E65F41EAF8EEED561C201A190845C1721D3213C848A45B3EAFFC47D2F
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/a11y-dialog.esm.CGJeMRyW.js
Preview:	var b=Object.defineProperty;var g=(t,e,i)=>e in t?b(t,e,{enumerable:!0,configurable:!0,writable:!0,value:i}):t[e]=i;var o=(t,e,i)=>(g(t,typeof e!="symbol"?e+"":e,i),i);const s={inert:":not([inert]):not([inert] *)",negTabIndex:':not([tabindex^="-"])',disabled:":not(:disabled)"};var $=[`a[href]${s.inert}${s.negTabIndex}`,`area[href]${s.inert}${s.negTabIndex}`,`input:not([type="hidden"]):not([type="radio"])${s.inert}${s.negTabIndex}${s.disabled}`,`input[type="radio"]${s.inert}${s.negTabIndex}${s.disabled}`,`select${s.inert}${s.negTabIndex}${s.disabled}`,`textarea${s.inert}${s.negTabIndex}${s.disabled}`,`button${s.inert}${s.negTabIndex}${s.disabled}`,`details${s.inert} > summary:first-of-type${s.negTabIndex}`,`iframe${s.inert}${s.negTabIndex}`,`audio[controls]${s.inert}${s.negTabIndex}`,`video[controls]${s.inert}${s.negTabIndex}`,`[contenteditable]${s.inert}${s.negTabIndex}`,`[tabindex]${s.inert}${s.negTabIndex}`];function d(t){(t.querySelector("[autofocus]")\|\|t).focus()}function m(t){cons

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 36, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	749
Entropy (8bit):	7.594526343000877
Encrypted:	false
SSDEEP:	12:6v/7wclFlom4T0azdL6id0aiZP96lwJCq7jJoGt/qJCeP/a9g6uBTSLSDviD3hSi:sflomPaz9SZZPg0X7FoW/sx6q6u14Sr0
MD5:	D3F769A0B541999478AF920ECE54C47A
SHA1:	6BF5E2431D18A4BAE0CF1EA902841F9B55F1B1CF
SHA-256:	D0F26E141011B1854318FAEEBDD4EBBD936EA2029463BBE7BE634015A62AA492
SHA-512:	E9D06BBE9B1483B1FF0979BC7A14E5D5466229D952F4E52CEE59D2A54D9510E7B06E45AA36D156B261A8656F397F0C2D9CD70001FF24700F537AF83D4B45EF3D
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rz/p/yahoo_login_en-US_s_f_p_bestfit_login.png
Preview:	.PNG........IHDR.......$.....90.....0PLTEGpL`..`..`..`..`..a..`..a..e..i..`..`..`..b..`..........tRNS.l.K..A.^.....,.......]IDATx.... .D.......R.q.z...OC..X.. }.7..*..D.}...Uk.4.....p..P..@4.....&. Z.N.(...[...r...&.....^....&.....Z.R....E......)..t....h.m.\.+. .sp.H.t...'rS..,.".;.DW....E.....^..PF...K.....['.>:k.=...zs..[D.M.......K@..._.].....b..v....@oB..+z.X.......,^>....}...@.m......R.4v..qtWh.......D.}.Dz.....[.?8.............P.S...#...g.m}..(.....=..3C....9....Q.........#-......3.....5.s.......2=.@.p8..V\|.].....zr!.Jq-..\|......SEC..<.e.....k@R..z..../_..R..6`u!&...5 .@...w.:c..:..P.m.+.s_."3x....c...RM.xF.....`v.....C.Aq$.#.DNo.....U.]Vxf/5ACw.8..d..2(.)..17...&.ZdR..[d1...(../.f.cQ......IEND.B`.

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10637), with no line terminators
Category:	downloaded
Size (bytes):	10637
Entropy (8bit):	5.2085652328167145
Encrypted:	false
SSDEEP:	192:3rXOcuETuQtQlAQ6g/o5gaDMX5yZ909VeAMg5xmiSvxlAQ60omIcr7Q0QvCjlJlr:3+EiQdgw5TMXoyPMg5xmiwq0Icr78vC1
MD5:	397B59E3EECA4F747EA1F6FF6323154C
SHA1:	C96E42A81F2F864313F6592688CA864D4578E3C3
SHA-256:	ACF529F550F2FDAAD913C10E6972344E43E07EAE8D5AA57B96FA30ED7C07ACC1
SHA-512:	CA0F4D6A4FF28A66868BC2387F737073D6CA26A429CBA97CE30B3F86A0820BF0355214618D95CFB5099AF3AF241F50440F3B870BB5C4D26275EFCB93772B8318
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-beacon-1.3.4-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-beacon",[],t):"object"==typeof exports?exports["wafer-beacon"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-beacon"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var i=r[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}func

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10746)
Category:	downloaded
Size (bytes):	10832
Entropy (8bit):	5.449524562831566
Encrypted:	false
SSDEEP:	192:d9yu+hb+ltoU3dc4l6fZNs9+T21xFAmEgkK2wPwb3Og7L3v246T7:d9yu5l3l6szxFAmEgkK2wPwbj/+46T7
MD5:	5E1E9D62FD048466E4F37A819FEDC148
SHA1:	DDEFB97F56D9C8B9904EF4FB42B25E2EF0911059
SHA-256:	89C8955948D7FC4DDA2AD9ECBB47C1CD3B267FF1E014F5F3D53F62DF05A86000
SHA-512:	D36267E24ABC490E7EE3962002275E14B2C8238126D68B7B378A487FB610F380D59C16530137D9DF6718C1E02EF804402F04D0A9F767CFD7E2E1E8A4BB626DC4
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uc/finance/webcore/js/ticker.b6428d6ad777e2269050.mjs
Preview:	/! For license information please see ticker.b6428d6ad777e2269050.mjs.LICENSE.txt /.(()=>{"use strict";var e={1612:(e,t,r)=>{r.d(t,{Z:()=>s});var i=r(8081),a=r.n(i),n=r(3645),o=r.n(n)()(a());o.push([e.id,":root{--finc-text1:var(--text1,#232a31);--finc-text2:var(--text2,#464e56);--finc-text3:var(--text3,#5b636a);--finc-separator:var(--separator,#e0e4e9);--finc-link:var(--link,#0f69ff);--finc-link-active:var(--link-active,#125bd4);--finc-link-selected:var(--link-selected,#7e1fff);--finc-link-inverse:var(--link-inverse,#e0f0ff);--finc-surface1:var(--surface1,#fff) #fff;--finc-surface2:var(--surface2,#f0f3f5);--finc-surface3:var(--surface3,#fff);--finc-surface4:var(--surface4,#fff);--finc-positive:var(--positive,#037b4b);--finc-negative:var(--negative,#d60a22);--finc-neutral:var(--neutral,#5b636a);--finc-positive-bg:var(--positive-bg,#00853c1a);--finc-negative-bg:var(--negative-bg,#bd14141a)}.b5c484dd{color:blue}.e2c26f60{box-shadow:none;display:none!important}.c1a133c4{display:inline-bl

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, Unicode text, UTF-8 text, with very long lines (1971)
Category:	downloaded
Size (bytes):	1974
Entropy (8bit):	5.182221487092867
Encrypted:	false
SSDEEP:	48:BHIvKikx/9ChYDU4C8/BZC9Cj9zPu4g4RjXe4mSZKvn:BHIixl/DDHJZOCj9zPM4E4D4vn
MD5:	9A5E0719ECB78E53B578FA11AC17B605
SHA1:	D0BD4302184F8F1BCC4D7F6559ECF93125E85E48
SHA-256:	535DB3E0A71D70BF64FBDA126995B45D9422C68D13E73CAB69E8A1FCB003A0F8
SHA-512:	4036BAE6E28F3CF7DF78BFB3C3B198A0CF3CE7259653F73D14B38C592655ABB95343624FA460A5B8C2B64554FF357CB13DD101987EC93BA4CED58FE1ACE80183
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/StoryMetaPublishing.Dnr6wPcr.js
Preview:	import{s as C,e as r,b as _,d as c,f as m,j as g,i as h,p as P,M as u,k as b,l as o,n as p,t as N,h as D,m as B,F as E}from"./scheduler.ErneftFr.js";import{S as A,i as I}from"./index.DsErXEH0.js";function v(a){let e,n;return{c(){e=r("span"),n=N(a[1])},l(l){e=c(l,"SPAN",{});var i=m(e);n=D(i,a[1]),i.forEach(h)},m(l,i){b(l,e,i),o(e,n)},p(l,i){i&2&&B(n,l[1])},d(l){l&&h(e)}}}function S(a){let e,n=".";return{c(){e=r("i"),e.textContent=n,this.h()},l(l){e=c(l,"I",{"aria-hidden":!0,"data-svelte-h":!0}),E(e)!=="svelte-sg6bkb"&&(e.textContent=n),this.h()},h(){P(e,"aria-hidden","true")},m(l,i){b(l,e,i)},d(l){l&&h(e)}}}function k(a){let e,n;return{c(){e=r("span"),n=N(a[0])},l(l){e=c(l,"SPAN",{});var i=m(e);n=D(i,a[0]),i.forEach(h)},m(l,i){b(l,e,i),o(e,n)},p(l,i){i&1&&B(n,l[0])},d(l){l&&h(e)}}}function M(a){let e,n,l,i=a[1]&&v(a),f=a[1]&&a[0]&&S(),s=a[0]&&k(a);return{c(){e=r("div"),i&&i.c(),n=_(),f&&f.c(),l=_(),s&&s.c(),this.h()},l(t){e=c(t,"DIV",{class:!0});var d=m(e);i&&i.l(d),n=g(d),f&&f.l(d),l

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	161933
Entropy (8bit):	6.050084568219559
Encrypted:	false
SSDEEP:	1536:5XDpQstHIgGR4SpyrlYBw/4W+6UBqCGCsulitsWQ4NXhXDaVvuOC5xj3uyUnoV:9LIgMyrmWgyUBqCDsulinQVM3HKE
MD5:	63DDA7BA85312B840A33AC0A99980135
SHA1:	D3274D17B80E21EA4BAB6BF6608C2D440882E6E1
SHA-256:	702682CE4C4307E737D2812CFCD431DA43C9C5EAF67A71816BD224687012D830
SHA-512:	6AB549E642D16DAB06A7953A7080EB82EA395E816E78ED695CE771940EF7B855C6ADB31FE993D1CAC6E9FE2D86430A575B5BF6D3FF2AAAB8E0572FC6565061D7
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/adfetch?adk=2614054953&adsafe=medium&client=ca-pub-5722610347565274&format=970x250_as&ip=102.165.48.0&output=html&psd=W10%3D&unviewed_position_start=1&url=https://www.yahoo.com&sub_client=bidder-981703&hl=en&u_h=907&u_w=1280&aceid=MDasFQCaFrQAZx20AIYdtACX5NMA-lg0AdKQNAFwmTQBGZs0ASKbNAEQnDQBFZw0ARucNAG0nDQB6Zw0AQSdNAGunTQBy500AeGdNAHznTQBCZ40AQueNAEUnjQBHp40ATSeNAE3njQBOJ40AT2eNAE-njQBP540AUaeNAFHnjQBT540AVCeNAFmnjQBe540AYCeNAGInjQBi540AZWeNAGZnjQBmp40AZ6eNAGmnjQBS3NBAVNzQQFaPNoB1ksOAnUaXAJAIVwCNv6IAn7_iAJm1pwCJ0KqAtFJqgI7WqoCoWCqApRqqgKAm6oCgZuqAoKbqgJDoqoCoqiqAkv4qgIl-6oCQvuqArIFqwJaIasChCerAlQoqwL8K6sCJTqrAik6qwItOqsClzurAhJGqwJsSqsCkUyrAlFNqwKuZasC5GqrAnh0qwK0eKsCm4GrAoaSqwKnkqsCcJmrAnmgqwKhoqsCnqSrApamqwLTpqsC26urAkKuqwI7r6sCJLGrAmKyqwIWtKsCIbSrAiW0qwIptKsCbbSrAuu2qwIUuKsCpbmrAn68qwKM7QUDwO0FAwVe9wTjXvcEBV_3BBl6rgUYfa4FHH2uBbd9rgUXfq4FNn6uBUN-rgXcf64FoYCuBSyErgX8hK4FyoWuBdSHrgUviK4FmYiuBVGJrgV7ia4F5YmuBQaKrgXviq4FYYuuBVeNrgVrja4FjY2uBfaNrgWejq4F546uBWuPrgWcj64Fro-uBYuRrgXJka4FEZKuBaySrgVNk64FKJSuBZyUrgWHla4FIZauBQiXrgUumK4FNZiuBT2YrgVfmK4FAJmuBQOZrgWqmq4Fq5quBb-0xQWDB_kIJ5H7EjiV-xKgufsS1Ln7EgXL-xJa3vsSm_L7EtgH_BKtE_wSXhX8EnkY_BLpHfwS3R_8EnQg_BIDIfwSMSL8EnIi_BJRI_wSyyP8Ehsk_BJmJPwSaKLqFPdWaxqZvP8jcGYiSA&awbid_c=AKAmf-A391b3bU2_OFfY3pDcw_1H3psZn90j-8fgoigG4BWhXTVM2lZpfVePMlLoX9jXmOvxPRHffOMUN_yjfTEyGh_7QLHKy0mV-gEkJqaNiBb43ZM7CTTOwtNp0nYkgr8IN-PLeNgicqfg8pDVCV83r_RP4k0JapaE7kogUf_Jdgu4dilxdco27IrgezZJStcjcW3DDRTGYUvCjpG9sJOwSV_93gNIVIkdnWQu-YkQHsNfG63Td4plQbfSMm2-VyfcfeUH5IJJKR-LM0RT8xc28GNEqMrl_sAY-2N2Am_vaVr_bVXY4NHzjuOEqqwXQ_5Lm4ar_o8WJ7tTblUAqLk5B0afUkppe5uw0XWDRoAnGA1pjjULwp4&awbid_d=AKAmf-BeRpz3kDDDkrKhDp7AD2k6we2tYLQBPPoeZCEKpcfDXYswWu41E9Gu33u8ra5zowpA_0ws4c0R2AUWum98XLyjFL9o1rZe5YMdnJwnsfv-sGocjH_be-9JWe1FI0-NDKPHyeQoS79Yl3Uy-OdZhE4Jc_gmHjuKWuqLdanBxkzeshqjo3hBw98eP8aajP5QpEtC7V0ybrLpnYzhqYnb2kZkGmvLG8ynHk_l-GZvlIQ6eyjyltxxfSpwWBLnHsNTOLZBqZT0EdAPyGEySrmDA3dz3BYeH_KTVxuNoP9DqE5WEq_59t5yRpDf-4e8HNYG0QbyD1RYVqIq-PXSUd31lHfwHsPa4dBD11DZ0BvpaUofOtBE55lwCbpH6VVFCYMOWfHxnHWDxk9On4XDh7dm73h5oethzjO0jT6l1kVUrc3Elcli8fSWgrZbQI3W9CjmXSzIyKC_YXcMIY2Cp-58H8HeEQ7Z6Fmvs0sWhbemSBKJIFJCtyMczyq2kbE0PIPTABcnOluny_KmD1R4CNfBdA3gbowsSoFilwo31evGxUE_nmnGJRHCQL3VYQZ4DcoduyeVeDw5eRZEaJS7CXtyKzvC3LzX8zYp6yzoIetlNTmpHJc7IcsZ0HQhddIpahU3TuYnn87IM5LMi4pJ5rO-Em9nb2Lrrd3SzCOcwbvl4mMHBeZ4cahJO8_LhhqQ-LyH_HdgCl0hX2HMG3_cbrC2OBNHESnwYKgofFaZlDzWc0U0rzmbTsUACrmEp28xTT9qq--j7FlnpusM3I1adAmBw4nk-doYBsDhs-aTgMTSfHDk9SmcLgu2WorX-14vbtqtxcXFc4uVPNKBk68_8LTU1PjuKu2KC-TbMh8iiUJf02JZC6XN2P5Q__-xDfampJj04ORYa_Zt9zjcdO_WOikuv94m4RWB1WCLq4G7NoxHQp67xIMSUn0WVXiYAtzZoAIGr2nt34xb0ewp3RSoIFWHaF6pIHMDYmmflX02HUVQk7_nr63lkhWQaAkUygbwixVbfHkD20q3Szb3Qsj10U81ukzt12WpDA&cid=CAQSKQB7FLtqH_6q4w-x_uqSsDQNWxb8EtULaBwRKWRoao43n4Y-SJ8U1XmVGAE&a_cid=AKAmf-ApYdk5uq85HKaamLzXh9IgonbYYq11tNrnmLNcsvU-BtCUtQFfhutSJ7JiwZqY9TVY6PfvP6m1OpVCXZjFqD8cYAWK3Q&exk=1154441424&rfl=https%3A%2F%2Fwww.yahoo.com%2F&a_pr=13:ZgYOPAAAAABa4B8ExhwcQOQhQ2VlqwydzAeYKQ
Preview:	<!DOCTYPE html><html lang=en><head><meta charset="UTF-8"><script>var jscVersion = 'r20240327';</script><script>var google_casm=[];</script><style>HTML,BODY{height:100%;width:100%;margin:0;padding:0;overflow:hidden;}#mys-wrapper{height: 100%;width:100%;overflow:hidden;position: absolute;top:0;left:0;align-items: center;display:flex;justify-content:center;line-height:normal;}#mys-overlay{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:0;box-sizing:border-box;pointer-events:none;z-index:1;display:none;}.mys-wrapper A,.mys-wrapper A:visited,.mys-wrapper A:hover,.mys-wrapper A:active{color:inherit;cursor:pointer;text-decoration:inherit;}[dir=rtl] .flip-on-rtl{transform:scale(-1,1);transform-origin:center;}#mys-content{flex-shrink:0;position:relative;overflow:hidden;z-index:0;}</style><script data-jc="36" data-jc-version="r20240327">(function(){(function(e){function c(){null!==this.parentNode&&this.parentNode.removeChild(this)}e.forEach(function(a){a.hasOwnProperty("remov

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6184
Entropy (8bit):	7.835787535107233
Encrypted:	false
SSDEEP:	96:OnmXtYUqLvyo/gpp+E0I2JAlWCURppgXCd0aP39w6ofbDAvxogdRwifeOnUiC3ra:/tYvatb+7IqwfUfp4P2EffIxjfVUH83
MD5:	E38A51CAD346F9C073C288CB0FB7A91B
SHA1:	EF3C0D9667C70B0554C7FE2CA34E34F7A582E127
SHA-256:	8C00201CE36CC8F1003E70FD1B4A81FB4B6CF72A2E7B807754DED337D09B01D9
SHA-512:	039B708754D2F2C68EAFC062D430F019A8BB7C3B6154C35C82A1E6F145A85EBF497ED0B58E11A783DF4D4B3CEF4C7AB687A6BD0F72DB7D59C35889477ED573B5
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/0zC5NXzRCqBOHX.B5QV02Q--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/6cfa7630-ed0f-11ee-bcd5-e9299db72d6c.cf.webp
Preview:	RIFF ...WEBPVP8X.... ...c.....ICCP$......$appl....mntrRGB XYZ ...........9acspAPPL....APPL...........................-appl...g.F.K.Dn..u.................................desc.......ecprt...d...#wtpt........rXYZ........gXYZ........bXYZ........rTRC....... chad.......,bTRC....... gTRC....... desc........Display P3..................................................................................text....Copyright Apple Inc., 2015..XYZ .......Q........XYZ ..........=.....XYZ ......J....7....XYZ ......(8.......para..........ff......P........sf32.......B.......&.......................nVP8 ....p....d...>y:.I$.%,.2;....en6P.Af..;.'"3..%.\g...`..e7.c)......eU..,..]l.......K.{...z.}x..{.=`.......d9.\Vq....}3.....=6.P.....4.%....!I...i.e..d.ur...S@.....crM9..H..........l...P. ....+.........`..Ew..'L..<pa.~.l..=.i...>+?I...V......j.].59....f..D,..7.....w2.o.Y!Ff.B.)^.5.1d.....Sv/.\|....(&.G...-.'...~.\ ..P.X`U...[.V....c..>....1>).......@#5im."k...TD.x.O[ =..n....

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7907), with no line terminators
Category:	downloaded
Size (bytes):	7907
Entropy (8bit):	5.134832253452516
Encrypted:	false
SSDEEP:	192:3NiauurulAaIgvP+85ntzZSNLcVNHrjOO:3yuqlPI8Z3NsYVhrjr
MD5:	85070595D47A7CC86AF31833110DC18A
SHA1:	13564B6787EE765D841B2B6D1C4A6E73A2553AF8
SHA-256:	79D954B80C39513A18EE1E0143D931BA9222B4C4794438F7BAD23F9E0380CDC8
SHA-512:	B89211958F1EC914F3C31363EC7A60EFF460A86EAEF594522FD11A75712E0D0B05918C1D3FC720DD5D970399CD59C45E2F0069C5A9AE8014253661A2CEDABD38
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-template-1.4.3-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-template",[],t):"object"==typeof exports?exports["wafer-template"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-template"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var o=r[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function"

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (8163)
Category:	downloaded
Size (bytes):	8164
Entropy (8bit):	5.469849080028344
Encrypted:	false
SSDEEP:	192:7d/w7srYpKd9UK/jeefXA9ZEg2R4ubV/uvcIXazyfw9X7XhIFjgJ:7d/w7iYWCK/jeefXiEg2R4uBmEIXayf0
MD5:	A2B23EEAEC91D0DF34716F3CE5A4FB9E
SHA1:	04557047B5D0C7BB2E279FD40588A118B11FC137
SHA-256:	E3999300C5611DE071ADFFAAE836B08632D1C3D351CF8D4BFE20C41861EE749C
SHA-512:	D1B1E5D262B58BD823AD931E55D7D901F01E25AA0F7B78BB8AB6736FC313A2CACA50FA59E2FE123FCEFB8E6A60A9BD30735F587B4849F5ED82D1C9A0520BCD9D
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/LeadStoryItem.ChXDXnOp.js
Preview:	import{s as K,e as k,d as S,f as w,i as d,p as b,L,M as _,k as B,c as Q,u as X,g as Y,a as Z,b as T,j as V,l as v,t as D,h as U,n as x,D as $,m as j}from"./scheduler.ErneftFr.js";import{S as ee,i as le,g as te,a as N,e as ae,t as C,c as I,b as y,m as z,d as E}from"./index.DsErXEH0.js";import{g as se,a as ie}from"./spread.CgU5AtxT.js";import{I as ne}from"./Image.DyHyi9jI.js";import{L as O}from"./Link.DZ6I_oHl.js";import{S as re}from"./StoryMetaPublishing.Dnr6wPcr.js";import{S as me}from"./InfiniteScroll.BFSrs90C.js";import{t as fe}from"./commonUtil.Bb2Cnbsk.js";const oe=i=>({}),W=i=>({});function ue(i){let e;const t=i[18].placeholder,n=Q(t,i,i[19],W),s=n\|\|ce();return{c(){s&&s.c()},l(l){s&&s.l(l)},m(l,a){s&&s.m(l,a),e=!0},p(l,a){n&&n.p&&(!e\|\|a&524288)&&X(n,t,l,l[19],e?Z(t,l[19],a,oe):Y(l[19]),W)},i(l){e\|\|(C(s,l),e=!0)},o(l){N(s,l),e=!1},d(l){s&&s.d(l)}}}function he(i){let e,t,n,s,l,a,m,u,r,c;return e=new O({props:{class:"thumb tw-justify-start md:tw-order-last tw-order-none "+i[13],href:

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2826
Entropy (8bit):	7.469814451499084
Encrypted:	false
SSDEEP:	48:z6Wa/IAShMSakTJkitm8urSZVKwnbOvgzDCn6Y9Ua8M7piKu:zdIIAS6SaklkiUhubnbOvg3o9AIpi5
MD5:	4E2D053E24B5FF3052CE30113243052A
SHA1:	866EDC72BE604B96874A592B3DB32CAC1670AFB3
SHA-256:	C3533BF171554B46CF2F93DB2836C686B939890FB488CB5383475DBF12E56884
SHA-512:	5A2453B6E8DB568ABE7A9313924EBD3C4184E020C9B5B652C197853D65561800F886B1D5D219EC6162852C8DC11D29E35B09EC48381177BB99ED7B7AB98A23A9
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/473513299895995753/images/model.png
Preview:	.PNG........IHDR...X..........):...0PLTE................................................c.M@....tRNS.Dw....3..f.U"........zIDATx............................................f........._.AUUUUUUUUUUUUUU.=8........m.UUUUUUU...wm"..8.U.6j.^q..6.QA.S....J.+h@D......&.? ....K.......Pk.1.o../..A.>C).k./.=$..>...<..<..<..m...aK..r.8"....S..b.<,.qzi..W......^_$......:.^j...;..5r.5Q. .......aQ.>'N..]&....I=......@.....Ch...7........@....5.q.....9..s..X..T5(.r.......c..$.\|@.6.:k.(..O..KUMPm.a......lM......\|.j....7.Ih.j.eX....A....H..._..@....{&..#..j..\....T.$w+&...k.<.....2.......5.]zGd..~d...m...3.s....).c.aea..,..7a.OX.En...8lJ-..[...0..f.@.[".D.........A.\v.V_.c.&.~Y.....?.....{...#{....z]{v.......bC.z.s.%...v... .......A.A.E..."..b#.Z...Vb......X{......l..@..\c.w...7o.<..d/....]....w...G.x^09B?...Q4_Z......x.Ol...^...g.\|......!..G.......e............0....;K.....+....k?./7e.P\|...........r..W0..XU.....u.....J..:...J...F....F......P....u.......9.Y..Wd

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x600, components 3
Category:	dropped
Size (bytes):	43669
Entropy (8bit):	7.941237732363649
Encrypted:	false
SSDEEP:	768:SYySUsp8f2zm4U+C0vzuAs4RZBy5w1GBjSM6nJ3HT+v5gkzlE95acEKk:S+UsaOzmrWCY8i1m2T+Bgkzl45ack
MD5:	799C9FCBF176E6733C833813092BBD1D
SHA1:	119850C456489FCE8B58DBEED5E29CA58E47ED3B
SHA-256:	4734B554BEBFE6F8858DB11E0B86C0CE0F5EC8BF91ACFE6E530A3363428F2E72
SHA-512:	AA12346F34FF086A6CEC5FF178EB8612CF50D22B4D985CFCEC6163BC14375D2D5AC46CB066A7860D071065C47507A8FD58C3C35FAEA2EAF7A0F0E22213003412
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:7D91FAA9CF9C11EE8137FF27797BBF91" xmpMM:InstanceID="xmp.iid:7D91FAA8CF9C11EE8137FF27797BBF91" xmp:CreatorTool="Adobe Photoshop 2024 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="3D13E279DEB967D91F986900E6675D33" stRef:documentID="3D13E279DEB967D91F986900E6675D33"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cp

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (6374)
Category:	downloaded
Size (bytes):	6375
Entropy (8bit):	5.294174555755443
Encrypted:	false
SSDEEP:	192:UqrbKbEbcbZIyIabF7I1VqBvCgnxqx1GH9pbmtOGz:frbKbxbZIyIabJI1VqYuqx8H9pZk
MD5:	D7EE57B62862A9026418BF98D3D34C70
SHA1:	A20B81BA65888C11ACE7430A14B930CD08B8C3AC
SHA-256:	1E6A2A400CE51B2A680E0BE2930002A84672C6C554116844109574042FAFFE71
SHA-512:	ADB7E7B13B73402837A969640DC11AEC0BCC66F6764DB8E4F32884677E5BEF93FB5908EBBBD40E44E311A88626BFE91B70512FF15A12CE26DB07A22288569407
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/RMP.zPPn0o8p.js
Preview:	import{s as oe,w as c,b as K,x as ne,i as u,j as L,l as W,k as w,y as O,e as ie,d as fe,p as z,H as C,z as I,f as ce,A as Q,c as re,u as ae,g as _e,a as he,n as U}from"./scheduler.ErneftFr.js";import{S as ue,i as me,g as pe,a as D,e as de,t as F}from"./index.DsErXEH0.js";import{e as M}from"./each.DufB99sH.js";import{g as be}from"./commonUtil.Bb2Cnbsk.js";function V(f,l,s){const t=f.slice();return t[8]=l[s],t}function X(f,l,s){const t=f.slice();return t[11]=l[s],t}function Y(f){let l,s;return{c(){l=ie("link"),this.h()},l(t){l=fe(t,"LINK",{href:!0,rel:!0}),this.h()},h(){z(l,"href",s=typeof f[11]=="string"?f[11]:f[11].value),z(l,"rel","stylesheet")},m(t,e){w(t,l,e)},p(t,e){e&8&&s!==(s=typeof t[11]=="string"?t[11]:t[11].value)&&z(l,"href",s)},d(t){t&&u(l)}}}function Z(f){let l,s=f[0].js+"",t;return{c(){l=new C(!1),t=c(),this.h()},l(e){l=I(e,!1),t=c(),this.h()},h(){l.a=t},m(e,o){l.m(s,e,o),w(e,t,o)},p(e,o){o&1&&s!==(s=e[0].js+"")&&l.p(s)},d(e){e&&(u(t),l.d())}}}function A(f){let l,s=f[0].cs

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17847
Entropy (8bit):	7.9704797689685405
Encrypted:	false
SSDEEP:	384:tnncLXm9wLTnth7TBv0vpQdFGpYJau4NcAWWnx2dilc4W:xck25h7TSdiEZcABnx8iy
MD5:	C402F8FBC39F8E14B58DEAD06A06F177
SHA1:	9167AF97047EF6DA38112F3F6934FAABAFE55F36
SHA-256:	9E7BD0095713E570012C7CE09D3EB80AC30031B506E1BB3C025588A9387DD1FA
SHA-512:	C0CFE238F2E783E329023BFF376C6D1B149BB2E5CD7A5C02DCB45FF5FC74586800D5F32B00609CA6D40E0F0D8B8269B454F9131779037EDBADFEFA676EE705E6
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/zz/combo?pj/sh/202403271817/img/combo@2x.png
Preview:	.PNG........IHDR.............=..2...aiCCPkCGColorSpaceDisplayP3..(.c``RI,(.aa``..+).rwR...R`.......b.........>@%.0..\|...../..:%5.I.^..b....D.0......d ...S...J...S.l........).:...b.C..@.$...XMH.3.}..VH.H.......IB.OGbC...n....J..c..%...V..h........G`(.x.%..(....30.....s 8,... ..30......n...~...@.\;.b........'v.$.%.....)-....r...H....@=..i.F`yF.'...{...Vc``....w........w1P.....y..!e.5......8eXIfMM........i............................................u..C..@.IDATx..]...E./6.,9..%."A.....8..\|b:==......3...3...gB1....(."H.#If.9....{.=.kzfgvg6...W.+..TWWWU1)i.T)i........L.@.;EeU..Hm.I.+.K.......D..r....\..+... .b..t.9..v.........>.A+a.JTd.....x.....c.~.W\.x.T...T..G..F..k..(..........+#O.'.o........i...'..X....$9q.~....+G.....G.6..'G<.r...2...2..Z.x6g...I..&..K...q......O}4.t-H...Z$?....~.k..t....1..9d.Gx.!...x$.a.5.M.lR3Lb..ZF..G........z....\......e.....5...j=.9d.."N?.`8.$.^.(...G..?it .r...2..~.m.~:.?..a......=e.!....ih.d...D..D......~..&...;.

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	60
Entropy (8bit):	5.056564762130954
Encrypted:	false
SSDEEP:	3:YEOBHtGsz3B//wwKQ/3VfJofWQ4:YEOB73ZwYvVfWo
MD5:	49329E21BE0ACA182ECF55F9A9F6CE22
SHA1:	2B173EC1D1299C2109F0BC3B6EF8FECC495CEDBA
SHA-256:	F869AFB3C983A8CCB01236E5CC6A2574926C0972FA7C33C7E4A5CF25A9C10D35
SHA-512:	21B6239BCE645FB350952B3BA84E9D45E91F6792893FC0C3264049EAA6F39BFE63DD4853F32B1516B9AC8C377550EF2535066EC9C455564BB3CB7CC50675F299
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B"}

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.mathtag.com/sync/img?mt_exid=36&07571c18-3f04-4602-a656-288806fb242c&us_privacy=1YNN
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 700x420, components 3
Category:	dropped
Size (bytes):	74945
Entropy (8bit):	7.9629003293476215
Encrypted:	false
SSDEEP:	1536:2JL9RuQnwym5HZ5ilhtUhWcVPTkD5NP9wq+N2OP3l9WyU6xsW5E:27Rk15CPUhWcqDPPnbyU6xsv
MD5:	DA37E8072AD244966CCC75C30B5FB266
SHA1:	111D4B95365F201374F11A1ACD3BB5964234A0D6
SHA-256:	F86314DD065A79276964317AC9ABD1F326033D528BF9613944412368CB2A0215
SHA-512:	6820E3E40A712267DC651FFBC61786BA7B04E5B36A3DA0946230FDA88DE2A69AAC180CFB41A7EE7E9FF8B34BFC460382DBA6BC4AE67CE58BB42E67F07BC6B99D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.......................................................................................................................S...........................!1A..Qa."q.2...#BR..br...$3C......&4Sc....%'Ds..Wt.....................................?.........................!1."2.AQ.#.3BaqR..$....C%4S...5Ebr..............?...o.L...P..-..&d.5.

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65321), with no line terminators
Category:	downloaded
Size (bytes):	119005
Entropy (8bit):	5.536405605676181
Encrypted:	false
SSDEEP:	1536:KyQWTY8Hh1I5wvCPbjPhPQkIb9Cqy5HS72Aw:cWTPxanPx02Aw
MD5:	1AFB9C7586F83D2745C5AF4F980733AA
SHA1:	1B58F242B21E045CEAC5E4FC7A07995A3184574E
SHA-256:	839595538091FE7BAABF808112821AC949BC6466C41553E8851F2DECBD2071FA
SHA-512:	62CB71B5C811335B2D80D168600462B08DA1982DE14C3462607E91ABB68ACAEEB45D26CFCF7EDDFE9FAE9529FBF7EBFDFACE41BC250CC12E8137654673E35B1C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rx/ev/builds/1.4.8/pframe.js
Preview:	(()=>{var t={1556:function(t,i){"use strict";var e=this&&this.__spreadArrays\|\|function(){for(var t=0,i=0,e=arguments.length;i<e;i++)t+=arguments[i].length;var s=Array(t),n=0;for(i=0;i<e;i++)for(var o=arguments[i],r=0,a=o.length;r<a;r++,n++)s[n]=o[r];return s};Object.defineProperty(i,"__esModule",{value:!0});var s=function(){function t(t){void 0===t&&(t="anonymous"),this.name=t,this.l={},this.u=0}return t.prototype.destroy=function(){this.l={}},t.prototype.addEventListener=function(t,i,e){return this.l?this.p(t,i,e):""},t.prototype.addEventListeners=function(t,i,e){var s=this,n={};return this.l&&t.length?(t.forEach((function(t){var o=i.bind(e,t);n[t]=s.p(t,o,e)})),n):n},t.prototype.on=function(t,i,e){return Array.isArray(t)?this.addEventListeners(t,i,e):this.addEventListener(t,i,e)},t.prototype.removeEventListener=function(t,i){this.l&&t in this.l&&Object.prototype.hasOwnProperty.call(this.l[t],i)&&delete this.l[t][i]},t.prototype.removeEventListeners=function(t){if(this.l&&t)for(var i=

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, WAVE audio, IEEE Float, stereo 44100 Hz
Category:	downloaded
Size (bytes):	85336
Entropy (8bit):	7.402515364470518
Encrypted:	false
SSDEEP:	1536:cc/sLIWm0N5TTkS8NjHCEr3pReyJ0TFJz1fLtGCJL7:fsNdkSWH/0TFJzhLtTJX
MD5:	F35AD0C20D2F7E02B99E4866A98989D1
SHA1:	7E9960316F3EB5BC7B5F2FDA0B761ACF0CA898B1
SHA-256:	86145E56E9B4BD3A42E3DDF6B7CB6BC8E9372891AA5BAE35EA0F3FACDA3C99AA
SHA-512:	253FE78F7EA21143F4C8D0FEDBB29EB3DEBF6B08E5ECAB1CF2A4C0DEE1F80D9A870E6847AA9FB9A39D8D2F4E601594B633869B2FE77F8A1C3363372E6FF477CB
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/misc/voice-error-202105050733.wav:2f73582f496182:0
Preview:	RIFFPM..WAVEfmt ........D... b.... .dataX...T'%.wwj.4.!...c..9...Z.....G]Q..L....G.....g.;...}./.-....#.S+...~.....9....h....0.............3.....aX..a.`.D7.b....G84......8@].?e.8.l 9~..9.C.9.X&9q.+:.j=9.ul:..S9w4.:HQj9...:H9.9.T.:V..9.1.:A.9>..;...9.U.;.].9.";.g.9...;p..9..:;.H.:..E;...:..O;.r.:J8Y;1u":..a;.Q+:..i;..2:.so;..8:Q.t;r.<:..x;.V?:..{;o.?:.};..>:. ~;..;:.v};(.6:.{;.a0:{.x;.(:Y.t;u..:..o;...:w.i;...:.pb;.&.:r^Z;.n.9.YQ;...9HjG;A..9R.<;...9..1;42.9..$;...9...;...9ZD.;...9.d.:.V.9sM.:jHx9.S.:.i]9..:..?9..~:s .9.=:[..8...9Ud.8..e9.:.8A..........B...Q)..a...s.R..?C..#..\..4P......l..j{...=.9.N...j...Y...YU.........Z+.d....\7.."...B..Q'...L.I.*.-.U.~J,...^...,.<+e...,..3k.?W+.-/p...)..#t..b'...w...%...x..."...y... .Z.y.....L.x......Ov..`....s..2....n..2...Mi..!..h.b.x....[..0...9S.<...`.J.`...C.?.....].5..c..)I).7{...... ..g...c.eX...5...?.y..J...Rm.y...v[,......l...K..5..w......7.E..z..8.;J..$.9s4~9.yN9...: ..9N:C:..9..:.J.9vy.:..9nR.:t&.9

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65120)
Category:	downloaded
Size (bytes):	78450
Entropy (8bit):	5.205063260713908
Encrypted:	false
SSDEEP:	1536:sC9Jom+jVMYbKqUrTmD6DqFcZN/U8atgRwaA8vdN/yzJut6f3CXTd4nqCtTyDXpJ:AdVFcZN/U8atawaA8vdNyzwt6f3CXTdL
MD5:	AB639D7BDEF485779A8ABF3392B87C4B
SHA1:	75BBDE6019A1F2E22F7D23030B1A255358B51FBD
SHA-256:	69942A240B7D761DFBF16195F53B34B95F2625AC4F913AE954B545F160427466
SHA-512:	C0A7E866F0D607B86A261F18719A7E593F64651B7D106EAB783333B54CB9A124E878DDE40F6D662CE11B4A45D0FFA0F07B64E77D41D26C7A1B15D19C3E691C09
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/videojs-ima3/5.2.8/videojs-ima3.min.js
Preview:	/! @name @brightcove/videojs-ima3 @version 5.2.8 @license UNLICENSED /.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(require("video.js")):"function"==typeof define&&define.amd?define(["video.js"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).videojs)}(this,(function(e){"use strict";function t(e){return e&&"object"==typeof e&&"default"in e?e:{default:e}}var a=t(e),n="7.3.5";./! @name videojs-contrib-ads @version 7.3.5 @license Apache-2.0 /var i=function(e,t){t.isImmediatePropagationStopped=function(){return!0},t.cancelBubble=!0,t.isPropagationStopped=function(){return!0}},o=function(e,t,a){i(0,a),e.trigger({type:t+a.type,originalEvent:a})};function r(e){"playing"===e.type?function(e,t){e.ads.isInAdMode()&&(e.ads.isContentResuming()?e.ads._contentEnding&&o(e,"content",t):o(e,"ad",t))}(this,e):"ended"===e.type?function(e,t){e.ads.isInAdMode()?e.ads.isContentResuming()?(i(0,t),e.trigger("resumeended")):o(e,"ad",t):e.ads._contentHasEnded\|\|e.ads.stitc

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMIxYmjuJ6YhQMVCBpoCB2J1ATFEAAYACCtou9kQhMI35T0tZ6YhQMV0aWDCB2LCg5k;dc_eps=AHas8cBBS7AbsAhXSz4VuXwYVc6GI7OpQpSZZ3klPfoBj_whNQmH1WvCHdfXSW-BkeGsRN30KVPru2q-HRW2nHP8Cls;met=1;&timestamp=1711672924572;eid1=2;ecn1=0;etm1=10;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15264)
Category:	downloaded
Size (bytes):	15697
Entropy (8bit):	5.53729719471769
Encrypted:	false
SSDEEP:	384:uQTCfjv99mW+911+Fl0YD0Dew/X2q5ulRIUeT:uQTCfGZ1+Fj9w/XuuT
MD5:	E2202E6ED6EF52CEC2C4A875C99225BA
SHA1:	FD48D3157CFA6B6E6FEC3E50787E357AA3288C88
SHA-256:	F2CFBD195DFF011843F93E2D32979F6F07926211CBF3EDDDC3B708B0BB04C8A2
SHA-512:	4E2AEFD87D89F4D5C00CFCAC8EE2D7748F84979BE9E66272475A621A19BA8FC884737DF604B3B7344FE4EB0C1154819880BC3769E25798BB4ABDDEF76EDC9B4F
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/__rapid-worker-1.2.js
Preview:	/* @preserve. * $Id: rawdeflate.js,v 0.3 2009/03/01 19:05:05 dankogai Exp dankogai $. . Original:. * http://www.onicos.com/staff/iz/amuse/javascript/expert/deflate.txt. /./ @preserve. * Copyright (C) 1999 Masanao Izumo <iz@onicos.co.jp>. * Version: 1.0.1. * LastModified: Dec 25 1999. /./. @preserve This code contains an altered version of the original source and is not meant to misrepresent the original software.. */.function base64(r){if("undefined"!=typeof btoa)return btoa(r);for(var t,e,n,f,o,i,a,l="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",u=[],s=0;r.length>s;)t=r.charCodeAt(s++),e=r.charCodeAt(s++),n=r.charCodeAt(s++),f=t>>2,o=(3&t)<<4\|e>>4,i=(15&e)<<2\|n>>6,a=63&n,isNaN(e)?i=a=64:isNaN(n)&&(a=64),u.push(l.charAt(f)+l.charAt(o)+l.charAt(i)+l.charAt(a));return u.join("")}function lzw_encode(r){for(var t,e={},n=(r+"").split(""),f=[],o=n[0],i=256,a=n.length,l=1;a>l;l++)t=n[l],null!=e[o+t]?o+=t:(f.push(o.length>1?e[o]:o.charCodeAt(0)),e[o+t]=i,i++,o

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	73188
Entropy (8bit):	7.993713559947327
Encrypted:	true
SSDEEP:	1536:SYK1A2sNY47buzNFM3JfzBzCFB/HxhxrbgO23FdBS3KB3/K6cKB:SV22o97buJFM3LzCvxjbgOOFDS3KBPKY
MD5:	87BB7CA478EC69AAA27A14F2D9067024
SHA1:	13930CB24A9AF967D26754212D2DB4AD35FA4618
SHA-256:	E46178BA30C50374B4675F8B7C3DC74FB6940980C6458E9BC683BE985A315824
SHA-512:	C46CAF4B04B2CAF6D54BD704514702C4F8B999AA435B2C74EC539D5599EAD19A74A2FA532602522E44F85482265CC6FD0211617951386192F998217AFBFAF368
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/YR.7.XGIlIiS7.K_UjfdhA--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/d0833af0-ed4d-11ee-bdbe-cca2e24df743.cf.webp
Preview:	RIFF....WEBPVP8X.... .........ICCP0......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 ............>...B!.4.....Sf...X..w#z..s....~.~^\|..e...'...?.?......k..._.}}.s................_........3...o.O.........Y.A...........~J...A..#./......?......T...s.7.w.........M............O............{.............?....R.....O./........;...O......._j........y..O.&........w.9........(_.~Rz........9.?.......w.O.....>z.....?._............G..._..........B....3.'./...?.}../...?..~....?..

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45156)
Category:	downloaded
Size (bytes):	58393
Entropy (8bit):	5.363736519561365
Encrypted:	false
SSDEEP:	768:Li0FPvdBZlod7A8wNAs/oJRY/1myebiJLnWJQXJ0pPcvslojhz9C:Ll71JWJ0dcR
MD5:	DD636D179CA1EF897B20C129060C6132
SHA1:	59B2E5AFD513926D6EC43FDAF34B2F2B25C69DD4
SHA-256:	6108FF240707985D384DF111DB27754ADE1DBC7AC71CE656B49407B1E857CEC6
SHA-512:	3E370D54B789D81DD35326D18745078BBE32247C6807012F3FCC43C892E34C02981E6D56074D3EF974FBBAC62B48578F96D9E40DCFC113CBCABE7EBE9A843595
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uc/finance/nimbus/_app/immutable/entry/app.CUSguzUB.js
Preview:	function __vite__mapDeps(indexes) {. if (!__vite__mapDeps.viteFileDeps) {. __vite__mapDeps.viteFileDeps = ["../nodes/0.DMSMgB-K.js","../chunks/scheduler.ErneftFr.js","../chunks/index.DsErXEH0.js","../nodes/1.D0vNt2xZ.js","../chunks/stores.CtqIvex8.js","../chunks/entry.CqbZzrN3.js","../chunks/control.CYgJF_JY.js","../nodes/2.C4PT79rj.js","../chunks/index.BPtEJa1O.js","../chunks/_commonjsHelpers.Cpj98o6Y.js","../chunks/commonUtil.Bb2Cnbsk.js","../chunks/portfolioUtil.CcwRjq7g.js","../chunks/preload-helper.BQ24v_F8.js","../chunks/globals.D0QH3NT1.js","../chunks/i13nUtil.0wCphNmh.js","../chunks/each.DufB99sH.js","../chunks/spread.CgU5AtxT.js","../assets/2.B2V3kFk2.css","../nodes/3.BL_3FCqY.js","../chunks/index.g5YcAAdQ.js","../chunks/urql-svelte.B6s9M1Mc.js","../chunks/PostCardSkeleton.DTmQK8tB.js","../chunks/v4.BdarNhKT.js","../chunks/Button.C10y2YT5.js","../chunks/Icon.CDBsrPKz.js","../assets/Icon.5Pcv_1eF.css","../assets/Button.wzorZdtC.css","../assets/v4.CecCMaoP.css","../chunks/Ca

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 700x420, components 3
Category:	dropped
Size (bytes):	99887
Entropy (8bit):	7.974372032981543
Encrypted:	false
SSDEEP:	3072:KHIizTuiZD7SzjM5/ncl5cxTTMLp2gDK7GM:KoizbZ7SzjyncTUT8b1M
MD5:	0A8C63DADD5AEA7B052A9C9C078385A9
SHA1:	F9E89FC7EEB0527C98EAFFE29F3BB10975B69B01
SHA-256:	A879616E6E1C2E232700150EA1AF99BAD5DA081FC1F909E5403A5C28EB9C8882
SHA-512:	18701E4F2A8C5A490B17F22485D14A06D9623F0BE871172CD78976E3DC38614C69B8F650AD3FFA2455BAB810AA58D9A6D13C8D855BD850F2667B3FA7632D2F29
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.......................................................................................................................`.........................!..1.."AQa.q.2...#BRb.....$3r.C......Sc...%Dst....456Ed...(7FTUV......................................A.........................!.."1.2AQ.a.#3BRq......4..$%5S..Cb..Td............?.....

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 64 x 64
Category:	downloaded
Size (bytes):	7634
Entropy (8bit):	7.498775251896563
Encrypted:	false
SSDEEP:	192:0RH0cEb0jlL/0efiklLvMFI+oTiTjSAtnE18oZA1:Kybui6vMgiixRW
MD5:	F3B886D3B9DEFC91979E672DE1824E2E
SHA1:	B75041D5891BF54B61D46DA6EB5D2B0892F76A82
SHA-256:	9E1C8F2BD9309675EE2045BC9D91B55744E30E3BB4F77848E4F1324F445B1A4A
SHA-512:	E0CC5EE1528536BEA739F8ADA16E0380543A58B277A1BC20A65F44AE09F99DF8A30CA0E4AA06DD78586838BD6A3CC6ED7AC08E5B6DDBC98BE79BDF08594C72A0
Malicious:	false
Reputation:	low
URL:	https://d2c0xhqyhmtkod.cloudfront.net/loader.gif
Preview:	GIF89a@.@....$&$......dfd...<><...........LJL...<:<...,.,......trt.............TRT,*,...ljl...DBD..........LNL.........................................................................................!..NETSCAPE2.0.....!.....$.,....@.@....@.pH,....a(.u...tJ..A....1,.....B.$.z..t..W....L..Z.....pp^`wb.b....~..q..s$.x.xv..}.T.[..o.a......R.....t......D ....\..y...h. ..............v...QW.....v. ............V.O..^"..\|...V.{W....;q..Q;".........0T....-X..D...H...D#"d.$a.....0.S....$.S(..2...?..d$..'..G,Hj6s..^=Ku..oH.kD.N...!Se.Y.Nl?r.&.!@..Q....$)d_.n.....^.@.K....].\|...l.$...$.I....x..k......F.....Q....e ....d.....s.9...T..+_.....+'^.....6. a...KI8=85...&$z4.xB...;<....EV........0....V....Wu.HB.`.'.z..a.,r...5u.}G...'...(H.T....[.u.\..H....H..C.W..8....8..G,........KU..d.qL...EH .Uo.X.>O.I.......\...Q.N.P.. ..qQ..j...ZL.y.[$.i.........`w.R.2...f.o.@.#..i..zj9cL.....w....y.5.q..p%0..#...m.R)....~.a..)........J\A.......!.....!.,....@.@..$&$......

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2125), with no line terminators
Category:	downloaded
Size (bytes):	2125
Entropy (8bit):	5.372604176371994
Encrypted:	false
SSDEEP:	48:kKKBpAYmRF0FYxBfiCLYckS8Y7YDrYrlPYrYTueJTt:lKBmYmX0FYxBXLYcD8Y7Y/Y5YrYTPJTt
MD5:	4FCCF327675400CF9BF27CC65C08D2E3
SHA1:	D63FFA91097E4978C4DBC502020B0F2573131EC8
SHA-256:	F2DF3D8A19D81BB2CA13F5BADA30198BD3CBD8E021D5799A7C8F78783E1EFD79
SHA-512:	3C064DFA40E6671A5D3CD458DBBDDE71292B128880913782610BE867FF90748F5E5800CFA0E19C049220B95793E3A3E9F4B83150F1AF9ADC4180BD824420FDDD
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fgpp%3DDBAA%26gpp_sid%3D-1%26cs%3D1%26vsid%3D3546744890180387000V10%26type%3Didx%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26axid_e%3D%26ovsid%3D_UID_&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&s=183875&C=1
Preview:	<html><head><title></title></head><body><img src="https://dsum-sec.casalemedia.com/rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB&gdpr_consent=&us_privacy=&gdpr=&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://i.liadm.com/s/31327?bidder_id=14481&bidder_uuid=ZgYOPsAoJI0AAAi4ADlhawAA%261617&gpdr=&gdpr_consent=&us_privacy=&gpp=DBAA

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1177)
Category:	downloaded
Size (bytes):	1178
Entropy (8bit):	4.762841219185777
Encrypted:	false
SSDEEP:	24:WPGRidA4lPGIi6/PG7VpPGNPPG7PGI/V1WJpPGirPGaRwyPGiBKuPGiIGaPGiXGR:Hi+76dGeusx
MD5:	D5479C313D91D2C9C86B8F295E038107
SHA1:	AB2A76D8F0B8D2640FAA808CAAD30F6B4F9370E8
SHA-256:	610057076C876EACF587477EE0F9D9784D76DC96B34792B85487E15D4985BEA1
SHA-512:	233C674D05D16A26418F90DB77B22B29B42B284B5E43B404B3633DC60423341291255E889A1C4FF9FAD798297D4AEE10DC2C904B7C730600924C2BB0158F31CB
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/Footer.D1CtI4Fa.css
Preview:	.footer.svelte-1ssmcoe.svelte-1ssmcoe{padding:4.5rem 1.5rem 2.5rem;background-color:var(--surface3);color:var(--primary);container-type:inline-size;font-size:var(--font-s)}.wrapper.svelte-1ssmcoe.svelte-1ssmcoe{display:flex;gap:var(--space-8);flex-direction:column}.logo-and-social.svelte-1ssmcoe.svelte-1ssmcoe,.trending.svelte-1ssmcoe.svelte-1ssmcoe,.explore-more.svelte-1ssmcoe.svelte-1ssmcoe,.about.svelte-1ssmcoe.svelte-1ssmcoe{display:flex;flex-direction:column;gap:var(--space-1);align-items:flex-start;width:-moz-fit-content;width:fit-content}.colHeading.svelte-1ssmcoe.svelte-1ssmcoe{font-weight:var(--font-bold)}.social-links.svelte-1ssmcoe.svelte-1ssmcoe{padding-top:1.625rem;display:flex;gap:var(--space-4)}.logo-and-social.svelte-1ssmcoe.svelte-1ssmcoe{max-width:190px;order:1}.copyright-wrapper.svelte-1ssmcoe.svelte-1ssmcoe{max-width:150px}.privacy-icon.svelte-1ssmcoe.svelte-1ssmcoe{max-width:40px}@container (width >= 560px){.footer.svelte-1ssmcoe .wrapper.svelte-1ssmcoe{flex-direct

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11607)
Category:	downloaded
Size (bytes):	11608
Entropy (8bit):	5.467783437542562
Encrypted:	false
SSDEEP:	192:1VDjltIWm6ciCjbPS4qErl+w4NzFr9fiAyJtzkAlLsHnLTHeR0y5zU9KykAhTaCe:nDjlCWm632bPS4qmILzFr90DoYSnLTHC
MD5:	4D6421FE4AD0272340E5BB5757EBEC2B
SHA1:	B41E328438DF4F9EA344F34A72137FC6955A8FEE
SHA-256:	9A20953EE098F91B9012D026631A63B906241AB6C2C540992CCEA3ADEF680EF6
SHA-512:	88602C17E5CF1849F8EE65F3F6353FF328E697B395C387D4AF3D2FFC8109CEE021A7F0099BD45FBD22F2DC8BB53EC1ED345244833CEAF135CB1B5AC514CC71CF
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/TrendingTopics.CFdECsxV.js
Preview:	import{b as oe,a as ce,g as H,r as fe,t as ae}from"./commonUtil.Bb2Cnbsk.js";import{m as me,n as V,g as ue}from"./utils.HyUTigHj.js";import{e as J}from"./index.g5YcAAdQ.js";import{l as X}from"./initializePage.Bz59rdd0.js";import{l as de}from"./loadPortfolios.D7blfiZv.js";import{l as ge}from"./logUtil.nPJvQAyt.js";import{s as O,e as A,d as C,f as D,i as h,p as w,k as L,l as E,$ as he,o as _e,w as Z,n as R,b as P,j as z,t as U,h as j,y as pe,m as Se}from"./scheduler.ErneftFr.js";import{S as G,i as Y,a as S,e as x,t as p,g as B,h as we,c as N,b as k,m as v,d as $}from"./index.DsErXEH0.js";import{A as ye}from"./Dock.BCBFEHBF.js";import{L as Ee}from"./Lazy.CSkNu4FG.js";import{e as K}from"./each.DufB99sH.js";import{F as be}from"./FilteredStories.9pr27Tys.js";import{S as F}from"./SkeletonLoader.CyQaBkvN.js";import{f as Te}from"./index.Cq9lJqQB.js";import{l as Ne}from"./loadNewsStream.zkkLaOCt.js";import{S as ke}from"./SectionHeader.BoxADZep.js";import{T as ve}from"./InfiniteScroll.BFSrs90C.js

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (897), with no line terminators
Category:	downloaded
Size (bytes):	897
Entropy (8bit):	5.565568564466424
Encrypted:	false
SSDEEP:	12:C3LTm9wyG8x13iRAxhx13TGxz6LDYT313Z2MUzrxMjx2T4jASZRHDczLoPulg:CO+yxx1O2x1DG9GYz1JT0xMQeHDkomlg
MD5:	2EEBB63F9257B7F87FB7F6FBE600D875
SHA1:	BD7A5AA2706BCEB8D3F9390E973F2A5447ECC834
SHA-256:	FD070AF0A9059291D4625B691F46C42218572762472FD44905DE018AED1B7E9F
SHA-512:	4978AC452E7397832C47E1B17F2F38B40441FA76B3C2965DB9C1B43E43C617F29F8C13F88D7A0A684A72FC4B281F1E23F5185A563B968483E27E126F5955CD7E
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=48012113&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/712188.gif?partner_uid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=6D366468-71AF-422B-99AB-138A6DAB94F7/gdpr=0/gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://um.simpli.fi/pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent=');PubMatic.PugMasterCallback(true, true, false);

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5574)
Category:	downloaded
Size (bytes):	5575
Entropy (8bit):	4.86904704319391
Encrypted:	false
SSDEEP:	96:I4Ink+Y+KE08+KMJI/JBxlfeyTiRXavT1f:IphKV9hs3N3
MD5:	A91A9493B29E118E8430E93D21B6A5BC
SHA1:	4DEE955EB26D5A7395A633473DC2F581FF792F61
SHA-256:	D5BA69B2EA30E27CE7D94DD477BBF224F5B4D7B945E34A9505F768BC373357BA
SHA-512:	6D7532384905AB7429048CCE943EDFB521D0BFA8FDCF9EE29FC7B0614041D19D9C0B492F18D631EBEA054775C3BC5B8A6158B41E0709DBE885CD04AB5CC41A4B
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/Dialog.D8lZ7Pc0.css
Preview:	.ticker.svelte-1rvxuc5.svelte-1rvxuc5{--padding-y:var(--space-1);--padding-x:var(--space-2);--padding-left-logo:var(--space-1);--min-height:1.25rem;--logo-size:.75rem;--font-size:var(--font-s);align-items:center;border-radius:var(--border-radius-xl);display:inline-flex;font-size:var(--font-size);font-weight:var(--font-bold);gap:var(--space-1);line-height:1.25;min-height:var(--ticker-min-height, var(--min-height));padding:var(--padding-y) var(--padding-x);text-align:center;width:-moz-fit-content;width:fit-content;max-width:100%}.ticker.ga.svelte-1rvxuc5.svelte-1rvxuc5{grid-area:ticker}.ticker.logo.svelte-1rvxuc5.svelte-1rvxuc5{padding-left:var(--padding-left-logo)}.ticker.stacked.svelte-1rvxuc5.svelte-1rvxuc5{border-radius:var(--border-radius-m);gap:.375rem;flex-direction:row}.ticker.stacked.svelte-1rvxuc5:hover .symbol.svelte-1rvxuc5,.ticker.stacked.svelte-1rvxuc5:focus .symbol.svelte-1rvxuc5{color:var(--hover-focus-color, var(--hovered-emph-same));-webkit-text-decoration:var(--text-de

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	51087
Entropy (8bit):	5.3634822164945
Encrypted:	false
SSDEEP:	768:EoARVtdFtXGtpfM5kT2xNGYUJmmp09VFUVdUv2dnEAxPPLaz7O3OFDN:KztNGtFMHr3wp09DOu2dnEANPLyP
MD5:	BCB0775392763DEF196EBEA3544BE25D
SHA1:	F0769FD1904B5F3B132696835DCB560F7A80CFA7
SHA-256:	386EE9D1B82DE92E965C617392423C0B73DD582421F909C4958A076CD07D4ADD
SHA-512:	CB5B1C02A404D305A04BFCED584CA86E377BB9ED8BD721A405158E830A9DDE6BA9CC2BE9E27042CE3A978AA481B5115B3A916A38CAFAD0D95902F8838CCFC80B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/ss/analytics3.js
Preview:	!function(){function fe(d){var f={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:"aol_utd",filter:function(e){e=e.match(/((?:\\|\|^))gd#[^\\|]+/g)[0].split("#")[1];return 24!==e.length&&console.warn("_utd value may be malformed"),e}},RSP_COOKIE:{log:!0,key:"aol_rsp",filter:function(e){e=e.match(/(?:(\&\|^))sn=[^\&]+/g)[0].split("=")[1];return 24!==e.length&&console.warn("RSP_COOKIE value may be malformed"),e}},GUC:{log:!0,key:"_guc"},OTH:{log:!0,key:"_li",filter:function(){return"1"}}},m={},e=(this.getCookieByName=function(e){return m[e]},this.setRxx=function(e){var s=-2,t=(document.domain\|\|"").split("."),l=t.length;function c(e){return"."+t.slice(e).join(".")}function u(){var e=c(s),t="rxx",n=m[t],i=(n\|\|(i=(new Date).getTime()-14383872e5,n=parseInt(Math.random().toString().substring(2)).toString(36)+"."+i.toString(36)

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6645), with no line terminators
Category:	downloaded
Size (bytes):	6645
Entropy (8bit):	5.153971139811532
Encrypted:	false
SSDEEP:	192:3e4uADK8v5xzWosWjYugPwNC96vTrWJcXux8jVD:3qA+8nWofjYFPwo6vTrq0uep
MD5:	2E3968239B770B8186BB480D513311CD
SHA1:	E2583E321454F9F48193918E3316533226ED62FA
SHA-256:	D77E659299C397037513AFF88093B64F6CE29994B94D99256AD84A7910C0CEB3
SHA-512:	487F486C165C5E6FAD46A8BBCB6279147FA93D3D3A004327D0DFDEA5040F9B320FE5439A0E2E849DFBB8CBB4FC1ADFDF6647BCCA1DDECCAAD5C36093FCE7A2B2
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-image-1.4.0-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-image",[],t):"object"==typeof exports?exports["wafer-image"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-image"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(a){if(r[a])return r[a].exports;var o=r[a]={i:a,l:!1,exports:{}};return e[a].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,a){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:a})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}functio

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 560x272, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	44594
Entropy (8bit):	7.995553642252497
Encrypted:	true
SSDEEP:	768:2JSR10WHhX5RzDq22DqX46Kcpi8l4eM2j286NpQGFZc3HBTzVv1Gt0rCY:2JSmWF5RzDq22DqX4vcMs4eM2jcnZcR1
MD5:	4B14B9F987142F5D247A3649DD845E4D
SHA1:	D8D1CD8C4C813AC923CB79C9CD8D6C4CEA3AB340
SHA-256:	E1034E978B3141279A37F7D9FD42F5BD8398EFBE7A50A214AAF169B6D5E2B923
SHA-512:	F3ACB918002C4B4313B46C34511CBFF02594AB0858B76F41D6A57B8974B458C3917F535E5DB8011990AB825667BFC2261A3C8C3AE26AE5ADC822EFCA4471009A
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/yzJLCRT._OcfHpmpL5upqg--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/bbc85280-ed48-11ee-aefe-2ec31e2ca7f6.cf.webp
Preview:	RIFF...WEBPVP8 .........0...>...A...K...q).eL...o......Y.^.}../...o>hv.._....O.g...O........m...'......~...~..........O.?.}u.....O.......=..........7.?../.O....z..=..l.^...../.b.......K...o._.. ............?%\|..w...q.)....w....K.?._.D.W.....?....'.......@.y.....?......>.7.........S.}........&............o.^..........O.....G......`...........n.C...o...~.>....../............[........u.._.}.f?...V}%.C.F....3J..y.+7$...X.?...z..;...4.n5...&..-=/....'....iGBf.g.lH.....kj..B9.q....e..(..._.o.......9.4F_.:5......6...b..D..:/..Cv..k\a..k...R...........ly2.7I.r.+.i.c.......GD.&.I;..;,m.+._y....@.+..&..x......../..........[.3.Ws.s.)2.u.it............^...@...~...\|.....QOw....._......c..K.L.(d....a&r;\|...<...\...Q...L....o..`.@....~..T...n...b}\|SQ........zQ....e.ah!L8..I..O{..t.9.i.Z....}>....^.A.._$:....Du:8(og.d..e..s..Q.:..... GC.7*G..t...}...,...M.Y.gD...x.......Y...f.....u.\|W.k.~:M........Bl..]W.l.......N..............Al-{......0]..~....h..4=.xl.B..-

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2177
Entropy (8bit):	4.802678797283961
Encrypted:	false
SSDEEP:	48:cHlj4rf0IUmow4vOF6m95RuhDqzTPYDcTqW:GEb0pmV4GF6m50Zq/YDlW
MD5:	293729E976F2CEFB195258D8CC61A433
SHA1:	39D3BD078237E1632B5A91F3284DDFB009A27F3D
SHA-256:	413B36AB7233A2925BE5EBF0E3DF5BF1253C75727A6E2FD9ADA195CD367055B9
SHA-512:	5CC965CA4977984FD22EDB01D6CE6DD88A050C8A940A3E88CEC534823B5AD653B051F03115A0FFDA4D007E4925E559CFBB61D76278428BAC31170B5CAF006408
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="18px" height="18px" viewBox="0 0 18 18" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>icon-phone-white</title>. <desc>Created with Sketch.</desc>. <g id="CURRENT" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="simple-fix-version" transform="translate(-1259.000000, -308.000000)" fill="#FFFFFF">. <g id="icon-phone-white" transform="translate(1259.000000, 308.000000)">. <g id="phone">. <path d="M3.51538224,0 C3.32207789,0 3.12799094,0.0727826087 2.97773007,0.223043478 L0.712860503,2.48791304 C-1.07461776,4.2753913 0.615034417,8.86617391 4.48894746,12.7393043 C7.31416484,15.5645217 10.5212953,17.2291304 12.7431214,17.2291304 C13.5679909,17.2291304 14.2566866,16.9998261 14.7403388,16.5161739 L17.0059909,14.2505217 C17.3362518,13.9194783 17.

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x300, components 3
Category:	downloaded
Size (bytes):	11839
Entropy (8bit):	7.953389532513787
Encrypted:	false
SSDEEP:	192:r8+FD9Ngqn1wADxIp5cWRyJfhAKFEMc7LXTb/HRy/P59cXrzplzLybLNmWDmO3Yv:r8AgqnGAD+yJfhvFE1DRySLzLybBmWDG
MD5:	62F76B05498DF02FAF699D94CF41BE3A
SHA1:	3CE7883EB4D5A534313008F31CEDDA72CADAE775
SHA-256:	EE2056DF50E828FD1F89629ED7F1A7A16409F9839616FFAABDAE3FE4909778F2
SHA-512:	35985521EB3E53A0FAC78AD5F379CB845DA94213B4A31A5FC38DDA397D2C792307267B7CAD2D7E6503B914FFC44FC94B5860E3736717B56DD8D1B70AE9E9146F
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/shopping?q=tbn:ANd9GcTunK_6ZW2AB0cG7h65yg03IXtXmZ0ex47kLU4WbtVNwL2qzviFYeYqbGWOAg&usqp=CAI
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......,...."........................................>........................!1.A."Qa.2q.....#B....Rb..3.....$r...................................................!1A.Q............?....K.......b.Q..);...T.. hqF.}B..S....u.z..D.k.v.T..P].0(..G.s.J.3R. ...y.O`R...&.a.w.4L....j..F.Y..).......>lb.I..n>Z...Q....g.Z....j...(.I....e}..R7.j,..3.....'.].w.....i....)......5.l.-F.{Pi..Q.~..0.....'.G.P...b...@w...W.....q....pw'n.$....g4...w.h.A....P...NG...j'.....8..]..........'1..%.r0Mp+..m..F....<...$Q2..b.B.I,..\B.....c..v".X0.j.=\...J..m.2.....y.$......6....~.%...,6.Jc......pF..m....b..;.. e.Q..^..j..pr..cc...V...X..:U...w<..Ia..(.=...w...$.t .=.5....%..4..8.sB2.m.J..~)\|.e.......A.;..^k.$......#>....4.V9..F.}kl.;...n9.(....F.1B3.......c.^....`...w.H.v..sR-dRH_+..".'sR.....7=.U-.#...9..L..>...!.}.F.

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65482), with no line terminators
Category:	downloaded
Size (bytes):	589133
Entropy (8bit):	5.530184914615736
Encrypted:	false
SSDEEP:	12288:yVYYyGlRjYjYZjVPY5Y/jwwLYKYyjcXTY1yFlUDYIYMj4LYqyOl+JR/hYmYQj6pn:B9
MD5:	1DD6EC93D4E9A54F0D2C4A9E04F40C53
SHA1:	F1446527655864C9835455B5C8DB6A53C6D89DAC
SHA-256:	50BA9AF0DFE2F0C8FBD5A4B2901A183C355EDD683CAB2BCC19CE4143BB1ACD55
SHA-512:	5C54DCE3736EBED14863614595D9309A42AC28D92419BD70A4C84C8C0EFC8609B37176FC5CA26BBCC3D66EC07E7B103928BD6C1AEBF72F7EE1DC63902CD1DC2E
Malicious:	false
Reputation:	low
URL:	"https://www.yahoo.com/caas/content/article/?uuid=9667f626-9602-3f80-8f31-6786323de4e0,9a8d4713-ce83-455a-b9a5-930026b49ca3,cd680bf4-4be7-3e46-aa91-62baac020327,48379597-0675-38b3-9e93-2179864043a5,e7dab064-a495-3430-b19f-a75550693a12,e15a82c8-6454-39a6-831a-b18adf614afe,ef86a629-1eb8-4e0f-845e-22934adc8a31,2f3e0630-3b39-4af5-9229-793976190a44,9c59bff8-7554-4369-8a9c-59e768feaff6,52221875-54c2-37ef-8de3-d700cefb20e7&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=2vl5n89j0c3hk"
Preview:	{"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"news;culture;crime;legalmatters","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0770000002GZ5iAAG;revsp:reuters-finance.com;lpstaid:9667f626-9602-3f80-8f31-6786323de4e0;pt:content;pd:modal;ver:megastrm;pct:story","site_attribute":"wiki_topics=\"FTX;Telegram_%28software%29;The_Sentence;Cryptocurrency\" ctopid=\"1996000;2051500;2054000;18857489;18858989\" hashtag=\"news;1996000;2051500;2054000;18857489;18858989\" rs=\"lmsid:a0770000002GZ5iAAG;revsp:reuters-finance.com;lpstaid:9667f626-9602-3f80-8f31-6786323de4e0;pt:content;pd:modal;ver:megastrm;lu:0;pct:story\"","spaceid":"1197792446","site":"finance","enabled":true,"pos":"","showBodyAds":false,"showPhotoAds":false},"alias":"ymedia-alias:shadow=frustration-bankman-frieds-victims-hoped-184034195","canonicalUrl":"https://finance.yahoo.com/news/frustration-bankman-frieds-victims-hoped-184034195.html","categoryLabel":"Business","commentsAllowed":true,"commentsCount":

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	161
Entropy (8bit):	5.14303370802741
Encrypted:	false
SSDEEP:	3:qCIsqDmJS4RKb5ykKcvXjXRHoNcHCUOFUOGLFUUvXALLGQkHgwdIF8IAdSHF/FkD:qT9mc4sl3O4XWMvXA3kHgwKFS4eD
MD5:	F38A57E415CE63A7F8A590E72ECD2BAF
SHA1:	F598F466F444F9CAF01355BCE879954A26F06432
SHA-256:	7A65FACDE0CEBE73F884277533516AA26C8D8E477DCB8697A339303F1CD891C6
SHA-512:	E5AB67532A13FFD862CCDB6F29418EDD2E0B47ED8CAA3E4E93053B52CA5CD51ABC64D194AB39D98028A585F436016EF952392DB713A1BA58A00BCF4847B1DEF7
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/arrow_forward.DGeI3yUB.js
Preview:	const o='<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="m12 4-1.41 1.41L16.17 11H4v2h12.17l-5.58 5.59L12 20l8-8z"/></svg>';export{o as A};.

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	50852
Entropy (8bit):	7.982560303123856
Encrypted:	false
SSDEEP:	768:nYy0ArELFyz82wazlDEXwe1Sh9DIQGB8D08mTD3rAzKCioYIEiw0++tTbIP0C99r:nZELFyKazl4XqnU8EVfoYIj+uTW/adg
MD5:	2A89D9B6A711328305889271514B8D38
SHA1:	C88322D3B381DA418CA6FDD836C35C16433B9B24
SHA-256:	73FEB211FDB5D068F026DEC03EC9838E8E2EFF4BCCD8E4E4991BC4536417BC2D
SHA-512:	D775DB8216208748B37917645CA55376F587A22781966F6F37ACFE3EA13EFB3E2FF36D630FDDE1CE10D573E1768544E5C90A12389A91DBD688404CD90318F5E8
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/lLpoxUOVQhJxvKAFUVys6w--~B/Zmk9c3RyaW07aD0zNjk7cT04MDt3PTY1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/reuters-finance.com/08e74558821b1d4062cdd9246328f23d.cf.webp
Preview:	RIFF....WEBPVP8X.... ......p..ICCPH......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1890
Entropy (8bit):	5.061429042357507
Encrypted:	false
SSDEEP:	24:n9cG+eKW/0DS2MUtbSMeetkKkymeI4Lky0G7CpfD03XpQ/EE1hzPi00I8TFSaOgc:n9cG+eXw5c2pmoLdRCp6zE1oZOgl6
MD5:	C3CC19CE8230DF99C7835DECC2D79EE8
SHA1:	4105BECE51B5156B59E4D37C2DCF3B109971570F
SHA-256:	A3C92E8D35E4E636238E577DA8CD44AAF8DD699B719E4125BA0029330EDF6907
SHA-512:	ABA79248C26637AEF641104C8A5906A212B7D6CF233D61AC7F7A6617E1D807C9E061332DBDEF8B0F14FC2801203D4B7C7920AAC36D9D27E4433F721407B6187B
Malicious:	false
Reputation:	low
URL:	https://c.evidon.com/a/COMMON.css?r=0.04482278175510124
Preview:	.bap-blue, .bap-close, .bap-div, .bap-gradient, .bap-gray, .bap-img-container, .bap-notice, .bap-link-div {..color: #000000;..white-space: normal;..word-wrap: normal;..vertical-align: middle !important;..margin: 0;..padding: 0;..border: 0;..outline: 0;..font-family: Arial !important;..font-size: 100%;..border-collapse: collapse;..border-spacing: 0;..line-height: 13px;..list-style: none;..letter-spacing: 0px !important;..text-align: left;..overflow: visible !important;.}...bap-notice {..background-color: #FFFFFF;..padding: 2px;..font-size: 16px;..line-height: 13px;..z-index: 9991;..top:-100px;..left:-100px;.}...bap-blue,.bap-blue:link,.bap-blue:visited {..color: #2b2f98;.}...bap-close {..width:20px;..color: #707070;..font-size: 10px;..font-weight: bold;..margin-left: -22px;..position: relative;..top: 1px;..left: 100%;..cursor: pointer;.}...bap-div {..border: 1px solid #ababab;.}...bap-div p {..float: none;..padding: 0;.}...bap-gray, .bap-gray:visited {..color: #444;.}...bap-img-containe

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	188531
Entropy (8bit):	6.108819643785119
Encrypted:	false
SSDEEP:	1536:C8y3tg3Xv7msoVG4C5x9AXjYxD0NLND0NLr3NiwS2Xo7mBoVsQC5x8QB4qXt7ma0:mgKGxD0zD0rE6xvB4RaTut
MD5:	E3C5FDD7366F1AC820970BF96E572FBC
SHA1:	16948E6E643F6B6D8C9EB74859749AB372C457E7
SHA-256:	0801219F4BC5F8F473A9E075C43FCE8C23138821C2B357E06067440157B9C376
SHA-512:	EF82EF39EB16948043F5D337B4606F6910CE78BB18910AAFC342ED124A2E56B31AAD590C31E9EE8FAFAD5FA8E5189D39EF358815C6850C0CD086A7DAAEB51AF6
Malicious:	false
Reputation:	low
Preview:	{"/22888152279/us/yhp/main/dt/us_yhp_main_dt_top_right":["html",0,null,null,1,600,300,0,1,null,null,1,1,[["ID=1c0532c7cba0cf72:T=1711672899:RT=1711672899:S=ALNI_MalG-s824uUA3yzW3mh2X5MPY9Q9A",1745368899,"/","yahoo.com",1],["UID=00000dd6ae77506f:T=1711672899:RT=1711672899:S=ALNI_MZ80MaKhBfEM46bEa_b7MVcI-QtQw",1745368899,"/","yahoo.com",2]],[138462851948],[6275051704],[5285812218],[3186246143],[539868],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CJjL_riemIUDFa8TswAdHNwEow",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=84e008aca3b51248:T=1711672899:RT=1711672899:S=AA-Afjb13A3xjbnBb85LY8BmmUMS",1727224899,"/","yahoo.com"]],[]]}.<!doctype html><html><head><script>var jscVersion = 'r20240327';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><div class="GoogleActiveViewInnerContai

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1890
Entropy (8bit):	5.061429042357507
Encrypted:	false
SSDEEP:	24:n9cG+eKW/0DS2MUtbSMeetkKkymeI4Lky0G7CpfD03XpQ/EE1hzPi00I8TFSaOgc:n9cG+eXw5c2pmoLdRCp6zE1oZOgl6
MD5:	C3CC19CE8230DF99C7835DECC2D79EE8
SHA1:	4105BECE51B5156B59E4D37C2DCF3B109971570F
SHA-256:	A3C92E8D35E4E636238E577DA8CD44AAF8DD699B719E4125BA0029330EDF6907
SHA-512:	ABA79248C26637AEF641104C8A5906A212B7D6CF233D61AC7F7A6617E1D807C9E061332DBDEF8B0F14FC2801203D4B7C7920AAC36D9D27E4433F721407B6187B
Malicious:	false
Reputation:	low
URL:	https://c.evidon.com/a/COMMON.css?r=0.03668519495000977
Preview:	.bap-blue, .bap-close, .bap-div, .bap-gradient, .bap-gray, .bap-img-container, .bap-notice, .bap-link-div {..color: #000000;..white-space: normal;..word-wrap: normal;..vertical-align: middle !important;..margin: 0;..padding: 0;..border: 0;..outline: 0;..font-family: Arial !important;..font-size: 100%;..border-collapse: collapse;..border-spacing: 0;..line-height: 13px;..list-style: none;..letter-spacing: 0px !important;..text-align: left;..overflow: visible !important;.}...bap-notice {..background-color: #FFFFFF;..padding: 2px;..font-size: 16px;..line-height: 13px;..z-index: 9991;..top:-100px;..left:-100px;.}...bap-blue,.bap-blue:link,.bap-blue:visited {..color: #2b2f98;.}...bap-close {..width:20px;..color: #707070;..font-size: 10px;..font-weight: bold;..margin-left: -22px;..position: relative;..top: 1px;..left: 100%;..cursor: pointer;.}...bap-div {..border: 1px solid #ababab;.}...bap-div p {..float: none;..padding: 0;.}...bap-gray, .bap-gray:visited {..color: #444;.}...bap-img-containe

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (45428), with NEL line terminators
Category:	downloaded
Size (bytes):	277102
Entropy (8bit):	5.405566265253881
Encrypted:	false
SSDEEP:	3072:Jb0ogu0N0JQfsy76VHpu+Gj2xaPhkNXS2Ei:XguxXHb9APhAS6
MD5:	95746048C5E0E0553E8687D9BE370087
SHA1:	9AB565E8973230CD53DD7CDCF04A1CFBCCDC9F54
SHA-256:	07AED86D85BD5ADAAA9AE7F7C3BA8A456C3D66EA4DF09961EA3F742E7B440447
SHA-512:	34CDBA3EC0C1EEA36F938A9EE0E491BEA27714D706D341696EFAF00B5FDC8B1E9059F5C42CE387030EC963D35D5EFF2358FC353236FA705C1D6658E35608C2C7
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/ss/nes/player.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/",n(n.s=11)}([function(e,t,n){"use strict";e.exports=function(e){var t=[];return t.toString=function

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (3515)
Category:	downloaded
Size (bytes):	3516
Entropy (8bit):	5.423850751593491
Encrypted:	false
SSDEEP:	48:paEMs/GFcvgdcwMBjv/O+G3r8CHaGulOA3JdPOp6Lftuq/W1B5AlPKNF6KLUoxV1:paEM9FpJMxO73HlkOAlQXBvNFnUaVP9
MD5:	7FD37A5D6A8D90DB605F3B173D2BAB43
SHA1:	05F5DC1238AD96238D51F00C0C6432F89C80A7B3
SHA-256:	9EDE8352F7CCD9BE87DFE0E023EC23C01DBF95FF5022B925B6EEB1679CB0BEE2
SHA-512:	44A22022CA7319DF81D35F90E16CAB8D59467AB65BD565F62F14586F44DEF346ACA5D3175C5939CC318D4D6C92EFDACF434B2F58D3504C6AEEAF2F5D8C41A78F
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/FeatureBarNeo.wU-KRXJg.js
Preview:	import{s as O,w as U,k as I,i as p,e as v,d as g,f as k,p as m,L as A,M as w,t as C,b as R,h as V,j as $,l as b,m as x}from"./scheduler.ErneftFr.js";import{S as P,i as T,t as L,g as G,a as B,e as H,c as F,b as M,m as j,d as q}from"./index.DsErXEH0.js";import{A as J}from"./arrow_forward.DGeI3yUB.js";import{I as K}from"./Icon.CDBsrPKz.js";import{L as Q}from"./Link.DZ6I_oHl.js";import{g as W}from"./commonUtil.Bb2Cnbsk.js";function D(n){let e,s,t,i;return s=new Q({props:{href:n[5],noUnderline:!0,className:"tw-w-full",variant:"none",i13nModel:{elm:"hdln",g:n[6],sec:"feature-bar",slk:n[4],subsec:n[3]},"data-sveltekit-reload":"","data-testid":"fb-link","aria-label":"Feature Bar Link",size:"medium",$$slots:{default:[X]},$$scope:{ctx:n}}}),{c(){e=v("div"),F(s.$$.fragment),this.h()},l(a){e=g(a,"DIV",{class:!0,role:!0});var r=k(e);M(s.$$.fragment,r),r.forEach(p),this.h()},h(){m(e,"class",t=A(`fb-wrapper ${n[0]}`)+" svelte-xxx6bz"),m(e,"role","alert"),w(e,"paddingBottom",n[1])},m(a,r){I(a,e,r),j(s

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2740), with no line terminators
Category:	downloaded
Size (bytes):	2740
Entropy (8bit):	5.2744010022818335
Encrypted:	false
SSDEEP:	24:GtSqBV8OZ57nhuvEmrOTT6pzMnOAcLsQC+t2CU1pD2IC2Nx+8r9UCBJdMsHOGvrJ:Fs54vd6TWMOAcyAVEQ8r9pzOsHGQv
MD5:	E8B3A341599A5908BFAC693D1ED5DBA8
SHA1:	73B62214E838563209D35D4DD8BF46794401D0F3
SHA-256:	C06CCEC90F7BDB0591FFEBF084699F912AF7ACFF6F9A5AAED211937CACAB2821
SHA-512:	141F3065C466AE3CAA97DB15E0B0104D4FD016BB18BCEFCCAEDC669E17B40FBCCEFCBF5595B5FC5077DEBE0765C796C66A3EB1842E51CB92ACF262F27C2E10C2
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/nel/css/react-finance.NotificationAlert.atomic.ltr.e8b3a341599a5908bfac693d1ed5dba8.min.css
Preview:	#atomic .Bdtc$\$seperatorColor${border-top-color:#e0e4e9;border-top-color:var(--seperator1,#e0e4e9)}#atomic .Bdrs$4px${border-radius:4px}#atomic .Bdrs$50\%${border-radius:50%}#atomic .Bgi$\$cryptoNotificationGradient${background-image:linear-gradient(45deg,#ffca20,#ff9523)}#atomic .Bgc$\$hiringBgPurple${background-color:#5c00d0}#atomic .Bgc$\$linkColor${background-color:#0f69ff;background-color:var(--link,#0f69ff)}#atomic .Bgc$\$lv1BgColor${background-color:#f0f3f5;background-color:var(--surface2,#f0f3f5)}#atomic .Bgc$\$negativeColor${background-color:#eb0f29;background-color:var(--negative,#eb0f29)}#atomic .Bgc$\$positiveColor${background-color:#00873c;background-color:var(--positive,#00873c)}#atomic .Bgc$\$storyOrange${background-color:#ff8c14}#atomic .Bgc$\$white${background-color:#fff}#atomic .Bgc$\$hoverBgColor$\:h:hover{background-color:#e0f0ff;background-color:var(--hover1,#e0f0ff)}#atomic .Bxz$bb${box-sizing:border-box}#atomic .C$\$negativeColor${col

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2537)
Category:	downloaded
Size (bytes):	7513
Entropy (8bit):	5.5161489346035175
Encrypted:	false
SSDEEP:	96:iEsiiki94jkODf8Mc434F3EJfRmIP/MSbvgd/mwPUwF2PBhN8mGXEUA5:w94jkOrsKpb/Mmv0/mtwFfV8
MD5:	CAC542467363EDCFB8C0BF4D565D062C
SHA1:	3CCBABCE71B48948AC9EBD65452491FF327214FE
SHA-256:	C0481712FE5BAE84F1B02CC375AFAD77DC9E141437602C3A0717739654E9A003
SHA-512:	FFC090602C13B2EBFC5860B7B5227034E44E7E662E7172495AC59CFFE1ACB2FF784B7D3CA2B78B33D2DA9180CFB934A15351D0C0C62CF0125F0D0652DDBD2991
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/xbfe_backfill.js
Preview:	(function(){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var k=this\|\|self;var n,p;a:{for(var q=["CLOSURE_FLAGS"],v=k,A=0;A<q.length;A++)if(v=v[q[A]],null==v){p=null;break a}p=v}var C=p&&p[610401301];n=null!=C?C:!1;var D,E=k.navigator;D=E?E.userAgentData\|\|null:null;function F(a){return n?D?D.brands.some(function(b){return(b=b.brand)&&-1!=b.indexOf(a)}):!1:!1}function G(a){var b;a:{if(b=k.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function H(){return n?!!D&&0<D.brands.length:!1}function I(){return H()?F("Chromium"):(G("Chrome")\|\|G("CriOS"))&&!(H()?0:G("Edge"))\|\|G("Silk")};var aa=Array.prototype.forEach?function(a,b){Array.prototype.forEach.call(a,b,void 0)}:function(a,b){for(var c=a.length,d="string"===typeof a?a.split(""):a,f=0;f<c;f++)f in d&&b.call(void 0,d[f],f,a)};function J(a){J[" "](a);return a}J[" "]=function(){};!G("Android")\|\|I();I();G("Safari")&&(I()\|\|(H()?0:G("Coast"))\|\|(H()?0:G("Opera"))\|\|(H()?0:G("Edge"))\|\|(H(

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=41&external_user_id=1b407dde-ed65-11ee-9900-64996dd289d9
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	169
Entropy (8bit):	5.502173578832701
Encrypted:	false
SSDEEP:	3:YLTBQSY/eIy9SqQA7HvgWqyHS/cfQAR/VA9Hbhukr0nzH6SHn:YnBQSSlcSrCHYWJy/cYeVA97Qgeb6u
MD5:	3AB07B2A40957451736EAA2D64BC5504
SHA1:	AD48CD55663D5CAEC2A6AB76A3EDC8B5BEC1ECF9
SHA-256:	B305208CDC2DA07FCC60B75F75C326924B37D45861C410C519527F84F58CF8A5
SHA-512:	7BF332855E3C6F9AA4D26AA8F004D7B1987AB74764A10FB9878C7885F2A8A4BFA3142C5AE42277812682AFD326B3D94B51E0F3FFEBC74C1D5EB5B45E3310F008
Malicious:	false
Reputation:	low
URL:	https://idx.liadm.com/idex/did-004f/any?duid=5fb552a76ef3--01ht3tgrdyh133kh4xvpvzxaty&us_privacy=1-N-&gdpr=0&did=did-004f&cd=.com&resolve=nonId&resolve=index&resolve=magnite&resolve=pubmatic
Preview:	{"nonId":"vN_RikZwhoZWxTMpfJBcDcT8RWafL19T6LauHA","index":"ZQjYrf.1D0shOWRRRk909QAA&1008","magnite":"LMPI0LLB-19-JSO6","pubmatic":"8DDE491A-31A6-4A5B-9E11-D4969B43F97B"}

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 260 x 340
Category:	downloaded
Size (bytes):	539840
Entropy (8bit):	7.950660003114956
Encrypted:	false
SSDEEP:	12288:OqzGmFxefUFk3+6w/AuS4Hf0FzU/VF4HxHi1u2k0SwU1TKd5I/Z+aC10n/:OqzGmfeMFF6buloUNGicgd8+J0n/
MD5:	2FB9D43C74752389405ABC1A5814B44A
SHA1:	BD551A3693F34693083D37EEE3113D667CE4F3C4
SHA-256:	7A18441E184306E7F51C5493C0C17F676C73E12F518DC468DCB565B25D90FC41
SHA-512:	D0CED802BD8B03554E538D1316CC37EEFA4E0CBA33E54242BA36F4C1A3D1B991135208B54064499E571A21562AEFC67DBBE691B38E333148CCAB2518B229AA80
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/img/icon-flame-light-202303010352.gif
Preview:	GIF89a..T.......................................................................U..R..Q..O........K..M..N..N..O..P..Q..Q..S..U..N................^<.mC.N..O..L".Q..S..[..M.....d.d?...pA.iM.h/.i........f...........................................................................................................w..o.rW.S..U..O..Q..S..^$.`0.M..N..O.....................}.hN.X5.X..o>.U..S..P..R..N...n.M..Q.............M%.W..r5..W..P..e..d.Y4.._&.Z$......v._=.^,.pR.Y#.kB.f5.}.O....R..S..S..}D............`@.hC.`3.....^5.U$.X..M"....M..U%.U!.a4.M..Q..M .N..N..Q..O..O..Q..P..U..U.........hD.w\...^<.uR.`1.z.]2.Z+.~.X).vQ.W..k...U..P...b.P...v.t.W..v..V.].pP...P..X"....X.{U........X,.f.v`.....^..vQ.L..L.....N).jN.\|].N..{N.qO.................!..NETSCAPE2.0.....!.)Optimized with https://ezgif.com/optimize.!.......,......T....................H........L..............L.....J.....j..........N....................(8HXhx..........)9IYiy..........*:JZjz

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (717)
Category:	downloaded
Size (bytes):	786
Entropy (8bit):	5.219841148069385
Encrypted:	false
SSDEEP:	24:0pRlddWZgvIlRkJo/Vu6MO3RctoHwIfATqckxg7iQD8rnaS4NM:0RddRvIlail3u21fATqc50raRNM
MD5:	FB5A4594B9FFEF704D61BB6E6F80F145
SHA1:	B5CE60A22B42FCD31FE8B2810AAA277D545BE43B
SHA-256:	3C30F0F816ADA3A1410045D740A98E4D2FAF07FC74FFC0430678B21ABBD05138
SHA-512:	77C63E1249E4BDF2DE43C74531A64E0AFE7305662BFA46252C432318B374CE7B0A6FC24645A5FDD5E9A4B18D4D924BF74E970B6E64D20B45DFBA263E51AD5FB4
Malicious:	false
Reputation:	low
URL:	https://tsdtocl.com/
Preview:	<!doctype html>.<html>.<head>.<script>.!function(){var e="tsdtocl",t="!-#@",a=2;try{var n=function t(a,n){return n.namespace=e,n.id=a,parent.postMessage(JSON.stringify(n),"*"),n},r=function e(r,s,c){try{if(void 0===c\|\|void 0===r\|\|void 0===s)throw 0;var i=localStorage.getItem(s),o=i?i.split(t):[];if(-1!==o.indexOf(c))return n(r,{success:!0,wasAppended:!1});o.push(c);var d=o.slice(-a).join(t);localStorage.setItem(s,d);var u=localStorage.getItem(s);return n(r,{value:d,wasAppended:!0,success:u===d})}catch(e){return n(r,{success:!1})}},s=function t(a){var n;try{n=JSON.parse(a.data)}catch(e){}if(n&&n.namespace===e&&"append"===n.action)return r(n.id,n.key,n.value)};window.self!==window.top&&window.addEventListener("message",s,!1)}catch(e){}}();</script>.</head>.<body></body>.</html>

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (372)
Category:	downloaded
Size (bytes):	7668
Entropy (8bit):	4.818916405648157
Encrypted:	false
SSDEEP:	192:Uu9KYoiEAroQywuVYeCvGgPVoddpswcj2jA9qSt+xw:F9KjYe6do2jg2
MD5:	0AA710A63CEE632B2B8987C8E7715720
SHA1:	BEC570DE3EFB25EF892B1B7BF6930EAC57400671
SHA-256:	6BFBCBFE62A182C77A84F9BB31CD15199C5A6999DD00737F4EE1045258FF5872
SHA-512:	17D6013B3BA7F5242DC1E9F037DFD7E789681BEFC417DAAF7732C92D57C1A582CED2CE49726EFC334A2612EC6E76E28A5C228F1B3823D4C33C66FB4195DD3C50
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/ucreative.php?cv=1
Preview:	function isSet(val) {. switch (typeof val) {. case "string":. return val !== undefined && val !== "" && val !== null;. case "object":. return val !== null;. case "number":. case "boolean":. return true;. default:. return false;. }.}..function isJSONSupported() {. return !!(window.JSON &&. (window.JSON.parse && typeof JSON.parse === "function") &&. (window.JSON.stringify && typeof JSON.stringify === "function"));.}..//------------------------------------------CODE------------------------------------------.function isForceSafeFrameEnabled() {. return testData["fs"] === "1".}..function decodeFSC(input) {. // Replace non-url compatible chars with base64 standard chars. input = input. .replace(/-/g, '+'). .replace(/_/g, '/');. return input;.}..let timesData = {uCreativeLoadStart: Date.now()};.let isDebuggingLogFired = false;..function onLoadHandler() {. timesData["dfpIf

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/g/images/spaceball.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 700x420, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	40628
Entropy (8bit):	7.994562400257862
Encrypted:	true
SSDEEP:	768:vpayc9qZNwUtG6kAEAT+GBI32u+yrYVzcRdsW9:9JdG6k/AT+z+yYzcPsM
MD5:	DC9BC38351E5F90861FB70680106E906
SHA1:	EAA49807D88CC38066BEB678D7933B7114216A22
SHA-256:	6AD5BD4B8C71BC75FD544F9D844B9B3DC767A6106DF59951606B1A731B54A922
SHA-512:	63DE71CC078895DC54D3270F6F75BC82089817FB00CFEFB642BBDBC9F171C8E798632AF8F16B6F84D46B5986F974425408D576429D03AE7FC366A9E1CDA1C1A9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/QmRSNXBrC7HxHZxQKfNaLQ--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/03d4b380-ed4d-11ee-bdfd-93ccd8c91a7d.cf.webp
Preview:	RIFF....WEBPVP8 ............>...B!....Z...Y.....dG..].y...P...a..._._..k.;._.....r...3.g...~.>n.......K...S................?.a.w.._._..}.............S.W...G._........?.~.\|D.k.....+.G........?.....q.w....2.7...?v9.v..?.?....../.o..g\|......w...?..{...~.~............_.O..............G....\|..F...g...?...........g.G...?.>....w...S..........~..h...wY'K!.....S..".....<...O.A.?..e~%...E..........a.l:....6Q.M.......(.;tww.......~...!..0~....p(G.......!I...... .\|.N..3..-...F.....T..n.`Tfiq.P1...q...<..cMZ....2.H.......=b...c(.".8..,O_.H........[.{...f.;S.3.w.ze.p}0.6\|z..wc...C.\..Fb....6A}qX..RV...Q.Q.9.Z"~.fV.H.~..mD9Bt...9.V..ke.....{...g.f%....1...o4..]..y....l....37..YQ.ge.\$.t....%..t.'>..qc..B.z.\|..&.rF..UuD,.j....Cz.@.O....u..~.,..K.n.9..B...TQ..x.+Es.1..Q,..mFa...j.s....{.-q.....!.Y.fAx*.!..>:..@[..3..(9...._..Y.'...Q!..."h.Io&6...?..P#...@...)e.b.0.`.pN.D..U...${.Y..E..f.....$...9........c:..k.<..7..s.....:.WwA....K...1.m{..ZyP....cX

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29151), with no line terminators
Category:	downloaded
Size (bytes):	29151
Entropy (8bit):	5.306917423035464
Encrypted:	false
SSDEEP:	768:R+4muH0Pu0Ok68N3sPAM635SGCXN7hnswCR8Tygn0xyfY2YgHK:rH0G0Ok68N3sPAM635SGCXN1swCR8tXu
MD5:	55CC85BAD916CD86ED872D7A0026BC60
SHA1:	A58498F9B48B982210FF6CB3EC99DA259EB4DF6D
SHA-256:	A837065C797CD7C3986EBA363154D8BAF17E8CF0CE69BF68A9B863E4771AB8E7
SHA-512:	5CC1121E55971A882681B1FB17CD982803AD25D231C626C216A109B6C0208717CBA33C1640DF8E7695BE5CEE1D728320F1846F4552AD269FE883A137CF2BDB4C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-caas-1.36.5-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-caas",[],t):"object"==typeof exports?exports["wafer-caas"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-caas"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(a[r])return a[r].exports;var i=a[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var a={};return t.m=e,t.c=a,t.d=function(e,a,r){t.o(e,a)\|\|Object.defineProperty(e,a,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var a=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(a,"a",a),a},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,a){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function i

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4734), with no line terminators
Category:	downloaded
Size (bytes):	4734
Entropy (8bit):	5.180637191276607
Encrypted:	false
SSDEEP:	96:Pka0XMPHQCAZqlZCelXBhiZqlZCelMAWhwhfYS4x4TVHjUo:Pka0XMPHQCAclIelXBhiclIelM0OQx9
MD5:	98D4B0EBF79827AC361AF0C0E576E89C
SHA1:	1F81EFC4F8AD8C70D86D65395E7A13D41B755035
SHA-256:	48BD91C4316546E658038A5D2BFF2138884E7F69CA13D2C5AED88622FFD4A0D7
SHA-512:	AB9803B06A5A48FACAF166A940EB97197FABF9C37F88B5A43486A74047EC3443E1D29B644B15C78B3933662AE706D7AA5737062799686929496B7A2A55C7B8CE
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/art/css/financedweb.98d4b0ebf79827ac361af0c0e576e89c.css
Preview:	.caas.finance .caas-cover{max-width:unset!important}#Masterwrap .caas.finance .caas-full-bleed .caas-cover{max-width:unset!important;min-width:unset!important}main.financeNeo .LDRB-MAST-yield,main.financeNeo .LDRB-MAST2-yield,main.financeNeo .caas-sda-benji-ad,main.financeNeo .related-content-lazyload,main.financeNeo .sda-yield-INBODYLREC{display:flex;justify-content:center;flex-wrap:wrap}main.financeNeo .caas-sda-benji-ad div:first-child{flex:1}main.financeNeo .caas-sda-benji-ad,main.financeNeo .sda-yield-INBODYLREC{margin-bottom:40px}main.financeNeo .LDRB-MAST2-yield{margin-top:40px}main.financeNeo .sda-yield-INBODYLREC .sdaPlaceholder{width:970px!important}#desktop-dock-container .disableSda .sdaContainer,.sdaLite main.financeNeo .LDRB-MAST-yield,.sdaLite main.financeNeo .LDRB-MAST2-yield,.sdaLite main.financeNeo .related-content-lazyload,.sdaLite main.financeNeo .sda-yield-INBODYLREC{display:none}.sdaLite main.financeNeo .caas div[class^=sda-]+p{margin-top:0}main.financeNeo .sda-yi

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://a3558.casalemedia.com/impression/v2/981703/85/co30sf0sigtuqp4bdl4g/88a3db3c-cec2-4d34-9d03-82ff3d7aa3f5?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1711673492&profileIDs=&creativeID=17e362d&pubID=183875&format=banner&channel=site&ap=${AUCTION_PRICE}
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (2265)
Category:	downloaded
Size (bytes):	2266
Entropy (8bit):	5.379350736689945
Encrypted:	false
SSDEEP:	48:WbKlMJoqn7DZkNGEQzCIZPCngXHl3EigGOTU4S00jgPGbnyuCw08sj:Wmy5n7D1EQmyPCn4H1EiETUggyuDsj
MD5:	E8803C2766BBDAE21A100D68A7E6D740
SHA1:	A59D0E91F3CE2E48A548AB612BD9BD1E797325A6
SHA-256:	635A8ECCAEC15AE6ED41D8FB003143C73BDB7A4975E95FAA789F56C01F3299ED
SHA-512:	70C22DB5460B243E67F699B826BE6CF5542F107FE3B28D42D03E51D8C67FAA73916B148A84F5D07C7E2FF9A9B1AC71C2D5D033AC7446C684010F5584D76A9E78
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/MarketsHorizontal.BKMQqjBy.js
Preview:	import{s as M,e as p,d as k,f as g,i as h,p as d,k as $,l as v,C,b as I,j as T}from"./scheduler.ErneftFr.js";import{S as x,i as z,g as F,e as H,t as w,a as E,c as N,b as O,m as P,d as j}from"./index.DsErXEH0.js";import{e as S,u as q,o as A}from"./each.DufB99sH.js";import{g as U,v as B}from"./commonUtil.Bb2Cnbsk.js";import{T as D}from"./Dock.BCBFEHBF.js";import{b as y}from"./i13nUtil.0wCphNmh.js";function b(n,a,r){const e=n.slice();return e[6]=a[r],e}function L(n,a){let r,e,u,o;return e=new D({props:{item:a[6],formattedFields:!0,rapidSec:"mrkt-sum",symbolFirst:!0,showSparkline:!1,layout:"horizontal",shortNameOnly:!0}}),{key:n,first:null,c(){r=p("li"),N(e.$$.fragment),u=I(),this.h()},l(l){r=k(l,"LI",{});var i=g(r);O(e.$$.fragment,i),u=T(i),i.forEach(h),this.h()},h(){this.first=r},m(l,i){$(l,r,i),P(e,r,null),v(r,u),o=!0},p(l,i){a=l;const c={};i&1&&(c.item=a[6]),e.$set(c)},i(l){o\|\|(w(e.$$.fragment,l),o=!0)},o(l){E(e.$$.fragment,l),o=!1},d(l){l&&h(r),j(e)}}}function G(n){let a,r,e=[],u=new

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, Unicode text, UTF-8 text, with very long lines (6999)
Category:	downloaded
Size (bytes):	7010
Entropy (8bit):	5.515910336657434
Encrypted:	false
SSDEEP:	96:RnoqeJNRNvARisdSOGxBi7MWF1s/geCip+GoEc9RCpfOjG5SJb4LTEf2:hSRZARkOKBi588inRAR+oG5SyLTEf2
MD5:	5D68688407A29AF444DFDE3CA55C1FD0
SHA1:	959CE913C6762FB273307F5FB83A70534E9C1C59
SHA-256:	0C1405653F443B4B7DF7EF53DBDC1274EBB0138CF604B91A1CE8111E434417B9
SHA-512:	3FA2BF807301DA8BFF0A72F784000F72481C4C1295387A8BFF044758ADC8B2FC1942E85C82E2BA3ED4B4FD7B1B1B7C2B85266818BE3858D6DD5D643251EA8E79
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/portfolioUtil.CcwRjq7g.js
Preview:	import"./entry.CqbZzrN3.js";const E=!0,_=!1,O=E,D=_,M={earningsDate:["earningsTimestamp","earningsTimestampStart","earningsTimestampEnd"],fiftyTwoWeekRange:["fiftyTwoWeekHigh","fiftyTwoWeekLow","regularMarketPrice","regularMarketOpen"],regularMarketDayRange:["regularMarketDayHigh","regularMarketDayLow","regularMarketPrice","regularMarketOpen"],regularMarketTime:["regularMarketTime","gmtOffSetMilliseconds","timeZoneShortName","exchangeTimezoneShortName"],symbolTrade:["symbol","longName"]},d={BASIC_MATERIALS:"var(--categorical5)",CAPITAL_GAIN_TAX:"var(--categorical8)",CASH:"var(--text3)",COMMUNICATION_SERVICES:"var(--categorical2)",CONSUMER_CYCLICAL:"var(--categorical4)",CONSUMER_DEFENSIVE:"var(--categorical3)",ENERGY:"var(--categorical6)",EQUITIES:"var(--categorical1)",ETF:"var(--categorical2)",FINANCIAL_SERVICES:"var(--categorical11)",HEALTHCARE:"var(--categorical9)",INDUSTRIALS:"var(--categorical10)",MUTUAL_FUNDS:"var(--categorical8)",OTHER:"var(--categorical12)",OTHERS:"var(--categor

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1500)
Category:	downloaded
Size (bytes):	2965
Entropy (8bit):	5.385898767659741
Encrypted:	false
SSDEEP:	48:KtF/7SdUR9Gmq9kSOFShzLWJ25HjFhPnddi+BBb6qFM2jckMudnrF:eOis17Ww5HxZddiitjckMuNF
MD5:	43DF87D5C0A3C601607609202103773A
SHA1:	8273930EA19D679255E8F82A8C136F7D70B4AEF2
SHA-256:	88A577B7767CBE34315FF67366BE5530949DF573931DD9C762C2C2E0434C5B8A
SHA-512:	2162AB9334DEEBD5579AE218E2A454DD7A3EEF165ECDACC7C671E5AAE51876F449DE4AC290563ECC046657167671D4A9973C50D51F7FAEFC93499B8515992137
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240327/r20110914/client/window_focus.js
Preview:	(function(){function h(a,b,d){a.addEventListener&&a.addEventListener(b,d,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var k=Array.prototype.indexOf?function(a,b){return Array.prototype.indexOf.call(a,b,void 0)}:function(a,b){if("string"===typeof a)return"string"!==typeof b\|\|1!=b.length?-1:a.indexOf(b,0);for(var d=0;d<a.length;d++)if(d in a&&a[d]===b)return d;return-1};function l(a,b,d){if(Array.isArray(b))for(var c=0;c<b.length;c++)l(a,String(b[c]),d);else null!=b&&d.push(a+(""===b?"":"="+encodeURIComponent(String(b))))};function m(a){a=void 0===a?document:a;return a.createElement("img")};function n(a,b,d){var c=!1;c=void 0===c?!1:c;a.google_image_requests\|\|(a.google_image_requests=[]);var e=m(a.document);if(d){var f=function(){if(d){var g=a.google_image_requests,w=k(g,e);0<=w&&Array.prototype.splice.call(g,w,1)}e.removeEventListener&&e.removeEventListener("load",f,!1);e.removeEventListener&&e.removeEventListener("error",f,!1)};h(e,"load

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	13914
Entropy (8bit):	7.878712014850627
Encrypted:	false
SSDEEP:	384:4YNg71fTRIdZDvS1DJ0w9eJ9lKUF1EJVRWhUxjEY3:4Yy1uPS5REld1EVWGjEs
MD5:	6411CDFA1D161F28B2C0820E58FFE582
SHA1:	30896A24D98792F5E64692CBD8DE08572FAEA148
SHA-256:	CEFECE244A2A4AF53B84C6D1D12E4155DAA8EA23FDDF8A88354B56A18981A038
SHA-512:	83C6F3B2FAFFF36B8EABEAF122EFFB5746172193EACF1AC2245AA8DA649F4C10DD1BD332EC35669F0D5551FF906535AB36BF2B8F19C1B5943A3FAA4E5CEF6CB0
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/zPFVjTF552.HVRCqQnZP9w--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/47289480-ed5c-11ee-9afb-f52c7d0d9bf8.cf.webp
Preview:	RIFFR6..WEBPVP8X.... .........ICCPH......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (59519)
Category:	downloaded
Size (bytes):	59521
Entropy (8bit):	5.555083575362599
Encrypted:	false
SSDEEP:	768:y8JCWJboRUWi+w4elIarwI0LzhyIyDUp+M9D0FXgCgYJ9Bcw0NtL9tz3aZZpb3FZ:sWD9+MGXaYydx2sOPtk89RatiEfDoKl
MD5:	F8990A3A872AF8CC15DDB03B5E3AA280
SHA1:	5025B8BDE44DF1E9689D4891B065786F6D272CBA
SHA-256:	37404EC5D8789BDCCD177C5CA0BCBD738DF2A15265A83DBA9BD549310E09EB34
SHA-512:	7771F786F5D22F5B75A154F207DFED4C4C616635C3D84FE143F0ADD5009E3A274251B3D16015F13D70798E9D0F1374F1BB69EF299B9AB67B6834D80C66EB6B0A
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/WatchNow.DIWy5W6A.js
Preview:	import{s as pe,e as M,d as A,f as C,i as b,p as k,L as ye,k as D,G as Ct,b as H,j,M as R,l as V,I as Dt,J as zt,t as ue,h as ce,m as _e,n as ke,c as Zt,u as $t,g as xt,a as el,$ as tl,y as ze,o as Fe,C as Ne,w as Me,Q as st,D as je,R as ll}from"./scheduler.ErneftFr.js";import{S as we,i as Pe,t as y,g as ie,a as L,e as ne,c as F,b as W,m as q,d as K,f as Ot,h as il,p as nl}from"./index.DsErXEH0.js";import{e as de,u as We,o as qe}from"./each.DufB99sH.js";import{g as sl,a as al}from"./spread.CgU5AtxT.js";import{A as Ue}from"./Dock.BCBFEHBF.js";import{E as rl}from"./ErrorMsg.vL5JXdY9.js";import{b as Nt,a as ol,g as ve,n as Be,h as Ye,U as fl,t as Ie,r as ul}from"./commonUtil.Bb2Cnbsk.js";import{I as cl}from"./Image.DyHyi9jI.js";import{L as Ke}from"./Link.DZ6I_oHl.js";import{b as ml,L as dl,a as Ge,I as hl}from"./InfiniteScroll.BFSrs90C.js";import{S as gl}from"./Spinner.R1kjxUGs.js";import{c as He,g as Le,r as at}from"./i13nUtil.0wCphNmh.js";import{g as Qe}from"./datetimeUtils.wrzNH3Ed.js";

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Picasa], comment: "ICC_PROFILE", baseline, precision 8, 181x181, components 3
Category:	dropped
Size (bytes):	4416
Entropy (8bit):	7.8211394730457515
Encrypted:	false
SSDEEP:	96:tDTDr0ys9t//xKfxhKHNMytPDNasxgW0wnXmyz8SfHiWrWt2:tDTDgX9tRKWHNMErbGWuqit2
MD5:	6C2C34F40883F596810E7C4B0DF003CB
SHA1:	52F96630E32A3CC2F29F071BA14453525F9C47C9
SHA-256:	D1801D529550723918549FDB524098B389B6B9D9D7905AEC94BDF1028F60028E
SHA-512:	8B91C857F667831164B99CE67740024DF8DF41DEDAD4018534609AC82EC5C0E00EE53BDA24B1C8B4312DDD7CFEB1E2884A857A4424C2EF3FE5C8258FE5E87109
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..II*...................1.......>...............i.......F.......Picasa............0220........................ ...!...\|.......9f112f4d5976aea40000000000000000......ICC_PROFILE................................................................................................................................................."........................................P..........................!QTt......145Aq....."2Ua....r....$BDRbs...%3du.....#.................................9.............................1235AQRr...!Saq...4...."B.............?..HX..g...5.. ...KY.q.,.!.b;.....k.....7..h.....5.g....5..7..c./..b.&n..l.i......M.:..G..qi.Z..s.U....fvs,rW.....c...q......}c;...7sj..sI../7.........t..b7A.v(g.[...L_.<...a9.....C......n.c..v.........4..4....\|...\|h...T0g+.[.v..;..n1...moXM..\|h.qj..sH..S~Y....W.sm.v#n.c.C^[...."...........n..I_..e...b6...P....&.4...r.."7....f.Y_..e.7...tn1.P.V.]5.Lx.~].d...S3.z...t.yg......{.1..{.A......3...

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (952)
Category:	downloaded
Size (bytes):	953
Entropy (8bit):	5.244502165935959
Encrypted:	false
SSDEEP:	24:9XVVq5gioGDMyNCYjnNfWsJzjRWlmIjS8LWXzhPawnfMw51lLk5xw:9FWZoiMgRWejElNWFCefN5TkHw
MD5:	F8B4F052EB2C7D88EAD76708F14F2E0A
SHA1:	CA21C7F069D8E649F32B116369BBA07CA97F45E6
SHA-256:	5EFF26EA42A96B0BC2D3E44664EAB5D830605086260ADEE72B5339241FF4ED3B
SHA-512:	F98E6E82D63C598173A09DBF84582606EC1C200E0A94EAA68DC3CF4DA593AEB2A23491EA4811229A275D713B99D95841FA6E36F41D304E4A46A1D35C785BF8C7
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/each.DufB99sH.js
Preview:	import{a as z,t as B}from"./index.DsErXEH0.js";import{v as C}from"./scheduler.ErneftFr.js";function G(e){return(e==null?void 0:e.length)!==void 0?e:Array.from(e)}function H(e,f){e.d(1),f.delete(e.key)}function D(e,f){z(e,1,1,()=>{f.delete(e.key)})}function I(e,f){e.f(),D(e,f)}function J(e,f,x,S,k,g,o,A,p,j,a,q){let i=e.length,c=g.length,d=i;const u={};for(;d--;)u[e[d].key]=d;const h=[],w=new Map,y=new Map,_=[];for(d=c;d--;){const n=q(k,g,d),s=x(n);let t=o.get(s);t?S&&_.push(()=>t.p(n,f)):(t=j(s,n),t.c()),w.set(s,h[d]=t),s in u&&y.set(s,Math.abs(d-u[s]))}const v=new Set,M=new Set;function m(n){B(n,1),n.m(A,a),o.set(n.key,n),a=n.first,c--}for(;i&&c;){const n=h[c-1],s=e[i-1],t=n.key,l=s.key;n===s?(a=n.first,i--,c--):w.has(l)?!o.has(t)\|\|v.has(t)?m(n):M.has(l)?i--:y.get(t)>y.get(l)?(M.add(t),m(n)):(v.add(l),i--):(p(s,o),i--)}for(;i--;){const n=e[i];w.has(n.key)\|\|p(n,o)}for(;c;)m(h[c-1]);return C(_),h}export{H as d,G as e,I as f,D as o,J as u};.

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	41
Entropy (8bit):	4.598541870989699
Encrypted:	false
SSDEEP:	3:XPYPjXoAMCDUgav:/YrXoAMnv
MD5:	9B5FE174DFCDFA2C82DCC04EB1AE8C9C
SHA1:	3EF4867300ABBAD621EFBCADF9099DA38E299D8D
SHA-256:	AC88656FA63B15D336D18B1E5208AAD13753AC942BAF92F8CBEB0A24E819E8D9
SHA-512:	EEC687BFFCAE5B862896428FEB62613A51F0BF8B8BFC450548AC49DFBF09010FC7C57F44769DD5B5A867D4EAC48DD308685BD7E93BFA2AE64913BF3706558FBD
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/Header.DPacrRi1.css
Preview:	.placeholder.svelte-6nfr06{height:143px}.

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62636)
Category:	downloaded
Size (bytes):	62689
Entropy (8bit):	5.2073040240168345
Encrypted:	false
SSDEEP:	768:om3mrkvlrDsbbJcmxhsmOs0JR7sPwBchRmOdcCUVdLME58CObWa4YctGxkz49OZ8:tszOIQ5rhwRixdC1v4mfTRNWc0gQR0Yc
MD5:	F658EB6D20576439C63D08FCDB198362
SHA1:	AB09EBC5EA2567279AA20EA2E9961BDA57DBE248
SHA-256:	1E54AFBE047523E2F668D479A22E86552A6F9743825A6D741972D72685D7EA1D
SHA-512:	42C4007675756742981EBAC7D9F4E03C09D1B8BD6D4E7F3341BD4FC692C7BEC468CF71CDF2B947C9798974BF94CC947C30C384A1D02F029A3DDB5F6BD911430A
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cx/hp-viewer/desktop_1.11.170.modern.js
Preview:	!function(){"use strict";const e=["finance.yahoo.com","news.yahoo.com","sports.yahoo.com"],t=new RegExp(/rs="([^"]*)"/),i={lmsid:"lmsid",lpstaid:"lpstaid",lu:"lu",pct:"pageContentType",pd:"pageDesign",pl:"pl",pt:"pageType",revsp:"revsp",ver:"appName"},s=["ctopid","hashtag","wiki_topics"],n=["defaultLREC","lighthouse","spotlight"],o=["pd","pt","pct","lmsid","lpstaid","hashtag","pstaid"],a={att:"yhp",autos:"yautos",entertainment:"yent",finance:"yfin",fp:"yhp",gma:"ynews",lifestyle:"ylife",movies:"ymov",music:"yent",news:"ynews",sports:"ysports",style:"ylife",tech:"ytech"},r={hashtag:!0,lang:!0,region:!0,site:!0,spaceid:!0},c=["lmsid","lpstaid","pt","pd","ver","pct"],d=["sda-COMMENTSWFPAD-iframe"];const l=e=>new Promise((t=>setTimeout(t,e))),h=(e,{className:t,id:i,tagName:s})=>{if(e)return t&&!e.classList.contains(t)\|\|i&&i!==e.id\|\|s&&e.tagName!==s?h(e.parentElement,{className:t,id:i,tagName:s}):e},w=t=>{if(!t\|\|t.startsWith("/"))return t;const{hostname:i,pathname:s}=new URL(t);if(e.include

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (6231)
Category:	downloaded
Size (bytes):	6232
Entropy (8bit):	5.462761478279509
Encrypted:	false
SSDEEP:	192:HIc+wgzzhv4WllJlRp8P+SLyqgJko0N3OPNj1a:HIc+wgzzhw6eGSLdo0Yva
MD5:	5F9B12433AD92CF96AEC4004B71D4781
SHA1:	6348B7EAC08E6BEC556F3BBC9DADE9F157310B45
SHA-256:	96EB839E2F1BC4FFBD1DDC6D82F28F72AD69D2F575F14B75853829FCC3E39DEC
SHA-512:	23EA1FB3F29E60C30068AE0DB249FD366238BBB8BFB1859093D733BFDC728269FC637FC18E12C7BA8881EFE43D5B29262E524F03E4F143C212202A31A9BF7062
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/MenuSurface.DcbYJDWR.js
Preview:	import{s as ae,D as I,P as ne,e as S,b as se,d as E,f as P,j as oe,i as A,T as d,p as V,L as q,k as O,l as G,Q,_ as ie,G as ue,R as fe,w as F,I as me,c as Y,u as Z,g as y,a as w,t as ce,h as ge}from"./scheduler.ErneftFr.js";import{S as de,i as he,c as H,b as J,m as K,t as M,a as b,d as U,g as re,e as _e}from"./index.DsErXEH0.js";import{g as Ce,a as Me}from"./spread.CgU5AtxT.js";import{B as Ne}from"./Button.C10y2YT5.js";import{D as be}from"./Dialog.Cq9rVjnc.js";const ke=e=>({}),W=e=>({});function Ve(e){let l;const a=e[24].default,n=Y(a,e,e[26],null);return{c(){n&&n.c()},l(t){n&&n.l(t)},m(t,s){n&&n.m(t,s),l=!0},p(t,s){n&&n.p&&(!l\|\|s&67108864)&&Z(n,a,t,t[26],l?w(a,t[26],s,null):y(t[26]),null)},i(t){l\|\|(M(n,t),l=!0)},o(t){b(n,t),l=!1},d(t){n&&n.d(t)}}}function X(e){let l;const a=e[24].content,n=Y(a,e,e[26],W),t=n\|\|Ae();return{c(){t&&t.c()},l(s){t&&t.l(s)},m(s,f){t&&t.m(s,f),l=!0},p(s,f){n&&n.p&&(!l\|\|f&67108864)&&Z(n,a,s,s[26],l?w(a,s[26],f,ke):y(s[26]),W)},i(s){l\|\|(M(t,s),l=!0)},o(s){b(t,s

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12433), with no line terminators
Category:	downloaded
Size (bytes):	12433
Entropy (8bit):	5.202182615598781
Encrypted:	false
SSDEEP:	384:3cmi6DAQ/946S4Y4+A09psvNYh8EhatYwQ:MTYxRY46psvNYh+Q
MD5:	9EC69A2055C595F415EADE096A476B0D
SHA1:	472B77037C2765E09666F43CCFBC01EF40783571
SHA-256:	4F06D94CB6038F42F5C8D59D369AB21C3C54643A544B0824582CB00EBB61DFB8
SHA-512:	EC87EFA9D26546AD67D9CB65932AF47D8FBA77D0298E1567E2A11DB679BE045C761C3A6ADC131CC44BDBC7D95C522982FA9EE9F221155BB1FD2E38864E25EC3D
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-toggle-1.15.4-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-toggle",[],t):"object"==typeof exports?exports["wafer-toggle"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-toggle"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var o=r[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}func

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.0241026136709444
Encrypted:	false
SSDEEP:	3:CUmExltxlNXE:JQ
MD5:	B4682377DDFBE4E7DABFDDB2E543E842
SHA1:	328E472721A93345801ED5533240EAC2D1F8498C
SHA-256:	6D8BA81D1B60A18707722A1F2B62DAD48A6ACCED95A1933F49A68B5016620B93
SHA-512:	202612457D9042FE853DAAB3DDCC1F0F960C5FFDBE8462FA435713E4D1D85FF0C3F197DAF8DBA15BDA9F5266D7E1F9ECAEEE045CBC156A4892D2F931FE6FA1BB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........2.;

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	42512
Entropy (8bit):	7.976877763292284
Encrypted:	false
SSDEEP:	768:iYyLnTgtYpA9tCgEUnQkq1AM83bsvEjWR5J+knQEWLUt2dqQSY6uo8Tc:ivctYyLE8q1AMabsJjQEWwweY678Y
MD5:	EF0DB41B665EE2F45EC37B26F48AD267
SHA1:	733954AAED65DBB9198996ACA69E74BFA657862F
SHA-256:	FCF719F086B3A627339A520D89903123F4D949D3F3882B6957912AC129978438
SHA-512:	2961E1BDB8AF0127C7ABD00A1165284377AB6488169991F5E25AD70CA1AE53777977F59811FABD8850537B18A302FB376FE698D208C2FC9DE8128BBD34B9660D
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/.dZjwniw6OupEJN8hP1Dng--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/1fe5be50-ed54-11ee-bfee-5aba1490b416.cf.webp
Preview:	RIFF....WEBPVP8X.... .........ICCPH......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.747851312870916
Encrypted:	false
SSDEEP:	3:JSx/FEuag5Ne5ZGfjnVMJFJXRzv:O+g5NFrni5
MD5:	DFE9927CA509A0AE71CC9C24BE9CC489
SHA1:	0493F8AA945F65FFE21A379F73A8761040812593
SHA-256:	2B19B165FFA8C61F6E3E89734921256B2CD2F162C851770BCDB708B9708A271D
SHA-512:	2568E1E9B832E8E68C9AE37D132091EA1D82A0DC73CF3B68D7201A39507BC687A2977CFCD6660E21A5C219B0ACD4B277F55799937764AC17564E1105156E7E80
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uc/finance/nimbus/_app/immutable/entry/start.Df8dWLea.js
Preview:	import{c as a}from"../chunks/entry.CqbZzrN3.js";export{a as start};.

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5750
Entropy (8bit):	7.574189703556205
Encrypted:	false
SSDEEP:	96:XAQDpP5FfYqqeTqQz1S2rO7lPaAm+MilgzxSAuKwNclOs+am:5pB6BPQpS2r4SD5rK
MD5:	14E5156BFC61CD19EBFD7532036DDCD7
SHA1:	A8A21310ADEDB1F15A3BE0EE799E21767B4D2DDF
SHA-256:	A4ECE14163590F39CBDE3774232F05864BC6037C6362E2C511F9D9486E328A3E
SHA-512:	C7970B502068149206A1AD057F2322786DE847380256270F6B8BE64D368C79B0D2EFC690EB8D04738637AE08B31785C138EC06B8B203545146A249F1EB8F0E3B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X............;....PLTE..............................................................................................................................................................................-..*...9tRNS....;..g.........r^.mC>.H.w.2.6..L.b.\|!.Y...T)%P....\..8...>IDATx.........................................................................`..@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU.=8........m.UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa........._.AUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU....... ..FPUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU...@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU.=8........m.UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa............................\b..z...(..."..h..G....&~......V.N..E'...I yg.pq.aR.....6.,..\|...A....%..X..5....$u..u....Pl...s...v.n8..]..]. b.;.."v.x....]....U.=0.+Dl....B...`.1DlZ...y.....

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3666), with no line terminators
Category:	downloaded
Size (bytes):	3666
Entropy (8bit):	5.122712688435668
Encrypted:	false
SSDEEP:	96:3hqjg8q1Mrsq1YrAw1Ld6UeCiyhq2WeptkcIL:3aumsu6AaLTc2en
MD5:	9FBA2531FFA6CB0B4D3D34C56C295495
SHA1:	0EC8BCC9D8F8360CB279D78F88BBEE001AB95D30
SHA-256:	C6D2343A147111E4F3881E468FACC72DA4582C6AAEFF475D3371DF3FA2576BEE
SHA-512:	BB6DC985ED5E343DB802BF07F7AF4A92BCB6788AA1F4ACBF61BB49DCFB2926C1E6CF6B1BC31544CBB98BD22D3688D2B220992CD9BED1F2E4FB43ADE8AE33F78E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-bind-1.1.3-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-bind",[],t):"object"==typeof exports?exports["wafer-bind"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-bind"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(o){if(r[o])return r[o].exports;var n=r[o]={i:o,l:!1,exports:{}};return e[o].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,o){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:o})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 362x362, components 3
Category:	downloaded
Size (bytes):	4654
Entropy (8bit):	7.60581534032708
Encrypted:	false
SSDEEP:	96:WN0Cqu0/P2yxZpo3MGmMEda07hEyFyUJT/5ua/58HnJF5d3G/yIY:Wf4PBZo3MGmMEXhEAz56jn3G/M
MD5:	DFAF002CA13689235F064A5DCFFF1A64
SHA1:	2BB1A54BE7D36AAA5A25C4ACB7CFED5102A70A3F
SHA-256:	D97F11019F99C29D9715C1A37385197D6ED762216E474FADFCD93370E30B32D1
SHA-512:	89C679DDD0D93361E84CA6ADC1D82178371B96CA97B9262F4DA8890FBA0CE575D480CF53B73A8CBA845B3B4F39D00095724086ED5DABEED6B5CCAEB8BDBEB7D7
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn2.gstatic.com/shopping?q=tbn:ANd9GcTVKUv-cVxAqiHVQriwT7PK5I-gaJhus9Apsar1fguePsLMFqY&usqp=CAI
Preview:	......JFIF..................................................(( ..%...!1!%)+.....383-7(-.0...........+..%--------------------------------------------------......j.j..".......................................1........................!1.A.."Qq2a.B..#3R.b.................................$.......................!1.A.."BQa.............?...Q@................................T.Q@................................T.Q@................................T.Q@.......F....4h...F....4h................".(.B.(........`...6.l................4(.(......E@P..HP......pe.....{...t..zcN.Eo.f%....F... . .&.(..........9.;....t.7.;...^g.?..:8.{......^,.@98.B...[We...... .........!...:.R&#.-.f6.v.9..ne..z..q.....Z.5..S.{j.^.....b....]......Rbb_Y..e......7..l.K.3.^...~.9.\|..X.:.X5..............d...b..O..R.....z..um..Y..^/....F....7vQ..7X....z5.1.^...d..g...R.Uya>.O...P.pr......v,.......6.gY..O..]...n...].%....B.<.......-..y.6..K..qm...*s.W._N..s[#>G..r(...]3w=...g>...[.Y....;....

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	15735
Entropy (8bit):	5.527192991420924
Encrypted:	false
SSDEEP:	384:ex0c8l7EQpEJEHaEpYbErIKE5IrEXKVE53UEb0vA1CEyETEapE9pEgpE7pEu1:ex0c8l7EQpEJE6EgEnEcEEESE/CEyETH
MD5:	8F77A939BE5759FD5F15CBAABA3D42CA
SHA1:	579092CBE3C2A536035C2FA23E9A71B2D27B2EDF
SHA-256:	929E9A0DB24ED530D4B64B0AB51EE099BF59C20AFD882446CC2968FAB213E981
SHA-512:	B884E4CF29A78CB1EF654E89C291B0AE5D8AAA09CDEFD150EB85325E2BCE110F0F927797E5388E3A2B7968EA61720E5FD2F756224BD648A6E20EEC5645F75FFA
Malicious:	false
Reputation:	low
Preview:	{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-games.GamesMini.atomic.ltr.1351353cf8129012a686e519608812d5.min.css","name":"react-wafer-games.GamesMini.atomic"},{"location":"top","value":"/aaq/fp/css/react-wafer-games.games-mini.cdd5050ba6288df47182412e30e482a4.css","name":"react-wafer-games.games-mini"}],"js":[{"location":"bottom","value":"/aaq/wf/wf-core-1.65.0-modern.js","name":"wafer-core","version":"1.65.0"},{"location":"bottom","value":"/aaq/wf/wf-fetch-1.19.1-modern.js","name":"wafer-fetch","version":"1.19.1"},{"location":"bottom","value":"/aaq/wf/wf-tabs-1.12.6-modern.js","name":"wafer-tabs","version":"1.12.6"},{"location":"bottom","value":"/aaq/wf/wf-scrollview-2.22.6-modern.js","name":"wafer-scrollview","version":"2.22.6"},{"location":"bottom","value":"/aaq/wf/wf-image-1.4.0-modern.js","name":"wafer-image","version":"1.4.0"},{"location":"bottom","

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10263)
Category:	downloaded
Size (bytes):	10264
Entropy (8bit):	5.491067531641635
Encrypted:	false
SSDEEP:	192:5HEGihyYSnF4PXtZl1xl+OTuptaTdqQSEyWtv14QbNsau3EpqpDY6DxHp+JwLUob:2GihyYSnyPvl0OTuWBjvyWfraaMEIHU4
MD5:	75127C00BBDAF6FE6014A03D886B2D68
SHA1:	231F75BC0674893B0B9C1484363C612F3AE745BE
SHA-256:	FF5ED542665893261E4270AD7E646D1A28A4B21DB2AB6FCD0304DC4E9A119050
SHA-512:	ECEDC8AA52FE4B049A41728AF15F22B5F1A4AC453E67ED4741979830569E605E3BD05FA1E51027CE75E7D87BCFA36E4AA73FCABCEA3512119FEFAA958CD906CC
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/Layout.CGrK90Fu.js
Preview:	import{s as we,e as q,d as z,f as L,i as h,p as y,k as D,y as Ie,b as O,t as Ce,j as N,h as Ee,l as C,m as Oe,$ as Ne,c as G,M as E,u as Z,g as J,a as K,Z as qe,q as re,a2 as oe,w as fe}from"./scheduler.ErneftFr.js";import{S as Ae,i as Se,t as _,g as Q,e as U,a as m,j as ce,c as B,b as V,m as F,d as R}from"./index.DsErXEH0.js";import{a as ze,g as ne,r as Le,t as ue,n as De}from"./commonUtil.Bb2Cnbsk.js";import{F as Pe}from"./Footer.D9hL8FKo.js";import{H as Te}from"./Header.DBmnIB1k.js";import{L as Me}from"./Lazy.CSkNu4FG.js";import{e as _e}from"./each.DufB99sH.js";import{B as Be}from"./Button.C10y2YT5.js";import{C as Fe}from"./check.21reEWCG.js";import{C as Re}from"./close.C3ug6nNR.js";import{I as ie}from"./Icon.CDBsrPKz.js";import{a as me}from"./index.Cq9lJqQB.js";const Ve='<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2m1 15h-2v-2h2zm0-4h-2V7h2z"/></svg>',je='<svg xmlns="http://www.w3.org/2000/svg"

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 15, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	109
Entropy (8bit):	4.946880794698882
Encrypted:	false
SSDEEP:	3:yionv//thPlmwtmllC/sRwJYrAaDt/s49/H1p:6v/lhPjUK/sSWsQGidp
MD5:	8C7C476AC28727B21040351FA3006C59
SHA1:	D844A6F03DF6EB714C1D7E76EA6D4306D0D39354
SHA-256:	5C99DC27D465B2F8425DAEE704098E7335A880B4C757BFDDED09721B9054D64D
SHA-512:	8B5F861280B1455AC08FD6D55F464F2297F973DFB4988D0B30E2F12E6B446417AC6C037CC5A6A1A5FF5BA07D54249B9141B0F97A87DFCEAD2A1899416952F2F2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............1.......PLTE......U\|.l....tRNS...0J....IDAT..c`...X1Flb....I..zn......IEND.B`.

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	451
Entropy (8bit):	5.435412744879544
Encrypted:	false
SSDEEP:	12:cwN06gWjU0Pt77MATU1HE7yGMN/77MA6LTU1HEF:cargH014AY1u/Mh4A6LY1k
MD5:	B2C4B0C14D5C04F3006DB5B5D59DB745
SHA1:	CD3003AAA6E12A188CACD6107345F627BD56D4B5
SHA-256:	09358B1D31B1A2FF6BABB9BA95509F582C115E5252CAE2D9C3BE7C81F98B70BD
SHA-512:	E3B37DA979FDEB8E50AFC34E51F7C999ACF16954F4330E164A11EB220DBFBF2C58A1D36F59EFDC56DBE8377F0F6E874083463A7148CBE332C43CA532D7ED8206
Malicious:	false
Reputation:	low
URL:	https://rtb0.doubleverify.com/verify.js?ctx=20006197&cmp=31411294&sid=5071708&plc=388507207&crt=212200008&advid=3876771&adsrv=1&mon=1&blk=1&dvp_cawf=crtwrp&cm360cw=1&unit=300x600&prr=1&turl=https://www.yahoo.com/&aucmp=21039716546&auevent=ABAjH0i0yoUwlkeVmzcj-GmykGOd&autt=1&ppid=103&aucrtv=553954458&auorder=1015903071&pltfrm=1&ausite=2328226494&auxch=1&aufilter1=1982032&c1=1982032&adid=&app=&dup=&gmnpo=&isdvvid=&supplySource=&tagtype=&aUrlD=0&brid=3&bridua=3&brver=117.0.0.0&brh=1&vavbkt=&lvvn=28&fcifrms=19&winh=600&winw=300&chro=1&noc=4&wouh=984&wouw=1280&htmlmsging=1&refD=1&scah=984&scaw=1280&jsver=5684&uid=1711672942402597&srcurlD=0&ttfrms=1092&num=6&dvp_isOnHead=0&flvr=1&ver=5684&jsCallback=__verify_callback_1711672942402597&jsTagObjCallback=__tagObject_callback_1711672942402597&ssl=1&prndr=1&m1=15&dvp_rcp=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=244417929409.6999&ee_dp_sukv=244417929409.6999&dvp_tukv=66112681563.639656&ee_dp_tukv=66112681563.639656&ee_dp_dvtpurl=https%3A%2F%2Fcdn.doubleverify.com%2Fdvbm.js&dvp_strhd=0.5&dvpx_strhd=0.5&eparams=DC4FC%3Dl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETauU2%3F4r92%3A%3Fl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETar9EEADTbpTauTau_ag%60%60376g%607572335_6_6ce_h%60c%60fa6h%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3E&referrer=https%3A%2F%2F02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html
Preview:	..try{__tagObject_callback_1711672942402597({ImpressionID:"e3c57e9b511b4b489b89376c48fb1875", ServerPublicDns:"rtbc-ue1.doubleverify.com"});}catch(e){}.try{$dvbs.pubSub.publish('BeforeDecisionRender', "e3c57e9b511b4b489b89376c48fb1875");}catch(e){}.try{__verify_callback_1711672942402597({.ResultID:2,.Passback:"",.AdWidth:300,.AdHeight:600});}catch(e){}.try{$dvbs.pubSub.publish('AfterDecisionRender', "e3c57e9b511b4b489b89376c48fb1875");}catch(e){}.

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1490)
Category:	downloaded
Size (bytes):	1491
Entropy (8bit):	4.856848060786041
Encrypted:	false
SSDEEP:	24:nHuYYpcVzJRWaV6oMSjS6V6hrUmpNV696j+1KLVwF/Jt+0eWKU1:n1lRz6ol/6/H698+1KxytjeA1
MD5:	EF8632C1FDBCB1EEC71B165E483A9E3B
SHA1:	300822042D4E9ADF09D832D4A953E240772762CC
SHA-256:	5388AA793CD53DDC2E0BCD110841D8E3E4A446FD98EEF8F5E633274360A149A9
SHA-512:	CF2ECC14D1A26CE0690087FAF30DA560BAABDF8E13CC288A5C482FA1BB44D4F339E7678A2D1331769ACCB6BE3ACF721E5C27FC3B10B48DAB1B0CCEE9EC36A30B
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/TrendingTopics.Cy65-PUy.css
Preview:	.news-stream.svelte-rodzre{grid-column:1/span 8;text-align:left;min-height:20rem;height:-moz-fit-content;height:fit-content}.news-stream.svelte-rodzre .thumb,.news-stream.svelte-rodzre .thumb img{width:100%}.holder.svelte-rodzre{min-height:20rem;display:flex;align-items:center;justify-content:center;flex-direction:column}.loader-container.svelte-rodzre{width:100%;display:flex;justify-content:center;gap:var(--space-4)}.loader-content.svelte-rodzre{width:100%;display:flex;flex-direction:column;align-items:flex-start;justify-content:center;margin-bottom:var(--space-4);gap:var(--space-1)}.module-news-stream.svelte-1idy7to{container-type:inline-size}.stream-container.svelte-1idy7to{--grid-columns:12;--page-row-gap:var(--space-8);width:100%;display:grid;grid-template-columns:repeat(var(--grid-columns),1fr);gap:var(--page-row-gap) var(--layout-gutter);text-align:left;min-height:20rem;height:-moz-fit-content;height:fit-content;margin-bottom:var(--space-8)}.stream-col-2.svelte-1idy7to{grid-colu

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZgYOPgAB7vmzSgAj&gpp=DBAA&gpp_sid=-1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13714), with no line terminators
Category:	downloaded
Size (bytes):	13714
Entropy (8bit):	5.23465777657958
Encrypted:	false
SSDEEP:	384:3oEREi6qrvGmlR1IaKJoCmXK6Tb8JIFbXv00O8jp4f3tjf+88uLUH:4ER1XDlR1xVNXK6Tb8JknODjm88u4H
MD5:	94D07DAA349C254B35FFCDA6E54CC754
SHA1:	C46D6650E0F01C7F2977182F8FE5D5A07ABA9EE5
SHA-256:	0291E42C6C243B4177E0331B6E3692A8E03E29A39852790CE81604A998872C68
SHA-512:	8B3FEB7625D38BD50F22B838A14868D15EEBE1DFE6715A422B777A267585A1BAF9DE5982A29089C6BB7C0FC3DEAE8CE8B57F1BE851F78F1EECC9B625F08917CB
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-form-1.34.5-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-form",[],t):"object"==typeof exports?exports["wafer-form"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-form"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(n[r])return n[r].exports;var i=n[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var r=window.webpackJsonpwafer_wafers_wafer_form;window.webpackJsonpwafer_wafers_wafer_form=function(t,n,o){for(var a,s,u=0,l=[];u<t.length;u++)s=t[u],i[s]&&l.push(i[s][0]),i[s]=0;for(a in n)Object.prototype.hasOwnProperty.call(n,a)&&(e[a]=n[a]);for(r&&r(t,n,o);l.length;)l.shift()()};var n={},i={1:0,2:0};return t.e=function(e){function r(){s.onerror=s.onload=null,clearTimeout(u);var t=i[e];0!==t&&(t&&t[1](new Error("Loading chunk "+e+" failed.")),i[e]=void 0)}var n=i[e];if(0===n)return new Promise(function(

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1054)
Category:	downloaded
Size (bytes):	2689
Entropy (8bit):	5.40021492400263
Encrypted:	false
SSDEEP:	48:Otg7xBo1IN7Qa69Fa9FKYPCfmY/bZyf2jcju8m5I0zRHkFRvEJG:/N7QaaiC+Y/jcju8WhRHMxEJG
MD5:	9EF158292B617D358506529B02C73629
SHA1:	843852D8ADDBF1A7F96C5607179E1C9423ED8A4C
SHA-256:	3164DB7EF9EFC7121CE85192340A653C6CB87E34CAA05849C8FD47B7872F9FC5
SHA-512:	D4B0E6E8900043C9C4EE010ABFD00A51D891FE4B4F424418DC1A75075E3DF931D0558BFB3E983190079EDDD0BF11D7604E70CEAF119351690812EBC21D7EAEB8
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240327/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else null!=b&&e.push(a+(""===b?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);0<=v&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&"22"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	6842
Entropy (8bit):	5.091243302502087
Encrypted:	false
SSDEEP:	192:KLUErh9Xatgq/ILBYce7nalVMaFnYI2mk7qs/ztSQ+P:KLnQc3fY0
MD5:	0C590D2321C6F32C083F27A1B61D5C00
SHA1:	6A380272DB85D0636A75FEB3E54C044FD1859417
SHA-256:	B637AB523304DF220A563CAB5789C3D44A806DD3EAFA84E37BE632D2B81B29C5
SHA-512:	05069972CE7E84EA8A3735732F36D4E2D2958B797E28F478E3F49A053840977E666789CC78965672CE5E04D932D30D7BD75D7C66658E11D8DCF00A7ECD056B81
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/13461938776524376467/index.html?ev=01_250
Preview:	<!DOCTYPE html>....<html lang="en">..<head>...<meta charset="utf-8">...<meta http-equiv="Content-Type" content="text/html; charset=utf-8">....<meta name="ad.size" content="width=300,height=600">...<meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no, maximum-scale=1.0">...<title>2024.Blazer EV..CW.LS.None.Exterior Design.Spring Sales Acceleration.H5S.US.ENG.v1.300x600.NA</title>.....<script src="https://cdnjs.cloudflare.com/ajax/libs/gsap/1.19.0/TweenMax.min.js"></script>.....<script src="script.js"></script>...<link href="styles.css" rel="stylesheet" type="text/css">.....<script type="text/javascript">.. var clickTag = "https://www.chevrolet.com/electric/blazer-ev?cmp=OLA_DISPLAY_%ebuy!;%epid!;%eaid!;_%ecid!";.. ..var clickTag1 = "https://www.chevrolet.com/electric/blazer-ev?cmp=OLA_DISPLAY_%ebuy!;%epid!;%eaid!;_%ecid!";.. </script>..<script type="text/javascript">. . (function() {. var MAX_URL_PARAM_LENGTH = 34;. var

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10047), with no line terminators
Category:	downloaded
Size (bytes):	10047
Entropy (8bit):	5.395265528746638
Encrypted:	false
SSDEEP:	192:eluv6qz171WxJIvNzJChHtvZcvfS2UeRJAiSND7xZF7h:PvaxJIvNzgejlePxZF7h
MD5:	4D3AAD6863E45523C63427201C12F89F
SHA1:	2386578EE440F4BA32BBC4AAE716D1F2BBA43E74
SHA-256:	5257E45BAC857687CF81BDD6B03E4B0F111B296B1A95431EB26BE8EF6370D54C
SHA-512:	A29A5AAC67FAFCBD1E1A49B1B069A1FAA5403324560297ADC9099C0D12B792D0AC5887E5B21D54D8A2FE65C7FB93D4F314774396208A9A62C96FF0280131CC1E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/ms/trendingNow.yhome-atomic.66d98e4cd448c48e1f6c4e2e2d0a34a6.min.css
Preview:	#atomic .Ai$c${align-items:center}#atomic .Bd$n$,.Bd$n${border:none}#atomic .Bdc$\$srchFujiDirtySeagull${border-color:#e0e4e9;border-color:var(--dirty-seagull,#e0e4e9)}#atomic .Bdc$t${border-color:transparent}#atomic .Bdendc$\#0057b8$\:\:b::before{border-right-color:#0057b8}#atomic .Bdendc$\$srchFujiHulkPants$\:\:b::before{border-right-color:#7e1fff;border-right-color:var(--hulk-pants,#7e1fff)}#atomic .Bdbc$\#5015b0${border-bottom-color:#5015b0}.srchTGBlackFri .srchTGBlackFri_Bdbc$\#000000${border-bottom-color:#000!important}.srchTGCyberMon .srchTGCyberMon_Bdbc$\#00873c${border-bottom-color:#00873c!important}#atomic .Bdstartc$\#7e1fff${border-left-color:#7e1fff}.srchTGBlackFri .srchTGBlackFri_Bdstartc$\#2c363f${border-left-color:#2c363f!important}.srchTGCyberMon .srchTGCyberMon_Bdstartc$\#009c94${border-left-color:#009c94!important}#atomic .Bds$s${border-style:solid}#atomic .Bdends$s$\:\:b::before{border-right-style:solid}#atomic .Bdw$1px${border-width:1

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 580x326, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	57894
Entropy (8bit):	7.996422134388532
Encrypted:	true
SSDEEP:	1536:ehYBTJ+0Gtm7CqFmVTZIwhu4M1UkgYMR3cjz:b+0GuQVlfhu4AlgzR3cjz
MD5:	D461F1473597A74540E64127232FEF78
SHA1:	AA3A6C22FECD140DAB8491D15A2914FB4DFB715A
SHA-256:	A9083A67765C16E3650E0B566532FF8A576165BEC2110B33BDD0BFD787665E8D
SHA-512:	7697444960A0492768639163377C742C7D3C2962E25823D35453C84C155274405A4D8586203E5AE393445AB9DE1CD1C762395565BC3359ABA4C448B22AC1EF4C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/w38kStNbz5wyIYECd.Bg4g--~B/Zmk9c3RyaW07aD0zMjY7dz01ODA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-03/6cfc9410-ed46-11ee-ae7e-dfd507299c94.cf.webp
Preview:	RIFF....WEBPVP8 .........D.F.>q,.F$...5.\....ln(.Bx..........y.._p.$./..{......\|.....@...Z.d.....7................V..=A..........._.o._........?p..\|..................\|.....O~=.?./U.C...w..l?.._..._..+......._...}.>..O......?._...}.=................{..S..../....................?.z......?.............[............t\.e,.r.g^3K.v<.[....F./,.%\|...,..,...... A6i.....l....y..A..U.!y.8.$.J5.?.^/....=....{r...%S.7g..N..F.yjx.]^..C..\|.XS.K.D..+b5..f!..U..X...cS.k..zf.IM.Gl.....T.:.Z.'.......\.C'...u.6...9....Z...n!...3.G..4F...qo:o.7]Q.Z6...^..H/.dU......I...\|....R...W.J.%...7....K.L..O.T.........K.j..W.VRW..~..Nm..W,N+_'..Lj.?..DY.k...$.+.,w.6"_...Th!.h.5..\|.\|.I..Z..iV......ts.........7,&..:.. ._ .Eul.\|..b.h.~....J...../<..[.^..%n$l.}.....>U..4I.\.C3I.$....C...l.Z........I.H.......+c(T...)BnQ.?.m.(..q...{.....\......vw...~....M.Q.x.......r.?...G..3.$3)u..zb......!8.OhXG.%g..t.m`rzq..g..:..*<h..\5..9.O.u......~..$'...MB.....%.....(.......8................a

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11234)
Category:	downloaded
Size (bytes):	11235
Entropy (8bit):	5.210007446933706
Encrypted:	false
SSDEEP:	192:kkQq628Ch7oVunjY33W5ZWeU5E0P3v1Xq/lUdHrOEAsMoMJsyG+c/Qv0VIr:2V28ChEv36Ze601Xq/lUdHqlszMJsysu
MD5:	8DC5EEE3C30E547E3DB2AE39D7B03759
SHA1:	E80B2D8FEE6BE3B0AF1085AF99E790CB889BA444
SHA-256:	139C6D4BDE6355DE22E3F0CB28758333F6410700C2BEB045DE4858545CF376C3
SHA-512:	8BDBAFB435AD8347A5CFE99E6C284B5C2457ECE87C478FB2062DA8C3F3E217E42852F5E3AD4C7EBFFE7A9A98BB26DD920F50F3E281AE6BF66C52E0E9A807F3B5
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uc/finance/nimbus/_app/immutable/chunks/scheduler.ErneftFr.js
Preview:	var U=Object.defineProperty;var J=(t,e,n)=>e in t?U(t,e,{enumerable:!0,configurable:!0,writable:!0,value:n}):t[e]=n;var f=(t,e,n)=>(J(t,typeof e!="symbol"?e+"":e,n),n);function S(){}const wt=t=>t;function K(t,e){for(const n in e)t[n]=e[n];return t}function Q(t){return t()}function Et(){return Object.create(null)}function V(t){t.forEach(Q)}function X(t){return typeof t=="function"}function vt(t,e){return t!=t?e==e:t!==e\|\|t&&typeof t=="object"\|\|typeof t=="function"}let p;function D(t,e){return t===e?!0:(p\|\|(p=document.createElement("a")),p.href=e,t===p.href)}function j(t){return t.split(",").map(e=>e.trim().split(" ").filter(Boolean))}function Tt(t,e){const n=j(t.srcset),i=j(e\|\|"");return i.length===n.length&&i.every(([s,c],r)=>c===n[r][1]&&(D(n[r][0],s)\|\|D(s,n[r][0])))}function Nt(t){return Object.keys(t).length===0}function P(t,...e){if(t==null){for(const i of e)i(void 0);return S}const n=t.subscribe(...e);return n.unsubscribe?()=>n.unsubscribe():n}function kt(t){let e;return P(t,n=>e=

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6205
Entropy (8bit):	5.078571235734683
Encrypted:	false
SSDEEP:	96:kLkOIwGohNh7izivNhRM0yfNhVzVqx+DNhN4Y/baNNhs9i1ONha/Hv8NhQBItGNd:kLrLtZqlvsSHQzh
MD5:	5522674BE89358F316230BCD5C86CE68
SHA1:	00FEB855FB509E2C63B84F08E80BC65FC2C64F2F
SHA-256:	F223E1238B2787481D6025C60A393E7C18533BF80A8493B41B16532B9566C4B3
SHA-512:	9A4EE4A50042780125FF25B7ABB4BEA179A1D23D5D033B24ECCAF2404E6CD11604FC186F73478E040FD937EFCFAB53389B16ED8EDCD3531F194B1E7B9E781487
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/ae/sports/fonts/2017/yahoosans2.css
Preview:	/..This font software is the property of Commercial Type....You may not modify the font software, use it on another website, or install it on a computer....License information is available at http://commercialtype.com/eula..For more information please visit Commercial Type at http://commercialtype.com or email us at info[at]commercialtype.com...Copyright (C) 2016 Schwartzco Inc..../....YahooSans-ExtraLight {. font-family: "Yahoo Sans" !important;. font-weight: 200 !important;. font-style: normal !important;. font-stretch: normal !important;.}...YahooSans-Light {. font-family: "Yahoo Sans" !important;. font-weight: 300 !important;. font-style: normal !important;. font-stretch: normal !important;.}...YahooSans-Regular {. font-family: "Yahoo Sans" !important;. font-weight: 400 !important;. font-style: normal !important;. font-stretch: normal !important;.}...YahooSans-Italic {. font-family: "Yahoo Sans" !important;. font-weight: 400 !important;.

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	4.875619381229982
Encrypted:	false
SSDEEP:	3:aEYE9ct32CbP5CiM0EYCUdKFRKVvRvXpvQQHSRkLFSKP4kYej432CbFSKPl:aEYE9S5Cv9YCUde0vRvXptygRA5Rl
MD5:	A5EF55315256AD2C3FF918A06F48F42E
SHA1:	75E165E483E489791C1A062DC60E945F9D8F26A1
SHA-256:	3016EE9E02F913A7CAC4C4FDC28C5552AFEA273EE310D94F7520EB47D50669F9
SHA-512:	4E065E45F6345A2AEE2A5839B5B4E849D9D737A4062A395D778DD2123D0DE0E8A8D02AB7AD3E63B7FE1080D78A53DE5A6660D3D714C678F68584EA93FBE631D6
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/nel/css/tdv2-wafer-header.ybar.desktop.a5ef55315256ad2c3ff918a06f48f42e.css
Preview:	.ybar-dark #ybar-inner-wrap{background-image:linear-gradient(to top right,#7282fb,#755bf9,#7934f7);background-color:#7934f7}.ybar-light #ybar-inner-wrap{background-color:#fff}

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2594
Entropy (8bit):	5.282965653723158
Encrypted:	false
SSDEEP:	48:LgRnrkeYBeBgp0pxwX89kwtz86DG6cmGA0Gb0g3zovm7MdmLDUL2ULDDLBmcuAol:L8rkemQtjmm8554xJGRMt
MD5:	A2F1A79BA16C2C6C59F6AC7599F67951
SHA1:	788AE7486593FC7E688DF7663F44071924AF22EB
SHA-256:	0520037374FDAC0707396FB1DDED5143885A72C8139DD727C83CD41238CB054C
SHA-512:	C6CE6BC17E7B9FDA7592B015CCA4F5278FADE5FFD30684EBF26C5919D15BC123AB48AA531D16E714D53E1F3BA4B7FB6AE9644673116926B9A635467C603D1534
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/13461938776524376467/script.js
Preview:	var isEndFrame = false;..var looping = 0;..var tl = new TimelineLite();..var dc1 = true;..var dc2 = false;..var dc3 = false;......function loadImages(){....var assetsLoaded = 0;....adImages = [......"images/bg1.jpg",......"images/cta_over.png",......"images/model.png",......"images/headline1.png",......"images/headline2.png",......"images/headline3.png",......"images/lockout.png",......"images/disc_panel.png"....];....var assets = [];....for(var i=0; i<adImages.length; i++){......assets[i] = new Image();......assets[i].src = adImages[i];......assets[i].onload = function(){........assetsLoaded++;........if(assetsLoaded == assets.length){..........initThis();........}......}....}..}......function initThis(){.....TweenMax.set('#main_content, #frame1', {opacity:1, delay:.15});.. TweenMax.set('#disc_panel', {autoAlpha:0});...addListeners();...setElements();..}......function elemId(id) {...return document.getElementById(id);..}....function setElements(){...TweenMax.delayedCall(0.3, introF

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 693

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (1890)
Category:	downloaded
Size (bytes):	36774
Entropy (8bit):	5.516033351612314
Encrypted:	false
SSDEEP:	768:AfteYdfrzg1tTPCwhDEDKy6jP1ucu9MWi2nf17RZPZjZrVduwAyKDotJxE2mZnFl:giPC6u5Kx9cm
MD5:	6CB69919CBC522BFC1E6CED177EEE5F6
SHA1:	F3A956E6C1C76DC9DA820155970F30743AA61BC2
SHA-256:	5BD3D0DE974ED0967BF98E6FA7DAD0F2CBDB56E1E9C92678CA26D00F6DCAFC93
SHA-512:	ADE39E2CC0CA70679D50D0A55A5F3937771B1FA4889848D6261B07D9BDE5312133CC1EF9DAC2F47C45150DF408506B8A7D4B59C0F5FC732DAEE458FC39DAEC87
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/mysidia/6cb69919cbc522bfc1e6ced177eee5f6.js?tag=mysidia_one_click_handler_one_afma_2019
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=n,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1};function ba(a){a=a.o;const b=encodeURIComponent;let c="";a.platform&&(c+="&uap="+b(a.platform));a.platformVersion&&(c+="&uapv="+b(a.platformVersion));a.uaFullVersion&&(c+="&uafv="+b(a.uaFullVersion));a.architecture&&(c+="&uaa="+b(a.architecture));a.model&&(c+="&uam="+b(a.model));a.bitness&&(c+="&uab="+b(a.bitness));a.fullVersionList&&(c+="&uafvl="+b(a.fullVersionList.map(d=>b(d.brand)+";"+b(d.version)).join("\|")));"undefined"!==typeof a.wow64&&(c+="&uaw="+Number(a.wow64));return c}.function ca(a,b){return a.g?a.l.slice(0,a.g.index)+b+a.l.slice(a.g.index):a.l+b}function da(a){let b="&act=1&ri=1";a.h&&a.o&&(b+=ba(a));return ca(a,b)}function ea(a,b){return a.h&&a.i\|\|a.m?1==b?a.h?a.i:ca(a,"&dct=1"):2==b?ca(a,"&ri=2"):ca(a,"&ri=16"):a.l}

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2067)
Category:	downloaded
Size (bytes):	31423
Entropy (8bit):	5.4609683477027
Encrypted:	false
SSDEEP:	768:+lo/z1S5bKFQ3sdrZNQuiKpHUmplWNYtfQd:+lo/zg5b+drZNxTlWNYtfU
MD5:	665205483CC3F8BFB401F8ABC2568AAB
SHA1:	F85725BC930479BBFA9699783E04756BB7CBBA6A
SHA-256:	31E0E4D27F82A2A44476100291DFB745D5E02A9D04EB68B6161FA7DE436FD44F
SHA-512:	2D06F902016FE9452EC8AE1532EDE6A888C80B9665B48A838A610895BEE17E5254FE39F812F6AEA46E62F6962C6CDF7A43A9FEC0AE1E67E983FF92D73D3A48EF
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20240327/r20110914/abg_lite.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ca(this);function r(a,b){if(b)a:{var c=n;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .function da(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}var ea="function"==typeof Obj

Chrome Cache Entry: 695

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20945)
Category:	downloaded
Size (bytes):	20946
Entropy (8bit):	5.504544902995048
Encrypted:	false
SSDEEP:	384:N3myDuBnsYIzIiV/RdXGIrr80ICIpIPNIzy98WBRrBinrt2+7Fu:N7DVJ5BYS6oDXNinrP7Fu
MD5:	2E0E833596BB3612C747DDAE2CAA7575
SHA1:	8F4C8F52564F375802E1B24A58E8AFD36C692F50
SHA-256:	69CFDFA69E35C336D703EB2AA44F3BCC3FEF4E6093F3610CB8833D5E5CF9EA2F
SHA-512:	9317801D5D21B09BE339DA67635AC7C508EAAE613E3BF3433C3D66F39794C3A1ADBF137127B5040C55E792428D60F17D8D540457ACB08588EE392AFCFE293D9F
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/InfiniteScroll.BFSrs90C.js
Preview:	import{s as G,w as H,k as C,n as F,i as b,y as Oe,e as E,t as X,b as R,d as B,f as A,h as Z,j as D,p as N,l as L,m as ee,c as De,D as p,O as x,M,u as Ae,g as Ve,a as We,Q as be,R as Fe,L as J,_ as Ke,G as je,I as Ge}from"./scheduler.ErneftFr.js";import{S as Q,i as Y,g as K,e as j,t as S,a as T,c as W,b as U,m as q,d as O}from"./index.DsErXEH0.js";import{g as te,a as Qe}from"./spread.CgU5AtxT.js";import{t as le,R as Te}from"./commonUtil.Bb2Cnbsk.js";import{I as Ye}from"./Icon.CDBsrPKz.js";import{L as Ue}from"./Link.DZ6I_oHl.js";import{S as Je}from"./StoryMetaPublishing.Dnr6wPcr.js";import{e as $,u as Xe,o as Ze}from"./each.DufB99sH.js";import{T as pe}from"./Dialog.Cq9rVjnc.js";import{g as ve}from"./i13nUtil.0wCphNmh.js";function we(n,e,l){const t=n.slice();return t[2]=e[l],t}function Ie(n){let e,l=n[2].name+"",t,i;return{c(){e=E("div"),t=X(l),i=R(),this.h()},l(s){e=B(s,"DIV",{class:!0});var a=A(e);t=Z(a,l),i=D(a),a.forEach(b),this.h()},h(){N(e,"class","category svelte-hclwtv")},m(s,a){C

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1379)
Category:	downloaded
Size (bytes):	1380
Entropy (8bit):	4.8062255664614
Encrypted:	false
SSDEEP:	24:83dVmVpEaq4SS78ycc/WsdrjovN2r03mwXqbLcoXvtVkD+3yoq:8N0pdq4SS7eryrjMN2r02aoXvtTCr
MD5:	0F19B44ACE603612B95173BCBF84A296
SHA1:	73D306429E507B1B867682E17FDF4FEE4BA34B15
SHA-256:	232A054DDD206568C19EB69AAE489923AEFD9DB80839AAA0E69E1805B28BE1EA
SHA-512:	0441E64EEBE797FCB011A14F4FCABA3CD96A29D153EDF9F651B4AA3E335AFC8037BCABA59A6C9D3F85D106455C9EFC657F3DB87756C76C2CBB34642039A20FEB
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/Carousel.DzUrOEf0.css
Preview:	.scroll-carousel.svelte-1vfmff0{position:relative;display:grid;align-items:center;grid-template:[row1-start] "top" [row1-end] [row2-start] "main" [row2-end]/1fr;margin:0 calc(-1 * var(--layout-gutter))}.scroll-carousel.svelte-1vfmff0 .carousel-top{padding-top:var(--space-4);padding-bottom:var(--space-4);display:inline-flex;gap:var(--space-4);overflow:scroll;-ms-overflow-style:none;scrollbar-width:none;scroll-behavior:smooth;scroll-snap-type:x mandatory;grid-area:top}.scroll-carousel.svelte-1vfmff0 .carousel-top::-webkit-scrollbar{display:none}.scroll-carousel.svelte-1vfmff0 .carousel-top>:first-child{margin-left:var(--layout-gutter);scroll-margin-left:var(--layout-gutter)}.scroll-carousel.svelte-1vfmff0 .carousel-main{grid-area:main;overflow:scroll}.slide-carousel.svelte-1vfmff0{display:flex}.slide-carousel.svelte-1vfmff0 .carousel-top{width:100%;overflow-x:hidden;scroll-snap-type:x mandatory;white-space:nowrap;-ms-overflow-style:none;scrollbar-width:none}.slide-carousel.svelte-1vfmff0

Chrome Cache Entry: 697

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16798), with no line terminators
Category:	downloaded
Size (bytes):	16798
Entropy (8bit):	5.223409253489215
Encrypted:	false
SSDEEP:	384:3+Ec6BG/PFvVHWahu22YXGjDmgTkgcpUh1HswyjIkr8EAe:OD+ipVHWa1c/TIUYjINe
MD5:	F085D6C42ACB1394E457E463230DE8BA
SHA1:	DEACA09E50FB2D08C90F07CC588A8B1B4C191732
SHA-256:	F2C2013A67C8DD205E93EF40CF60DA7B3BB48A075E7B649FDE2B2F646B15896F
SHA-512:	029FDDCBD993E68E25B470D316CC94EF513AC536AB70C39F5B6920B6BEF6398F3BF77DD5F6067441337068566F1DCF408CDEC28DC22E03256E634AF644322875
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-fetch-1.19.1-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-fetch",[],t):"object"==typeof exports?exports["wafer-fetch"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-fetch"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var i=r[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function n(e,t){var r={};for(var n in e)t.indexOf(n)>=0\|\|Object.prototype.hasOwnProperty.call(e,n)&&(

Chrome Cache Entry: 698

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2067)
Category:	downloaded
Size (bytes):	31423
Entropy (8bit):	5.4609683477027
Encrypted:	false
SSDEEP:	768:+lo/z1S5bKFQ3sdrZNQuiKpHUmplWNYtfQd:+lo/zg5b+drZNxTlWNYtfU
MD5:	665205483CC3F8BFB401F8ABC2568AAB
SHA1:	F85725BC930479BBFA9699783E04756BB7CBBA6A
SHA-256:	31E0E4D27F82A2A44476100291DFB745D5E02A9D04EB68B6161FA7DE436FD44F
SHA-512:	2D06F902016FE9452EC8AE1532EDE6A888C80B9665B48A838A610895BEE17E5254FE39F812F6AEA46E62F6962C6CDF7A43A9FEC0AE1E67E983FF92D73D3A48EF
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240327/r20110914/abg_lite.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ca(this);function r(a,b){if(b)a:{var c=n;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .function da(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}var ea="function"==typeof Obj

Chrome Cache Entry: 699

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1829
Entropy (8bit):	4.990791462240958
Encrypted:	false
SSDEEP:	24:2dVZZL8NdTv3lYAjeaxMcRcTX+TLRjUhZ88TzlSV29nLiFyGAhIhxCAOFTsWwK3p:c7R8NdTvVY6OST8883029nlhcmTNL
MD5:	D216D3B4E5A67F022FA3EF4E71781439
SHA1:	5E6B829187DCD592B6C4F4998F513B6B77FC9D18
SHA-256:	54352CC37FAFE590444BC57BE54170A6CCB8A8EEB30A618911995780FAA8462E
SHA-512:	5878820FE8632627043FD2FDCBB65F3CB614B06A786DBF719A80165187A804D5D23A74BD8E312073ED292C07DCA4D42A39D346D35D9C0B49362AA036D9E7B413
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="32px" height="32px" viewBox="0 0 32 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 57.1 (83088) - https://sketch.com -->. <title>favicon_y19_32x32_custom</title>. <desc>Created with Sketch.</desc>. <defs>. <polygon id="path-1" points="0.171073913 0.0931111111 9.4455087 0.0931111111 9.4455087 9.92442222 0.171073913 9.92442222"></polygon>. </defs>. <g id="favicon_y19_32x32_custom" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <rect fill="#6001D2" x="0" y="0" width="32" height="32"></rect>. <g id="y!" transform="translate(5.000000, 6.000000)">. <polygon id="Fill-1" fill="#FFFFFF" points="9.70835927 5 7.04604411 11.4197051 4.40657437 5 0 5 4.91176421 16.0265583 3.14442407 20 7.45914574 20 14 5"></polygon>. <g id="!" transform="translate(12.000000, 0.000000)">. <path d="M2.8

Chrome Cache Entry: 700

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1784
Entropy (8bit):	4.640964665729478
Encrypted:	false
SSDEEP:	48:TtT4eQ7M0Vk677M0Kk6+7r10Sk6H72X10ak/7e0kk7Z:5TNQ7nVb7nKe7rKSn72KaC75k2Z
MD5:	877792D86D801176269A36AC7B4E6E02
SHA1:	AFDBAD37D52084701E3E299D1F95AD7478B466A9
SHA-256:	5CB2B348029A5C8CAD5342D73F5F78AC09AD0CF6EBDE80B5A1ED069F08332DDC
SHA-512:	0FA0A811BFEF6D83808022369BF9462EB57FB06F5E6B4672F313AAC04D2C85A5CB6A55A9D0F7359E608E6ECD90925E3F77784700882E3F5F93ADBD5FC22D6A3D
Malicious:	false
Reputation:	low
Preview:	{. "expCount":5,. "selection":"individual",. "uploadType":"group",. "runProb":10,. "expList":[. {. "name":"vpixiea",. "beaconRegex":"^https:\/\/v-([^.]).wc.yahoodns.net\/i.gif",. "target":"https://v-a<RAND>.wc.yahoodns.net/i.gif",. "trials":1,. "uploadEndpoints":["https://ybar-<BEACON>report.wc.yahoodns.net/cs/"], . "timeout":5000. },. {. "name":"vpixieb",. "beaconRegex":"^https:\/\/v-([^.]).wc.yahoodns.net\/i.gif",. "target":"https://v-b<RAND>.wc.yahoodns.net/i.gif",. "trials":1,. "uploadEndpoints":["https://ybar-<BEACON>report.wc.yahoodns.net/cs/"],. "timeout":5000. },. {. "name":"vpixiec",. "beaconRegex":"^https:\/\/v-([^.]*).wc.yahoodns.net\/pixel.gif",. "target":"https://v-c<RAND>.wc.yahoodns.net/pixel.gif",. "trials":1,. "uploadEndpoints":["http

Chrome Cache Entry: 701

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16545)
Category:	downloaded
Size (bytes):	26028
Entropy (8bit):	5.122368948706005
Encrypted:	false
SSDEEP:	768:34hvl2qRhHiuIMaU2AO2fTt14Bo9kmosGJuCslcq+PE/S0AjGMyxlYyskgNO3NEb:DTYkmpluPEa0AipxlBT8
MD5:	C167CC2C7C7EC850A0A7092688FF129D
SHA1:	7D4E39EECA3CE2AE523CD0888C53EEAD24369CA6
SHA-256:	A11EA647F95A0F0AFED52714B759929C5C8CBFD789A4F1B6B55D7D75A46433E3
SHA-512:	AB3C82EADC889D0112DD80B9C19345FDD5654BD6726789D743DF940A40813638F1F4EE93F6D32A495C9CD9CAA1CC095C3FC83C407331A935D7126E75574BBFC0
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/videojs-bc-playlist-ui/5.1.1/videojs-bc-playlist-ui.min.js
Preview:	/! @name @brightcove/videojs-bc-playlist-ui @version 5.1.1 @license UNLICENSED /.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("video.js"),require("@brightcove/loscore")):"function"==typeof define&&define.amd?define(["video.js","@brightcove/loscore"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).videojsBcPlaylistUi=e(t.videojs,t.videojs.bc_)}(this,(function(t,e){"use strict";function s(t){return t&&"object"==typeof t&&"default"in t?t:{default:t}}var i=s(t),n=s(e);let l=t=>{const e=t.playlist.autoadvance_;e.timeout&&t.clearTimeout(e.timeout),e.trigger&&t.off("ended",e.trigger),e.timeout=null,e.trigger=null};const a=(t,e)=>{var s;(l(t),"number"==typeof(s=e)&&!isNaN(s)&&s>=0&&s<1/0)?(t.playlist.autoadvance_.delay=e,t.playlist.autoadvance_.trigger=function(){const s=()=>a(t,e);t.one("play",s),t.playlist.autoadvance_.timeout=t.setTimeout((()=>{l(t),t.off("play",s),t.playlist.next()}),1e3*e)},t.one("ended",t.playlist.autoadvance_.tr

Chrome Cache Entry: 702

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	92
Entropy (8bit):	4.598032647599274
Encrypted:	false
SSDEEP:	3:RkmQiKAXieWIuKlMTFUmJMM+EGEJMYBB3v:FQiWEcTFUmWE2Y33v
MD5:	A6940EC97ABDAC3DE40D9395F3006852
SHA1:	C6996FCFF0F24F2BFAE2897861B813FAD88E5865
SHA-256:	678265969234722A5EB514577537883F6A3A60600E81043AEDF28B9252870FDE
SHA-512:	4BF5939570E0645A6CCBDBA050F33914C38158E8573D12844D8DF0E836DE0DD2CA67212CE22E1187C18ECD51F1F90A55331EE4DB6123033135BBD38038B573E4
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/MenuSurface.BlRyL1Hh.css
Preview:	.menuContainer.svelte-1j5x891{position:relative;display:inline-block;vertical-align:middle}.

Chrome Cache Entry: 703

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 12064, version 1.0
Category:	downloaded
Size (bytes):	12064
Entropy (8bit):	7.977913111506432
Encrypted:	false
SSDEEP:	192:kMvgSe+ymosfDPDly/l+SPDLDZDjzkAYO/KGo7oBFzkxjo0w9v6:nU+HoGflS4eIOsAFz+s0w56
MD5:	6F15483A73D1B9823661757777F54B18
SHA1:	BDBF32B462DEDDEC38A7B3B5C662E514A5720E17
SHA-256:	A20C6FCA1545A35F9ECD601CC41F9DF7B24F55CFCED32D55ABE50B46B5842A95
SHA-512:	2524F0965E211A5D3CA3DEC21DFE03C41683DF0CA23A4CBE815853E8E4CEB2BDB09E3BA183076E3F8F65B800FBB69423CC9583F1A0ABA26DBD902C5381F60BBE
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/fonts/2019/YahooSansCond-XBold.woff2
Preview:	wOF2....../ ......y...............................F.`..$..........Z..6.$..0. ..-..e..i5......J}..l.2#......Vd....:...R&2Dj.m.....c.;b.#d.:....=.G.fD..z...>..G..7.!P..f...1^....j...p....pc.%F.<..v..s....P4.....l...9k6.@.8./.#...I h.nAJ.B1+.u....bu=.z..}......~...8(.$Nc.1.4I....0..v.....!).,..jD..K. `.t.GR@.....>..\......L];.f-..\........7i......(.8Q_.aS4.........r.v. ,.T.._~...q.$,.w...1.....9....t..@PW....5..#r.....[..y0...P....$d....K}.....K.M.R. ...9...Nu./h..\.h..o...{$7.uR.....%O.3....IG[J...;..Q6.fq#`y../.....e...k.t6e...P(..........Z..{..H.r[...g"......P......$...,.eZ..F..E...=...p.0/.J<..[.p....d....oV..}.N..x..C..C.K.`.z..&.y.9.1.Z..1.h...1..+2v\..n.........n.z............%c.........3%.4...!.....H...D.9..5.."..#...s.l....O.3...Q..`R.\x..'......c...z..O...%....h},.,<....RD.mt3....U#...n.p.3.....\|....#^......w@......T"M......$...d...<C%...I<......2d1..h....."X..t......=sh.X8x.....h...!..:..p(.!.N..,.\|.h..Mv:.........}... z.$../3@B<.

Chrome Cache Entry: 704

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.0241026136709444
Encrypted:	false
SSDEEP:	3:CUmExltxlNXE:JQ
MD5:	B4682377DDFBE4E7DABFDDB2E543E842
SHA1:	328E472721A93345801ED5533240EAC2D1F8498C
SHA-256:	6D8BA81D1B60A18707722A1F2B62DAD48A6ACCED95A1933F49A68B5016620B93
SHA-512:	202612457D9042FE853DAAB3DDCC1F0F960C5FFDBE8462FA435713E4D1D85FF0C3F197DAF8DBA15BDA9F5266D7E1F9ECAEEE045CBC156A4892D2F931FE6FA1BB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........2.;

Chrome Cache Entry: 705

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	94211
Entropy (8bit):	5.362083981249566
Encrypted:	false
SSDEEP:	1536:KYqQ7UWSIXKZw+VacmpLZrgsowlCSs35m9DkIHIX9fkSA6ZA5:KjQ7FAKIA5
MD5:	6B1A02C0AE13B2B2A79400A34AD9EB01
SHA1:	297F0CB3E3925A3A47AEE2621D2DB97100242B3F
SHA-256:	2BA118D660F8CBFA961624034780CEFB18840262D863D103BFE6F7D0C40685DD
SHA-512:	52A0A0BF08242546AEDDF91CA5A91F6F22B6F431F6AF34263C937C2C9BDE6D15FFBEF267B53AFBEE97F3E22CE9512E4BF31F25C9716F4D76A21CF874DE312BF1
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/oa/consent.js
Preview:	/! For license information please see consent.js.LICENSE.txt /.!function(){var e={6848:function(e,n,t){var o,i,s;!function(a){"use strict";if(null!=n&&"number"!=typeof n.nodeType)e.exports=a();else if(null!=t.amdO)i=[],void 0===(s="function"==typeof(o=a)?o.apply(n,i):o)\|\|(e.exports=s);else{var r=a(),c="undefined"!=typeof self?self:$.global;"function"!=typeof c.btoa&&(c.btoa=r.btoa),"function"!=typeof c.atob&&(c.atob=r.atob)}}((function(){"use strict";var e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";function n(e){this.message=e}return n.prototype=new Error,n.prototype.name="InvalidCharacterError",{btoa:function(t){for(var o,i,s=String(t),a=0,r=e,c="";s.charAt(0\|a)\|\|(r="=",a%1);c+=r.charAt(63&o>>8-a%1*8)){if((i=s.charCodeAt(a+=3/4))>255)throw new n("'btoa' failed: The string to be encoded contains characters outside of the Latin1 range.");o=o<<8\|i}return c},atob:function(t){var o=String(t).replace(/[=]+$/,"");if(o.length%4==1)throw new n("'atob' failed: The str

Chrome Cache Entry: 706

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (1404)
Category:	downloaded
Size (bytes):	1405
Entropy (8bit):	5.279713931557724
Encrypted:	false
SSDEEP:	24:gwCGMSXCwt+OECsBcWqFp3ZKiJmJZKDAUuf6zdYfTfTyUA4Jr22ddDA/AjMP+32w:gwCGMAtHtsfqlbm74HufomrfTyj4J3kI
MD5:	456D21BFC86D369A47C7B74D23D9F446
SHA1:	C56E976410EAFF102722A64654C1DB4B6A7AFD16
SHA-256:	B13AC61230E99FB4A0A1B072AF1E488A2D659E9CFD4BA5600DFF327E21503767
SHA-512:	8D00496F84AEC1AF9CA9F8EC6AD641B005505D939759FE5B78A3C14182F682F356194B9413EC13BA9B25E7A64D5BBE39937366464F0547B0CDC8A3043F051057
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/Icon.CDBsrPKz.js
Preview:	import{s as z,w as u,k as y,n as _,i as m,Q as d,D as o,R as N,e as b,H as k,d as H,f as I,z as D,O as h,M as g}from"./scheduler.ErneftFr.js";import{g as S}from"./spread.CgU5AtxT.js";import{S as p,i as q}from"./index.DsErXEH0.js";function v(a){let e,s,i,l=[{class:i=`icon fin-icon ${a[3]}-icn sz-${a[2]} ${a[0]}`},a[4]],c={};for(let t=0;t<l.length;t+=1)c=o(c,l[t]);return{c(){e=b("div"),s=new k(!1),this.h()},l(t){e=H(t,"DIV",{class:!0});var n=I(e);s=D(n,!1),n.forEach(m),this.h()},h(){s.a=null,h(e,c),g(e,"svelte-21xhfv",!0)},m(t,n){y(t,e,n),s.m(a[1],e)},p(t,n){n&2&&s.p(t[1]),h(e,c=S(l,[n&13&&i!==(i=`icon fin-icon ${t[3]}-icn sz-${t[2]} ${t[0]}`)&&{class:i},n&16&&t[4]])),g(e,"svelte-21xhfv",!0)},d(t){t&&m(e)}}}function C(a){let e,s=typeof a[1]=="string"&&v(a);return{c(){s&&s.c(),e=u()},l(i){s&&s.l(i),e=u()},m(i,l){s&&s.m(i,l),y(i,e,l)},p(i,[l]){typeof i[1]=="string"?s?s.p(i,l):(s=v(i),s.c(),s.m(e.parentNode,e)):s&&(s.d(1),s=null)},i:_,o:_,d(i){i&&m(e),s&&s.d(i)}}}function E(a,e,s){const i=[

Chrome Cache Entry: 707

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (456)
Category:	downloaded
Size (bytes):	457
Entropy (8bit):	4.911528651268024
Encrypted:	false
SSDEEP:	12:a1Pep84cySBE1PXhLJ3St1Uihni6jUs8bt/:a1WpqBE1fD0UihniPs8bt/
MD5:	B9F9A35B8561770BEBB8BA7315C687A5
SHA1:	AE1B389818574BF722DAC9FB6EAE13A963B8DE19
SHA-256:	5942CD4D816B51D290142FBF3B967D23B5E4726453CA8ED391F0834D0E4548AC
SHA-512:	F551FECE7C21A5A1DE4820731508A46F003D850B22A69F5719B971A99565C96F407859332FD86BFE47417E3524F9E6A751D53A70512DB0F23742C719CAFBD534
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/search.C3WKfkxo.js
Preview:	const s='<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="m16 6 2.29 2.29-4.88 4.88-4-4L2 16.59 3.41 18l6-6 4 4 6.3-6.29L22 12V6z"/></svg>',w='<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27A6.47 6.47 0 0 0 16 9.5 6.5 6.5 0 1 0 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14"/></svg>';export{w as S,s as T};.

Chrome Cache Entry: 708

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46294)
Category:	downloaded
Size (bytes):	46382
Entropy (8bit):	5.346724986609832
Encrypted:	false
SSDEEP:	768:cnv5NFNf2JYHB4nTwGlLV4Zvt+/Ob0DE7Tl0rxeliu99RRvuhbiso7d63AbuqzoI:ct4nTwGeGM0IsieW
MD5:	1C0D3D49D4C692A97A730EBCDA91AC16
SHA1:	2CBCBFEC42F12837CC131B3B9FC98A190E9691FA
SHA-256:	81921E751BB49F4B5820A1499F6A83A916104CF9BC95B59AC81DBD51C2635CF5
SHA-512:	3DDFD6F97CAA85CAF90571A636CA8B3DB4A6E29AC7EAE9DFB92DB91DA6568321B95030C3B27CD9C099093E8B0B43AC11A8B0B8FD4F265B87E251063C704A56A4
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uc/finance/webcore/js/streamer.189679b58fdea40c26ed.mjs
Preview:	/! For license information please see streamer.189679b58fdea40c26ed.mjs.LICENSE.txt /.(()=>{var e={8277:(e,t,r)=>{"use strict";r.r(t);var s=r(3379),i=r.n(s),n=r(9037),o=r.n(n),a=r(569),c=r.n(a),l=r(3565),u=r.n(l),h=r(9216),f=r.n(h),d=r(1603),b={};b.setAttributes=u(),b.insert=c().bind(null,"head"),b.domAPI=o(),b.insertStyleElement=f(),i()(d.Z,b);const m=d.Z&&d.Z.locals?d.Z.locals:void 0;var p=r(4149),g=r.n(p);function y(){return y=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var s in r)Object.prototype.hasOwnProperty.call(r,s)&&(e[s]=r[s])}return e},y.apply(this,arguments)}const v="streamer",k="txt",w="data-field",S="data-symbol",M="data-stream",P="data-value",C="value",T="active";class x extends HTMLElement{constructor(){var e,t,r,s;super(),e=this,r=({isIntersecting:e})=>{if(this.isIntersecting=e,e&&!this.subscribed){const e=this.getAttribute(w),t=this.getAttribute(S);this.value=parseFloat(this.getAttribute(P)\|\|this.getAttr

Chrome Cache Entry: 709

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2937)
Category:	downloaded
Size (bytes):	219590
Entropy (8bit):	5.417751116201984
Encrypted:	false
SSDEEP:	6144:KdEQmJ1czbrKWehWXp7T21homAbas7J9UaOl:9zHgaU7JmJ
MD5:	BF18FBE8845812C2A5531EDAFE8B94B1
SHA1:	833CDE93A2199FACD32AC560913EA02F5E8AB1B4
SHA-256:	F2BB46EFF3A507B385FCF4CE0295CD00837CDDB4CD187AC4FEC01EC8413BB444
SHA-512:	431B7B6FEB5E0226BB30E685B7B6D92F26E8F4F2C05098E1B8864A045F5F6DE6591ADD335DA53E9335765F6886DAD9BEDC8F363EE6E17743E0444930D337F6FC
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),q=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(f,g){this.dh=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.dh};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 710

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, WAVE audio, IEEE Float, stereo 44100 Hz
Category:	downloaded
Size (bytes):	80336
Entropy (8bit):	7.269936136252251
Encrypted:	false
SSDEEP:	1536:SeUkTzc2ZSN8XQ9NbA2PentRJ2wADNXh/xuEU0bI799K:S9wzBZw8XQP5WSNXh/I0Iy
MD5:	F536E8F265FBBD76A5F7B9FC0EA0AD69
SHA1:	8DB474F6CA6E7548D47CC3B078E66ABDD5719066
SHA-256:	63678162CB830AFBA8013A29BE9148C72C3DD90561F1B0E7A3CDFBFD883912D6
SHA-512:	2D8D79BF7DD4DDD61B871B3E54E61972CFD2CAD17F11865707E006A4F9FFADA7B9B2524A1F7CE056AEFD2B36E43264A813FD9ECE00B3182D034AEE5FB84A75D0
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/misc/voice-result-202105050733.wav:2f73582f493ecc:0
Preview:	RIFF.9..WAVEfmt ........D... b.... .dataH...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 712

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	85729
Entropy (8bit):	6.098928579111297
Encrypted:	false
SSDEEP:	1536:MH0nyVT+cm3inmdmx1/cRWd7Jn5rYxhMtd111ro3mOSUwqftAiw4c:MlERGDxTroJwWt3w9
MD5:	1B0729E7A918660B035BEE9A376EBF7A
SHA1:	D19D7B8E07A1183D08E815A03F0938E9B737C37E
SHA-256:	C36688EE724A25C2371277F65DB1DB0787D15171E67E90929D6F35F0FE4DE383
SHA-512:	06F918978B90B1FC042635F0AA7EBCE0EA104ADFBCFF0912F1EEB8957ABCEAF0008871EC96D2D08C95B4A810D3CF6539D6B0137E5E2B040853BE93F287F61A42
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-BB__sbwkGl7T3MbozsCPP84BdPgdR2R8G-DthmzP_beuLfEZtubaw3SFA54P7PKbrPdzOgtohGLz-50c4nRrQRoHWsceGzzHiq1Gft-LNPL_Zo6C4ZqUpHNXpJuyVSY1vHbWegwEVVQFXrff22B8tRYT2ZoLDPV6yGqDrCaBmcIJAiIaAlSzw0qzx78faBlInzi6kxgb18GPhPGADfVbtkFHUT_w&dbm_d=AKAmf-ARwNJyeTqoKstqNioNcno7J7d59NTHn6VYvZ7kaJaVDUZe36RSPQDoFgdm5twuc0vsp2Qn4BV19aY-X-ScGSX8zLRfBr5OtV62BTmnq2P7bbZ07A5xutCLMYRZd21JNnf7OhvAA8R4fpKSZspQAamRc_dLyXmnoJf9av8lCZjzEeBFYXsEGMUGoXRQujpGie66h0YzELxHoQ85-RNC55nSGg5j9m6M0bs9nl6tYiKGpnrHyKcZH9K3jIOelCyNb2UxuGohgU1Lpa9HPzXUiDBYCH97s5Zu3Yg3nGr6LxLf58uAiy_DB-EuBdSZx1m0Qehz5n8mVhk3MrtwolYsu5sjTj7ioM7XGo3YaoXO59cHATQXqqyxS1NPyg9pd6kAcNRK0OlCpnPx7MDNu0H89TGwYfxsUrp2W9hTMXyuF61iV69ZOwqDrTZLId1jOqgle1oxdtHjjCq4cb5CYOeWiWr_5K1ux-Fcy5RyQ9cLSNqX3DXFOghQp9Huk0VyqwmUAafwjAxJmFuCJSwK3reD3V34I0P-Gi6t22qx_ZnnIL9HBMRh_uVsraOoQJgCvu9NQLI77aAyGruYcjn4lhJiNIGOS8gprmskbydEPIoh5GKU_LJcWoyZ2e1zGYytwy0Shybx5JwEE3kg2-6FNU43S1b4W9UEF8gsS5UE_cq8LIiZtDcw5GaBgqna3zZgkoQSQnVpuv8h7H6yqbaVUAgOJbRWIDaSCcNckQhkXSC0xufhyTYTOLxxUic4XvX6TL7TpYcLXpD0VWaNiP8pgYE-kyWKQ2NyhvRxflDek748Za6ay5-3W0tH1IwrBl2k8bgL4s7Fq5p0FzG6tZTRQohgepMyf0o64i5TrWWyPcT_AzGXAstO6eqoZr9P55z319vw66XaaM3U4yUkuZxf0tbsoQf8RLqAjcUQBinZjP6OGCA3EkubiP75Mlsd__jqmqae_vvdHDvx4rrNZ--eieV5x1w6mEWLU9yctWKwagYD0ZWOqoASPI36lKEnoS0TegS6H2edtc2UVGX4tcooHMJrWsi5oqSpDTvISHnHkdsyTZUKKzPxVo9igSLJ6MvRNqr94aRbZngnkJsk-vcKb9ZkplUgEuciB4p3HVBVBKtuTiY26eXjnYSIzgXZIAPPALBS8Sh47ZxcawUME4jTGBZYwRfm412HQ8z3LdZ5qXH5vKHaaQ5S_6M40vohVwxzCg7E-z4obIu_i1yxvgSwSwZcdksPHXz8jxNCf1QIel5jQGFDWwOXDOzsO8ePCpnplX0kBQHTSsmku7bpsD4eofWTW7Nfn8qpiehjarfu9aHXKqoccc2jeCQhBoSlMG3njxSBlyoTS886KI43m8oOOJyEBGOu-4457-hF-NbfcL-uviTWY7GFW7BiOhxxsPo2nEVd0V9d6oJal9R-aBW_9_mln6vuZ7X83z8cmkQmica5MrZcnGgQmeuB-uTRs3XCFkekTJLczuP1wE8CinfNp0Qoq95B3KFQwKStzUrAgNiaCtl9H1h50iqF4kKNxY7cXJEChfwIVuyEc4aG01vumS5CNhTGIXWMqAZsz9eDPQw051AMl04XjpHEkiOS6nRiDCZGBQBLIXg3G0HPlB-hlKfxUQjEWJpFCJYtx-yEahJeY83261E7yZh_C2ce9EPC2cLIMIpJeBphF89DqRIKajFOS4aMyF4CpOWhK5QuQycweOCidT1qkyA4dA2kfIhJ8ixXt2WhOitIAlxUVyP5nz-kfzbAi6YG5jrT-b474-fs238d18iCUHtE1bFeVWDlSsY3scN6geu5pxkfJ84wYPq-ojZ01ZngkB9GWhoMIbHYVeDrlLKQk59CtVC7Fk8vMRAs6L7Hw3RVtBs3Xp9UycrzWPwLK3m8btSJbgOtlwiGdU3qAq3s-YMkvgz2AF3gJNCRIB81h1M9bOxWUDtuKTdfbhi1DBi22zPlQCVWkxaLF3eGzRJvTTpetz6lePvaRkXbli3cF7QLJ9FfS3d4M1eiQqg-GQapeAKLe4j3uxyGzp6zWmyjBTGSFYeCnKuWF1ZO56dGOiMcQmNX5P6JBow52-_tIYG0hp0YS-ig9q9X8kYsWdAcCNt0eM3QqyGeePiblAFUAYe6wBtxbrMEA47FdAVVMy0Od--IdigkOjwNPcpeBXjxpyLbx2TC3tqWz7BV8XI1W8YfCPwCKmWXP1WpFzRPS5qRhTjrDrVsh1L0GKzIvLeQIalC5hJt7rHz3xn2Y2DtUyrZ1AqzFCAKisv4N0mjPM2Ky_Wx90duFffiot3TaQy2UYpDGnl0BLPTF1ADDUvtMW8n1j_7VrEkigs6I8rVfgLia-Fg5yXJQzSgfQzF2RGunh4_wtn5KOmUQeYg7l3R_Pvtr9IBBK3Y_xejMQYCwgBAeqSecVtxL_6Ck1italM1UR26gAFjYh5AVghflxWVzVn6_XUe7D0VWoMEMXY2wX6k1k2lyXaZSjP5JWXGJ-4IqfyKCCkNiSS2l1nGYUHfSbmTujig4UUq1pu40uJxOdE2hCVs9LAJM8FgKOtQ6O4_izs1_LItTQXpr-cJ3ESTp_Z4YUsqVACHwhwHHe-37vSo5ry8t9_LwZr27B0_8MPKAJV0RazsudS-xMwpc7_ljy3XzS4WB3Y8Feh39NZhGNc88uDyB1YnAYjKTkMN64j4hY3sabRfR_cTbNhL3cRZj9hS6gpaVYd_l0N9DWZTJu4K59DL5U4tbneDdMPw17yq5ew1ImTl4_G-4fMb3oVjwW-eod_j_Y2O8FMTC7rx1gOglA67sxgI09pMCtXtnKubRsaiSFC144CihDAQ5jNUFce9MSBqhWXNXHjUwCkha3oej_StLdHwr5POHPWJvd_mM1mJ-0FptXy8bter7SCeE7KUqZl5QDHMqGJS05h8HtIzaOHRNIuWS4Q4EEb5VfuFjL66bq8kwjVkhp38c_tBzlxK_jG6WyBMNSDDMRZ-f6hWkdOZF7p8s-TQdnNvbPnm22kWiUpDjzfO1WtzB3Ur_h7AN7mOhLri1TfLlSA2iZrA8o6RqIYb_qK2IBg6gYlCYkw3n-EXemBRfGTJsAnZ1H3286wdwjxIaa71-PmgVend6P3EwM6hvpS9nTsCaz9QIug74WLztrE2roZ8_uNQIQRWQ6YXT112qwWg6dUBLg0kmGJBlDvI0iTQ3aGbsfziv6BHoABrexgw9fSe_otaEVT97WC7b74k_ifYCGgf9i7bQ6vQhl0DmPs90z1Zk8F3sZ6sC3bcTOsBFzMSsanM3RWrs-dASOQ_FgDpuejScsPPf4r9fPYMwFFw32ivut6_GLSwR4Vv24DpcbdtwQxb6GbiU0-Pn_BORpLaeoYy763s63lbXpFAuZxg_rPRtsgKqHb3pYQ2CqFnY7PwoiD3YkMm6kcZHM3wK6NGB8IvDgONCoPNO6c7YklXLRt8AG7hzLpCYOFAAhfHpLFeydz7m3m3FnlTdNoCVonzejb1BJxMy2DU6khEF-mTf_fxyDLewGgDBYrZrT4Z2NWO7dCZVKs4VNZN-f3aFBJXBDSHgYxDp20GlQcz06DM1V45dGn-JMqrkO2nczBCPS7w-m3AXWtnYchDSpChJJc2-56zQEyvOC2302f5g07B5bNzEgmTBRDJIH6DAyt5Ep8jfR1VQl5Srovx-6TttNmXOLnsvuNBstnM4JmAPQUmi20RC7-I3mqvmAmRl452jOnl13NVGtM7vIs7PDUvnz0aY5FVc9QWmWupVjiAcmo5EbXhLfTDUHm-YL7L-eIoRPolPmtxIu2xaSkQhDMhtEYU5p-tGqO5plnxSBv0jmjfxVnMqmwPM5Z2cSi45jUHGAtrEAnxjZLeoa_xFXCy-ktmNDRwMFJ-YhH2XWXTgNQVbeHfF2grjstGsaEZN50b-UvbJTJjcCHqG-TBb6K8dq4gBtu1fgF1ji6_nbna-Z4p6oZ5NY7WoqbMI0N34oPpDvgP3VnwAW9uJ4NM2DIiOo9bsCmspyqlT1W5bthHBywoQauB31dHbw0&pr=13%3AZgYObwAAAADWOT7mTJGXo0pDeOjUMRcKSyentw&cid=CAQSKQB7FLtqosJQ6htrJlAs6LeF_R-Fq7BUJsvPCJ_8VXVmYmzOlqnyjJoTGAE&dv3_ver=m202402290101&nel=1&rfl=https%3A%2F%2Ffinance.yahoo.com%2F&ds=l&xdt=1&iif=1&cor=15196510724751618000&adk=2213243817&dtd=32
Preview:	if (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_799298138"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_cw4GZoiQLs_UoPwPgImE6A4"\x3e');(function() {var m = document.createElement('meta');m.setAttribute('data-jc', '82');m.setAttribute('data-jc-version', 'r20240327');var ss = document.getElementsByTagName('script')[0];if (ss && ss.parentNode) {ss.parentNode.insertBefore(m, ss);}})();(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if("IFRAME"==a.tagName)d(a);else{a=a.querySelectorAll("IFRAME");for(var b=0;b<a.length&&!d(a[b]);++b);}}function p(a){return(a=a.ownerDocument)&&(a.parentWindow\|\|a.defaultView)\|\|null} fun

Chrome Cache Entry: 714

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1215)
Category:	downloaded
Size (bytes):	1216
Entropy (8bit):	4.938505907891045
Encrypted:	false
SSDEEP:	24:w45pfuhiloVXng57I+CIc3CsCetUi56V+iBA2m5ewB:wWf0/Zg5UWcyRf3JB9BO
MD5:	6F87AC1D1FA33CAB36578A9F4450C2AA
SHA1:	C8E31006BF37867D4692C0A65E18AF21DAFB16AB
SHA-256:	91BA5D8E2F210E684BD4854178EE373149EC68B2E99EDC4D916899369CA9E3F5
SHA-512:	28A7AFB523F48A7B75BC9B018FAED481B550750CE6973C1F461D1A3BAC24C0DB1D3F80B804F08EA0766E8FC0D155BAED361E94CDCAAEDDA217606791C0A65986
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/SkeletonLoader.C7u5AxvX.css
Preview:	.loader.svelte-rqdstu{position:relative;width:100%;height:100%;opacity:.6;background-color:var(--separator);border-radius:var(--border-radius-m);overflow:hidden}.loader.svelte-rqdstu:after{position:absolute;top:0;right:0;bottom:0;left:0;transform:translate(-100%);animation:svelte-rqdstu-skeleton-loading 1s linear infinite alternate;will-change:transform;background-image:linear-gradient(90deg,#fff0 0,#fff3 20%,#ffffff80 60%,#fff0);content:""}.loader.text.svelte-rqdstu{height:1rem;margin-bottom:var(--space-1)}.loader.text.svelte-rqdstu:last-child{width:80%;margin-bottom:0}.loader.price.svelte-rqdstu{height:1rem;min-width:4ch}.loader.price.svelte-rqdstu:last-child{width:80%;margin-bottom:0}.loader.card.svelte-rqdstu{height:3rem;margin-bottom:var(--space-3);border-radius:var(--border-radius-none)}.loader.card.svelte-rqdstu:last-child{height:2rem;margin-bottom:0}.loader.storyImg.svelte-rqdstu{width:100%;padding-bottom:77.77%;height:unset;margin-bottom:var(--space-4)}.loader.storyImg.wideImg

Chrome Cache Entry: 715

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://js-sec.indexww.com/ht/htw-pixel.gif?ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 716

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12951), with no line terminators
Category:	downloaded
Size (bytes):	12951
Entropy (8bit):	5.324188284309264
Encrypted:	false
SSDEEP:	192:VF0HedAQdKZTKw42knYP8OyB15ncW8Jgsj9C2u1rIERd7aoYl7LX+C:Y2dKZuwt8O223u1rIr7LOC
MD5:	A353517FCE93AB75B87473E6FF3A6C5A
SHA1:	2956615183F63F17B8706FB55D596BEF9EA42E16
SHA-256:	4BB12CA3C5D808E7E5D15D744D8D11758D362924B2C4BA866E7D7DE887062D49
SHA-512:	8568B8A85651EB78C7529A57E99C5D0DA76222009E5E98A21DF2071071F5FDF578FBE577C9C41FD0D1B09DD307169A49DB3CAF972B022C2246C958DAE80C5BF0
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/art/css/deeplink.atomic.ltr.a353517fce93ab75b87473e6ff3a6c5a.css
Preview:	#atomic .Ai$c${align-items:center}#atomic .Ai$fs${align-items:flex-start}#atomic .Bdc$\#232a31${border-color:#232a31}#atomic .Bdc$\$headerTitleTopBorderColorMobile${border-color:#232a31 transparent transparent}#atomic .Bdc$t${border-color:transparent}#atomic .Bds$s${border-style:solid}#atomic .Bdts$s${border-top-style:solid}#atomic .Bdw$\$headerTitleSolidTopBorderWidthCommentsMobile${border-width:4px 0 0}#atomic .Bdw$1px${border-width:1px}#atomic .Bdw$2px${border-width:2px}#atomic .Bdtw$4px${border-top-width:4px}#atomic .Bdrs$24px${border-radius:24px}#atomic .Bdrs$2px${border-radius:2px}#atomic .Bdrs$4px${border-radius:4px}#atomic .Bdrs$50\%${border-radius:50%}#atomic .Bg$\#fff${background:#fff}#atomic .Bg$\$commentBubbleImg${background:url(https://s.yimg.com/cv/apiv2/default/inkwell.svg)no-repeat center center}#atomic .Bgc$\#f5f8fa$,#atomic .Bgc$\$leadAdBgc${background-color:#f5f8fa}#atomic .Bgc$\#fff${background-color:#fff}#atomic .Bgc\(--trans

Chrome Cache Entry: 717

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40628), with no line terminators
Category:	downloaded
Size (bytes):	40628
Entropy (8bit):	5.505753176177973
Encrypted:	false
SSDEEP:	384:bwEJicRVRsyXqqAOZ6gTw2wDGg0Hgf0ZEYZxMiWY8X+iQ:sEJLRVRVZnw2wgHgsEYB
MD5:	C786B1922682C55D7B649BF0B6A9A268
SHA1:	F53888B5F2278CF85E8A00A4EBA818C99EC48AC0
SHA-256:	88AB45CE59DF13A348E1AF2D3E2EE330DB0BC07242E531EB83A0B51A5C0E99C6
SHA-512:	A77F75A2E3F2C0ABBF03EB2B6C9951F2B0FF9F94359ED54BB471CE554B4ABFBF58FC0D3BB6B44B7630CC60CE80D0AAA51DD88944219E402CE346C3E72C922748
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/nel/css/tdv2-wafer-content-list.Stream.atomic.ltr.c786b1922682c55d7b649bf0b6a9a268.min.css
Preview:	#atomic .Ai$c${align-items:center}#atomic .Ai$fs${align-items:flex-start}#atomic .Ai$s${align-items:start}#atomic .As$fe${align-self:flex-end}#atomic .As$fs${align-self:flex-start}#atomic .Ar$257\/134${aspect-ratio:257/134}#atomic .Bd,#atomic .Bdw$1px$,.Bd{border-width:1px}#atomic .Bd,#atomic .Bds$s$,.Bd,.BdY{border-style:solid}#atomic .Bd$0$,.Bd$0${border:0}#atomic .Bd$n$,#atomic .Bd$n$\:lc:last-child,.Bd$n$,.Bd$n$\:lc:last-child{border:none}#atomic .Bdx$arrowTop${border-left:8px solid transparent;border-right:8px solid transparent}#atomic .Bdb$arrowTopColor${border-bottom:8px solid #188fff}#atomic .Bdc$\#232a31$,#atomic .Bdc$\$c-fuji-grey-m${border-color:#232a31}#atomic .Bdc$\#6f6b83${border-color:#6f6b83}#atomic .Bdc$\#d7d9dd${border-color:#d7d9dd}#atomic .Bdc$\#e2e2e6${border-color:#e2e2e6}#atomic .Bdc$\#fff${border-color:#fff}#atomic .Bdc$\$c-fuji-blue-1-a${border-color:#188fff}#atomic .Bdc$\$c-fuji-dirty-seagull${border-color:#e0e4e

Chrome Cache Entry: 718

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29594), with no line terminators
Category:	downloaded
Size (bytes):	29594
Entropy (8bit):	5.176931694017593
Encrypted:	false
SSDEEP:	768:U9ohsHpxsgDD9G9uiQ9xYBEgH5CDE486Cfiniln7dB1Qg7Nx6/SRRzLC78eA1bOr:U4gDRNgtmSiniln7dB1QSm
MD5:	AD4B4808C249D200DF8BCDB043AC4611
SHA1:	80F6F690F592E8E1975CB27B9281B6F49FA81C66
SHA-256:	117A49648BFB149AE0636D4C6397DADBE8AAAB4EE5BB8A35DB9318379B7F6CA2
SHA-512:	BD1124DD9EADDB5B10AAF23C4D270C06A4FF98C15542F38D7C878EE7DD4947EC42FB54838A5B8E2F3C5D80B0086503CE16BBB157F630C517998EA1646C05234E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-autocomplete-1.31.8-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-autocomplete",[],t):"object"==typeof exports?exports["wafer-autocomplete"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-autocomplete"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(i){if(a[i])return a[i].exports;var n=a[i]={i:i,l:!1,exports:{}};return e[i].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var i=window.webpackJsonpwafer_wafers_wafer_autocomplete;window.webpackJsonpwafer_wafers_wafer_autocomplete=function(t,a,r){for(var o,s,l=0,u=[];l<t.length;l++)s=t[l],n[s]&&u.push(n[s][0]),n[s]=0;for(o in a)Object.prototype.hasOwnProperty.call(a,o)&&(e[o]=a[o]);for(i&&i(t,a,r);u.length;)u.shift()()};var a={},n={1:0,2:0};return t.e=function(e){function i(){s.onerror=s.onload=null,clearTimeout(l);var t=n[e];0!==t&&(t&&t[1](new Error("Loading chunk "+e+" failed.")),n[e]=void 0)}var a=n[

Chrome Cache Entry: 719

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1829), with no line terminators
Category:	downloaded
Size (bytes):	1829
Entropy (8bit):	5.219469198598208
Encrypted:	false
SSDEEP:	24:GpkZNyeML6Q1T4n5/6HN2CgSYa9t29qK4y/HpMKMsHYvR:skehGQi2MSH8P4y/HpMXsHK
MD5:	5C12E46D3B7A53AFF9D869C8059A7F56
SHA1:	30D1B58DE9E738EDC8C15DF208E011095A5C56FD
SHA-256:	D6B2C096322F318ECC055EFC32E27765FC4C7D3CAF0D930D01A99DB939300FE2
SHA-512:	BF2A76F9EAC187073D9C0BBAD11AA8256CB82B167C2C382F4FAAA3F564F4ABD5D3290A19E448FD86D88778EC62F629BB98ED5D10AB469DD365BDA45B433A6F92
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/nel/css/spotIm.SpotImJACForSeamless.atomic.ltr.5c12e46d3b7a53aff9d869c8059a7f56.min.css
Preview:	#atomic .Ai$c${align-items:center}#atomic .Bd$0$,.Bd$0${border:0}#atomic .Bdrs$50\%${border-radius:50%}#atomic .Bgc$\#000${background-color:#000}#atomic .Bgc$\#124bcb${background-color:#124bcb}#atomic .Bgc$\#34af23${background-color:#34af23}#atomic .Bgc$\#3c5a77${background-color:#3c5a77}#atomic .Bgc$\#7759ff${background-color:#7759ff}#atomic .Bgc$t${background-color:transparent}#atomic .Bxsh$\$social-bar-box-shadow${box-shadow:0 7px 10px #000}#atomic .C$\#7e1fff${color:#7e1fff}#atomic .C$\#828c93${color:#828c93}#atomic .C$\#9a58b5${color:#9a58b5}#atomic .D$f${display:flex}#atomic .D$ib${display:inline-block}#atomic .D$if${display:inline-flex}#atomic .Fld$c${flex-direction:column}#atomic .Fld$r${flex-direction:row}#atomic .Jc$sb${justify-content:space-between}#atomic .Fxw$w${flex-wrap:wrap}#atomic .Fw$b${font-weight:700}#atomic .Fz$12px${font-size:12px}#atomic .Fz$15px${font-size:15px}#atomic .H$30px${height:30px}#atomic .H$44px${heig

Chrome Cache Entry: 720

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1829
Entropy (8bit):	4.990791462240958
Encrypted:	false
SSDEEP:	24:2dVZZL8NdTv3lYAjeaxMcRcTX+TLRjUhZ88TzlSV29nLiFyGAhIhxCAOFTsWwK3p:c7R8NdTvVY6OST8883029nlhcmTNL
MD5:	D216D3B4E5A67F022FA3EF4E71781439
SHA1:	5E6B829187DCD592B6C4F4998F513B6B77FC9D18
SHA-256:	54352CC37FAFE590444BC57BE54170A6CCB8A8EEB30A618911995780FAA8462E
SHA-512:	5878820FE8632627043FD2FDCBB65F3CB614B06A786DBF719A80165187A804D5D23A74BD8E312073ED292C07DCA4D42A39D346D35D9C0B49362AA036D9E7B413
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/finance/favicon_y19_32x32_custom.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="32px" height="32px" viewBox="0 0 32 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 57.1 (83088) - https://sketch.com -->. <title>favicon_y19_32x32_custom</title>. <desc>Created with Sketch.</desc>. <defs>. <polygon id="path-1" points="0.171073913 0.0931111111 9.4455087 0.0931111111 9.4455087 9.92442222 0.171073913 9.92442222"></polygon>. </defs>. <g id="favicon_y19_32x32_custom" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <rect fill="#6001D2" x="0" y="0" width="32" height="32"></rect>. <g id="y!" transform="translate(5.000000, 6.000000)">. <polygon id="Fill-1" fill="#FFFFFF" points="9.70835927 5 7.04604411 11.4197051 4.40657437 5 0 5 4.91176421 16.0265583 3.14442407 20 7.45914574 20 14 5"></polygon>. <g id="!" transform="translate(12.000000, 0.000000)">. <path d="M2.8

Chrome Cache Entry: 721

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/pubmatic/6D366468-71AF-422B-99AB-138A6DAB94F7?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 722

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 723

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1359)
Category:	downloaded
Size (bytes):	1360
Entropy (8bit):	4.74129108929587
Encrypted:	false
SSDEEP:	12:QaAhbWD+X7u8ZDfnzI1zINnzIBzIcqzILftzIsNRzIjzIqtIJnzIemQ1AIdYsr:Q1hbz7HHSNc6JvA5sr
MD5:	106445CAC352E541B5D7B88EC15B4324
SHA1:	4764C7BF5CD39E7DDB3AF99F27335E0728548414
SHA-256:	1A9DACF0BE70DF003F748C4FBF2B314AE7E681A5A1EAE28495CB5D204A6381C5
SHA-512:	BB2F1C87DA24CA813888284BC5632C8D6A8F8E8F34E39BB008A78895A316378249845F3236284395A4DD1CFE87FE5A961AD9B75E9A9BFEA46DC95DD13FDA07A2
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/Icon.5Pcv_1eF.css
Preview:	.fin-icon.svelte-21xhfv svg{width:1em;height:1em;fill:currentcolor;display:inline-block}.fin-icon.svelte-21xhfv{align-items:center;display:inline-flex}.primary-icn.svelte-21xhfv{color:var(--primary)}.tertiary-icn.svelte-21xhfv{color:var(--text2)}.action-icn.svelte-21xhfv{color:var(--ui-brand)}.positive-icn.svelte-21xhfv{color:var(--positive)}.negative-icn.svelte-21xhfv{color:var(--negative)}.following-icn.svelte-21xhfv{color:var(--following)}.white-icn.svelte-21xhfv{color:var(--white)}.inherit-icn.svelte-21xhfv{color:inherit}.sz-x-small.svelte-21xhfv{font-size:var(--icon-size, var(--font-xs))}.sz-small.svelte-21xhfv{font-size:var(--icon-size, var(--font-s))}.sz-medium.svelte-21xhfv{font-size:var(--icon-size, var(--font-m))}.sz-large.svelte-21xhfv{font-size:var(--icon-size, var(--font-l))}.sz-x-large.svelte-21xhfv{font-size:var(--icon-size, var(--font-2xl))}.sz-xx-large.svelte-21xhfv{font-size:var(--icon-size, var(--font-3xl))}.sz-xxx-large.svelte-21xhfv{font-size:var(--icon-size, var(-

Chrome Cache Entry: 724

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	119457
Entropy (8bit):	5.304968273464649
Encrypted:	false
SSDEEP:	1536:r4g3D3Aeq/dcMxv4GPb7Oia5dHpTGQHaQJm672jdHO2Wd/5YE1yaf5Y9A3H9zvE7:y217udu2Wd/s60jJex0hb
MD5:	5B1926A6BA098899B9DC2CB92629661E
SHA1:	640B7A3A773CF9A77A27A9AC6CA25CD9725D758D
SHA-256:	C13592EDD226CEDF8E180B4A91D920EF05343C20236090C6BAF938050291D6B8
SHA-512:	40BD997E8CF8EC3D03B98BA2423DE7C6DDCC6423A135FFC01279456BBD57CFA0D0D6913C026CB047AFA8AE06023E1B9588F05B9FBBD5CDA2ADD23E9D625EF705
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/c/640b7a3.caas-news_web.min.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS",[],t):"object"==typeof exports?exports.CAAS=t():e.CAAS=t()}(self,(function(){return function(){var e,t,s,o,a={"./node_modules/@vzmi/caas-static/src/lazy/js/index.js":function(e,t,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var o=s("./node_modules/@vzmi/caas-static/src/util/js/index.js");const a="loading"in HTMLImageElement.prototype,i="data-caas-lazy-loading-init";let n,l;function r(e,t){return e.nodeName.toLowerCase()===t}function d(e,t){const s=e._util,{pendingClass:a}=e.options;return()=>{if((0,o.elementInView)(t,e.options,s._viewport)){const o=s.elements.indexOf(t);e.load(t),s.elements.splice(o,1),s.count--,0===s.count&&e.destroy()}(0,o.removeClass)(t,a)}}function c(e){const t=e._util,{pendingClass:s,successClass:i,timeout:n}=e.options;for(let l=0;l<t.count;l++){const c=t.elements[l],m=a&&r(c,"img"),u=!m&&(0,o.

Chrome Cache Entry: 725

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (3442)
Category:	downloaded
Size (bytes):	3443
Entropy (8bit):	5.403581067127731
Encrypted:	false
SSDEEP:	96:pZrAJu2/MzFyAZ7GLhS0vrC/mtB07Sjdv/tWiNP30++:pCupy8Ch4467+pnh0++
MD5:	5784A42141EFF97FD3C58DF841F01F66
SHA1:	74F3637D7AEF5F43EF63B2298F11FC976FE30353
SHA-256:	688EBC8E45E669BB3310332B075D794D4B48A379181BB262400E6E8E87155A24
SHA-512:	D273B72A512DA4813A9BE414E9D868EA3B98226EF14C4268FF5F387A67D6BD262944A7ACD34E0D201CAD42F75D6985F8E4C17B50D8DAF58273BA7EE31E947B92
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/Button.C10y2YT5.js
Preview:	import{s as T,D as k,e as q,b as y,d as E,f as P,j as Q,i as A,O as C,M as c,k as R,l as U,C as Y,Q as G,R as v,c as F,u as H,g as J,a as K,S as L}from"./scheduler.ErneftFr.js";import{S as W,i as X,t as m,g as M,a as b,e as j,c as Z,b as w,m as p,d as x}from"./index.DsErXEH0.js";import{g as $}from"./spread.CgU5AtxT.js";import{I as ee}from"./Icon.CDBsrPKz.js";import{g as V}from"./i13nUtil.0wCphNmh.js";function D(l){let e,a;return e=new ee({props:{size:l[6]\|\|l[5],icon:l[4],type:l[7],className:l[10]}}),{c(){Z(e.$$.fragment)},l(i){w(e.$$.fragment,i)},m(i,t){p(e,i,t),a=!0},p(i,t){const r={};t&96&&(r.size=i[6]\|\|i[5]),t&16&&(r.icon=i[4]),t&128&&(r.type=i[7]),t&1024&&(r.className=i[10]),e.$set(r)},i(i){a\|\|(m(e.$$.fragment,i),a=!0)},o(i){b(e.$$.fragment,i),a=!1},d(i){x(e,i)}}}function I(l){let e;const a=l[13].default,i=F(a,l,l[12],null);return{c(){i&&i.c()},l(t){i&&i.l(t)},m(t,r){i&&i.m(t,r),e=!0},p(t,r){i&&i.p&&(!e\|\|r&4096)&&H(i,a,t,t[12],e?K(a,t[12],r,null):J(t[12]),null)},i(t){e\|\|(m(i,t),e=!

Chrome Cache Entry: 726

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1990)
Category:	downloaded
Size (bytes):	1991
Entropy (8bit):	4.924346723745313
Encrypted:	false
SSDEEP:	24:hkVD8NzAV7lntRT/rOWdbgS/secqdt5Bx5ijVUENT/GilqVUEjkNFkp:hU6kBntRT/rTbH/sxgxcFT/tWoYp
MD5:	1BACAB7BB40A7F0C94E3534E02F8FD87
SHA1:	E5E3313F81D44118E21DFE681751F49D14D63B41
SHA-256:	FB5F6A31CC6ED6704D153117144772D274F0FA22C4F159A5A13CAC05806C9DC6
SHA-512:	F17459312D8916714FD659A580293663D2281CD5825345B90290D5C5B532E975CA1329076D5D424757CD903319862B812EA3CA0BAB900B947009DEFEC8FE2B82
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/ScreenerCard.p_m6jgGc.css
Preview:	.screenerDetails.svelte-bs74eo{display:flex;flex-direction:column;height:100%}.dataHeaders.svelte-bs74eo{display:flex;align-items:flex-start;align-self:stretch;justify-content:space-between;font-size:var(--font-s);line-height:125%;min-width:16rem}.heading.svelte-bs74eo{display:flex;align-items:center;justify-content:left;-moz-column-gap:.375rem;column-gap:.375rem}.tickerHeader.svelte-bs74eo{width:8rem}.priceHeader.svelte-bs74eo{text-align:right;width:4.3125rem;padding:0 .25rem}.ratingHeader.svelte-bs74eo{align-items:center;text-align:center;width:6.25rem}.quoteDetails.svelte-bs74eo{display:flex;border-bottom:1px solid var(--light-divider);padding-top:1px;padding-bottom:1px;justify-content:space-between}.quoteDetails.svelte-bs74eo:hover,.quoteDetails.svelte-bs74eo:focus{background-color:var(--table-hover-emph)}.lastQuote.svelte-bs74eo{border-bottom:unset}.ticker.svelte-bs74eo{display:flex;flex-direction:column;justify-content:center;width:8rem}.quote.svelte-bs74eo{display:flex;flex-dire

Chrome Cache Entry: 727

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17847
Entropy (8bit):	7.9704797689685405
Encrypted:	false
SSDEEP:	384:tnncLXm9wLTnth7TBv0vpQdFGpYJau4NcAWWnx2dilc4W:xck25h7TSdiEZcABnx8iy
MD5:	C402F8FBC39F8E14B58DEAD06A06F177
SHA1:	9167AF97047EF6DA38112F3F6934FAABAFE55F36
SHA-256:	9E7BD0095713E570012C7CE09D3EB80AC30031B506E1BB3C025588A9387DD1FA
SHA-512:	C0CFE238F2E783E329023BFF376C6D1B149BB2E5CD7A5C02DCB45FF5FC74586800D5F32B00609CA6D40E0F0D8B8269B454F9131779037EDBADFEFA676EE705E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............=..2...aiCCPkCGColorSpaceDisplayP3..(.c``RI,(.aa``..+).rwR...R`.......b.........>@%.0..\|...../..:%5.I.^..b....D.0......d ...S...J...S.l........).:...b.C..@.$...XMH.3.}..VH.H.......IB.OGbC...n....J..c..%...V..h........G`(.x.%..(....30.....s 8,... ..30......n...~...@.\;.b........'v.$.%.....)-....r...H....@=..i.F`yF.'...{...Vc``....w........w1P.....y..!e.5......8eXIfMM........i............................................u..C..@.IDATx..]...E./6.,9..%."A.....8..\|b:==......3...3...gB1....(."H.#If.9....{.=.kzfgvg6...W.+..TWWWU1)i.T)i........L.@.;EeU..Hm.I.+.K.......D..r....\..+... .b..t.9..v.........>.A+a.JTd.....x.....c.~.W\.x.T...T..G..F..k..(..........+#O.'.o........i...'..X....$9q.~....+G.....G.6..'G<.r...2...2..Z.x6g...I..&..K...q......O}4.t-H...Z$?....~.k..t....1..9d.Gx.!...x$.a.5.M.lR3Lb..ZF..G........z....\......e.....5...j=.9d.."N?.`8.$.^.(...G..?it .r...2..~.m.~:.?..a......=e.!....ih.d...D..D......~..&...;.

Chrome Cache Entry: 728

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 580x326, components 3
Category:	dropped
Size (bytes):	25008
Entropy (8bit):	7.932038618798068
Encrypted:	false
SSDEEP:	768:2F1YEeT1mr11V78HXOhPSVslIYT23B1Jtt9BOKfmCn6QRUDMyRUw2S:2MzsBOOpSulIYT23PBOXCn7RUIyKA
MD5:	7E7F455E4EE5760F6E9E79E5A9DDBA69
SHA1:	A76276B026C8AA4BF95A6FCF6442E84068A50DA6
SHA-256:	CF2E42ED337385F522C0C8EBD3E4A4BD0E1E40CEE6BBFA1BB2CC582C137FF7A0
SHA-512:	A9227DDB487576DB7DA2960615D60B5E7716CFF585CE1BD7CDB12F46136E70002B93DE2B48ECB87605E4DFE35CF9079975423762C0EFA05865E73F4C669A22E6
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.......................................................................F.D............................................G..........................!a.1A..Q".2q....B..#Rbr.$..345C...%&6S..c...................................1........................!1..A."2.#Q3a..$4B.Cq..............?......M.:.I4dI.:...%W..@.......PL......@ .....@

Chrome Cache Entry: 729

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	16996
Entropy (8bit):	7.951998046065059
Encrypted:	false
SSDEEP:	384:EO2hjGCIu4YjJGyEY56mKa0WRvd8SnevEypuQ0SKO5Ayg:EO8Z71GyKaW88IOqb
MD5:	75384292281A317DC7EC6AF41FC42A1B
SHA1:	3943685488D21B7C2977095CCAE2BFAD010E159D
SHA-256:	3925761F87F39FC8E3B2C973E537BDE2C0917527A4A4CA128BF7DB2E99DC61DC
SHA-512:	184E522F53A58C57AC2021D7460FCF6D5EC17B2FAB599AB4E02D0CED69E7461FF303CA4540071DC5EA9D31A3620306A9437DCB32CF32E83733645709DE7DF0A3
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/2Cg1D1agoTiOQeKx7vIYfA--~B/Zmk9c3RyaW07aD0zMjY7dz01ODA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-03/499cc7a0-ed42-11ee-bfaf-d62163a45c78.cf.webp
Preview:	RIFF\B..WEBPVP8X.... ...C..E..ICCP0......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 .@...X...D.F.>y8.I$.'...k.P..gn..m.E.;Z...\|a2....5>=ZW.Q.XH.7A.=>...... ....}^u.....H.........>m.?...?wy........}..#...;.S.BQ.....?....1.C.7...z......3...=.?....x.../...................8.o.`...6E.8..'..H{C;.gF..Yj%3.U......x..@/..fS........8..[%..~z\|.I..`yA0.Z..0..^g.A.....m..p.B..5T.....M.]j.)^/6_6.....I.........K...?..}o"f. I......#...v.......1.5...V).S.....V..j.c.K.J}..z#....

Chrome Cache Entry: 730

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 731

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	11314
Entropy (8bit):	7.9256185447013685
Encrypted:	false
SSDEEP:	192:e4sGW1171Zds3OjG/jUfnsDSTZE0gu3jHJxui3G56PcWP/vSdV02RiSMNe:ejOKG/jUcSTZzJxuQG561XSde2RuNe
MD5:	044A692182A19AA9F6913484AB641E87
SHA1:	57AD979B165661931065CA2668DC74C5A9BE79FD
SHA-256:	3172DE9FAB284F5234519A2D06B2A7AAC6875FE9785D796E99D8533DB2DBE10D
SHA-512:	3FBFCA45E45B8B0B7E97B45E9445E5CD01D7D55ED146D27FE72DEC55B5A428716548085246450147350B9A75520C6898E27AA62E64B722642417707129BCA02E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/3URZTH5jLXm7RJvuzhGpyg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/usa_today_news_641/ae7e9fe306293a79dd7ba40f181e26cf.cf.webp
Preview:	RIFF,..WEBPVP8X.... .........ICCP........lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..VP8 .)..0........>y8.H$..).V.0..gnt\.."y.. s...S..[.....{i.+.Wv..........Iz...............4.f.n..[..."uK..>..H.^.....b.../azx..7...........p6.ljf.a..w...se9.Y,:.,>.>.H.)7...8.....#..B,....@...c.../..mB..k.zh1$...s...F....#n..).(.w..X.<.....HR.x.;.l.)....}.?..c.+t..A.i.._.k.M......7...8. ."o..".=wXj...../XtS..;....@....B^Dd0 b..;..&...\|.`.?.Zq.;.,0..B...k........U0}gB..p....7........0?.5w..l..I..y....6f.2.8".

Chrome Cache Entry: 732

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-ByU_4TLr2tTn8GFvXivtqBI_H6qDquVuxEAIqnvRTNOOg_bK_ae_mknAX5ZuQbKBV8um230THQjAUH3Kdw_I1LzD-HiW3lv2vVyhywEeJCT4Q20is
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 734

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1776
Entropy (8bit):	7.822337517384913
Encrypted:	false
SSDEEP:	24:KQ1UDUwerTeNtFZqD7L44yb2yBgoX2KwHiJAFb5oLZ+jHwC8MGVY1yL9RXPkJ/H:KFD54KNtF8r4bdBCKwH35qk9GVmCXXEf
MD5:	95B0D1102103E4F844E3D05B5EE7D9EF
SHA1:	42A973182270C17DD81D95A58A232E21BCFF56DE
SHA-256:	AACAB66EF07754E99923A62FF1116170B9072EB745592B5F8BBBB26E7345504A
SHA-512:	CA20B409EBDF30D341C931B390CD9CE35F60A291D569A40A36547C516DD02FB9663DE49AAF2A40B9CE46DC1D0996B8EF8F2E814137C040A8E87034E71236D29A
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/ny/api/res/1.2/NZAuExEDBV.ML9pCbIYgsw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE2MjtoPTQ4O2NmPXdlYnA-/https://s.yimg.com/os/creatr-uploaded-images/2020-11/c6bce4f0-2a3a-11eb-bfff-80ecd9e0e6df
Preview:	RIFF....WEBPVP8X.........../..ALPH.......m..I..jc..U..c.m.3...1....m...S.....'=..h."b.....LO.V)T.$>.......P.$$$$L..dyM{..V.."...\|m.S.....z..}.P..!D..oxl.....<..b....].r...o...!AA.......%0.J.z..,f..Z.k..K(...].E.....Z....2.R.M..U..e..l\)B...r......(0.U..eT%4<<<<T..JDT1..n.Z..~...... S.#.;q....(..QG.....c...wR..K.....o.$.^PU1.^..Ki.I;'..E........V"R.8...O..{..pe.......I;..l.%K..(...eT6Ur.}.R.....vS>...+D.....n.....f..vT3ZxR...2.UvdC.p}C"e....OM.\|....x...pAvp.iS^=...y.f..<0....H.xS.X\.P...s .[Q............ .s..cq.%).H>K.........c..v..=.......\|....{:.._&.q..D.\.K.2.0.a.ZW.....!.)E.......y..p....&.p.......k#..4.....+.....7..u..E.7.....v.K .m.#.2....\...(......KV....7...7+c..[/..<.Q..Ea&...[.Q.U.b.....D.D?.\...s.D..C5...e.....Da...G....NDd?.....\|..7j...s..(..tS......?..5. ...x......W.Bv.BD55VX[.T...]...g&f.\|.DD.}.n..,.s.-[oa.Ud.H......$.F..6.m6...e..V..,..{Q..S.W...:..}e'J.E.b.6D.'...6...e.Nc..{...,9..h.`.)D.s......C...,....g....".2}..p$Q

Chrome Cache Entry: 735

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:H3:X
MD5:	5CD6E5A6E670FE5B4A9C6BB6E30181A2
SHA1:	303A23B65CC6675EED483BE7E8426B3B64013FD4
SHA-256:	4C1E7CA98E56A457702DF54B05786DDB19A3D43CD5CA652BE6944758741CBA67
SHA-512:	0CEB4499D15A36A0F5EB0D165DB07D7DCCACA0CF69401315376B94D02C4D7FABA69119C31F95559D9C946E397B8500B22BE1BE3E2F24F95DB4FEBA440F21A57F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlUi7xLfpsp0hIFDejd-wA=?alt=proto
Preview:	CgkKBw3o3fsAGgA=

Chrome Cache Entry: 736

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-DNJBOJgkjdFWBDT-XzG1fnvHoIY-Z2u-YjHqa7OuBFHnWQe1YbAaAuz42AVAga31d9WQTLMOaolYBJbLxtE8raDyz80pimGBePBe1xzMrOjT5Hyyo
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 737

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1076)
Category:	downloaded
Size (bytes):	1077
Entropy (8bit):	4.745636273710918
Encrypted:	false
SSDEEP:	24:+5v9oEubO+u9vV4sr0gAsdn1yOTO7u0vO2Zi3pr:+Z9oEubOH994sr0gAs7yOTOi4O2Zi3pr
MD5:	39DDDE4DB3F28C8CF51B3CF0C464593D
SHA1:	7D77ACC65A4F3E8772F2E9F1E809493ECF4BBE3A
SHA-256:	DFE18FFC64AC53C15CFE6164EA9B2D083BF3CD6A4B9EC5FCEE788B1827496F5A
SHA-512:	113890E6F831A8D19121DE869946EEF3896967046956891263A2FC187A9FE267B84B83F41802E7F2BCC469CADBDF16B40FF32627A3C1B9AF4B9B5C4D136AC5BC
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/SectionHeader.CxpecU9U.css
Preview:	.mb-0.svelte-1e5hi02.svelte-1e5hi02{--mb:var(--space-0)}.mb-2.svelte-1e5hi02.svelte-1e5hi02{--mb:var(--space-2)}.mb-4.svelte-1e5hi02.svelte-1e5hi02{--mb:var(--space-4)}.mb-6.svelte-1e5hi02.svelte-1e5hi02{--mb:var(--space-6)}header.svelte-1e5hi02.svelte-1e5hi02{--_font-size:var(--font-5xl);--_font-weight:var(--font-black);margin-bottom:var(--mb);display:flex;align-items:center;justify-content:space-between;font-weight:var(--font-bold);text-decoration:none}header.svelte-1e5hi02 .header.svelte-1e5hi02{font-size:var(--_font-size);font-weight:var(--_font-weight);line-height:1.25}header.svelte-1e5hi02 .header.ellipsis.svelte-1e5hi02{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}header.small.svelte-1e5hi02.svelte-1e5hi02{--_font-size:var(--font-2xl)}header.x-small.svelte-1e5hi02.svelte-1e5hi02{--_font-size:var(--font-l);--_font-weight:var(--font-bold)}header.medium.svelte-1e5hi02.svelte-1e5hi02{--_font-size:var(--font-3xl)}header.desc.svelte-1e5hi02.svelte-1e5hi02{--mb:var(--space

Chrome Cache Entry: 738

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16178
Entropy (8bit):	6.019444548520764
Encrypted:	false
SSDEEP:	384:XEoZOu3ypZUF5mgs4PO7TaHM4Cdoc84+HmpDcbV:XEIOuiUFEgW7vTohHmy
MD5:	0617EF4BF9583C1E26ED95DE9891F9CB
SHA1:	4EA6087C2245D9EF0926082B8FFFF98ACA2CA487
SHA-256:	F8B1D9A66D2E4D6671FAF7AFAC3AA3BD185F727FA70575AB0426C6C327572A39
SHA-512:	8A1EB714F21FBBC4922CF46C368846B8273C58BF7A213B07D10CF3866E8A70C26745D711B87247FCAE754CF5BC2BE9350921160C32B0F21F470AAD95B94D958E
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=m202403260101&st=env
Preview:	{"sodar_query_id":"bw4GZrm8GpTW2OMPzaWf-Aw","injector_basename":"sodar2","bg_hash_basename":"8IdVU_5hiTnoSVFpifzETCOPuU7V9vAnpxqXHqRkotI","bg_binary":"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

Chrome Cache Entry: 739

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	16316
Entropy (8bit):	7.958325954129568
Encrypted:	false
SSDEEP:	384:FvjY1K43YA4RlNiLG0HyZQb4vjs6rkN7JfNmbIjsayQA1Sn1q+4lr:acrRiLfrcsKk/VmIHFA1S1qnr
MD5:	FC2C412DC3FD923C13B3401B24F8BE66
SHA1:	F953D265FC63EA2D4997414D14642396CFB6C0C7
SHA-256:	833290D80858850EE2AEF8A14823AB2D913FD53CEC8D5F14E7EB55810CD1A08B
SHA-512:	42C7A3A52C921D80C49E56B098AF2234638B99756369FFD26E5EABCF498170F7642A8D335E28BF04A393FDA05FF74C44751B37B3F805E47B08662D4254C6C9A4
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/4cpGBzlnhJ0yT7rqoxwXNw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/19f4517308701d1897c1d2429ccc754f.cf.webp
Preview:	RIFF.?..WEBPVP8X.... .........ICCP........appl....mntrRGB XYZ ............acspAPPL....APPL...........................-appl....8.G.m..Oz../................................desc.......0cprt...,...Pwtpt...\|....rXYZ........gXYZ........bXYZ........rTRC....... chad.......,bTRC....... gTRC....... mluc............enUS.........D.i.s.p.l.a.y. .P.3mluc............enUS...4.....C.o.p.y.r.i.g.h.t. .A.p.p.l.e. .I.n.c...,. .2.0.2.2XYZ ...............,XYZ ..........=.....XYZ ......J....7....XYZ ......(8.......para..........ff......Y.......[sf32.......B.......&.......................nVP8 v=...0.......>y:.I$.%&#.{....gl..[...-u.nG..6...h.p.UZ...8.Ag.}...x.......;.....8S.....g{.^.............@^f...;..g..j.`...'.......Xd.`...d.Yk...).N..1....r9.........k...S..>.ly....V...4;2..Y.g.H.jplCw.J.&}&..I......0.4l.Bk.P..)\|i......_2..s...S.M..S>M..?d...$.h.....gY..k.W......r.NE._p...i5...fE...F.P..S..L....8..93.8XB.D.;c.......A...J....o1.:!.....o.E.?.`..4{i..1'EL...u2C+Q..c.[..+I..c#..=YZ[....

Chrome Cache Entry: 740

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (756)
Category:	downloaded
Size (bytes):	757
Entropy (8bit):	5.29213724547985
Encrypted:	false
SSDEEP:	12:Zx39Ay4/cJPTLN+oyLBP+LBQTAvgWEijyJRiiPMDRgEAkRFsH9KjxSEMC4Easgz9:Zxb4UlTotP0BiRDb7p0yEVRF2uxSTMa/
MD5:	D7C281E94F2CBFE3D50A547E5CF496DE
SHA1:	E3048BA0ED738D074C9BCF7CFC6BE18820C061E0
SHA-256:	F10D6A581366ECF6E3F56900902893B84E42743CDE7BDBA3F8C3CE951BB96FE1
SHA-512:	CCF05186734FFC2B7B70F3FFB831B32BA557D21B357C80477769037B04E76B7FDF8692E5DA51F06D75FB560282D44007BA38830B6C1E61723B9867B39F0A7C3F
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/loadConfig.UMts19oF.js
Preview:	import{a as c,b as u}from"./commonUtil.Bb2Cnbsk.js";import{f as l}from"./logUtil.nPJvQAyt.js";const g=new Map([["page",!0],["category",!0],["cryptoUser",!0],["enablePremium",!0],["enableTrading",!0],["inTrial",!0],["rmp",!0],["subscribed",!0]]);async function b(r,{name:t,session:i={page:"home"},forceLoad:n=!1}){const[[o],f]=await Promise.all([c(["config"],r),u(r)]);if(!n){const e=o.getState()[t];if(e)return Promise.resolve(e)}const a={};i&&Object.keys(i).forEach(e=>{g.has(e)&&(a[e]=i[e])});const s=await l(r,{disableDefaultQueries:!0,isRelative:!0,pathname:"/xhr/config",perfLabel:`loadConfig:${t}`,query:{name:t}},{body:JSON.stringify({session:{...f,...a}}),credentials:"include",method:"POST"});return o.updateConfig(t,{...s,...a}),s}export{b as l};.

Chrome Cache Entry: 741

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32038)
Category:	downloaded
Size (bytes):	199900
Entropy (8bit):	5.398976894664814
Encrypted:	false
SSDEEP:	3072:y+41ZqLTW8xRrqSb8qGH77da98HrPwVUG1GukuMuh+Mbzg:rOoW8xVdGda98HriUG1GuEuxg
MD5:	3241B4B261EA425A42D8B91AF5734319
SHA1:	5F6E770EEC3FB0DB3B66FB954992AE32AB7551FB
SHA-256:	7ADCBA957AE048E3B70525A9EECD8942D50417E2BC00094E7A875702540A9957
SHA-512:	38083172325E9F058F044489D75CCCB840DB92D73B1713878587B46086A6DA8060F1367C6C3DCAB38F7683AC2415F2D77BF5D6CB019C5CCECB27515FEC40836B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/zz/combo?pj/sh/202403271817/js/lib/modernizr.min.js&pj/sh/202403271817/js/lib/jquery-1.11.3.min.js&pj/sh/202403271817/js/lib/slick.min.js&pj/sh/202403271817/js/lib/jquery-ui.min.js&pj/sh/202403271817/js/lib/sbi.min.js&pj/sh/202403271817/js/plugins.js&pj/sh/202403271817/js/scripts.js&pj/sh/202403271817/js/prod.js&pj/sh/202403271817/js/sis.js
Preview:	/! modernizr 3.3.1 (Custom Build) \| MIT . * http://modernizr.com/download/?-cssvhunit-cssvwunit-setclasses !*/.!function(e,n,t){function s(e,n){return typeof e===n}function o(){var e,n,t,o,a,i,r;for(var l in f)if(f.hasOwnProperty(l)){if(e=[],n=f[l],n.name&&(e.push(n.name.toLowerCase()),n.options&&n.options.aliases&&n.options.aliases.length))for(t=0;t<n.options.aliases.length;t++)e.push(n.options.aliases[t].toLowerCase());for(o=s(n.fn,"function")?n.fn():n.fn,a=0;a<e.length;a++)i=e[a],r=i.split("."),1===r.length?Modernizr[r[0]]=o:(!Modernizr[r[0]]\|\|Modernizr[r[0]]instanceof Boolean\|\|(Modernizr[r[0]]=new Boolean(Modernizr[r[0]])),Modernizr[r[0]][r[1]]=o),d.push((o?"":"no-")+r.join("-"))}}function a(e){var n=u.className,t=Modernizr._config.classPrefix\|\|"";if(p&&(n=n.baseVal),Modernizr._config.enableJSClass){var s=new RegExp("(^\|\\s)"+t+"no-js(\\s\|$)");n=n.replace(s,"$1"+t+"js$2")}Modernizr._config.enableClasses&&(n+=" "+t+e.join(" "+t),p?u.className.baseVal=n:u.className=n)}function i(){

Chrome Cache Entry: 742

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssu3o9Yq3Yv6vHLlFR8zcgbcp0PbaXppPyAbzePKjwvQ2KevEbVPouP2D4hkUJM714p23I0wa5BWFxwUCRzW3rmidOtRvfnMpo4zILB8SlaShFBY06U48eAPMJ_8ZLmDh42JidV0fg2o8AXpw&sig=Cg0ArKJSzBjHgAZ1GDghEAE&id=lidar2&mcvt=1015&p=0,0,600,300&mtos=0,0,1015,1015,1015&tos=0,0,1015,0,0&v=20240327&bin=7&avms=nio&bs=0,0&mc=0.56&if=1&vu=1&app=0&itpl=34&adk=0&rs=6&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=760569900&rst=1711672895633&rpt=3712&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 743

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2265), with no line terminators
Category:	downloaded
Size (bytes):	2265
Entropy (8bit):	5.635533438742638
Encrypted:	false
SSDEEP:	48:C8bO2baRZuWUusyjuwTTgjN2mAeSs77+TjWTKyQecq:C8bZbaRZuvfwYN2xW7R/cq
MD5:	BA384993F8C8C071C68249A43E00C4BE
SHA1:	9A70A431910BBF67E0D81A01D86ABDF4A908E05E
SHA-256:	D9B90010D553CCF5FA4941E4AC2772B8044592500CC99A69E8109AD24E0D888C
SHA-512:	D6031B261D81360CD2D67BE973243E6BBE0FC823FC41B2CF71F4902B238D05BD7EEB053A3C0128CB18B079C7D33F45CC2C8EBBB5B41726639A47B953D217CA6B
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=93248749&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/712188.gif?partner_uid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=6D366468-71AF-422B-99AB-138A6DAB94F7/gdpr=0/gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pmp.mxptint.net/sn.ashx?&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('ht

Chrome Cache Entry: 744

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=NTM2ZDVhNDktYTNhYy0yOTE1LWUzZTMtYTllNzE4NjY4NjI1
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 745

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 746

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (6949), with no line terminators
Category:	downloaded
Size (bytes):	6949
Entropy (8bit):	6.109748498057448
Encrypted:	false
SSDEEP:	192:ukleQUU9d0PPGmjcPLs7n294iG2rSCHiY2d/eEQRqwxJS:ukleK9dGqLsSnG2uCCYaQowq
MD5:	2656CB3351609ED04A9ECDE34A4FB94B
SHA1:	C05C4B6C2352FEF4FE9F7607228F58E74713634F
SHA-256:	3823CAA28B6DEA916EF9E41CB427D1D5C2DA718869C65EFC7CC9ABE0A631546F
SHA-512:	A9FA29C479BC781BE1B0D5E19978EE09FBA1E028259763A53160C38C90D36A8CDAFA22AB4C2B2C311C2B3F2529F135D274556673889001C27EB1A80B8C494340
Malicious:	false
Reputation:	low
URL:	https://prebid-ny.casalemedia.com/prebid-cache/cache?uuid=02e0f33f-1ced-4fac-a08c-7c29c84516af&iurl=e06fecc7-223f-41a3-93ce-dab22cdfe305&ap=2.210&source=audit
Preview:	document.write('<img src="https://a3558.casalemedia.com/impression/v2/981703/85/co30sf0sigtuqp4bdl4g/88a3db3c-cec2-4d34-9d03-82ff3d7aa3f5?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1711673492&profileIDs=&creativeID=17e362d&pubID=183875&format=banner&channel=site&ap=${AUCTION_PRICE}" style="display:none" width="0" height="0" alt="" border="0" /><script data-jc="77" data-jc-version="r20240327">(function(){\'use strict\';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var k=this\|\|self;function l(a){l[" "](a);return a}l[" "]=function(){};function m(a=document){return a.createElement("img")};function n(a=null){return a&&"77"===a.getAttribute("data-jc")?a:document.querySelector(\'[data-jc="77"]\')};const q=RegExp("^https?://(\\\\w\|-)+\\\\.cdn\\\\.ampproject\\\\.(net\|org)(\\\\?\|/\|$)"); function r(){var a=k;var c=[];var d=null;do{var b=a;try{var e;if(e=!!b&&null!=b.location.href)b:{try{l(b.foo);e=!0;break b}catch(h){}e=!1}var g=e}catch{g=!1}if(g){var f

Chrome Cache Entry: 747

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://cs.lkqd.net/cs?partnerId=59&partnerUserId=CAESEJTzVPhxsNbxAo83M2QShqc&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 748

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.256306466575051
Encrypted:	false
SSDEEP:	3:IU7waifM+pFAk5waifMKY:NwpM+nB5wpMKY
MD5:	631538D4008D6F842DEA6C1086EF1735
SHA1:	BF7FB2B016029213CCDD07022389F9378D964078
SHA-256:	5E533CDA6C462E7A158E2E2F371649BA7A970140BCF957976DD72C1CA73FB0D7
SHA-512:	CE48F607DF4FED664015B63A5A6D674AF0D9B26C022B6A0B421C02A576E13AA9E050B0D31466CD6859FFA09E137CF9CC34BE0FC7C28898B807DF1F2C5F56A9E3
Malicious:	false
Reputation:	low
URL:	https://pa.ybp.yahoo.com/.well-known/interest-group/permissions/?origin=https%3A%2F%2Fwest-bid-gps.ybp.yahoo.com
Preview:	{. "joinAdInterestGroup": true,. "leaveAdInterestGroup": true.}

Chrome Cache Entry: 749

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1016)
Category:	downloaded
Size (bytes):	1017
Entropy (8bit):	5.071855837049676
Encrypted:	false
SSDEEP:	24:OMsjeuHFEUwoL6yhc3XFlQ3KQT0aKLQF7NAA5+HLFs61uH3Ma6L:Nsla66d43K60aKLc+Hxswaq
MD5:	BD02C7FFC870A2404A89AF8EDBB36F85
SHA1:	7B0E4B502293262F48916D7C010CAFAB6BED6676
SHA-256:	394D5936E171091235E37ACF0C04AE2BD7C34E88D3A1FDA2AFA2F20F306553E6
SHA-512:	629EA1AEDBF0E3521FAB1441E177C46030C0BED44642275233274C1C72461CE258727D97EFC4B7052871B88D803E4615AF2427219CCDF2E65D5BDC748DDC7F2F
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/datetimeUtils.wrzNH3Ed.js
Preview:	function m(t,e){if(!e)return"";const n=1e3,o=60n,s=o60,c=s24,l=c31,u=l12,a=Date.parse(e)-Date.now();let i="year",r=Math.ceil(a/u);const f=Math.abs(a);return f<o?(i="second",r=Math.ceil(a/n)):f<s?(i="minute",r=Math.ceil(a/o)):f<c?(i="hour",r=Math.ceil(a/s)):f<l?(i="day",r=Math.ceil(a/c)):f<u&&(i="month",r=Math.ceil(a/l)),t.format(r,i)}function D(t="en-US",e={}){const n=new Intl.RelativeTimeFormat(t,{numeric:"auto",style:"long",...e});return function(s){return m(n,s)}}function T(t,e="en-US",n={}){return D(e,n)(t)}function h(t){const e=new Date,n=new Date(t);return!(e.getDate()===n.getDate()&&e.getMonth()===n.getMonth()&&e.getFullYear()===n.getFullYear())}function M(){const t=new Date,e=g(t)?-4:-5;t.setHours(0,0,0,0);const n=t.getTime()+t.getTimezoneOffset()6e4;return new Date(n+e*36e5).getTime()}function g(t){const e=new Date(t.getFullYear(),0,1).getTimezoneOffset(),n=new Date(t.getFullYear(),6,1).getTimezoneOffset();return Math.max(e,n)!==t.getTimezoneOffset()}export{M as a,T as f

Chrome Cache Entry: 750

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
URL:	https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 751

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28860, version 1.0
Category:	downloaded
Size (bytes):	28860
Entropy (8bit):	7.992498884153561
Encrypted:	true
SSDEEP:	768:7WIrHYDg8fVb6/UnafVYHsXxVSfRI046OK:7JrHw4snausBVSfRI0EK
MD5:	A99B283070AFC519F4816E4300C515D2
SHA1:	65B78D03D56DE125060E61069DEBFC47E38FB3DF
SHA-256:	FC0E2DF417E7959509DF87DF6B4DE2EB1479C8718BC2D8AB0BC70D3753C68560
SHA-512:	6537ED0ABBB667225D75191881F8498C082F1CBFA22BE27B135AA393AA16011561F1A2EE11B09EA9CF3FE0D7884191B56A702256A0BA41B96EEB7019832C3435
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2
Preview:	wOF2......p...........pY...........................8..T.`..T.....s.....L..<.....6.$..0. .....,..V[0nq..k...z...7...V.nb....<{..n..q0.nO......I%.K....c.f.?.rw+..@f .(..{&J.9.Z1a.@..2Z.g.....Ful(......AG.%.Mf..<.h.)...^..-.L..l.......O3.}..%..q..8........i..Z.ux.....[.:......\...)[......T..;}...:..'$;.8h.g.b.a...Q...,n].....3.'gO8..G..V..z....]t..,W.U@96.F.r..K..._u.>..8Q{.3.A.p~.....6`..ck.Q....-..dT.%S.hll@.....$........U@...7{.'M.`$.aZ......"p..G..?.......3a-.=...@.X......SaQ.m"..\y...b.........f.y..\wP?0.......{>...v..R._.&..5....C"D..2$.\|y(.....3....Z.R.V................Z-9.m.vd....33..9-`N..,a..tJN..9-....Osz...<......{....a@R..Xd..9%..-?..$NL.R.M..b..d..)..ma..#b...h(.mK..'....9&.P..:....A..%../.o.lMl#MP.F=....R..x......*..K.....{0@.._...r.t'6.-.]j.^.o.[k:......C)..D.e%..;K..[A.-...k.C........4......%\|H.%....A.A...'tO/.+.xMV\2.:.~]..W.....1.3.s.i".a.c.......)#....~..........p..wu.s.].`..e..:..v.:.P.._......_.y.#...d.U@.X.[}.-o.......i7.

Chrome Cache Entry: 752

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 656x369, components 3
Category:	dropped
Size (bytes):	89455
Entropy (8bit):	7.976313006120451
Encrypted:	false
SSDEEP:	1536:2JrqnHba+6B5SSp+5Qo0ZAEdQ9S3AuK2ZlGixObBVor7r5mOaxPkAKfrXNZLgm:25e7a+6BoSp2SfdQGK2ZlGixeByr5law
MD5:	43B17AE6985891E5305EA8BA04838B7B
SHA1:	6AEAC1AE5DED1C57B56581C4CD8C1D41E0BEA498
SHA-256:	EF0E8F3948484B2FB915CA4420AC149C4073D881D62AC88971ECE3C42AF0AD77
SHA-512:	9390662D29F43ED388F15C4754A37CB803D9F081F3305BA9430AC94AE5DCA26AEF015CF44827915DBEC706A0F7DBCB8E8A24206B5A7781998D341C8304C17E1B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.......................................................................q...............................................^...........................!1.."AQa.q..2...#BR...3br..$C....%456..7Scstu.....8DFv..'GTd......................................:.......................!..1..A"#2.Q.3Ba.R.$Cq...%4S.br..............?..[=..G@.g..d.

Chrome Cache Entry: 753

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9944
Entropy (8bit):	7.900042607310028
Encrypted:	false
SSDEEP:	192:jGWbHIv0JQThOxVlyP5m4oONlSVwRGAE/JN6JiZBGyW8DLvsI1K2xncHp:SwocZxVX4K1JukPTHx2
MD5:	74F0368647E498B5482E2D4B6CD5D04F
SHA1:	201CD9A3AEDAB46117A4FD9F7322207A1071D715
SHA-256:	7248327B8159C8D9306B5389C4447342277A0DE11C6ADB05CCBF96E323CFC011
SHA-512:	1C0BBA17E520FB2744B0E89A2A5013E4BC39E0C28893B0D1C2903341B6E5052364E785D07A1F42555AFD1DC5469FAC913EA00F8CC5B0A275E31346ECD72613D8
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/tXCn99NsQ3wJ0BycVro10Q--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/fbab62a0-ed4a-11ee-bdf3-f469c68a66f4.cf.webp
Preview:	RIFF.&..WEBPVP8X.... ...c.....ICCP0......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 z$.......d...>y8.I$.!.&. ...g;b.j}9.rO...9w../.^g...js.z%.(...We.....n.....s..._~..qs.c}...A.^..y..@O.^....t....Je.m6.M.....?..1........K.Od..\s4V.T..Jt8.....;.BM..+!...xKl)...q.F....#La?.S;..#......}...NV.w...b..........xJn.r....R......0...H....!.H...........f...r\|.V&.O..RC...../...y. .mi.7.YM9..t_=....U.cI^......<.6[+k.\..{z........Is..)-&s.b.s.O.....b.....B.A,@.6..+.a.3a.

Chrome Cache Entry: 754

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 755

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 756

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum.casalemedia.com/rum?cm_dsp_id=65&external_user_id=AAAG7NSuQMmnfwMHSnLCAAAAAAA&expiration=1711759302&gpp_sid=-1&gpp=DBAA&is_secure=true&us_privacy=1YNN
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 757

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (5649)
Category:	downloaded
Size (bytes):	5650
Entropy (8bit):	5.353357341581607
Encrypted:	false
SSDEEP:	96:zQQXPQKId/b5M6E10/b5M6L4RRH1/54Fo0F5q1iUXXUaZ6U2AJ4Tm8fDcLtUFrH/:soQKo/b5M6E6/b5M6L4RN1/5Io841hXk
MD5:	9123A3CDDF1FB3C011E17533D16E5377
SHA1:	0AC7BA24B145E0ED9D2E023AF5DFC1810D3F3B34
SHA-256:	78762B34CC5FD7CD0EADCF5DDEAB8AB96E7DA201950FB40BA4751773CEB71EF8
SHA-512:	07EF11E451B178E6F718C6A8EBC5DDD52F2803965703FA33FFED7044671F8196201CD67E4CE8DC66D8F9DBFC2AD5B2DC3188EFD19EA0207D3A678AD9788AA2A0
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/SectionHeader.BoxADZep.js
Preview:	import{s as K,e as H,b as j,w as W,d as w,f as z,j as q,i as d,p as S,L as C,M as g,k as v,l as A,Z as Q,c as V,u as D,g as I,a as L,t as O,h as P,m as U}from"./scheduler.ErneftFr.js";import{S as X,i as Y,g as N,a as h,e as T,t as m,c as y,b as x,m as $,d as ee}from"./index.DsErXEH0.js";import{V as le}from"./ViewMoreLink.B3HK46JX.js";import{t as ie}from"./commonUtil.Bb2Cnbsk.js";const se=n=>({}),Z=n=>({}),ne=n=>({}),B=n=>({});function te(n){let e,l;const t=n[13].default,i=V(t,n,n[12],null),s=i\|\|ae();return{c(){e=H("h2"),s&&s.c(),this.h()},l(f){e=w(f,"H2",{class:!0});var r=z(e);s&&s.l(r),r.forEach(d),this.h()},h(){S(e,"class","header svelte-1e5hi02"),g(e,"ellipsis",n[9])},m(f,r){v(f,e,r),s&&s.m(e,null),l=!0},p(f,r){i&&i.p&&(!l\|\|r&4096)&&D(i,t,f,f[12],l?L(t,f[12],r,null):I(f[12]),null),(!l\|\|r&512)&&g(e,"ellipsis",f[9])},i(f){l\|\|(m(s,f),l=!0)},o(f){h(s,f),l=!1},d(f){f&&d(e),s&&s.d(f)}}}function fe(n){let e,l;const t=n[13].default,i=V(t,n,n[12],null),s=i\|\|oe();return{c(){e=H("h3"),s&&s.c()

Chrome Cache Entry: 758

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvQFJZwgglHqipQDMykQJiHkRAqhe2J26lLzIPhNlRVolDpDhu0NjoS-RWQP001LOWu3mV9gQJDKHzQPD8TuCUXpvrM1mBcMje8O1wjBW65JjtTm7dxoQSEjC5ioutuiWzvDTlO4Rhowqph90LU0JgvJ-amvYG9G0U&sig=Cg0ArKJSzLmrnqD1fGQDEAE&id=lidar2&mcvt=1008&p=572,951,1172,1251&mtos=0,0,1008,1008,1008&tos=0,0,1008,0,0&v=20240327&bin=7&avms=nio&bs=0,0&mc=0.56&if=1&vu=1&app=0&itpl=19&adk=1481106528&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=760569600&rst=1711672894537&rpt=9424&isd=0&lsd=0&met=ce&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 759

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=7241469&c5=1183300100&c7=https%3A%2F%2Ffinance.yahoo.com%2Fnews%2Fmicrosoft-backed-rubrik-ready-file-231532821.html&c14=-1&c8=Microsoft-Backed%20Rubrik%20Is%20Ready%20to%20File%20Next%20Week%20for%20IPO&c9=https%3A%2F%2Ffinance.yahoo.com%2F&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1711672950387
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 760

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 761

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.461320140211007
Encrypted:	false
SSDEEP:	3:p2i53j2Y:p2e
MD5:	1282EB47F5F79D0D211390E9F58392EC
SHA1:	ECE3F8C380FE035A41C2C1469860597F53A835D6
SHA-256:	D685D878C993CCCA88584DAC71B304AEF94E2A9FF02A18CAD97FE5689D0D263E
SHA-512:	DA622B95C316E46BF836C03BB114DE6E4CD3C4E451C6EFAD7F60CCBB74DE23B9A9E5114FE05956A68381F5F358253594518590739AF4F93A060E2550CC3793DC
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnnfx2jjqf-SxIFDfVYQ1ISBQ0hXxaE?alt=proto
Preview:	ChcKBw31WENSGgAKDA0hXxaEGgUImgEYAg==

Chrome Cache Entry: 762

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1419), with no line terminators
Category:	downloaded
Size (bytes):	1419
Entropy (8bit):	5.290554482292794
Encrypted:	false
SSDEEP:	24:Zdg3kOvVQnbrMlx9w8l9fRWl5Yl7ifkugr/zeuWFB97rb3BeuQcgkzozogkMH6KX:ZULtQPExll9fwl5YJGkn/iuCfrb3p5gv
MD5:	5043A481C515B36358C32B8EA2D581FE
SHA1:	62F528373DD9070C4EC46F5FD53C75BEBF33C985
SHA-256:	77D1A2D51CE7CD15E6B10DECCC9D34C6BBFB316352F9B3896003DD007B66A920
SHA-512:	787A6FFDC12314DE3E2E6BCAAB924E5C4D505F526EDAE3C48E9AC384466C272312BE57B3B9FA57856A8348F68A15B17495AF289E5277EBE3884B788AD11E1E77
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/js/react-wafer-games.custom.modern.5043a481c515b36358c32b8ea2d581fe.js
Preview:	const LOCAL_STORAGE_VARIABLE_NAME="ngyRecentlyPlayedGames",MAX_AMOUNT_OF_GAMES_IN_RECENTLY_PLAYED=2,cleanPath=e=>e.replace("/games/play/","").replace(/\/$/,""),idHeyYahoo="hey yahoo",init=()=>{const{wafer:e}=window,{localStorage:t}=e.features;let a=null;function n(t){let a,n,l;t[0]&&(a=t[0].path,l=`${a}`),t[1]&&(n=t[1].path,l=`${a},${n}`),e.state={recentlyPlayedGames:l,recentlyPlayedGamesUpdateTime:Date.now()}}(()=>{if(a=document.getElementsByClassName("react-wafer-games")[0],a){let l,i=!1;if(t&&(window.wafer.utils.bindEvent(a,"click",(e=>{const{target:a}=e,l=a.getAttribute("data-id");let i=a.getAttribute("data-path");if(l&&i){if(l.toLowerCase()===idHeyYahoo)return;i=cleanPath(i);const e={id:l,path:i};!function(e,a){if(!t)return;let l;e?(l=JSON.parse(e),l=l.filter((e=>e.id!==a.id)),l.length>=2&&l.splice(1),l.unshift(a)):l=[a];window.localStorage.setItem("ngyRecentlyPlayedGames",JSON.stringify(l)),n(l)}(window.localStorage.getItem("ngyRecentlyPlayedGames"),e)}}),{passive:!0}),l=window.l

Chrome Cache Entry: 763

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=5423405387794830934&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 764

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 765

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=45&external_user_id=CAESEFC4he6gaSdOGOH6DAUt81g&google_cver=1&gpp=DBAA&gpp_sid=-1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 766

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 767

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 41 x 330, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2986
Entropy (8bit):	7.595859761626018
Encrypted:	false
SSDEEP:	48:ki3VLqI5DRFJEmlXv+2KpDRFZdtseQURsd1dA1h6wBxANNh4E6LEZU3KgCDj2fbT:7LFDXlXWzzsZj/dEBxab46SKgC+jCMNn
MD5:	C2396079060A7028FA898A73B72AA592
SHA1:	81EE85D797FF9C40A19B15E4130D7F677011C5A0
SHA-256:	1A166EBD6C8872D71EFCEFB4765DB513014B732E1886525C5F2D5DED87071451
SHA-512:	AC8F6403C6F5CD0ACEB315C0EE48DA6A3540D4C012A15A754EFEFE069CB33B6AA3124C3C5C7746185CE4A3EED7898A1AE07C170501AC78CAC16290084255CCA6
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/img/voiceSearch1x-1620383531565.min.png
Preview:	.PNG........IHDR...)...J............jPLTE...IIY..........#)E..\el.")...\dk!w..j.....j..j.'/;.:.....;.....i.....i....#+1$,4.j..............i.$+3....;..:.#2.i..;.#+2.;.....j.....j..j..m..i........l..:....#+2#+1\dj.#).j..k..k.#(/.l.&-5.;..n..n....7....j..:.....j.....;.....k..l.#2.i..:.#1.:..i..i........i........;........;.$+1....=...."%,#,5.j..i........j.....j.....j.....j...........n....#+1[dj.").:.$+1....:.$2.:..j.......#+2.......j..;.$2.j.....k..;....$+3.l...._fk`gn...ddm$$..A....[mm.l..i.....j....\cj................j..k..l..k..l..j.$2.j..:.....j.#+2.;.#+1...$+1.;..k..j..:.#+4.;.$+2.i..<.%.3.=..@........j.....l.....i..C..w..i.....:.#1[cj."(....Z.N....tRNS.............x.........@/....j./...eW'...V#"......}}lbR/+'#...........w8&...........ji^QPJ($$............N;/..................{xtqpoaZN?0%!............\|dZZI<2!.........~{tng`^KGB972...ePG33....k....(IDATh...W.0....).Q..O.pC.......((....,...{...{o.V..Lz'......D}~..%m?$M..{m....u...=W.d.u8.....3**(....bT@.b..x...

Chrome Cache Entry: 768

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27460)
Category:	downloaded
Size (bytes):	28477
Entropy (8bit):	5.401218852271048
Encrypted:	false
SSDEEP:	768:+x2k2XML6IMErjlwDtWLRXNnm7z8o2VolFflKEIL1Qgl3eCwpuc+Otgy+nqGQ5a:u2k2XMRrjuD2hNnguSFfvM1Xl8iOOy+9
MD5:	CB5ECF9602BACDF2275562B0AB4C1CE0
SHA1:	DF3394FE40A74523897988EF0BD7D361B5DED341
SHA-256:	957298BCD853A24CCFE3A4A2BA2D56F4C63D54625F12397B2D1E3A0DFB0A722E
SHA-512:	839509DFD78FBCF297AD91D3343D05084D267D734F5FC5F13C410690BEDF50548B8C4BD619802469266CB1E9C852E1D05C48BCFBCE2132B7BFAE15EAC207137A
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/zz/combo?s:aaq/vzm/cs_1.2.0.js&s:os/yaft/yaft-0.3.27.min.js&s:os/yaft/yaft-plugin-aftnoad-0.1.5.min.js&s:os/yaft/yaft-report-0.3.27.min.js
Preview:	!function(){"use strict";var n=window,e=n.document;function t(e,t,o,r){if(!e\|\|!t\|\|"function"!=typeof n[e])return r();try{n[e](t,o,(function(n,e){r(n,e)}))}catch(n){r()}}n.COMSCORE={_version:"1.2.0",beacon:function(n){t("__uspapi","getDoNotSell",1,(function(o,r){t("__tcfapi","getTCData",2,(function(t,c){var i=JSON.parse(JSON.stringify(n\|\|{})),p=t&&t.gdprApplies\|\|!1;i.gdpr=p?1:0,i.gdpr_consent="",p?c&&t&&(i.gdpr_consent=t.tcString\|\|""):r&&o&&"boolean"==typeof o.doNotSell?i.cs_ucfr=o.doNotSell?0:1:i.cs_ucfr=0,i.c7=i.c7\|\|e.location.href,i.c8=i.c8\|\|e.title\|\|"",i.c9=i.c9\|\|e.referrer\|\|"",i.ns_c="UTF-8",i.ns__t=(new Date).getTime();var s=[];for(var a in i)if(i.hasOwnProperty(a)){var f=i[a],u=typeof f;"string"===u\|\|"number"===u?s.push(a+"="+encodeURIComponent(f)):"options"===a&&f&&"string"==typeof f.url_append&&s.push(f.url_append)}(new Image).src="https://sb.scorecardresearch.com/p?"+s.join("&")}))}))},purge:function(){for(var e=n._comscore\|\|[];e.length>0;)n.COMSCORE.beacon(e.shift())}},n.COMS

Chrome Cache Entry: 769

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 64 x 64
Category:	dropped
Size (bytes):	7634
Entropy (8bit):	7.498775251896563
Encrypted:	false
SSDEEP:	192:0RH0cEb0jlL/0efiklLvMFI+oTiTjSAtnE18oZA1:Kybui6vMgiixRW
MD5:	F3B886D3B9DEFC91979E672DE1824E2E
SHA1:	B75041D5891BF54B61D46DA6EB5D2B0892F76A82
SHA-256:	9E1C8F2BD9309675EE2045BC9D91B55744E30E3BB4F77848E4F1324F445B1A4A
SHA-512:	E0CC5EE1528536BEA739F8ADA16E0380543A58B277A1BC20A65F44AE09F99DF8A30CA0E4AA06DD78586838BD6A3CC6ED7AC08E5B6DDBC98BE79BDF08594C72A0
Malicious:	false
Reputation:	low
Preview:	GIF89a@.@....$&$......dfd...<><...........LJL...<:<...,.,......trt.............TRT,*,...ljl...DBD..........LNL.........................................................................................!..NETSCAPE2.0.....!.....$.,....@.@....@.pH,....a(.u...tJ..A....1,.....B.$.z..t..W....L..Z.....pp^`wb.b....~..q..s$.x.xv..}.T.[..o.a......R.....t......D ....\..y...h. ..............v...QW.....v. ............V.O..^"..\|...V.{W....;q..Q;".........0T....-X..D...H...D#"d.$a.....0.S....$.S(..2...?..d$..'..G,Hj6s..^=Ku..oH.kD.N...!Se.Y.Nl?r.&.!@..Q....$)d_.n.....^.@.K....].\|...l.$...$.I....x..k......F.....Q....e ....d.....s.9...T..+_.....+'^.....6. a...KI8=85...&$z4.xB...;<....EV........0....V....Wu.HB.`.'.z..a.,r...5u.}G...'...(H.T....[.u.\..H....H..C.W..8....8..G,........KU..d.qL...EH .Uo.X.>O.I.......\...Q.N.P.. ..qQ..j...ZL.y.[$.i.........`w.R.2...f.o.@.#..i..zj9cL.....w....y.5.q..p%0..#...m.R)....~.a..)........J\A.......!.....!.,....@.@..$&$......

Chrome Cache Entry: 770

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3771), with no line terminators
Category:	downloaded
Size (bytes):	3771
Entropy (8bit):	5.293003105028217
Encrypted:	false
SSDEEP:	48:dWFMWC16GwgKEty6nQAJR+9ChGZ3qcU2cXIArRRZrUkrnyfBsjys9Y0tj/1p96jK:YMWC16BgXy6nPJRrhEuIyjyKr1dKny51
MD5:	B89CAE0EEFF70E139AF64EED93353C19
SHA1:	218DA476F2FE7CFA2D168CA54D0E4E84956075B8
SHA-256:	FBCACDA475ED69433F5F60034F72C38BF7DFA6D4C89F7EE7A2C2F88945F813B5
SHA-512:	6FDD739D2ADD3CB4D2AC2A825F28216A4A456C9CB4D58A2951877C8E739CAD7F0A88056EF4042FCB0233549FFDAF8DB1724B1942E1F3D459B4E89BF52D38AE6E
Malicious:	false
Reputation:	low
URL:	https://c.evidon.com/durly.js?;coid=1063;nid=162277;ad_wxh=300x600;
Preview:	(function(){var h=/ip(hone\|od)\|(android).+mobile\|opera m(ob\|in)i/i.test(navigator.userAgent)\|\|/Android/.test(navigator.userAgent)\|\|/iPhone/.test(navigator.userAgent)\|\|/iPad/.test(navigator.userAgent);var c="c.evidon.com";var b;b="r231121";var a={},d=document.getElementsByTagName("SCRIPT"),l=window.location.href.indexOf("http://")===0?"http://":"https://",e=l+c;window.BAPStart=function(s){try{BAP.start(s)}catch(q){var o=window._bab\|\|[];var r={};for(var t in s){if(s.hasOwnProperty(t)){r[t]=s[t]}}o.push(r);window._bab=o}};function i(o){return true}function m(){try{return window.localStorage&&window.postMessage}catch(o){return false}}function j(p,o,w){if(h){var q=document.URL.indexOf("http://")===-1&&document.URL.indexOf("https://")===-1;if(q){return 1}var v=window.navigator.userAgent.toLowerCase();if(/android/.test(v)){var r=document.documentElement;var x=Math.abs(parseInt(p,10)-r.clientWidth)<10;var s=Math.abs(parseInt(o,10)-r.clientHeight)<5;return x&&s&&!w?1:0}else{var u=window.navigat

Chrome Cache Entry: 771

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3771), with no line terminators
Category:	downloaded
Size (bytes):	3771
Entropy (8bit):	5.293003105028217
Encrypted:	false
SSDEEP:	48:dWFMWC16GwgKEty6nQAJR+9ChGZ3qcU2cXIArRRZrUkrnyfBsjys9Y0tj/1p96jK:YMWC16BgXy6nPJRrhEuIyjyKr1dKny51
MD5:	B89CAE0EEFF70E139AF64EED93353C19
SHA1:	218DA476F2FE7CFA2D168CA54D0E4E84956075B8
SHA-256:	FBCACDA475ED69433F5F60034F72C38BF7DFA6D4C89F7EE7A2C2F88945F813B5
SHA-512:	6FDD739D2ADD3CB4D2AC2A825F28216A4A456C9CB4D58A2951877C8E739CAD7F0A88056EF4042FCB0233549FFDAF8DB1724B1942E1F3D459B4E89BF52D38AE6E
Malicious:	false
Reputation:	low
URL:	https://c.betrad.com/durly.js?;ad_wxh=300x600;coid=971;nid=101960;
Preview:	(function(){var h=/ip(hone\|od)\|(android).+mobile\|opera m(ob\|in)i/i.test(navigator.userAgent)\|\|/Android/.test(navigator.userAgent)\|\|/iPhone/.test(navigator.userAgent)\|\|/iPad/.test(navigator.userAgent);var c="c.evidon.com";var b;b="r231121";var a={},d=document.getElementsByTagName("SCRIPT"),l=window.location.href.indexOf("http://")===0?"http://":"https://",e=l+c;window.BAPStart=function(s){try{BAP.start(s)}catch(q){var o=window._bab\|\|[];var r={};for(var t in s){if(s.hasOwnProperty(t)){r[t]=s[t]}}o.push(r);window._bab=o}};function i(o){return true}function m(){try{return window.localStorage&&window.postMessage}catch(o){return false}}function j(p,o,w){if(h){var q=document.URL.indexOf("http://")===-1&&document.URL.indexOf("https://")===-1;if(q){return 1}var v=window.navigator.userAgent.toLowerCase();if(/android/.test(v)){var r=document.documentElement;var x=Math.abs(parseInt(p,10)-r.clientWidth)<10;var s=Math.abs(parseInt(o,10)-r.clientHeight)<5;return x&&s&&!w?1:0}else{var u=window.navigat

Chrome Cache Entry: 772

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2310
Entropy (8bit):	7.307778288608409
Encrypted:	false
SSDEEP:	48:5ItpvL1w5y9sGi/tJZpxm5m2tPvfq9DOdws/o+d7pelXG:5Kl9ibnZpk5ma+DGws/B70G
MD5:	497CCD5997490B4E0575A19543A1F2E5
SHA1:	F8B14F24839437C2AA45EEC24D6E7D6DED240981
SHA-256:	8270ADDE2A92CA7FFD59E89740779259AC1B23BF944689F00EBBA9C184BFC30A
SHA-512:	67B7570B7566343CF227D89248080CC146AB19D64064A3F87FE69D6A03B53F8DC6A0B9C65E110603DF35B369A534809357886A77139775F95739A9F3DDA9FF04
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/473513299895995753/images/headline3.png
Preview:	.PNG........IHDR...X..........):...0PLTE................................................c.M@....tRNS.Dw...3..fU."..Ov...vIDATx............................................f.~ri......%e..\....7.&....X..;..;.......3.0#6p.....>z....r..\|.A..M{..V.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$.qIg...._..bWy].E../......X....V..X.N.......l?......m.w.:.I..i$V2......c...r.g!.....b...+.!...c%.[...B.Ar.....^.t.;V.{..ho!.9$w.N...M.zr,..k.1.$..8..cU..u.v....,DZ.. ..u.....be.Vkx.........Q.....q~.k.fu.n(4..[.q..X.G.....p......^d..U.....q....X....<..s.....Da.z....Y..H(PZB$........F4.P.U.%...P..J...`+.Ht.....y.'sO....<..9w..o.=....../%z...u.um..?(./.y..:..zmI.t3.......}M..h.=tK.h....w.g/.x....XL.Nx1.d.. X....l.;..`=...,5,3%....#...;X+3.....C<..5..h..-.....le.T..J.....^.O...~...;X.....t..A..:}NDz.......O....k)a...C.\|KX.........jX._f..#H).Y...5....!...5&,.....3."..g....._...r;lj..a......j`9....\|4I..`..79-..%XS.[..).w,..a..w...aA...[.Vao.$`...o..mq...L.+.#..z.....KYX

Chrome Cache Entry: 773

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20567), with no line terminators
Category:	downloaded
Size (bytes):	20567
Entropy (8bit):	5.787199698422859
Encrypted:	false
SSDEEP:	384:DSlNjjOSgNjuYn30XuFMOpAuXKgS7QhQo+HoABiEOaij:DmjOpuYn3/M3o+H4
MD5:	A531C16F740B20532CCB2DAC03724C6A
SHA1:	3E7E6863CFA28E89E0DC5AA44A503586B5F1E4B4
SHA-256:	A387DA6A68905C6E6DC981148B5BDA4666A8EEB839D86CD4E2C1933FF6D8DD63
SHA-512:	DDC9BF54FCA93861A1A0AE3C09426025ABF4252BA8EBA053153BDFBC952CC0E4E6CC3861C59ECAEACDC7324B053CE8CBADAAB8B850AA6EEE2D1782E43C7E868A
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rx/ev/builds/1.4.8/bcplayer.css
Preview:	.js-focus-visible .vjs-menu :not(.vjs-selected):focus:not(.focus-visible),.video-js .vjs-menu :not(.vjs-selected):focus:not(:focus-visible){background:#151b17}#bc-player.vjs-vpaid-playing > *{z-index:1}#bc-player:not(.vjs-ad-playing) .vjs-ima3-ad-container{display:none}#bc-player.vjs-ad-loading .vjs-title-bar{display:none}#bc-player.vjs-ad-loading .vjs-progress-control{display:none;pointer-events:none}#bc-player:not(.vjs-has-started) .evp-overlay-show{display:none}#bc-player:not(.vjs-has-started) .vjs-title-bar{background:rgba(0,0,0,0.5);height:100%}#bc-player.vjs-has-started .evp-overlay-show{display:block !important;left:5px}#bc-player.vjs-liveui .vjs-progress-control{display:none;pointer-events:none}#bc-player:hover .vjs-big-play-button{background:linear-gradient(45deg,rgba(255,255,255,0.5) 0%,rgba(255,255,255,0.5) 40%,rgba(255,255,255,0.5) 60%,rgba(255,255,255,0.5) 100%)}#bc-player.vjs-ad-loading .vjs-control-bar .vjs-time-control,#bc-player.vjs-ad-playing .vjs-control-bar .vjs-tim

Chrome Cache Entry: 778

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2959
Entropy (8bit):	7.494079608713381
Encrypted:	false
SSDEEP:	48:BbV22ZNkE4gBYP6I1vTh9SIcQHLPsV5/vB+s3RY+QmpAMFaWGU:BJrJ49pRTbcQravB+aO+Qmp7FLGU
MD5:	5CFC2C12DF24283D935BA80016891118
SHA1:	54C02B392D1E34359795D6DE2F52AD9E6DD5E369
SHA-256:	3B38F8EA727B4606E00E1451550AE7F4A02CCA11AED412EA3D8FA21D1F6472B9
SHA-512:	2A3AAC97B225D1134B321576B90D9FF812AFF0517D9D7A3506AA62A8981831A22AC84CFC002D9F8EA3D85E8DF695F3EF71C10D51045F8D6002BF6702434B8B1F
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/473513299895995753/images/headline2.png
Preview:	.PNG........IHDR...X..........):...0PLTE................................................c.M@....tRNS..wD.f..".3..U.......IDATx.........................................................................`v.-t.(.._.e....A....."Jh)...{)E..j')..@.Z..(..PH".KJ..e.._s.u......5...2.......b.X,...b.X,...b.X,...b.X,...b.X,...b.X,.....H......t!I....Ye .G...Z..B...qHV....5... .8d7.Z3,+9...Z.s0YB...x4M..<4.B.dD..\.A....@....<...1..W.^x.#.C...IXV#~EV.G.....{t.L."L..xul..u2........".C~..E=Y..s..,...q..4.9.h...T...R, .8\|P. ....V_......,...\|cT.2..w8\....\|.7d5.-L.Ex......[..hT..{.&..\|.o..1..]...h\|>}..<../.,..mi..R..[{.q<OO..Q;....Y....4.-.`..,E..%....h..A..u.:....J:.8'e.dPV...@..M.7'Y..,....V...,RUh...[..ak....3H ...........3d...+)(..k$.....e[...j[...^p]@.Qm.GDV..e... ..>4.W...\|=x..a..R..<.......!..ev........rr. .p..J.......t.9?EXV...A...S..,.../.......aU..o.]j)....X\|#............4._...r.....\|..?..r.(...UY....n.lk.*.>_.7.'@.~..=.\|(.W..u....Y..)KW..[.e5.6$8.d

Chrome Cache Entry: 780

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3735), with no line terminators
Category:	downloaded
Size (bytes):	3735
Entropy (8bit):	4.835929595261791
Encrypted:	false
SSDEEP:	96:M9xN8LvJKRE38YLZvdV9jqmsol0e3fCkyc:M9xN8bJKRQ88VVsoGe3fJF
MD5:	A03361886464B469ACD3A16CFBD022ED
SHA1:	85862F5A82AE0389B03270BD74EB632E0D66BE12
SHA-256:	DF636670DA8B690EF359C8A48A24ABACD6E8BBD27288E38FB2F24EC922895805
SHA-512:	8AA03B15DE113EE7147A72A83E34E76D7120CD005452F4726B8D61039DE23673AA7A177BB198ADBEDAC64871BA49C5EFD116B9708B84CB0F9E45AE8C48E8C339
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/css/react-wafer-weather.common.desktop.a03361886464b469acd3a16cfbd022ed.css
Preview:	@-webkit-keyframes spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}@keyframes spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}.weather-card-form:after{background:var(--white);border-bottom:1px solid var(--dirty-seagull);border-right:1px solid var(--dirty-seagull);content:"";height:8px;position:absolute;right:8px;top:-6px;-webkit-transform:rotate(225deg);transform:rotate(225deg);width:8px}#grid-layout .weather-card-form:after,#grid-layout button.wafer-geolocation-denied,#weather-widget-next-gen .weather-card-form:after,.weather-card-form.wafer-form-complete,.weather-card-form.wafer-form-inprogress{display:none}.lockerWeather-card-form .wafer-autocomplete:focus{outline:0}.wafer-autocomplete-list{list-style-type:none;padding:0;margin:0;-webkit-transition:-webkit-transform opacity .3s ease-out;transition:transform opacity .3s ease-out;trans

Chrome Cache Entry: 781

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1155
Entropy (8bit):	5.141250611417007
Encrypted:	false
SSDEEP:	24:2d6gomPLjOE6eaxM2PgRiKdPQvbUTUF96q8ouc:c6gNjjOwEnvbYs96qJR
MD5:	BD26C3B0A5BAD3E15D5F7C571832C67A
SHA1:	D4CF49D7FA2F03B42DD8F6D3E2697BBE36D64C01
SHA-256:	96A17F17D8BADD2200BB61A314E34914B090D615EB2A35E72722972AA0593D2D
SHA-512:	B0980DAC7D859FD9CB9437DE7C419B8E4D88D3726E80E30A08BEADCE85B297682BACAC9794AC9E800251034A6087EAAA0C8BC94C88110003D15462D1226B1B0A
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_mail_web_gray.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>icon_prod_mail_web_gray</title>. <desc>Created with Sketch.</desc>. <g id="icon_prod_mail_web_gray" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="icon-mail" transform="translate(0.000000, 3.000000)" fill="#454545" fill-rule="nonzero">. <path d="M0.909090909,14.5454545 C0.407272727,14.5454545 0,14.1390909 0,13.6363636 L0,0.909090909 C0,0.406363636 0.407272727,0 0.909090909,0 L19.0909091,0 C19.5927273,0 20,0.406363636 20,0.909090909 L20,13.6363636 C20,14.1390909 19.5927273,14.5454545 19.0909091,14.5454545 L0.909090909,14.5454545 Z M18.1818182,12.7272727 L18.1818182,5.74363636 L10,9.10090909 L1.81818182,5.74363636 L1.81818182,12.7272727 L18.1818182,12.7272727 Z M1.81818182,1.81818182 L1

Chrome Cache Entry: 782

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2427
Entropy (8bit):	5.140517655437
Encrypted:	false
SSDEEP:	48:j0atdoqY+aoicMh7be+tUew6zsw1jXEQKthsgA8hJjvx5cVdWrb:tGhoicMh7S+tfbzjtXathRpuVAP
MD5:	06760592504BDEB830F062F0DDBE1950
SHA1:	CDB872C6F6E10A6222D7D6A56827C025D6341571
SHA-256:	BB9B811C9257F72961F4276C6F4607E1EB0EC6C8BB0C0F91C10EC3A4B5B561BF
SHA-512:	D67A1AAFB034BB0084EA2B3A999A2479D1E055C7AA1B2D34C921ABF7CA9339A06736C39827E67AC3D2BE4BC2D850E18DF45A0E2AF1E4D18DF91884D7E0792A7C
Malicious:	false
Reputation:	low
URL:	https://dbrd449anfbv4.cloudfront.net/sis-bootstrap.js
Preview:	.var request = new XMLHttpRequest();.var base_url = 'https://dev.api.shopinsync.com'.if(window.shopInSync.env == "staging"){. base_url = 'https://staging.api.shopinsync.com'.}else if(window.shopInSync.env == "production"){. var market = window.shopInSync.market;. var base = market.split("_")[1]+'-'+market.split("_")[0]. base_url = 'https://'+base+'.api.shopinsync.com'.}.var url = base_url+'/remote/administration/sdk_version'..request.open('POST', url, true);.request.setRequestHeader("Content-type", "application/x-www-form-urlencoded");.request.setRequestHeader("Cache-Control", "no-cache");.request.setRequestHeader("InsyncReferer", window.shopInSync.refererDomain);.if (window.shopInSync.hostedPageRef){. request.setRequestHeader("InsynchostedPageRef", window.shopInSync.hostedPageRef);.}.request.onload = function () {. console.log("on load").. if (request.status == 200) {. // Begin accessing JSON data here. var data = JSON.parse(this.response);. if(data && data["result"]){

Chrome Cache Entry: 783

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	76751
Entropy (8bit):	5.470144727924636
Encrypted:	false
SSDEEP:	1536:+FII9uq+8pFCE0ESuUm+SDdklKUjDV1bEfQvit9a+rGCxZ5BIix7h+CukzkRw6Li:+eGB+IJUm+SBkvV1Qcix7hnYT74Qfnxs
MD5:	D07E62ACCFDE3590A60F0E45FCC2EA7A
SHA1:	EBDAA7BFD6CA733361969259D2876E413C50663E
SHA-256:	3C9331B10D95FBF998CD52A1A055B622FF07D7A88A92B3FD55A777264C2F0AB5
SHA-512:	6F4C039370654979141BA7C87B75195AB24005C81611529B60D2243FD85F71AFC3792E970B22C188A9391DE18AA0FE5B10CA40BE9FDAB8B2492150FF569EBECC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uc/finance/srchjs/1.1.67/js/finSearch.modern.js
Preview:	!function(){"use strict";var e=this&&this.__assign\|\|function(){return e=Object.assign\|\|function(e){for(var t,s=1,n=arguments.length;s<n;s++)for(var o in t=arguments[s])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e},e.apply(this,arguments)},t=1e3,s=60,n=60s,o=24n,i=7*o;var r={second:45,minute:45,hour:22,day:5};const l=1500,a=["https://query1.finance.yahoo.com","https://query2.finance.yahoo.com"],c={SEARCH:"/v1/finance/search",TRENDING:"/v1/finance/trending"},d="fin-srch",u="finSearchAutocomplete",h="nav",m="quotes",p="screenerFieldResults",g="lists",_="news",f="recommend",v="researchReports",b="finSearchContext",C="fin-search",x={ALL:"all",RESEARCH_REPORTS:"researchReports",QUOTE:"quote",HOLDERS:"instituationalHolders"},y={[m]:{title:"SYMBOLS"},[_]:{title:"NEWS"},[g]:{title:"LISTS"},[v]:{title:"RELATED_RESEARCH"},[f]:{title:"TRENDING"},[p]:{title:"HOLDERS"}},w={[x.ALL]:[h,m,_,g],[x.RESEARCH_REPORTS]:[h,m,_,v,g],[x.QUOTE]:[m],[x.HOLDERS]:[p]},L={[x.ALL]:{quotesCount:6

Chrome Cache Entry: 784

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (10742)
Category:	downloaded
Size (bytes):	19130
Entropy (8bit):	5.674971415535606
Encrypted:	false
SSDEEP:	384:5BYNcNQ2wc3MmVgyArumVgyagguOmGHPLW2Pj2adHp/:5Qc3wcFACmVgPgvOmGHy27hp/
MD5:	D940B80885A7EFEFDFF6967A36CEE577
SHA1:	34C11224FCEEBEA93DB3C2E918774500E09899D9
SHA-256:	DF868B5E6CB68F6455A27EAE43632DFAC787B6442326D031AF2A910BB51E4FD4
SHA-512:	3C583272FDF0CCA6DC0AD53F4CF2CEF83529D5F9BCA8543654EDB6A7DB469A4509C081B7F02FF34431F586CDAA1491D1D946E51B4D712E189D156DDBD9544DF2
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/initializePage.Bz59rdd0.js
Preview:	function __vite__mapDeps(indexes) {. if (!__vite__mapDeps.viteFileDeps) {. __vite__mapDeps.viteFileDeps = ["./ErrorMsg.vL5JXdY9.js","./scheduler.ErneftFr.js","./index.DsErXEH0.js","./Icon.CDBsrPKz.js","./spread.CgU5AtxT.js","../assets/Icon.5Pcv_1eF.css","./commonUtil.Bb2Cnbsk.js","./stores.CtqIvex8.js","./entry.CqbZzrN3.js","./control.CYgJF_JY.js","../assets/ErrorMsg.D0PsIY48.css"]. }. return indexes.map((i) => __vite__mapDeps.viteFileDeps[i]).}.import{_ as Q}from"./preload-helper.BQ24v_F8.js";import{a as P,b as S,O as W,h as x,M as ee,P as te,F,Q as M,E as Y,T as re}from"./commonUtil.Bb2Cnbsk.js";import{a as K,l as _,f as E}from"./logUtil.nPJvQAyt.js";import{l as $}from"./loadConfig.UMts19oF.js";import{g as ae}from"./i13nUtil.0wCphNmh.js";import{a as ne,b as ie}from"./loadPortfolios.D7blfiZv.js";import{k as B}from"./plusUtil.DbMydUBe.js";async function se(e,t){const r=Date.now(),{fetch:i}=e,{page:a}=t,[[s],{lang:o="en-US"}]=await Promise.all([P(["i18n"],e),S(e)]),l=new Set;if(aw

Chrome Cache Entry: 785

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	50266
Entropy (8bit):	5.364948591158085
Encrypted:	false
SSDEEP:	768:x8HRVYb/9XQj3AGnW2xvj3lOzTP8dADM7f2HuDslY9SQkpDN:+zYrRQj3XhRj3aEv2HuDiYK
MD5:	665798D28ECF9BE7CBC434E75267920D
SHA1:	55864F76F012BB11A354C6BACDCC7769A5EC6FA2
SHA-256:	7BC917EBEE12BCD521AE88840228032579459C25A3CCF8953D8A2DBE5E085BE9
SHA-512:	6191D7396F72B8E362B1ED6444F17C645A8F921495936713C90DB6947B793A0178C6D0BB0E902786768C36B6BA254728EBA6A740F935C22A9F9029F6D3CC8AF8
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/ss/rapid-3.53.30.js
Preview:	!function(){function re(l){var c={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:"aol_utd",filter:function(e){e=e.match(/((?:\\|\|^))gd#[^\\|]+/g)[0].split("#")[1];return 24!==e.length&&console.warn("_utd value may be malformed"),e}},RSP_COOKIE:{log:!0,key:"aol_rsp",filter:function(e){e=e.match(/(?:(\&\|^))sn=[^\&]+/g)[0].split("=")[1];return 24!==e.length&&console.warn("RSP_COOKIE value may be malformed"),e}},GUC:{log:!0,key:"_guc"},OTH:{log:!0,key:"_li",filter:function(){return"1"}}},u={};this.getCookieByName=function(e){return u[e]},this.setRxx=function(e){var o=-2,t=(document.domain\|\|"").split("."),r=t.length;function a(e){return"."+t.slice(e).join(".")}function s(){var e,t=a(o),n="rxx",i=u[n];i\|\|(e=(new Date).getTime()-14383872e5,i=parseInt(Math.random().toString().substring(2)).toString(36)+"."+e.toString(36)+"&v

Chrome Cache Entry: 786

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2399)
Category:	downloaded
Size (bytes):	2400
Entropy (8bit):	4.959079123497969
Encrypted:	false
SSDEEP:	24:J1Q4Tm1XJ0gtqa/xGyZghxGyGVPxG3vixGp07xG1xGXvleHDxGJqxGivVRZD0DlG:fyOEvame9RZ258zAXrDVYvn
MD5:	617C973910E671DF3B89B58ACD29C4D4
SHA1:	D4A2942B5DA878ACBBC7E382E397E48F517ED3A2
SHA-256:	8B1FC1A52A79D9E04F5FFA19BF42013AC72B8C6733202E389B8640C71D07DA5F
SHA-512:	3AF4F5960F7CEC7FC56EEDAC81AA47D9AF32EAA83D330545835360282110A66EED433E1C01C02B4318F55C6EAAB340335F7B61C6D622CC4E33DEE1AAD6BCB42A
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/Debug.Be8r5cPM.css
Preview:	table.svelte-1crnwp0{table-layout:fixed;max-width:100%;border-collapse:collapse;overflow:auto}table.svelte-1crnwp0 th{text-align:left}table.svelte-1crnwp0 td{word-wrap:break-word;padding:var(--space-1) 0}table.svelte-1crnwp0 tr td:first-child{width:30%;font-weight:var(--font-medium)}table.svelte-1crnwp0 tr td:nth-child(2),table.svelte-1crnwp0 tr th:nth-child(2){padding-left:var(--space-2)}table.svelte-1crnwp0 tr:nth-child(2n) td{background-color:var(--surface3)}.flex.svelte-1sg9oy1.svelte-1sg9oy1{display:flex;justify-content:left;margin-bottom:0;padding:var(--space-2);gap:.8rem}.summaryFlex.svelte-1sg9oy1.svelte-1sg9oy1{display:flex;align-items:center;gap:var(--space-3);position:relative;width:100%}summary.svelte-1sg9oy1.svelte-1sg9oy1{cursor:pointer}.summaryText.svelte-1sg9oy1.svelte-1sg9oy1{font-family:var(--font-family);font-weight:var(--font-medium);font-size:var(--font-s)}.perfItem.svelte-1sg9oy1 .perfItem{background-color:var(--surface3)}.perfItem.svelte-1sg9oy1.svelte-1sg9oy1:ho

Chrome Cache Entry: 787

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	581
Entropy (8bit):	7.53980940925687
Encrypted:	false
SSDEEP:	12:6v/77ZD226FOUDK4PA/mtr51RHwtU4B+borxJFMlu0qv4r:CVmTpYuz/IUDElSuNY
MD5:	2697F4B848D2400CD051312585A6BF42
SHA1:	4704E96C89391D96F6BA1999C727CE8661A36F23
SHA-256:	528B6B3E8EDB272A61E1D3B10F11AF0D241680684143FB5339FA2758A3E65187
SHA-512:	1BFB0F7A646FFC61B0C98CA1D91AFA4FE426DB0025FA70167BD1B229E2F4013E3358E285B2E5674A4F102CA35C80D8B6D52E9BDD4B35CD140FDE03C40CF79E89
Malicious:	false
Reputation:	low
URL:	https://c.evidon.com/icon/ci.png
Preview:	.PNG........IHDR..............D.,....IDAT8...=HUa......\..J..Q..b...H...ii3...=... ....B..Z"htQ[...!...D.)~.W.y. .....O..........A..._........N<y...Z.9.....V.Q2F.t...I...u.f...fu.."..&J.@...s.^\..CI.+..U...j.03..l.k.......K.....]..C.F_b..D.-(...Y\| v..i...[..f.w>..>..y........3.s.S.y.r.fMu.4....B...<.MB.w.....C.%K`..J...D$..r.1....."...dl:X.x.-.Dd..R0.._....b..+......[..\|6Z...=..H....p...H...}...M..O.....q..c/.a.2.... iq.T...o...1W..10X../.H.."2..5..N:......l...V+c.F)....Ela.[...................C.r..'..E.B...v~...S8*1...A.L.......[)......IEND.B`.

Chrome Cache Entry: 788

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17572)
Category:	downloaded
Size (bytes):	18165
Entropy (8bit):	5.653435632518094
Encrypted:	false
SSDEEP:	384:Ep2K696g5H5zhHZDIgcuuTZmAcTTQp05yiWeaenqGElHKN/:M2KOH5r/UVQj/aenRElqd
MD5:	0C4D3AB97EFA1A507DD8F13E313ABF93
SHA1:	69A2C481F8C5DB9FE2B3AD071EDC08018AD91E73
SHA-256:	38CCDB27CEE0901E4C014932EA698307899F9641336B8AD01D424D083E214BFE
SHA-512:	45145813E2BDD627B86C537A9CDBBFE29AC712D6AC3D56C17F2CE05F3C5AD8A1B48342812D713625505E7DA62F88238BEE6DFDBA76FD0F8ACE923CF400A0358C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/OMzbJ87gkB5MAUky6mmDB4mflkEza4rQHUJNCD4hS_4.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var m=this\|\|self,q=function(B){return B},N=function(B,u){if(B=(u=m.trustedTypes,null),!u\|\|!u.createPolicy)return B;try{B=u.createPolicy("bg",{createHTML:q,createScript:q,createScriptURL:q})}catch(D){m.console&&m.console.error(D.message)}return B};(0,eval)(function(B,u){return(u=N())&&1===B.eval(u.createScript("1"))?function(D){return u.createScript(D)}:function(D){return""+D}}(m)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var e=function(B,u){for(u=[];B--;)u.push(255*Math.random()\|0);return u},Bu=function(B,u,q,D){for(q=(D=O(u),0);0<B;B--)q=q<<8\|A(u);L(D,u,q)},us=function(B,u){104<B.h.length?U([y,36],B,0):(B.h.push(B.A.slice()),B.A[227]=void 0,L(227,B,u))},DM=function(B,u,q,D,T){for(T=(B=(D=B[3]\|0,B[2]\|0),0);14>T;T++)q=q>>>8\|q<<24,q+=u\|0,D=D>>>8\|D<<24,u=u<<3\|u>>>29,D+=B\|0,D^=T+1635,q^=B+1635,u^=q,B=B<<3\|B>>>29,B^=D;return

Chrome Cache Entry: 790

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	286
Entropy (8bit):	5.0961924771159595
Encrypted:	false
SSDEEP:	6:H69mc4sl3O4pTi3tSB89mc4sl3O4/eigVh9SS6Cz:a1PR2SBE1PGish9jz
MD5:	A739332271CB5BA310E1690F89836903
SHA1:	F315219A0AC9678AB96018E446A2B7BA757BA0C5
SHA-256:	E52011A4F288DE5C720C2285D063FB1DD4F2F7857A37B7F3AEE480C6DB8251F1
SHA-512:	F0B4589E87673C5EF9DA85786DF2CB3DF3B63477B616A8876E240BD97849353E0301B4EA95012B1DBC7C3C18C3E7F5E4BA48C5722F6D07739A7ED1AC0028A74C
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/chevron_right.BNCVu0EK.js
Preview:	const s='<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M15.41 7.41 14 6l-6 6 6 6 1.41-1.41L10.83 12z"/></svg>',w='<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M10 6 8.59 7.41 13.17 12l-4.58 4.59L10 18l6-6z"/></svg>';export{s as L,w as R};.

Chrome Cache Entry: 791

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 400, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	399168
Entropy (8bit):	7.99792935646495
Encrypted:	true
SSDEEP:	6144:s/qQmU7BELoncRGVDIj5HaCLkc50ObZ7rcj53OshTOjaafYjvwUaNG4J5ljQrCuZ:s/qqEMVUjs1OhU3BOuYMIFNJZErddsy
MD5:	281DA85394835FFD5D30DF3F6BA6A474
SHA1:	BAACBC1A47E506923143EE30E78C277AF95A276C
SHA-256:	74E5B897D38EB5FE3090FEC6F5A976A4628B40BE9D8B190BA458EB848CC0D508
SHA-512:	8E1B47712D06F1762C43AA2575DB8CCA37EC7BC3C1134AF7C32F36DC92225AF7FB767D8E519DA234CEA6F0F94C8F816DE002546EBF5E962AEB25E82D2A40C90C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X..........W......tEXtSoftware.Adobe ImageReadyq.e<...viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e8339058-b824-504a-8cfe-46508115715b" xmpMM:DocumentID="xmp.did:C69F69A8DF6611EEBA1CD06CA657CB5E" xmpMM:InstanceID="xmp.iid:C69F69A7DF6611EEBA1CD06CA657CB5E" xmp:CreatorTool="Adobe Photoshop 25.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:13d07e22-0b79-5b4c-967b-fe46dc2a6c79" stRef:documentID="xmp.did:e8339058-b824-504a-8cfe-46508115715b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..R...`IDATx...d.y.v...Y...tO.f0

Chrome Cache Entry: 792

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuVgO1nVIEPoAXH8P0rqUyFLvWBYO5ToeXKjP4qG5AcaemA4Vzz5T8VWOGCan3zPrtr4pK_5TWGgh4ROLlQHj8GlBhT-OEfpvC4DChMffiGwAelaljnEpRd_sfkELmaQtC77XsCkDWfplRB1-1T2BLmyiKCiWjyKlo&sig=Cg0ArKJSzJrJFWqs60aSEAE&id=lidar2&mcvt=2149&p=84,146,334,1116&mtos=2149,2149,2149,2149,2149&tos=2607,0,0,0,0&v=20240327&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=19&adk=3690920304&rs=4&la=1&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=760569600&rst=1711672894724&rpt=36133&isd=0&lsd=0&met=ce&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 793

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28860, version 1.0
Category:	downloaded
Size (bytes):	28860
Entropy (8bit):	7.992498884153561
Encrypted:	true
SSDEEP:	768:7WIrHYDg8fVb6/UnafVYHsXxVSfRI046OK:7JrHw4snausBVSfRI0EK
MD5:	A99B283070AFC519F4816E4300C515D2
SHA1:	65B78D03D56DE125060E61069DEBFC47E38FB3DF
SHA-256:	FC0E2DF417E7959509DF87DF6B4DE2EB1479C8718BC2D8AB0BC70D3753C68560
SHA-512:	6537ED0ABBB667225D75191881F8498C082F1CBFA22BE27B135AA393AA16011561F1A2EE11B09EA9CF3FE0D7884191B56A702256A0BA41B96EEB7019832C3435
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2
Preview:	wOF2......p...........pY...........................8..T.`..T.....s.....L..<.....6.$..0. .....,..V[0nq..k...z...7...V.nb....<{..n..q0.nO......I%.K....c.f.?.rw+..@f .(..{&J.9.Z1a.@..2Z.g.....Ful(......AG.%.Mf..<.h.)...^..-.L..l.......O3.}..%..q..8........i..Z.ux.....[.:......\...)[......T..;}...:..'$;.8h.g.b.a...Q...,n].....3.'gO8..G..V..z....]t..,W.U@96.F.r..K..._u.>..8Q{.3.A.p~.....6`..ck.Q....-..dT.%S.hll@.....$........U@...7{.'M.`$.aZ......"p..G..?.......3a-.=...@.X......SaQ.m"..\y...b.........f.y..\wP?0.......{>...v..R._.&..5....C"D..2$.\|y(.....3....Z.R.V................Z-9.m.vd....33..9-`N..,a..tJN..9-....Osz...<......{....a@R..Xd..9%..-?..$NL.R.M..b..d..)..ma..#b...h(.mK..'....9&.P..:....A..%../.o.lMl#MP.F=....R..x......*..K.....{0@.._...r.t'6.-.]j.^.o.[k:......C)..D.e%..;K..[A.-...k.C........4......%\|H.%....A.A...'tO/.+.xMV\2.:.~]..W.....1.3.s.i".a.c.......)#....~..........p..wu.s.].`..e..:..v.:.P.._......_.y.#...d.U@.X.[}.-o.......i7.

Chrome Cache Entry: 794

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	539
Entropy (8bit):	4.9325882804128085
Encrypted:	false
SSDEEP:	12:hYyzFSHq2Sszvr2FIEDdJf4xJqbIEvqi3i8SHq+Qd33qJmW7V4NGL:hYyzoK2SwvrmVdJfG+/iDKhVMnV4Nu
MD5:	2AA7EF0B22F0B66CAFBDAACFF599771D
SHA1:	79933B3A90D25AC8F7D2223A274792244DA81F4B
SHA-256:	9CA89731319743AABEDC04E5FD134EDB79EF0B3E761587958ACBD9BA21D0093B
SHA-512:	AFAD8749CCC5C697DBABCCA7E6DD1BB0BF3A77D1D11F0C875A6A8E5FCA46447C71D4EF494D603A054AA9B01D7BCBFB87DB432B4F4197C72B246457EDF12FA85F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rx/ev/builds/1.4.8/pframe.html
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="UTF-8">. <style>. html, body { width: 100%; height: 100%; margin: 0; padding: 0; overflow: hidden }. #pframe-root, #pframe-player-container { height: 100%; }. </style>.</head>.<body>. <div id="pframe-root">. <div id="pframe-player-container"></div>. </div>. <div id="pframe-overlay" style="position: absolute; top: 0; width: 100%; height: 100%; z-index: 100; display: none"></div>.</body>.<script type="text/javascript" src="pframe.js"></script>.</html>.

Chrome Cache Entry: 795

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 796

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x180, components 3
Category:	dropped
Size (bytes):	18076
Entropy (8bit):	7.933862964803591
Encrypted:	false
SSDEEP:	384:Zt8rvxQUA2sQpN8ARHKr/h3KR6xCRFX23NSubY+Fbj:U7WUA2NvRKDhaQxCbX2dSubY+Fbj
MD5:	546BA6670C66487780D0D08C1D6886E0
SHA1:	24DBC1D980077EF92146A3A60E344199E705C6A8
SHA-256:	3BF5083D99F68150CA35862E48578A909C2CEE390AEC79DD2D2BCF46DF063C1F
SHA-512:	9D793F0480BE5EA33DC87530462744BCA1D36D7EF24E03FFC22731732EDF9827D43E9A2A02B2336B67590FEA92101D391514F88DE565AF5C8F2530C693F18DED
Malicious:	false
Reputation:	low
Preview:	......JFIF.............4ICC_PROFILE......$appl....mntrRGB XYZ ...........9acspAPPL....APPL...........................-appl...g.F.K.Dn..u.................................desc.......ecprt...d...#wtpt........rXYZ........gXYZ........bXYZ........rTRC....... chad.......,bTRC....... gTRC....... desc........Display P3..................................................................................text....Copyright Apple Inc., 2015..XYZ .......Q........XYZ ..........=.....XYZ ......J....7....XYZ ......(8.......para..........ff......P........sf32.......B.......&.......................n...C....................................................................C.........................................................................d............................................I.........................!..1A."Qa..q.#2..3BR...$%b..4r..5CSs....&DTc..................................).......................!1...A."#2Q.3a.B............?....^\....t.0..&.s../.......x.1B_d[V.=...#.65...f.VVMkV....y.N.z

Chrome Cache Entry: 798

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlQx4henF9gPBIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 799

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=133&external_user_id=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&pi=index&gpdr=&gdpr_consent=&us_privacy=1YNN&user_id=ZgYOPsAoJI0AAAi4ADlhawAA%261617
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 800

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=sharethrough_ob&google_hm=ZWQ4M2U3N2MtZGNiYy00YWI5LTlmN2YtMjk5ZTJlYzk2YjRi&google_push=AXcoOmQkEDMPLHr4bLY1ID9yPrRMWIKHOOKPGOwg3-2PX70HSx7RMpTen9pxlysqYhM465Y1gHMzRYL-gcYsRB4cLSp0LRTEgIneJQ
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 801

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 802

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65255)
Category:	downloaded
Size (bytes):	242628
Entropy (8bit):	5.574789172946324
Encrypted:	false
SSDEEP:	3072:a9r/YYCBbbJmbXJgf70OBb7XtnZQSjoeEpYpr10BPHYRo9nYpPUkJz/a0AKx:wr/YYCBbbJmbXJS10hHYRoYUkJzS0AE
MD5:	149CE584919E78F761A4167A972497DE
SHA1:	C1CDD2CC0CCD2584942E8BE793A6A4B94CDD9C94
SHA-256:	589D46BF9DE7CA98617675FC2ABFF0F7C20F5A3D0971F6D220CC5935A0FB3F0C
SHA-512:	1AE86C58D3312798CF1568EED584F05B19FA2189305F6F8A1A15CF26BD0F5863FF2B84B48DCEFE0368AA721A855809C7E0D0AF56D70AEA3DA68BE04F7E251BFE
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rx/ev/builds/1.4.8/evplayer.js
Preview:	/! For license information please see evplayer.js.LICENSE.txt /.(()=>{var t={1556:function(t,e){"use strict";var i=this&&this.__spreadArrays\|\|function(){for(var t=0,e=0,i=arguments.length;e<i;e++)t+=arguments[e].length;var s=Array(t),n=0;for(e=0;e<i;e++)for(var r=arguments[e],o=0,a=r.length;o<a;o++,n++)s[n]=r[o];return s};Object.defineProperty(e,"__esModule",{value:!0});var s=function(){function t(t){void 0===t&&(t="anonymous"),this.name=t,this.i={},this.u=0}return t.prototype.destroy=function(){this.i={}},t.prototype.addEventListener=function(t,e,i){return this.i?this.l(t,e,i):""},t.prototype.addEventListeners=function(t,e,i){var s=this,n={};return this.i&&t.length?(t.forEach((function(t){var r=e.bind(i,t);n[t]=s.l(t,r,i)})),n):n},t.prototype.on=function(t,e,i){return Array.isArray(t)?this.addEventListeners(t,e,i):this.addEventListener(t,e,i)},t.prototype.removeEventListener=function(t,e){this.i&&t in this.i&&Object.prototype.hasOwnProperty.call(this.i[t],e)&&delete this.i[t][e]},t.

Chrome Cache Entry: 803

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28108, version 1.0
Category:	downloaded
Size (bytes):	28108
Entropy (8bit):	7.992351824245756
Encrypted:	true
SSDEEP:	768:o6m1WFrUPQJP0/BW6+Vg3dLCwJqMFkAY3dNh5r8uvp:W1coPQ6Fig3FCiqMu9
MD5:	58B9E3CA84ACCC5D50AC893317CD6705
SHA1:	FD393C1F50FD2F771DEB92BF8B26BD39F97DB2C5
SHA-256:	22E9E86D745200109FBCB3E96695307FEA67880FCA509728194B2CFCE3906FA7
SHA-512:	B28EC5CF5199E84F0CD3404BD3521850132B462F3587F0FA8B85805730F6A35627C16F0101246DD2FCFEF43BA20C9002B21AD6566B44E2016CF556127ECFAF4C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.woff2
Preview:	wOF2......m........,..mj..............................T.`..T.....s.....h..X.....6.$..0. ..d..,...[.nq...D.QP.m.P......8'.s;..m...`.^.6....cf.....IE.L:L.m.PED.....HAQ3.#..}.J..L_:\|.\.[...........C.=.wS2]2.Y2e...O8".Hr.+.#-_.j..4.Mpw..\|h){.b..<.e`...,.I.YxXx....S.....Lp.....f{..5...c.]....{#......c.a.....Oj,.gA"....6RA....jXQ.\d....).......J_<.5.A...;5r\|...J-.E....qt...i..E.F...M..(...HVN.$_...._..7...tiAT.R.KJ..n.{Ds.....$.K......)&m.TD)5....F.Z.P....R3.I...o3..5w....'......5p..h.....Bk..U.l....=..=. iV.H....,X.o....b.w.>....2....A.....d~A..~..+..@d....A@B)Q...E..h..g..\..h....6...-"...o.E.Z..=...g.Y....%..#0$......%9......!0`...Y....Y=q...Zb]...l.Dd`..N..V.r\...t....y.@#N(\.'N}?....p.z..V..@.<....V[CB..N.u....c6x...S...{.....z).l:./{t.a.P..3.\......3..X1Y..W.;......<q...,...._9$6......b-.r..QA...$..DCj.S~`]^..}.O.oc.......J .&..m........&,A4Hn.....f.\y.%YYIV.D.KV.K.i....Q ...u._3.[.R.T*.J%..<y....4..0..6...........F.\.6.`6.=.......m...zi..o.X.

Chrome Cache Entry: 804

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13914), with no line terminators
Category:	downloaded
Size (bytes):	13914
Entropy (8bit):	5.258346764050396
Encrypted:	false
SSDEEP:	384:3x7q46AEQ42tWCnPfQefR7GDD6Ub45XBB8qQMmF88zzAqSeXHr4baLHDW4XbXZ34:B7q46P5gp7GD9b45s3kjeXr4UjW4XbXm
MD5:	69831B2F7B26BC6DD6321C8DCDE85968
SHA1:	BE0D47A076698915D827447B210BFFAB24AF3BC7
SHA-256:	ED22526F9ADCDD172C698E0DFC9FA3EE064A96A27BED3335931C4B2BDDF4EEE9
SHA-512:	2804AEA752858CBE2020FE5977B1BD4F064026D758ACF19176498F70DB4026604DFFABC9350F61E1022AD405BD46C01080B4F65E579AF6BA1E2C326E356771B0
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-lightbox-1.10.6-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-lightbox",[],t):"object"==typeof exports?exports["wafer-lightbox"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-lightbox"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(o[n])return o[n].exports;var l=o[n]={i:n,l:!1,exports:{}};return e[n].call(l.exports,l,l.exports,t),l.l=!0,l.exports}var o={};return t.m=e,t.c=o,t.d=function(e,o,n){t.o(e,o)\|\|Object.defineProperty(e,o,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var o=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(o,"a",o),o},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,o){"use strict";function n(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurabl

Chrome Cache Entry: 805

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	4036
Entropy (8bit):	4.231205525589748
Encrypted:	false
SSDEEP:	48:0FShNCErB/UvfD9Fkg/8Fag/AFCg/JF5g/dF+g/lWF/gWCEIB/UvflWF/gyA15YV:04NCEr9QD9/O/q/W/r/ZWCEI9QZyuYV
MD5:	3E2E276BE058563BA333F48090FF37D6
SHA1:	E63626697727315330ABD95F47389E29D334A45A
SHA-256:	BEBDF09FF379D74241ED0A836D397B85BBBF0D8679A6BEAEA693CD95D3B75EE9
SHA-512:	ABBA4C054AD07EFE085765B2943B0878EA7A62C8E482FF9E77B7192C96DCA1AD89B92969B8D620FD90F9ED4553FEB0BE896435F278885E3735BC0BB3B061A7FD
Malicious:	false
Reputation:	low
URL:	https://west-bid-gps.ybp.yahoo.com/bid/yoo/adslot/13885/?pa=1
Preview:	<!doctype html>.<html lang="en">.<body>. <script>. (() => {. const run = () => {.. const origin = "https://pa.ybp.yahoo.com";. const interestGroups = [{. name: "2921131",. owner: `${origin}`,. userBiddingSignals: {},. trustedBiddingSignalsUrl: `${origin}/v1/getvalues`,. trustedBiddingSignalsKeys: ['2921131'],. biddingLogicUrl: `${origin}/opus/tag/gps/bidding-logic.js`,. ads: [{. renderUrl: "https://pr.ybp.yahoo.com/pr/secure/true/crid/crpbYp26RkScwdgl-rNulQ/pa/1",. allowedReportingOrigins: ["https://pn.ybp.yahoo.com"],. metadata: {. width: 320,. height: 100,. crid: 7063792,. adomain: ["yahoo.com"],. seat: "47". }. },{. renderUrl: "https://pr.ybp.yahoo.com/pr/secure/true/crid/3ybflvHQlvieXd6YMOECrA/pa/1",.

Chrome Cache Entry: 806

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27132)
Category:	downloaded
Size (bytes):	27133
Entropy (8bit):	5.0577826370481525
Encrypted:	false
SSDEEP:	384:w+gVuXW7nzayunWaaC9eDrGxxJb6gtDVwwpxdsq3saaaPqKGB:w+g6cnzanWM9F3wwpxdsqTaaPAB
MD5:	885622FEE14A5A72A7D794C93674C5F5
SHA1:	6447E6484D68B69AC30DB45EAD75FA95DCEBBF5D
SHA-256:	26A46C64B4D564E301DAB99B1E0B94A1CE744ACF9A5CB6BC238177514A6B5406
SHA-512:	E98020A6A1E7003B258167A99A9F0B9A6778130DF359796C3BBFF98A7EF525F2BE30BBBE5FB98740756AD7F82DD39F81EBDFBE3C5A7E291025B35EC03AEC641B
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/Dock.Dcalnqy3.css
Preview:	.sdaContainer.svelte-odhkl5{position:relative;margin:.8rem 0;justify-content:center;z-index:3;overflow-x:hidden;display:flex;align-items:center}.sdaContainer.dv-desktop.svelte-odhkl5,.sdaContainer.dv-tablet.svelte-odhkl5,.sdaContainer.dv-smartphone.svelte-odhkl5{display:none}.sdaContainer.isPremium.svelte-odhkl5{display:none!important}.sdaContainer.BTNA.svelte-odhkl5{min-height:60px;overflow:visible}.sdaContainer.BTNA.svelte-odhkl5 div{border:1px solid var(--separator)!important}.sdaContainer.WFPAD.svelte-odhkl5{min-height:50px}.sdaContainer[class=LDRB].svelte-odhkl5,.sdaContainer[class=LREC].svelte-odhkl5{min-height:250px;overflow:hidden}.sdaContainer[class*=E2E].svelte-odhkl5{min-height:298px;background-color:var(--surface3)}@media only screen and (min-width: 1050px){.sdaContainer.dv-desktop.svelte-odhkl5{display:flex}}@media only screen and (min-width: 768px) and (max-width: 1049px){.sdaContainer.dv-tablet.svelte-odhkl5{display:flex}}@media only screen and (max-width: 767px){.sdaC

Chrome Cache Entry: 807

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&ttd_puid=55bb0499-3b94-4610-88d6-811dcbabb069%2C%2C
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 808

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 700x420, components 3
Category:	dropped
Size (bytes):	60069
Entropy (8bit):	7.960966181424822
Encrypted:	false
SSDEEP:	1536:KNvBciilVgFmsCGsMT73CeIeb+NMCPrOZhToT:KNvBcii3HsCGsMT73CeIZPKy
MD5:	918A0C731F1BB9F3D9ED0B04154797ED
SHA1:	9AC1A5408E86238FFD8BC4DA8D71FFEC9450E136
SHA-256:	78421238475F330F9BF95AB95E2EAE56044FDD6EF6B5E10415B47FD763ADBE16
SHA-512:	E38441B7F51BF9AF510DD4E45B8E7E2AD295BFDB583C573D4251A562D429F6A184DFC9BDE7D374C77DFE66BEF378B1C4BFADBA53F1C2157DFB73BCC8F761C9A0
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 809

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 810

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 41 x 330, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2986
Entropy (8bit):	7.595859761626018
Encrypted:	false
SSDEEP:	48:ki3VLqI5DRFJEmlXv+2KpDRFZdtseQURsd1dA1h6wBxANNh4E6LEZU3KgCDj2fbT:7LFDXlXWzzsZj/dEBxab46SKgC+jCMNn
MD5:	C2396079060A7028FA898A73B72AA592
SHA1:	81EE85D797FF9C40A19B15E4130D7F677011C5A0
SHA-256:	1A166EBD6C8872D71EFCEFB4765DB513014B732E1886525C5F2D5DED87071451
SHA-512:	AC8F6403C6F5CD0ACEB315C0EE48DA6A3540D4C012A15A754EFEFE069CB33B6AA3124C3C5C7746185CE4A3EED7898A1AE07C170501AC78CAC16290084255CCA6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...)...J............jPLTE...IIY..........#)E..\el.")...\dk!w..j.....j..j.'/;.:.....;.....i.....i....#+1$,4.j..............i.$+3....;..:.#2.i..;.#+2.;.....j.....j..j..m..i........l..:....#+2#+1\dj.#).j..k..k.#(/.l.&-5.;..n..n....7....j..:.....j.....;.....k..l.#2.i..:.#1.:..i..i........i........;........;.$+1....=...."%,#,5.j..i........j.....j.....j.....j...........n....#+1[dj.").:.$+1....:.$2.:..j.......#+2.......j..;.$2.j.....k..;....$+3.l...._fk`gn...ddm$$..A....[mm.l..i.....j....\cj................j..k..l..k..l..j.$2.j..:.....j.#+2.;.#+1...$+1.;..k..j..:.#+4.;.$+2.i..<.%.3.=..@........j.....l.....i..C..w..i.....:.#1[cj."(....Z.N....tRNS.............x.........@/....j./...eW'...V#"......}}lbR/+'#...........w8&...........ji^QPJ($$............N;/..................{xtqpoaZN?0%!............\|dZZI<2!.........~{tng`^KGB972...ePG33....k....(IDATh...W.0....).Q..O.pC.......((....,...{...{o.V..Lz'......D}~..%m?$M..{m....u...=W.d.u8.....3**(....bT@.b..x...

Chrome Cache Entry: 811

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x200, components 3
Category:	downloaded
Size (bytes):	7290
Entropy (8bit):	7.938811477371177
Encrypted:	false
SSDEEP:	192:UKLHapkU/8RMTfKSgo6vsaMM0ezRS36jONBxg:DL6S+UwKHx3ziWONBO
MD5:	590F00E401F9E400029BA94AA013D3B5
SHA1:	19508C27842D590E118CCF11541A76BD1BCD5D86
SHA-256:	E9004DCD6CF9D5C2482F71B2C7B4E0F81A57DF5632CF4485177CABDAAF81632B
SHA-512:	E78DC8C846C50721121F49FB4C26A0A3266C967EAAE302D951A242F71A64EAE4FE89E2E57816CDE0A828FB3769A846E3B35EBC8C43A4982E60C46B63A7C4FF67
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn1.gstatic.com/shopping?q=tbn:ANd9GcQpHcz1Y74SiSL14_WKYj8gqwsxlWJNPo1M0_4qKf2Ztg7GREhsenbP18s35qY&usqp=CAI
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777..........."........................................?........................!.1AQ..aq"...2.....BR..#3br..S..$%Cs...............................(......................1..!"A..#QRabq..............?..49..CIn.._...[.X..cQ..PD......4...O......v./.....(b....6..).px....}Lds f.>t...4n......z..Qf....G2.....QM......P.;V<.vl./.X..yi..[I.....b......../.b.6q.=.......0.T..Kt.MC..n....N;....CcK.=....':V.kQE..^...5.r.Uk......W..f...wv.$...%y.v....i....x~.KY...b"X."..o].......f.O.ly...j..\.2........q.O-.......2h 7..:<...V....Ya..c..u.\...ld......f...,..Mr...C...f..C.E..I.9......Z.._..'...&..E...F.K.]..s......Y.E..p.J...?:'.Fe...1...#.8....'.w...8 .8..TnHRNy...z.../L.c.3.i1..F...G..G..R../....<...~.h..1c.^4U.....x...^.....?..D<e.l3.D....}G...L../z9r................'.j<..EF.S.I.>;DQ.G.U8..^.v...n.>..j..B6.

Chrome Cache Entry: 812

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2159
Entropy (8bit):	5.074082331155509
Encrypted:	false
SSDEEP:	48:UiiWQcSBLUCiWQeQSvq6LcqUQoysBJ/rm+rVTy4OrnWoTDy7rAMBvrnt:TS28l2ysBJ/rm+Jy4OLfTDy7fBvLt
MD5:	A61867F745421721F0C2224BCF98876D
SHA1:	E0CDF60E5503A71C14E3B9301263C09BA7016518
SHA-256:	B906115C4147B0EA46C1B0CED586F58BB743500EBF2741FAAD3E60F6986DD979
SHA-512:	697CEDA091F16A07AE783A0950CCE6E8A51809F0A7DB745FA1519DF96ADD9072960B5CA02C929E1AE64AAABD2A5978164FDDDB56BCD49D325A117AAC195FEE27
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/473513299895995753/styles.css
Preview:	@charset "UTF-8";......body{...vertical-align:baseline;...border:0;...outline:0;...padding:0;...margin:0;..}....img {.. box-sizing: border-box;.. .-moz-box-sizing: border-box;.. .-webkit-box-sizing: border-box;..}....#main_content, #main_content img {....position:absolute;....display: block;....width:300px;....height:600px;....left: 0;....top: 0;..}.....bg {...opacity:1;..}.....sub, .headline, .frame {...opacity:0;..}....#lockout {...opacity:1;..}......#cta-over {...opacity:0;..}....#main_content {...display:none;.. .background-color:#f1f2f2;.. .overflow: hidden;.. .box-sizing: border-box;.. .-moz-box-sizing: border-box;.. .-webkit-box-sizing: border-box;..}....#border {.. position: absolute;.. width:100%;.. height:100%;.. bottom: 0px;.. left: 0px;.. border: 1px solid #474b51;.. pointer-events: none;.. z-index:52;.. -webkit-box-sizing: border-box; /* Safari/Chrome, other WebKit /.. -moz-box-sizing: border-box; / Firefox, other Gecko */.. box-sizing: border-bo

Chrome Cache Entry: 813

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4195
Entropy (8bit):	4.404449346852167
Encrypted:	false
SSDEEP:	96:QdKzti2LpViMFnRMr5jJFcfONXAhapRGQ:9zti22MFnRGbReabV
MD5:	5703D186BB29595E087B3EDFC80F1E75
SHA1:	EDC2AC305701AE04111A8982E490C69949E09464
SHA-256:	27DB4F1EA5C6D5B950DBDC2AD700C06975871D4F6F4D1810657D5954C71B0469
SHA-512:	A37CDB98F1D81D4C4B31588D95409859ADBDBF2FB194BC899091F2B08B15AF0878404F2B464F5E8EECE66F4A36A0C152711D3F71579C11148BB57898F551C5E3
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>icon_prod_sports_spnews_gray</title>. <desc>Created with Sketch.</desc>. <g id="icon_prod_sports_spnews_gray" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="fantasyFootball" transform="translate(2.000000, 0.000000)" fill="#454545">. <path d="M0.993939392,2.55454546 C1.7780303,2.55530303 2.41363637,3.20151515 2.41363637,3.98484848 C2.41363637,4.11515152 2.51969697,4.22121213 2.65,4.22121213 C2.78106061,4.22121213 2.88636363,4.11515152 2.88636363,3.98484848 C2.88636363,3.20151515 3.5219697,2.55530303 4.30606061,2.55530303 C4.43712121,2.55530303 4.54545454,2.44848485 4.54545454,2.31818182 C4.54545454,2.18787879 4.43712121,2.08181818 4.30606061,2.08181818 C3.5219697,2.08181818 2.88636363,

Chrome Cache Entry: 814

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=r1&google_push=AXcoOmR5JtTZUsdtJy_d3K_iOgzmOsnjRai2od4XismUi7BthnKIoY3F2KUW-gSZ0Pt1OeHkKAnYynIdGrKxrHbj6AQiY0W2pjZR&google_hm=BZ0hpCwFmUnnt9aQJ4nS2No
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 815

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64288)
Category:	downloaded
Size (bytes):	64330
Entropy (8bit):	5.309268723491292
Encrypted:	false
SSDEEP:	1536:MOwDLGbXhI7TFcvwQQP9PumV+Rj1d63RogF9VzwLXbM19EYN4:UM+TFcWV+RjXOogF9mXbM1yL
MD5:	6348D664B9CA02D853D29A6F0DD70ACC
SHA1:	EEC0A9F6BA08F4BCB3C0FB8632C0DAFB898F01C5
SHA-256:	7FB0D1A134C8916E15BF749CEB80B076DC13BA8EBDEAFD94D8F22246CF4AA05B
SHA-512:	92E6BE2DE1066BD3BE6DEE542165D4C2E41337A3110CBAEE5E02B5002DF1795053D7210AD018B9200688FD2F73AE4813F949A1F26B8C159B69D2E761D049B02C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/benji/benji-2.0.44.js
Preview:	!function(){"use strict";const e="undefined"!=typeof window?window:{benji:{},googletag:{cmd:[]},pbjs:{que:[]},YAHOO:{}},t=["localhost","aol.com","aol.co.uk","aol.de","autoblog.com","cricket.yahoo.sportz.io","engadget.com","yahoo.com","yahoo.com.hk","yahoo.com.tw"].map((e=>`([\\.\\w\\-]+\\.)?${e.replace(/\./g,"\\.")}`)),i=["cricket.yahoo.net"].map((e=>e.replace(/\./g,"\\."))),s=new RegExp(`^https?://(${t.concat(i).join("\|")})(:\\d+)?$`);const n="initialize",o="initialize_ack",r="initialize_i13n",a="intersect",c="render",d="resize_ad",l="start_ads",h="tab_focus",u="index",g=!0,p="DOMContentLoaded",f="bucket",m="cobrand",b="commerceArticleType",y="extractedKeyWords",_="hashtag",v="lang",E="0",S="testid",I="ncid",C="fr",w="pg_name",A="type",k="benji-premium-ad",R="abp",T="VERSION";var P,B;!function(e){e.DynamicAllocation="Dynamic Allocation",e.DirectSold="Direct Sold"}(P\|\|(P={})),function(e){e.AdTech="Ad Tech",e.House="House",e.Prebid="Prebid",e.AdX="AdX",e.Unknown="Unknown"}(B\|\|(B={}));co

Chrome Cache Entry: 816

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65456)
Category:	downloaded
Size (bytes):	781945
Entropy (8bit):	5.357628624985577
Encrypted:	false
SSDEEP:	6144:3IazX7lUvBKqkNfpj6j6RMC+3LWvJGi0FP6jYw6nTU:6JKf9yA+ivJOCEw6nTU
MD5:	CE4BB2EF1B7F652B516F177EC4E945C4
SHA1:	BF116EECA03BDAD072977FC3E0D96B9637868B13
SHA-256:	36EDCEA300D754A05A7F289F06CDD86D4E518077CD4FEA447842C525802671F3
SHA-512:	DE87ED319333D5B6BD133E5F11EE8D5894764CF8E13725C75D8151B09BAEAA6D46306DD8D41E9281F423A29949CFCD83EF3342545F80401FB722920336B3F731
Malicious:	false
Reputation:	low
URL:	https://dbrd449anfbv4.cloudfront.net/bundle101.0.1.js
Preview:	/! For license information please see main.bundle101.0.1.js.LICENSE.txt /.(()=>{var __webpack_modules__={2449:(e,t,n)=>{"use strict";n.d(t,{$M:()=>c,AF:()=>f,GR:()=>x,Mf:()=>k,Mk:()=>_,PW:()=>o,U9:()=>p,VA:()=>E,We:()=>d,ao:()=>a,dw:()=>g,fP:()=>m,hQ:()=>w,iP:()=>S,iY:()=>v,j4:()=>h,ju:()=>l,o$:()=>b,pT:()=>y,ul:()=>i,wi:()=>u,x7:()=>s,yF:()=>r});var r="MY_SELF",i="MESSAGE_RECEIVED",o="MESSAGE_SENT",s="SENDING_MESSAGE",a="UPDATING_MESSAGE",u="HISTORY_RECEIVED",c="GET_NEW_CONVERSATION",l="CLEAR_MESSAGES",d="AGENT_CONNECTION_STATUS",f="END_SESSION",p="SEND_PRECHAT_DATA",h="SHOW_PRECHAT_ALLOW",y="DISABLE_EDITING",v="SHOW_VIEW",m="UPDATE_USER_PREFERENCE",g="SHOW_LOADER_VIEW",b="CLIENT_START",_="MESSAGE_TYPING",w="TOGGLE_INPUT",k="READ_MESSAGE",x="SESSION_INFO",S="SENDING_ATTACHMENT",E="UPDATING_STORE_MESSAGE"},1822:(e,t,n)=>{"use strict";n.d(t,{BL:()=>c,Bc:()=>b,KH:()=>d,S0:()=>l,TM:()=>y,WX:()=>g,bG:()=>v,d:()=>_,gY:()=>f,jY:()=>h,lB:()=>w,o6:()=>m,rQ:()=>p});var r=n(6355),i=n.n(r),o=n(

Chrome Cache Entry: 817

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x180, components 3
Category:	dropped
Size (bytes):	21412
Entropy (8bit):	7.940541668595661
Encrypted:	false
SSDEEP:	384:K+2kjoKbHST4e1KxZfZC5CG40zmfgyq9Ft3PApeQVNlHPKty8YaZgaD+RFX:K+2CbHScoKjhkC89Ft3Pjov8gaCH
MD5:	A8A36440472BD591FB27FA6C6B7EC70E
SHA1:	84C0B32E9C2ACDCCCE398CB3CE2D2E9004E7880B
SHA-256:	D61A67977D4B5935C981528DAA072F9A32952B7702F999A2763713C42CBEB10F
SHA-512:	6D6097A1EBB3EE82D42E02905F7EA82FDA4A6E133E6879C69C39940FCCF20667DC91D22F78F415CDBD8057946F6FB7DE25253B3170B6571F90B5F489861C9E2B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.........................................................................d............................................K.........................!.1A."Qaq..2....R..#Bb.....$3r...%CDS....'4Ts..................................0.........................!1.A.."BQ.2.#Ca.3Rb..............?.....<.7...Z`.`&.`&.`&.`&.`&.`&.`&.`&.`&.`&.`&

Chrome Cache Entry: 818

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 36, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	779
Entropy (8bit):	7.410384444541054
Encrypted:	false
SSDEEP:	12:6v/7wjLJnuKWJ/sm01/i3IaFKtaWk+dprMGsOKwN5CWUYF2aSysvTuc:4J0J1McDxdpgGsO3nCOF2aSyy
MD5:	459C23291DE93EC831E2E6EBEB1FBB54
SHA1:	94BDABDCE708DE98A86DFFF36090A4A3444B0D21
SHA-256:	AFE5B7C7F94439BFCD9DB55C9BACFB19D1D627BADCE34029E45870C849F8D864
SHA-512:	B9DA25CDA90046A652D4792194643CCD7C6AF87347638623F21A6E18AB8AE6D4126AE95A72C6CDA8C83E67388CABABF28248801AF4640C0B20ADED1A391CC645
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rz/p/yahoo_login_en-US_s_f_w_bestfit_login.png
Preview:	.PNG........IHDR.......$.....90.....9PLTEGpL......................................................}<.M....tRNS.......Hm.Z..).d}<-=.>...oIDATx^... .D...x..?.dh..i....<...]....O.\..+q...:. .V?.A.e.............'.....i.(....VW.......)..P..(.....`.Z..f.\.,3/.........G..z9...~...d.L>..)[d..R.....e.P...[....p.B..z.f...Q.[(.b.Y .B?... ...d.....J.k'....#....0.Z.(...n...]<...`9.z....../.0^......ro.iM.Np.wNV#..G.3j.!..5M....z.3z~r0M.......`-.7..O..g-..-j.....Q.)..I.j..z..).....K/...X.n.....9.&v@.S...........^.rtz#.W........43...1.'..~.X.........\U....V.V.k?..".}n).Si...\.&....\|..Ct&.{L..#+ 3.).......`I.4.O.kA.GR.. .L.:w.....w.;........l.<FM_'.$.....D.K.. .....Y.'. ..mAA.BNG.A9.u.;H?...xAb...g..I\.]c..07(......>(....*....{...$F....IEND.B`.

Chrome Cache Entry: 819

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=lkqd_dbm&google_hm=OXVxRzE3YjFFTDg
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 820

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14722)
Category:	downloaded
Size (bytes):	46851
Entropy (8bit):	5.240124048228479
Encrypted:	false
SSDEEP:	384:q3I6OI7EJuI+9IqIHJIf2vSU6I6OI7EJuI+9IqIHJIf2vS9IYW1m7tUerqYHn5Jt:EELSVELS9NUerqYHnHeZnA
MD5:	F3C6E123EF12EA9B06B13765600E689D
SHA1:	979085090744D5EB053CCC3092109EE35FDAA723
SHA-256:	AD6D928B1C586803E5004749F66C8F27AEEC81D0C26C1092E9723E8C2FF843E3
SHA-512:	7FF88D8B1A01645B72B5C5E39C1567492F4C525C890C5E68FB32AA3B78831F8A5FD22B7733C1DB74458AA9029FB8CBD1F0515FD64F249A7C28E7CDB62A58F422
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/Spinner.R1kjxUGs.js
Preview:	import{s as Nn,e as jn,X as s,t as Bn,d as qn,f as t,Y as r,h as Cn,i as e,p as n,T as i,L as wn,M as zn,k as Dn,l as a,n as Sn}from"./scheduler.ErneftFr.js";import{S as In,i as Ln}from"./index.DsErXEH0.js";function Mn(W){let l,o,z,Z,S,f,E,I,L,p,M,d,N,T,m,V,y,j,X,k,Y,c,B,A,h,F,x,G,H,u,J,b,q,K,g,O,_,C,Q,v,R,P,$;return{c(){l=jn("div"),o=s("svg"),z=s("style"),Z=Bn(`/* stylelint-disable-next-line keyframes-name-pattern /.@keyframes counter-ring-animated-2_t {. 0% {. transform: translate(45.3475px, 45.3475px) rotate(12.73deg) scale(0.75, 0.75) translate(0.49px, 130.552px);. }. 0.3% {. transform: translate(45.3475px, 45.3475px) rotate(12.73deg) scale(0.75, 0.75) translate(0.49px, 130.552px);. }. 100% {. transform: translate(45.3475px, 45.3475px) rotate(191.2084deg) scale(0.75, 0.75) translate(0.49px, 130.552px);. }.}./ stylelint-disable-next-line keyframes-name-pattern, declaration-block-single-line-max-declarations */.@keyframes counter-ring-animated-2_v {. 0% {. visibi

Chrome Cache Entry: 822

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2920), with no line terminators
Category:	downloaded
Size (bytes):	2920
Entropy (8bit):	5.278382327824268
Encrypted:	false
SSDEEP:	48:0GoPdhpMzANg4+rItkVsjxe3iRfLIzzL9qMEqK/VEjbJtbmsrIonbl8Q6LBI0uBP:poPTdfbiVsjgiRfL2f9sqK/VEjiOnF6K
MD5:	653708AD1BBAE1579927B6391B2A28F3
SHA1:	4261E415C23DFD9D925F071737FB0D236F856F4E
SHA-256:	82D2DC44AAE1EDA52ABC17AFD30C6031B7175C13EE6955410164C66AE755ADFB
SHA-512:	4092D81BEEAADB7ECA73EE279AF0A5289CAF850253464BAA4F7695C49670C05F7E89630807A2C41D3D9CAD75D95A60719FDB1A16265537153952774F7450873C
Malicious:	false
Reputation:	low
URL:	https://js-sec.indexww.com/um/ixmatch.html
Preview:	<!doctype html><head></head><body><script>!function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,e){if(1&e&&(t=r(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)r.d(n,i,function(e){return t[e]}.bind(null,i));return n},r.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.p="",r(r.s=0)}([function(t,e){let r=!1;const n={};let i,a,o,c;

Chrome Cache Entry: 823

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4112), with no line terminators
Category:	downloaded
Size (bytes):	4112
Entropy (8bit):	5.118112729463057
Encrypted:	false
SSDEEP:	96:3hxG18jg8q1MrTq1YrAwIL6pUySq5VNTO6FtkLHeDWL:3ZumTu6AfL6v5TVoj
MD5:	3B731541B2D25A1EDE256B475AE5E5C1
SHA1:	6F8FDBD3842A3F52CEAA0EC65E71E1E703D47FC3
SHA-256:	2C72ED315AF753049B1BC9C5DB3BD11FAC613FC4E8F4F038DE3FEAA3C02CF3CF
SHA-512:	C4EC0CFDF94C8A8FC217A0EE8E5DAB2C1F85066CA2038D4F195E356E0FF253B592330C584479E87D28A0A24484F841BDCE8C14512910A18953D0A3A63AB4F768
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-module-2.0.0-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-module",[],t):"object"==typeof exports?exports["wafer-module"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-module"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(o){if(r[o])return r[o].exports;var n=r[o]={i:o,l:!1,exports:{}};return e[o].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,o){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:o})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}func

Chrome Cache Entry: 824

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x180, components 3
Category:	dropped
Size (bytes):	18794
Entropy (8bit):	7.946711453117304
Encrypted:	false
SSDEEP:	384:9whNNa/OWVD4B7H2P0HQNt3n4jHjXee0WuCXV9xB4wgaRNOn6A22nO:ChZWdUdE5qDLnfjWgNO6R
MD5:	43FB063D8127D2A771BB123088813E04
SHA1:	BD1E1F0D37316104CFFAA11A06CAD93CD9A3267F
SHA-256:	1E51E1C6E89FC2696B02C11AD31913DE56B235745890EEACDBE597A94C8DF569
SHA-512:	C1572ABBFF4BC0DB470323EE0C46EC17828C3A60B644C0B4DA11DD740AF8A4CF398710A98F2AC275EF8DA5439052662EFB8A80187204EFD7A2B9A07921FD25AF
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C.........................................................................d.............................................I..........................!1.A.."Qa...2Rq...#BS3Cbc.....r..$4DU..%5T...................................5.........................!..1.A.."Qa#23B..$RSqCDb..............?..u..#....A.....d>...!v........0.QdW[...v...j........~."........._....J>...7jM...7av..+(..[.....WH..r..I!]r?:.jH.s....9.\({NZ.l.U`.......

Chrome Cache Entry: 825

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (434), with no line terminators
Category:	downloaded
Size (bytes):	434
Entropy (8bit):	5.112221183162334
Encrypted:	false
SSDEEP:	12:kxP4L8BMFCbWGQL8BMfF6RbWGnWUB6Ax8KBG/9/fSWQ:kDBwGVBBgGnW7fKBG/rQ
MD5:	8F889AF21C78AB0DDA8CB9C791268183
SHA1:	43D554CC28D1CF33396C73032A030EE1E34ADCBC
SHA-256:	E081F3819FC4C65F4A70BC56847779957046A76087A4A2E51BB61BFD8D57FDCA
SHA-512:	0978B14810D9066FC96490F7A41B567C57F8AE8606A67F78F102348F3E4C0284ECE6E3AD54CDC6FDF2D9AD223AD94AEA48B199923C58804838D8D85ECB6B80A6
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CND8eBCBy4EBGJrZkogCMAE&v=APEucNWl4prN8rE6qJgNfSaUXs8MMhnp7Mm9PrgP8Ie3bnI0lA7U0zuL_XDWyrIAJGi-EoppyMxz6z5ZQaMegNFvzgmlOKZezw
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=merkle_dmp&google_cm" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=lkqd_dbm&google_cm" style="display:none;"/><img src="https://cs.lkqd.net/cs?partnerId=59&redirect=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dlkqd_dbm%26google_hm%3D%24%24rawlkqduserid%7Cbase64%24%24" style="display:none;"/></body></html>

Chrome Cache Entry: 827

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x1200, components 3
Category:	downloaded
Size (bytes):	122511
Entropy (8bit):	7.974624945960764
Encrypted:	false
SSDEEP:	1536:/MGHkKocu1umdXjli71tvoQTSBqytmUNFP4aEJPx5hWQVQFuJIpAPzIQcgKIxW/6:/RAdTQ14mI4aCPxLgFuJkU9cgKIxWI5
MD5:	65F73EBDE7AFFFBC37631AB70618461D
SHA1:	799D8D7AD0995B1433A916C38C9063764B35826A
SHA-256:	81C165F0378B874F73356FC15BB75F3F7813ED580B8FF453927230A3DB5A87ED
SHA-512:	D4A20581474D8ECC89F04645CCCDC9C2462683FCC7773A3DCB0F33E4A33A1DEEB0150BE844B668383AE095B213A5D8EBD545C30086A538B5B7B3F2EA544C4E7F
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/13461938776524376467/images/bg1.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0580117407206811A61396797EE4D8D6" xmpMM:DocumentID="xmp.did:F3BA24D7D91F11EE8911D3BC78784F59" xmpMM:InstanceID="xmp.iid:F3BA24D6D91F11EE8911D3BC78784F59" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6171bc7b-c2b6-4200-aeba-11c089d75f7f" stRef:documentID="adobe:docid:photoshop:745cbcbb-33bc-494b-8c3c-fc706822aa34"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................

Chrome Cache Entry: 829

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8186)
Category:	downloaded
Size (bytes):	9018
Entropy (8bit):	5.403464486304472
Encrypted:	false
SSDEEP:	192:Ax2W3aq16a7VrMk+M8v7w7DmLLfGOdVqTlv6hQH9:md3aex9DFukm4v6W9
MD5:	CE0CEC84BD8FD38EF4FEEB0768FCF9E7
SHA1:	18BD092385AA648FDC1D31D2EC06BCA20ABAAEE1
SHA-256:	B7676CAD0600BABB0AB79B9160241D2CD19DC028B1DB42FCCA34637C89C09E54
SHA-512:	D284A4F08C0D71DBDF0198C6C2E2250E858DADA880E21429AEEE2E4E51691337083BA7DCBB43E312D9F855A8BD0C6F071F5D12B30089AC9BF590963621DBADEB
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/initializeDock.IJCXFRBu.js
Preview:	function __vite__mapDeps(indexes) {. if (!__vite__mapDeps.viteFileDeps) {. __vite__mapDeps.viteFileDeps = ["./EventCalendarPreview.BXwVX8HL.js","./scheduler.ErneftFr.js","./index.DsErXEH0.js","./each.DufB99sH.js","./commonUtil.Bb2Cnbsk.js","./stores.CtqIvex8.js","./entry.CqbZzrN3.js","./control.CYgJF_JY.js","./Button.C10y2YT5.js","./spread.CgU5AtxT.js","./Icon.CDBsrPKz.js","../assets/Icon.5Pcv_1eF.css","./i13nUtil.0wCphNmh.js","../assets/Button.wzorZdtC.css","./chevron_right.BNCVu0EK.js","./Link.DZ6I_oHl.js","../assets/Link.zOM28wTY.css","./Tooltip.CUxnHR7T.js","./check.21reEWCG.js","./a11y-dialog.esm.CGJeMRyW.js","./expand_more.DscV4c36.js","../assets/Tooltip.CjqycB4D.css","./datetimeUtils.wrzNH3Ed.js","../assets/EventCalendarPreview.BSw8eqA0.css"]. }. return indexes.map((i) => __vite__mapDeps.viteFileDeps[i]).}.import{_ as M}from"./preload-helper.BQ24v_F8.js";import{b as S,E as b,a as m}from"./commonUtil.Bb2Cnbsk.js";import{f as h,l as g}from"./logUtil.nPJvQAyt.js";import{t as

Chrome Cache Entry: 830

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	114510
Entropy (8bit):	5.914366174745851
Encrypted:	false
SSDEEP:	1536:13kx4xZnp+zUOE534vNu5LJiGb9ZkLTF2oWtJIz0bHLK93in2UMxpm0UmKbevWnV:1UwB8fEevcYtQjbHLK8OymiVEevNh
MD5:	9E64F07131F7D6897F2067468B4B83D2
SHA1:	04817EAB3687CADB1166DAC2E6B6362547D3CBE2
SHA-256:	07C38FC3701F29C5607E94B13B81D89CB9C9DB62530E1561FFF3B0841401BCB2
SHA-512:	7104C2D8BDB4653F2A2C912BC0E23D5FB90B74392F3B17BDAFEBBF3744029EDCFBB92F4A4EFA1F251E086EA1077D468C53F9A3CA0838E4970BB2ACF0BD70FE4C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-CtTPKGiVnohc9-PI9WwfIff0PHvNL046JaITpv7_e7_xanhXy_qrmgl5Oi0Lp_7_zBrrNoP_r0qSqjv0JLuVPUTQciR8DoCo5NSi4Ghf9xl_2sYKG09eZyuSjtwI-YXqFolZd4wpVPQpH01jF6r_yY-eOr4VQ44NgCtl-1SXtUAjQgrC3dcq_nL8fSs0-qYullbsWDW7pvfXsUnWF77ej7jhn-qA&dbm_d=AKAmf-DYBLq6WNwk2HlV9YZxq0_6zYo0XLCWWxCBZt5HZ7NGoS3YlRur9m3MEb57liqzld3G986ZZF3AAtShhvyLo9bGYNZOaZ8Tnlh1Kkb42q-RRLwYWp8H1HNMsDvUFTzodcD-rENOKtdL0sc0zOAUxRjTSzJ_n1-MkrJH0NFIUTu7uf2XMUYcPtWsAvj07ytKl5qobzDmtyFsD9ZAi3uO8wD-0sIphxeyKqQpTu0Bsx_t2j9qkVoYjJMj7Q3k7GN4t1EEOaAk3aLUBqAi-AChEvA87-nrZBgowB7Qtk0uxqKKUojZecQJEp6H7frD3bUXDRK_y58cXqsN71UBeOzGHGFtNjmfqC-gF-G2STbOUqAnkhE7igc7tsLxPyV_UaXq_5bForjv4quj29jhN3VR5JkkM-hIKDSe3vptXea06mEM6JGb3naX0E6D4xDFC1FwPyD9d3hpGy0VcSRFrB5fwjNM0FxmNbfRd9l37XZHWr1dzpdjRmiYptZTyz4hAYUhO8uQFv-u66O1uqD23tSZfiO5Cif9dUWVQim_WbR4HwAf9uSTQlQOiQvNDdOeK0A-HbqsIUlx-MsQcbiJ8BEp2G2zuVTK-ghqxU_GxxIJi2Sgk3ssukBMes_7ezrNpMennWX1upSE_E5EgEuPzV2qeNMHyYeugS4sjV9FbKpeimobmjB3KfBNoUkVpVpuFRDVjpgqxqqLX-qR1TB3g4X1pZ77XfLpyEAvRG7dD0KPbsrv6OVLzCJ4KOVHxYUQFpvoPWrzEtN0PGf5daxIfuo3I7CkfezRnuO2fxNKK72YLYulBi5CfZt0p1ssxZy1wTKv1gcXVu0SC3BrKnTpUiSrMzkO30oKfNC5AlNbo6q8wmOUVzLUwYoGqJyfdsYXt4hJ68yR9Z1nqOnJSDPePr9k7-mD2qOxv2xWB6RWOIkkgliGgEo8BCK__2IMfHpS1oGZnoJ3Pmlvj0F5auQK6bS6L5tMQRTBjb2_KH3nl39waJ2CyJoclOmB9qzoAPIhaE6A63k2U5vBTMSeMLrEl3cWUhPxLaWqtZvc2KeQIucVOc-ktUZAWoYL5FgMDXuZHTMuVvN5Te43z53IKGdznz6dRzRlbeXVN-806gNcMWIKBGrNWx_hLQvOVrzRe1zsJRL4ytUiUrqo9pnE5j1nE94b_XrfeJjd3AxZ5D1y5UBpv4_9q7_25QxhHYjxxQC9suwhROIlc41r-N9ITGoGwjXmpSV17DFRsa6UyOPMA_nV2MgFZUP4VheKSGWUqOFcR4q5FkyJF3Xgg-ukSv5Rt7KpNfyPsQ0YsZnRql7GINaGHzvQXtfPFXL6NRz_ynhTA25ek8mPLZz6xnbJ2Zk9zc_S7cE9OSyboVFXr-5jZTprjm4l62-Ce6anCBOQiWEy51d-PFmAIli1OAyZ0HKOi-BfQPMK1VnN0RlRQPajRX0Qym6oKAtyJ6k2CwShSYlpU4uZAdj9JxB0NkqVHQgcTTRO5ADkbWbqmgDTUSEnqLP916rVg9aciCBNZ3ywIxsKG_evYsS835UsU6axrjwmgjLjfUwLDUl5kxyScEeAmPv6R1BAa70dHrm2G_zQ7f8lcwwhbiK1ni7RD7__m8t1btUKXs37SzEjrgNogCBhxurXkFENbpejgamNoKCpxJytPn83V5UavaC4dyhu5FmljyOfbyWuH78cXRqLVBHYJlTmifxzakHl2ANy793FU6MbKuIqzCjExpqJwTty_245AYeafnSCH4K1rr5HLJnC9JkxNu2tZn-tTHKaoplJjrGWDLhapQOZkX31xIdo5DIL-5tPvpoK7arKprcXmRSrHN4zx07eP0KDulvyP6jaoHe_rsIx0IGISdBtuDG4CFiJCzbdVJcp8iEAsDlES68HRFaQkglC199wZwdX_IxvzyP0SNeHad3QrESOaPhejSP2TDPSHdqy7PGkeJrls5huElBbE6IMYqEQ2_oEjS6rmg1Js2OYXUzNPY6zeQtgtjFpABgeqOEGGVMgcNXaWDM9HaGM55qqOlU9ljmjW_eqnqwYKfc1ZnWcS4YSN6w1JbPTVQGmnaVMJhZt75-UA3fY-2mjHh6YbkGH7qWtvWgYn9LOhbxxxOGZl9boZJ0_htLqG-zmjlxrJmuUao1KI7l5dzchY5miErTpyzfCTMoMG-O_SSuNIaIP3Rh9pWu_Xetqz02XCnVqBq4gLPOs2F0hEZNZQjTkyCbamW2CwxvTBXhIiP3pROIjYandNd2bo4LXi-jVZmKMjL2nm1mTdeZIx9gotGP-4X9g6Wsly8sVB34i3zLJEB5uOhrFNDisDAL2g1LHHvNMDhIvuVl0G0m-RHOCFl5-3MD8ZUfcp6d0FJx2ZbRsX62sXybHF9qjQrv5ZJqNbtZLyWcR1cBvH3uKo3BI_zNkbKf3VjY4C0gy_bAoQo7RqRKYYxR2GOa5dJiQ3SYVzvDmyKSOOxnKItsNgikwzEiZSBnYepLTOBu0axl5ZBGU15JOt-hPKGe6V3SR-ez3WIX7UPfAXwHCXsE9Akz_IxndM7rROtnUWSIquDmncG0wIIoV2LSmJail3E3cUwuLW6V35DVl-airyGCGK6WdfZ3ETF97FHlV4wjgm_nQssTPKPoL4HkENcI8KBorrBYe4qLWHT2TPEhkFKPh9MzbdqF9xwOMT5WangSXNhovEEKxWeueIwa5n6uBbBERimDsj7_0lGEekRz475-Kpqie0dBInS67jdpGV6szKvw8Ge5nYVD5pFocfyAH-cLfWY2xMe4GL-NOtaVGdV3d7XYllan1_oGTXyi4x0OhBZWdA02Kx9WR5-mIV6QP9jPHaYJO72i_H2v5eMZjehfMdtX7c8mQbE0frxw0covBq4ZbjsQrpqd75MGM-psZ0daVqV2yK0NJ4R-TgM6v_74AHMkGs9AGSKUJGijr2mSpZgkcRiKPemd6-bi4JBDXtDsmTYHf3sVdj26reQIU9HG3wP2O0SghqMAB_0Me1P3HnW_HkJYg601L9OGaiC3qz3vCwAklO94BlIP4kKpYmSC1b8y_Yr5yv3LUDX63Pff62pGfOAOGZ9XWYZ5LGj-hs8xlpiXp0gpDEUawN_6dfo22Y_5PsXcG1EJycRz8Bixx1uD2sqtg178avknO2hwBONZjHWn24wPMDY-CcMag55X8lPwKDj8W3_H6R20FLQfett1WZtIw8kAFBA4if5f__6vTkbNG_yBehG1HOex-qrbRe37GL-C1nyLLbF40UzuCtkttdPyBoR-YtDnT4zjZx0F1i7WeJBvZ00vRZnotHEBJy95AnF8NDPEkAdAsB3SWgHj5Kk5P-BdD5PbQSMfzyHEyWnNYnPY66JWgejFhxDiXj5Je--J0D5gOEv-CxIpSjNkZ2wKHDQfZfoRr4F9ZbPMEztQuWXkaDYVbN7dNxm4bKePLfpT1y3UQZnJvWbi8N1eZk_F1l6gcWmapWTMKEDBlo8Er6xJOJYQFUQV7iIhaO5LMHp1KKtI9nArNERSWpbWuQz8StGcMzBya8C3ioGQYbElFmn5V0dIB1hMJxx0ysJcOS3z5eVIRVXDLmqhgF_BzK2zdDzf3sAHPNQRAn41icHXsML9IittAYCtkvLjJgo9tpPD9ob3J26rHBvtf7ZGsVddLAMF3hBPHO3bWYxTbDLZEWhA25iHpcioAtsIRpuVVvq-eHSEKpsA87KsK80JyxC7iHmF3r3xnP4dXlFvahCLUQ4gBLoZwoB7arGR02qvsZmPW4Gw3X0fZqv45x5VsCKNglwz1nfShS3ozJg8Khi5njDoEyzoFMrAf5-LS684tklLiWmmjOjWRNv7Y4yA5FcIh2HcfQx5cH7mGzQ1fjSuC0cx10RtW2u_dnWFgt1WzUAORR6jo6vBZaHh1kQL3DvfNMNzc6eNEwOLylKmbK17gVUTXddjnMLH6ofB78QgvlrdDGcyCqojdPPDwttxDNIFd6XrmiMY7KgmxieD5-lE9E1vXZQmAptBUpNu64wvj7dO7gjZ4fIZdnesk-GAll8qQyC4ULMnVs4MQ_Baw0iQDL1pwCGJW7aemXIT7ZaELmHDJxEyHxjt5QJV2h0oV-5hh4KF6Yg7ZFsMysGTla5-UIJcy6X1uPgPC8xrYrFFeP7JwqIwjJ_k&cid=CAQSTQB7FLtqLOQiPWS8-HnkJIWI0fygCFQRVidG4uQu2f2tii5f4WT_eitEDUFU2Tk2C4n1PD5D0Itq5xSmbXxb9tWhWXfmWuiNjEm4-5_dGAE&dv3_ver=m202402290101&nel=1&rfl=https%3A%2F%2Ffinance.yahoo.com%2F&ds=l&xdt=1&iif=1&cor=13398040822556013000&adk=1033480540&idt=1173&cac=1&dtd=58
Preview:	document.write('\x3cdiv id\x3d\x22brand_safety_cw4GZrjYLvGcoPMPmO64mAY\x22 style\x3d\x22visibility:hidden\x22 \x3e\x3cscript data-jc\x3d\x2288\x22 data-jc-version\x3d\x22r20240327\x22 data-jcp-jscd\x3d\x22[\x26quot;https://cdn.doubleverify.com/dvbm.js\x26quot;,\x26quot;ctx\x3d20006197\\u0026cmp\x3d31411294\\u0026sid\x3d5071708\\u0026plc\x3d388756515\\u0026crt\x3d212200014\\u0026advid\x3d3876771\\u0026adsrv\x3d1\\u0026mon\x3d1\\u0026blk\x3d1\\u0026dvp_cawf\x3dcrtwrp\\u0026cm360cw\x3d1\\u0026unit\x3d970x250\\u0026prr\x3d1\\u0026turl\x3dhttps://finance.yahoo.com/\\u0026aucmp\x3d21039716546\\u0026auevent\x3dABAjH0ioAT1X0VFjSwNBlK8b7jFD\\u0026autt\x3d1\\u0026ppid\x3d103\\u0026aubndl\x3d\\u0026aucrtv\x3d553954453\\u0026auorder\x3d1015903071\\u0026pltfrm\x3d1\\u0026ausite\x3d6613965583\\u0026auxch\x3d1\\u0026aufilter1\x3d1982032\\u0026c1\x3d1982032\\u0026audeal\x3d\x26quot;,null,\x26quot;doubleverify\x26quot;,null,\x26quot;cw4GZrjYLvGcoPMPmO64mAY\x26quot;,\x26quot;https://googleads4.g.doublec

Chrome Cache Entry: 832

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 833

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1632)
Category:	downloaded
Size (bytes):	1633
Entropy (8bit):	4.897207530896073
Encrypted:	false
SSDEEP:	24:UaM2F16Wo5DjD24+YVemZw65LoHVtAaGT1pfw3h5PqS40UYkQ4A:c24PtwA+AaGDwnqG9V
MD5:	3965682265EABDCA67A00C595B4FDE12
SHA1:	C97931F5850F7CF3CCBE1560F8501AD0C7459B23
SHA-256:	B19C7FDB4A2BE0A51951790FB9BA149CBB6FFD1D0AD29D4DD791DD02F6173ED0
SHA-512:	0E4E732A08020D58E44D1B4E521E996B46991E9667EBE77392A2A8E0869E409DAA9F06360704806839188860825D03DB78D378EC4133EB937E28A382044365F8
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/ErrorMsg.D0PsIY48.css
Preview:	.no-data.svelte-121m648.svelte-121m648{align-items:center;color:var(--text2);display:flex;flex-direction:column;gap:.688rem;height:6.25rem;justify-content:center}.no-data.sz-medium.svelte-121m648.svelte-121m648{font-size:var(--font-m)}.no-data.sz-large.svelte-121m648.svelte-121m648{font-size:var(--font-l)}.no-data.grayFill.svelte-121m648.svelte-121m648{background-color:var(--surface3);border-radius:var(--border-radius-m);color:var(--text1);font-weight:var(--font-normal);line-height:1.5rem;min-height:11.5rem;padding:var(--space-4);text-align:center;width:100%}.no-data.fullHeight.svelte-121m648.svelte-121m648{height:100%;flex-grow:1}.no-data.bold.svelte-121m648.svelte-121m648{font-weight:var(--font-bold)}.no-data.failsafe.svelte-121m648.svelte-121m648{height:auto;font-size:var(--font-m);font-weight:var(--font-normal);flex-direction:unset;justify-content:flex-start;background-color:var(--surface3);border-radius:var(--border-radius-m);color:var(--text1);padding:var(--space-4)}.no-data.fail

Chrome Cache Entry: 834

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	165
Entropy (8bit):	4.80666143611544
Encrypted:	false
SSDEEP:	3:JSA/FAJu6L2vWclOLNZFrZYTMQ4LNZFrSlKwM313kqugRF/FA4/FIev:vU2vWvLNZFrgMfLNZFr7wg1Ru+64Njv
MD5:	B1FFAED8B9668B395F784DD975A882AF
SHA1:	85F4BA4EB4ED11CC6BE25F67175519E9D2B8DA3E
SHA-256:	BF3179BEB53AAF37783F1D610493AFDC2285B0E159F25477E9C0A78B38FE9364
SHA-512:	3AF3264DBF5061D81C5A40DB797B517639A7B104F936B59D0CFB8084705319E7A9DB84238061F1F72AE691D521D8E977784C3238FCA7183B3F59598293661E61
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/index.g5YcAAdQ.js
Preview:	import{H as e,R as o}from"./control.CYgJF_JY.js";function i(r,t){throw new e(r,t)}function c(r,t){throw new o(r,t.toString())}new TextEncoder;export{i as e,c as r};.

Chrome Cache Entry: 835

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	149
Entropy (8bit):	5.106668500556004
Encrypted:	false
SSDEEP:	3:HZ8sqDmJS4RKb5ykKcvXjXRHoNcHjVYuIfepp5bZIAdSbFS:H69mc4sl3O4jVJCepvNb
MD5:	AE5FFB8B9F718200BEECE321B27C2494
SHA1:	2DF8746A5480120C715B1049C742DA6C7E1A7EEA
SHA-256:	78D7CC5AC35882275B042C947BFFCF418BE0D5AA717E450C1DED37AE5E2B6DBF
SHA-512:	A1ABD5E5FB5C6FD40E50F390D28B67DF3A1F284A8174436D8B7A13158FD35122EE0D8272867C1C288C54FC67B78B60D91EB334CA0D34F61B3A586B218F540AAA
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/expand_more.DscV4c36.js
Preview:	const s='<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M16.59 8.59 12 13.17 7.41 8.59 6 10l6 6 6-6z"/></svg>';export{s as C};.

Chrome Cache Entry: 836

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11896), with no line terminators
Category:	downloaded
Size (bytes):	11896
Entropy (8bit):	5.105849768434403
Encrypted:	false
SSDEEP:	192:gg6xQ3sW7GECHay2/WIWZyAWRvrhAo1ti:gg6xQ3sW7GECHaXWcAWR8
MD5:	178D61FF0BB36CB5B243261543BE4479
SHA1:	C60552E6FD7D5B88A2CBE49EEDEBA02CF2F1D6C6
SHA-256:	E9B489D0ED1E57A62C2734A757B23530F46FCE6BD26F7DE63AF49AFDC4C96631
SHA-512:	A64C549EF584334A6B2D5E6F0D1D6EB5F7F48B868479CB5F20AD40634ACADA05F855A5FA86F7836F97099DC2FF4780BC03BB984F8CE502FDFD22AB8AA4896909
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-loader-2.7.4-modern.js
Preview:	!function(a,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-loader",[],e):"object"==typeof exports?exports["wafer-loader"]=e():(a.wafer=a.wafer\|\|{},a.wafer.wafers=a.wafer.wafers\|\|{},a.wafer.wafers["wafer-loader"]=e())}("undefined"!=typeof self?self:this,function(){return function(a){function e(w){if(r[w])return r[w].exports;var f=r[w]={i:w,l:!1,exports:{}};return a[w].call(f.exports,f,f.exports,e),f.l=!0,f.exports}var r={};return e.m=a,e.c=r,e.d=function(a,r,w){e.o(a,r)\|\|Object.defineProperty(a,r,{configurable:!1,enumerable:!0,get:w})},e.n=function(a){var r=a&&a.__esModule?function(){return a.default}:function(){return a};return e.d(r,"a",r),r},e.o=function(a,e){return Object.prototype.hasOwnProperty.call(a,e)},e.p="https://s.yimg.com/aaq/wf/",e(e.s="./src/entry.js")}({"../../manifest.json":function(a,e){a.exports={"wafer-account-switch":{meta:{version:"1.1.7"},modern:{min:"/aaq/wf/wf-account-switch-1.1.7-moder

Chrome Cache Entry: 837

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=57&external_user_id=969751699754991983
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 838

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 839

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.110577243331642
Encrypted:	false
SSDEEP:	3:GMyoSrjJiY:jFSrB
MD5:	FBA4B0641D74721CF956C5D603D1FF16
SHA1:	055495A235DAB44079B6E492FFD73209A995E9F6
SHA-256:	AAA0F8C354C4DE87C5F8388C947DB5662F927D002F872E33E0710D641D4710AD
SHA-512:	F6D5B5B87DEDCE3E957D9E6732A4F890A3AB589AE403E9C67FAF45388D285A167B3758B5754FFB13DD938F5831CEE26D0EBA997549AA6D6AF8DF2B60D1701F82
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwm3UkcRf0HOFxIFDeeNQA4SBQ18gFM1?alt=proto
Preview:	ChIKBw3njUAOGgAKBw18gFM1GgA=

Chrome Cache Entry: 841

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8342)
Category:	downloaded
Size (bytes):	8343
Entropy (8bit):	4.893886095655822
Encrypted:	false
SSDEEP:	48:5zfpVk4QtaIikPKwo9bMc7WcTWxZYSZwe4H03pZ+Jc0mYFEcJ2wcWUzcCGk/9fPk:Nnk4QgLsWSYScmFGO9fcn
MD5:	91494E0A3BB500EE0D63B7B4CC1BC8C5
SHA1:	27FCFBF9421A3C695A35A6DD92A3584B2C8DA484
SHA-256:	6B20CFE66D1168F942BC5E262F7A05FC289728C74A589BD4D491EBCEBBA0CDC3
SHA-512:	E7EF7A9789197577166C3DD5D5AB2E6AEBCE7FEA68087A0CD333D735157F0086D2764A9C48F1AB1B40069D69732E49CE4E9570F1526859CF4737416EF0F2A91E
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/InfiniteScroll.DXdbiT9-.css
Preview:	.category.svelte-hclwtv{background-color:var(--surface1);border-radius:var(--border-radius-s);border:1px solid var(--surface1);flex:none;font-size:var(--font-xs);line-height:1.25rem;padding-left:.375rem;padding-right:.375rem}.taxonomy-links.svelte-13tszyc{align-items:center;display:flex;flex:0 1 auto;flex-wrap:wrap;gap:var(--space-1)}.live-badge.svelte-1adsqgi{font-size:var(--font-s);font-weight:var(--font-bold);line-height:1.125rem;color:var(--text-inverse);background-color:var(--negative);border-radius:var(--border-radius-s);padding:.125rem .375rem;margin-bottom:var(--space-2);vertical-align:top;width:-moz-max-content;width:max-content}.live-badge.svelte-1adsqgi:before{content:".";font-size:var(--font-3xl);line-height:.25rem;vertical-align:inherit;margin-right:.125rem}@media only screen and (min-width: 1050px){.live-badge.svelte-1adsqgi{display:inline-block;margin-top:.1875rem;margin-bottom:0}}.topic-link.svelte-1ov9158{background-color:var(--surface2);gap:var(--space-4);display:inli

Chrome Cache Entry: 842

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	639522
Entropy (8bit):	5.449306954713332
Encrypted:	false
SSDEEP:	6144:7I+BXdknXUL9f6ZV3zpdonDGuYNMEVVzQfISxfTrYpGoUs6gY1Sd/ZK4bfkGN3WP:7IDY6hVzrJNBvWOgvt
MD5:	31AA7C1BFB96ABC4AC7343D9C3008A47
SHA1:	F647DB2C8A38068009D19506480DD8C91B0A50C8
SHA-256:	59EF620AC8B82C7C7E82D0104A58A08AD9B7D77E8FCC20804F81447F03F682CA
SHA-512:	B3855FDD9028242077B41BED882E5FECF4DE8348E76DFA6F5CA13221288917899B73F0D566F3A46CF2A4F7B04B34C07978EBCB441A17C2B92E899545FED6CB4B
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/bidexchange.js?cid=8YHB97349&version=12.1&dn=finance.yahoo.com&ysection=ros&yregion=US&ylang=en-US&ysite=finance&ydevice=desktop
Preview:	try {(()=>{var e={4764:(e,t,i)=>{"use strict";i.d(t,{QE:()=>r});var n=i(8386);n.eP.getConfig("abpWhtlstUrlsRgx");const r=n.eP.getConfig("AbpAcptPrm")},5364:(e,t,i)=>{"use strict";var n=i(859),r=i(3277);const s=new class{constructor(){this.trackerMap=new Map}add(e){return(0,r.DM)(e)&&this.trackerMap.set(e.id,e),this}each(e){this.trackerMap.forEach(((t,i)=>{e(t,i)}))}find(e){const t=this.trackerMap.get(e);return(0,r.DM)(t)?t:null}remove(e){return this.trackerMap.delete(e.id),this}};var o,a=i(4612),c=i(8626);!function(e){e[e.TRACKING=0]="TRACKING",e[e.DISABLED=1]="DISABLED"}(o\|\|(o={}));class d extends c.Z{constructor(e,t){super(),this.stateMap=new Map,this.detectorMap=new Map,this.id=t;for(const t of e)this.stateMap.set(t.type,o.TRACKING),this.detectorMap.set(t.type,t),t.startTracking(((e={})=>{this.isActive(t.type)&&(t.isOneTimeEvent()&&(t.disable(this.id),this.stateMap.set(t.type,o.DISABLED)),this.emit(t.event,e))}),this.id)}getMeta(e){const t=this.detectorMap.get(e);retur

Chrome Cache Entry: 844

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3025
Entropy (8bit):	5.0145872240317075
Encrypted:	false
SSDEEP:	48:1zTBTMmj7fgOcLzwCrgjWa0jdz/biZ8YrWyjV/P9rKsi+aieiDxN0Ny:Zps5ctKjJjiZ8YSI/Fpi+eiDX8y
MD5:	00ACA34D513A6D3F6E94EB4C24BE6920
SHA1:	C7A712E96923813EE8B7261F5376BE426BA07FBA
SHA-256:	AF8923E45CE249B7D7C3AC1546CD4BBE1606BE4DD0EF1B72334FA7BE32D5B92E
SHA-512:	C4299605CBFAF45AE386D1A9D4D5A162D7FF6A7AE5C4E0FD605ECEE37CB08BFCBBE5EF5EF4FE12E6DF6F0AEE818D918A7FF80BED9F312584FA660DEC0855B4CE
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/zz/combo?pj/sh/202403271817/js/lib/sh_rapid.js
Preview:	var sh_rapid = function (params){.. ..this.spaceid = params.spaceid;..this.locale = params.locale;..this.product = params.product;..this.version = params.version;..this.country = params.country;..this.inquira = 'inquira';..this.ab_bucket = params.ab_bucket;..this.page_type = params.page_type;..this.page_name = params.page_name;..this.tracked_mods = params.tracked_mods;..this.usm_sample_id = params.usm_sample_id;..this.ywa_region = params.ywa_region;..this.partner = params.partner;..this.pst = params.pst;..this.pstaid = params.pstaid;..this.pstraid = params.pstraid;..this.decriid = params.decriid;..this.pageDisplay = params.pageDisplay;..this.pageVersion = params.pageVersion;..this.pageCategory = params.pageCategory;.. this.query = (typeof params.query != 'undefined') ? params.query : "";..this.nr = (typeof params.nr != 'undefined') ? params.nr : -1;.....this.keys = { ....site: "help",....pt: this.page_type,....pd: this.pageDisplay,. ver: this.pageVersion,. .pg_n

Chrome Cache Entry: 845

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2177
Entropy (8bit):	4.802678797283961
Encrypted:	false
SSDEEP:	48:cHlj4rf0IUmow4vOF6m95RuhDqzTPYDcTqW:GEb0pmV4GF6m50Zq/YDlW
MD5:	293729E976F2CEFB195258D8CC61A433
SHA1:	39D3BD078237E1632B5A91F3284DDFB009A27F3D
SHA-256:	413B36AB7233A2925BE5EBF0E3DF5BF1253C75727A6E2FD9ADA195CD367055B9
SHA-512:	5CC965CA4977984FD22EDB01D6CE6DD88A050C8A940A3E88CEC534823B5AD653B051F03115A0FFDA4D007E4925E559CFBB61D76278428BAC31170B5CAF006408
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/yahoo/help/icons/icon-livesupport.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="18px" height="18px" viewBox="0 0 18 18" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>icon-phone-white</title>. <desc>Created with Sketch.</desc>. <g id="CURRENT" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="simple-fix-version" transform="translate(-1259.000000, -308.000000)" fill="#FFFFFF">. <g id="icon-phone-white" transform="translate(1259.000000, 308.000000)">. <g id="phone">. <path d="M3.51538224,0 C3.32207789,0 3.12799094,0.0727826087 2.97773007,0.223043478 L0.712860503,2.48791304 C-1.07461776,4.2753913 0.615034417,8.86617391 4.48894746,12.7393043 C7.31416484,15.5645217 10.5212953,17.2291304 12.7431214,17.2291304 C13.5679909,17.2291304 14.2566866,16.9998261 14.7403388,16.5161739 L17.0059909,14.2505217 C17.3362518,13.9194783 17.

Chrome Cache Entry: 846

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1610), with no line terminators
Category:	downloaded
Size (bytes):	1610
Entropy (8bit):	5.317017318435937
Encrypted:	false
SSDEEP:	24:zBBh9ozqdwZCBBR9opFo0Z1lAl+9opFo0Zi9ozqdwZCHHbT:jn4EXkaSyikaSO4YHP
MD5:	DA05F5D596C887A6A5221011FA70D158
SHA1:	76923BCDC453F807CF78D55E338B78ED8194D0CA
SHA-256:	1D8F5B2BBB996A8F30C64630E9D1EA256B4FCA3F5C937F0856DEF478848DB025
SHA-512:	509024EAEBF85380CB6BD1D4A32728DD69A9B8865657259535754BBD89CBEBAA4608BDBD49631F880051F8A712CB416AFFD35D067D9ADD5B09D18CBF9FAE7036
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/ms/trendingNow-flameIcon.yhome-variable.a2368adb8251677d29ac1399a6f34c43.min.css
Preview:	:root,html[data-color-scheme=dark] [data-maintain-color],html[data-color-theme-enabled][data-color-scheme=light]{--srch-tn-flame-color:linear-gradient(-63.94deg, #1D2228 0%, #1D2228 16.1%, #B23909 16.1%, #B23909 32.2%, #FF520D 32.2%, #FF520D 48.2%, #1D2228 48.2%, #1D2228 67.8%, #B23909 67.8%, #B23909 83.9%, #FF520D 83.9%);--srch-tn-flame-icon:url('https://s.yimg.com/pv/static/img/icon-flame-light-202303010352.gif')}html[data-color-theme-enabled][data-color-scheme=dark]{--srch-tn-flame-color:linear-gradient(-63.94deg, #FFFFFF 0%, #FFFFFF 16.1%, #A34810 16.1%, #A34810 32.2%, #FD6100 32.2%, #FD6100 48.2%, #FFFFFF 48.2%, #FFFFFF 67.8%, #A34810 67.8%, #A34810 83.9%, #FD6100 83.9%);--srch-tn-flame-icon:url('https://s.yimg.com/pv/static/img/icon-flame-dark-202303010353.gif')}@media (prefers-color-scheme:dark){html[data-color-theme-enabled]{--srch-tn-flame-color:linear-gradient(-63.94deg, #FFFFFF 0%, #FFFFFF 16.1%, #A34810 16.1%, #A34810 32.2%, #FD6100 32.2%, #FD6100 48.2%, #FFFFFF 48.2%, #FFF

Chrome Cache Entry: 847

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4726)
Category:	downloaded
Size (bytes):	5759
Entropy (8bit):	5.3221292113936975
Encrypted:	false
SSDEEP:	96:ODUVMpFwpyb6c1kSZliNSrZO601YfwDR+U4kgANgxrWHGO9LEU+48LZYizx:OYCpy4b6qDiNSrZO601Yfwd+UhgW0rbp
MD5:	74D03DFA1A48E2D0445AA86E4EED7CCD
SHA1:	194DE42F083CEB4831B721BEDA1D9D8FD619004A
SHA-256:	E84D196D829630CAB5FDA4351097245A0B67CA4A7002C46A6C0D4EDDD9B89CB3
SHA-512:	8460E9EC4A3A0DF337D26246944C1B59AE50BE373E92ECC5A95B35E0CC58110E569ED3E6CFF73DBF2BA58235420A1D77F77D3A9D344B9398392F73B5E1A10B5F
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/index.DsErXEH0.js
Preview:	var Q=Object.defineProperty;var T=(t,e,n)=>e in t?Q(t,e,{enumerable:!0,configurable:!0,writable:!0,value:n}):t[e]=n;var I=(t,e,n)=>(T(t,typeof e!="symbol"?e+"":e,n),n);import{n as w,a8 as W,i as G,a9 as X,v as E,P as O,$ as j,aa as Y,U as N,ab as V,f as Z,ac as tt,ad as et,ae as nt,af as it,ag as q,ah as st,ai as rt,aj as at,ak as ft,al as ot}from"./scheduler.ErneftFr.js";const H=typeof window<"u";let U=H?()=>window.performance.now():()=>Date.now(),B=H?t=>requestAnimationFrame(t):w;const k=new Set;function J(t){k.forEach(e=>{e.c(t)\|\|(k.delete(e),e.f())}),k.size!==0&&B(J)}function D(t){let e;return k.size===0&&B(J),{promise:new Promise(n=>{k.add(e={c:t,f:n})}),abort(){k.delete(e)}}}const M=new Map;let R=0;function ut(t){let e=5381,n=t.length;for(;n--;)e=(e<<5)-e^t.charCodeAt(n);return e>>>0}function lt(t,e){const n={stylesheet:X(e),rules:{}};return M.set(t,n),n}function z(t,e,n,s,u,a,l,i=0){const c=16.666/s;let r=`{.`;for(let $=0;$<=1;$+=c){const m=e+(n-e)a($);r+=$100+`%{${l(m,1-m)}}.

Chrome Cache Entry: 848

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 700x420, components 3
Category:	dropped
Size (bytes):	65358
Entropy (8bit):	7.967522090720887
Encrypted:	false
SSDEEP:	1536:2x9S0Qjh1n8KPHoPr+xhiyT1GRqw/YdRC1PQe8d3:2Hejjn8mW6hiyxQqw/YdRCxU3
MD5:	6FEE08FC89667AADA2C0D4F103284AE6
SHA1:	F538FF2BC5424DC205CC87CE59A338B31D208280
SHA-256:	94B7BFAB9E39F719860EC3EFC1CDD7BAD058395CA0F70CAC5E52A8CF4C408267
SHA-512:	5C186249D8928B8EEF2DF18936A3D5DF27105C9EF4708D0139E0D426015E15E0828AE2508646269DA4A1F1A50FF7A7E217A2760A49B79BF712B36A417E91E5EB
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C......................................................................................................................H.........................!.1.AQa."q..2...#...B...3Rb..$Cr......4Scs..................................,.......................!1.."A2Q.a.B3q..#.R............?...\. .5..4j......q.\.Mr.=3vr1.S].i..i.F0ES.r..Q...=.

Chrome Cache Entry: 850

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 851

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14148)
Category:	downloaded
Size (bytes):	29191
Entropy (8bit):	5.593105001479485
Encrypted:	false
SSDEEP:	384:zbf1yHiszIplfIBcOoJBsThOzE1zvjphJ2Ce1LYG:z5yHiA4lfIBcOoT68zE1zb4C0YG
MD5:	7153562CC1618001F7B3A3C0B829A34C
SHA1:	33715973C46A50546AAE7C48F10D561AC3679561
SHA-256:	76282D556DAF6FBF2899EDF57F6589BBACDE0D7CE31D3C0C595B76F5D4D49661
SHA-512:	326CBBBB3E9D3A4E66E11D662E588AC166067478811AC8A47373FA11E260FD8451946310BEFCF8D1D6820AB4D5343E544429C70DC365C29E93AE6BB7DFD44DDA
Malicious:	false
Reputation:	low
URL:	https://depl.pages.dev/
Preview:	.<!DOCTYPE html>.<html id="Stencil" class="no-js grid light-theme ">. <head>. <meta charset="utf-8">. <meta name="viewport" content="initial-scale=1, maximum-scale=1, user-scalable=0, shrink-to-fit=no"/>. <meta name="format-detection" content="telephone=no">. <meta name="referrer" content="origin-when-cross-origin">. <title>Yahoo</title>. <meta name="description" content="Yahoo">. <link rel="dns-prefetch" href="//gstatic.com">. <link rel="dns-prefetch" href="//google.com">. <link rel="dns-prefetch" href="//s.yimg.com">. <link rel="dns-prefetch" href="//y.analytics.yahoo.com">. <link rel="dns-prefetch" href="//ucs.query.yahoo.com">. <link rel="dns-prefetch" href="//geo.query.yahoo.com">. <link rel="dns-prefetch" href="//geo.yahoo.com">. <link rel="icon" type="image/x-icon" href="https://s.yimg.com/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico">. <link rel="shortcut icon" type="image/

Chrome Cache Entry: 852

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=111&external_user_id=568962836176703241&expiration=1712882503
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 853

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.292908596521779
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtjyREWqWv+ndp:6v/lhPfkCDtmDV+dp
MD5:	5BEC6606B8392065F9DA9898CA6F7B14
SHA1:	73AC5B01B5E3293FB792179626E7F8369CDB944D
SHA-256:	ACCCC501AA6AFA3CFAC15E8DDCCF1561DEED2ED08C2F7D652ABBDBE9AA71609A
SHA-512:	36FEC10F71295203E59BCC52042EE2691E5DB51D26F6D76D4B19BFEDF4429FDE898C87ABC77CA29F6BB58E6217FF380F0650115C06395CB1DA270BD028C2CF80
Malicious:	false
Reputation:	low
URL:	https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE......U..~....IDATx.c`.......'......IEND.B`.

Chrome Cache Entry: 854

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36322)
Category:	downloaded
Size (bytes):	91681
Entropy (8bit):	5.592961846474635
Encrypted:	false
SSDEEP:	1536:4q17a1xu7BKLZScHjXw1f2+yI0SEXRrdtpvUG9Ql:Va1I288+R07vUXl
MD5:	D8F3CA32529065A3A75CFA8D1CCC7B8B
SHA1:	F16113ADDBF40C74FEB25AC1919D007C03150F5C
SHA-256:	1961D2D143D508CA43A313B85BBE94A1CCA541BF66A690008D95F90F36C80E85
SHA-512:	B9B5F8ACD1145F28FAA2B6762C97436787156B6C91C14AC550D01DC27D0F30975D949C66B3F29A044E88FFBA496A7FCFEAAD8386F1BD91491DABA7931DF3599B
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ea=da(this),fa="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},ha={},u=function(a,b,c){if(!c\|\|null!=a){c=ha[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}},v=function(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in t?f=t:f=ea;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 856

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 857

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 858

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14167)
Category:	downloaded
Size (bytes):	14168
Entropy (8bit):	5.531480584151887
Encrypted:	false
SSDEEP:	384:a3MK2mFxY1au0Ql06qc0g8eZb1aZfhw/idMDj69f:aciFxY1adQl06qc06XaNqidMDj4f
MD5:	9FBF6F909A9FA867C732E0B7474C989B
SHA1:	93330E6A4237E5441F6C1FC94CB4C1B89FF64CBB
SHA-256:	42BCF53ABCC74CCE942D52AB5416C35B4E5A1547ACAC0470F4EFFF1C9819EE43
SHA-512:	8251DDD6EF05E84B4F9318C21BC5681BB3673E77B5A074A4E5D9F10989D309C66D32C974D428DEFE32211B806BDA15C8A0547D4D26AA261ECF18E335AD918C03
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/Tabs.DtDGbWu_.js
Preview:	import{s as Ee,D as R,e as J,b as K,w,d as Q,f as W,i as C,j as U,O as Y,M as Z,k as I,y as pe,Z as Te,q as Ae,E as Le,R as oe,c as Pe,p as $,L as re,u as De,g as Me,a as we,I as Be,l as ue,C as fe,v as ye,t as x,h as ee,m as te,n as ce,T as de}from"./scheduler.ErneftFr.js";import{S as Oe,i as Ve,t as g,g as T,e as A,a as k,c as B,b as y,m as O,d as V}from"./index.DsErXEH0.js";import{e as G}from"./each.DufB99sH.js";import{g as le,a as He}from"./spread.CgU5AtxT.js";import{a as je,g as me}from"./i13nUtil.0wCphNmh.js";import{I as ae}from"./Icon.CDBsrPKz.js";import{S as qe,T as Re,O as Fe}from"./Tooltip.CUxnHR7T.js";import{l as Ke}from"./yf-unlock.DelAiXlN.js";import{w as Ue}from"./entry.CqbZzrN3.js";const Ye='<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path fill-rule="evenodd" d="M17 8V6c0-2.76-2.24-5-5-5S7 3.24 7 6v4h.2c-1.12 0-1.68 0-2.108.218a2 2 0 0 0-.874.874C4 11.52 4 12.08 4 13.2v5.6c0 1.12 0 1.68.218 2.108a2 2 0 0 0 .874.874C5.52 22 6.08 22 7.2 22h9.6c1.12 0 1.68

Chrome Cache Entry: 859

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56398), with no line terminators
Category:	downloaded
Size (bytes):	56398
Entropy (8bit):	5.907604034780877
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2
MD5:	EB4BC511F79F7A1573B45F5775B3A99B
SHA1:	D910FB51AD7316AA54F055079374574698E74B35
SHA-256:	7859A62E04B0ACB06516EB12454DE6673883ECFAEAED6C254659BCA7CD59C050
SHA-512:	EC9BDF1C91B6262B183FD23F640EAC22016D1F42DB631380676ED34B962E01BADDA91F9CBDFA189B42FE3182A992F1B95A7353AF41E41B2D6E1DAB17E87637A0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 860

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35295)
Category:	downloaded
Size (bytes):	35296
Entropy (8bit):	5.578598186186395
Encrypted:	false
SSDEEP:	768:zh2n7S6sKlWtvy73bMbYUzGaUNj8FkfgdSpmEwnnrw3Z7CPGJlC8Z3s5CkCrDxAk:zhzPFy7ILJFwaGQcrjR1
MD5:	E5E3D208C391B51A90375349E413C342
SHA1:	9215C602ECB6704F5D5E25BB74D71194549BE569
SHA-256:	CB266D7E0E7AB54C4C07EEA9DAAA67278BEF8D3EABEB5081C7AE40446C3022F3
SHA-512:	AF630A84B2F3B587B406D6E364D65EC5676DBA757BF48DB0662B50773F24C71362C82D2AF70760D5EF4CD4902DFDC2E86D7D5C9E5CB8FF02240A4F9992493916
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/FilteredStories.9pr27Tys.js
Preview:	import{s as Z,_ as ot,n as P,e as y,d as M,f as T,i as g,p as S,k as D,l as E,y as pe,I as st,b as K,j as N,t as q,h as j,M as G,ao as it,a4 as ke,C as Ze,G as at,w as W,c as x,D as ee,a5 as ce,u as te,g as le,a as ne,m as rt,L as ue,Q as Te,R as ft,P as ct}from"./scheduler.ErneftFr.js";import{S as oe,i as se,c as F,b as B,m as z,t as k,a as v,d as O,g as Y,e as Q}from"./index.DsErXEH0.js";import{e as X,u as ut,o as _t}from"./each.DufB99sH.js";import{g as me,a as ve}from"./spread.CgU5AtxT.js";import{t as U,n as mt,h as dt,g as we}from"./commonUtil.Bb2Cnbsk.js";import{B as _e}from"./Button.C10y2YT5.js";import{I as $e}from"./Icon.CDBsrPKz.js";import{L as ht}from"./Link.DZ6I_oHl.js";import{M as gt}from"./MenuSurface.DcbYJDWR.js";import{f as ae,s as bt}from"./utils.HyUTigHj.js";import{C as kt}from"./close.C3ug6nNR.js";import{a as xe,I as vt}from"./InfiniteScroll.BFSrs90C.js";import{S as Ae}from"./SkeletonLoader.CyQaBkvN.js";import{S as et}from"./Spinner.R1kjxUGs.js";const pt='<svg xmlns="h

Chrome Cache Entry: 862

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	17
Entropy (8bit):	3.1751231351134614
Encrypted:	false
SSDEEP:	3:RWWMLGoWoX1:jMLGoWoF
MD5:	0DE65A816E5D966222F1981F4BEF4133
SHA1:	F556E06887047A75439DE24ED1041D8ED9698E01
SHA-256:	1BD8703D9DD2A10CCA49E6A4CDBEB588CEFA6424A5E6E2FF9C2AABE56DD797DB
SHA-512:	405D0EFA3A0B2F70B2735910586C12BF7C821710D798967E4B492293321C3B0E55896B5BFB9EEAE943B291EDBFF6AC7BE5146978CD872788D12C628DF462E172
Malicious:	false
Reputation:	low
Preview:	Missing ads array

Chrome Cache Entry: 863

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17810)
Category:	downloaded
Size (bytes):	17849
Entropy (8bit):	5.339889815796056
Encrypted:	false
SSDEEP:	384:tlE5PUlySJ1nFARibiVVt3qEQRAXzh3LMCHPACYdxZvGex7Q2hlHA3hisavKfsl:T7gcFARiEV1qEQROzh3LMEPAZ1vGo7Qc
MD5:	907C8BF6C67491B309A489C75F65F939
SHA1:	A96522284E77B43C0C5A5A23B5DF9CCBCA811807
SHA-256:	755C6CD5B0F614FFA0906CA3AB469ADB6E9F036C9A7E6E5D1471C2C943CA64EB
SHA-512:	D4C24906A31B30EA91A4AD9A29DB47F27117B4729A8C805E672FB988F2EB1B066F8FC5300D2A4675520953D2C13081AD67A139DE867F80E95E340B36C4CBB005
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/scp/js/fpDesktop.907c8bf6c67491b309a489c75f65f939.js
Preview:	!function(){"use strict";var e=window.wafer,t=e.base\|\|{};function n(n,o){if(e)return o=o\|\|{},e.utils.elementInView(n,o,t.viewport)}function o(e,t,n,o,i){return{clean:t,dest:n,h:i,metaSize:!0,pos:e,supports:!1,w:o}}var i={context:{bucket:"",bucketId:"",device:"",intl:"",lang:"",meta:{},mode:"normal",region:"",rid:"",site:""},i13n:{}},a=["MAST","LDRB"],r=function(){var e,t,r,s,l,d=window,c=document,f=d.adsConfig,u=d.YAHOO,v=void 0===u?i:u,m=d.DARLA,p=void 0===m?null:m,h=d.wafer,g={},w="adRotateEvt",b="scroll",E="homepage-viewer",A="sda-",L="sticky-lrec2-footer",C=A+"LREC4",y=A+"MON2",x="2023538075",O="native-leaderboard-ad",R="gemini-ad-refresh",B=!1;function D(){var o;if(f&&(t=f.rotation)&&(null===(o=null==f?void 0:f.positions)\|\|void 0===o?void 0:o[t.currentpos]))if(f.clientPositionMeta.positions.forEach((function(e){g[e.id]=e})),s=g[t.currentpos],p)if(t.enableNavAdRotation&&h.on("fetch:success",(function(e){e.elem.classList.contains("nextgen-page-navigation")&&function(e){var t=d._darl

Chrome Cache Entry: 864

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13135
Entropy (8bit):	7.184697879636056
Encrypted:	false
SSDEEP:	96:CllcHitlIxv9vk7C1+I4wWHLihk/xr7MsapOktP/afRbcP4dnq1jAzJm0CMpBLCI:pIIHUCD4waGZtXafRAP4E1jINB7VkY
MD5:	0FED441093286AEEA28A68AE5566AAD5
SHA1:	B158AF96E66A00C13428DF6654081CAEE365C018
SHA-256:	71CAB1F4F0651F05F24580C4840B539B07A872602839F60D2009968E06CC09A8
SHA-512:	A900FBAE84D1E560D2796B334E350D1B5486ED30CC3F5BD4758CF41F7689C125FC05135865EE86A8FACCCD8E93119AB837271A073ABF33CF25396807C8582E9B
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/13461938776524376467/images/headline3.png
Preview:	.PNG........IHDR...X.........'.4....CiCCPICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R...J5e?

Chrome Cache Entry: 865

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=TjMxskYIXe9LRDfaNGZeQmalMCs&google_push=AXcoOmRdLSmcVrzvYhKQlHJGBZ_7-SGIOwpsacgQcMfsqWaCoxzuNh0ysV0Ie3T1QaVEcLonPqhlF177fOJNPbiG8bHiQs8WIL31
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 866

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-DI3Yjr4NNCbk87sCLDNWhFFmKTugg-x_nWPc1sD6n_9RFKZL-kULnh6qdEI7ZME8B4fIYEIEkSW9AUCn5wKTO7l1bEDk3fizKPJevJtip4gP3LA-s
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 867

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5792
Entropy (8bit):	7.796330143084098
Encrypted:	false
SSDEEP:	96:qCGQbF3hgteJTd1hOKdY5N/yE5slPcYKdtWvQ3J1tTxzJV59enQa4a:tGOhgtCTd1XdCz2FKHxzJV5sQaJ
MD5:	EB486E7400C993A2EA4773CBE5D462FC
SHA1:	230DEE53635EF961731A4336AD34E2802858F9EB
SHA-256:	D640E053429A9CCB5E5E55C3F661203F8BC81DCEC481DFD623CC86B49ADDB14C
SHA-512:	4C08716F756FC3BC24D7634EDAFD32CE685EFA56B9A649456D071E50E035767D39BDB1F516BC844CDB70F8B49B5900DFDD325B383E00BDAE81ED0A48CFB3E259
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/tgwYzqlUgFr5Ijt.uhR1Cw--~B/Zmk9c3RyaW07aD0zMjY7dz01ODA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-03/85b6c1d0-ed44-11ee-b5df-4ada00cc9cb9.cf.webp
Preview:	RIFF....WEBPVP8X.... ...C..E..ICCP0......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 B........D.F.>y<.H....'......en.:..c...z.)...}.7.wNE.C...#.....^..q...0........%..4.....?J_.DDDDDDDDEAc.....u.+IM.:..v3C...Ze......>x.X...;.....3.c7.#~].c../^.;..0K1.}.Ct.LR..A...@.W.C...e...[j.....m.x. u..,....E.....P=8.Du.........YS.V..w.%z^T.v.x..&....nC.V.....i1Fj_.J....N.L.m........Uz.`7.T.\.xKHJ99\|....Z......6.zG...,+~RIt...=...m...&..E--:a.....A.V.Mr..3..T9..>.' ......G

Chrome Cache Entry: 868

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=123&external_user_id=TjMxskYIXe9LRDfaNGZeQmalMCs
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 869

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (786)
Category:	downloaded
Size (bytes):	787
Entropy (8bit):	5.179396723867532
Encrypted:	false
SSDEEP:	24:+Y72PvDTMPyD6bJdCcQIxS2sTebNH2qGPee9ZsV:+YiPLJGdUIyS/e8V
MD5:	BA3C62D82B44B6BC6596CE392206987B
SHA1:	DDC0615F7DC76C8DE0D2C677F360BECEB7C78DAD
SHA-256:	FF2BE3A8E9CB6C564207224BF108CF5FD8EAE50EA58227519925DD9E500CD65D
SHA-512:	F57BD35B454DC4FC2F54C1060EA6208A53EE9467BE5C4489A221E01AE241888F50918117CC3D8A605D06FD4AD45C26E1410A7EDAF9B5E420DF43E307C9F53C2F
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/loadPreferences.CwKDk-0h.js
Preview:	import{a as d,b as g}from"./commonUtil.Bb2Cnbsk.js";import{f as m,l as w}from"./logUtil.nPJvQAyt.js";async function v(r,{path:a,reuse:l=!0,silent:f=!1}={}){var o,t;const[i]=await d(["experience"],r),u=await g(r);if(l){const e=i.getRegionData("dock");if(e)return e}try{const e=u.ynet==="1",c=(((o=r.url)==null?void 0:o.searchParams)\|\|new URL(window.location.href).searchParams).get("expPreview"),p={product:"financeWeb",...a&&{path:a},...e&&c&&{preview:c}},n=await m(r,{isRelative:!0,pathname:"/xhr/experience",perfLabel:"loadPreferences",query:p},{credentials:"include"}),s=(t=n==null?void 0:n.container)==null?void 0:t.regions;return!f&&s&&i.loadExperience(s),s}catch(e){if(a&&a==="subscription-pricing")throw e;return w(r,{},{data:e,perfLabel:"loadPreferences"}),null}}export{v as l};.

Chrome Cache Entry: 870

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x180, components 3
Category:	dropped
Size (bytes):	28641
Entropy (8bit):	7.973173603692658
Encrypted:	false
SSDEEP:	384:SYuFfhm4nlitFylJV+epUduipEotqedGMSXmWZzmVsPqr25WhfNnkB7otjAacC:EmXtwl6sBedGMSXmImVqqr2gNn9kC
MD5:	ABE9664D6B46CDC1A9EA0A6DD8654865
SHA1:	41CABDCE8D34B8A8C00785D2A87EE90206643974
SHA-256:	7C23310A1E36C82FA41843B7C2A0751F0405EE4E793DDDD4891E1B164A8B41F6
SHA-512:	7BCD1FC8AD60E2325D87DF2F6A335BFE02AFF45F798176DF7ED07C7DDD6BB5ACA86450178A763A34F09C5D375E6F2F103D3266742BE03EA5CD3771832786624C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................d............................................K..........................!.."1A.Q.2a.#BqR.......3Cb...$4c..DS..%5r......................................9.......................!..1.."2AQ#aq...BR3....$Cb.................?..b...N.IGD~.7.........u#A..K.D..y,.'..t=.uz}.......\j.5..x.I....oY.Q.`...9.,.W ..Vt..}w.T.Z.(.........Es...*Vz...K......a.W/.I\|...........#:{.VxF5....i.Z>.t@....i.Z>'...T...n.........m2..Cj.F.6.4.x..6.Z.L....@..MY.5@Y}.m.B.O....7.`.,....?.Z{..o.R.....5cWn..,.7....P.~4-....dcg.>.}K.....CU...Z6#.I..,.6....&\........ FX.4P...I.0R...i.+&!...:"..J:..=.I1o.zeb....b?.qm.oR.tga.Le.=1'[.....ci.ba...f...C.,.D.\.....j......]....D"........g.N.....A8?}.%.8.................8P"...:lO1.b.y@.......i..!..mK....L..H6q.......LW..d...z.N....N.....h.0P...ju..7g.e&...4z.Cy.g.i.V.n.K".....`..

Chrome Cache Entry: 872

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (433), with no line terminators
Category:	downloaded
Size (bytes):	433
Entropy (8bit):	5.125254602038935
Encrypted:	false
SSDEEP:	12:kxP4L8BML0IbWGQL8BMfF6RbWGnWUB6Ax8KBG/9/fSWQ:kDBi0DGVBBgGnW7fKBG/rQ
MD5:	4178DE5E513389636BEA670A56A8AC35
SHA1:	A046DD1B76890C16B63835368541978D6EA811F1
SHA-256:	8A22B756206EF741939A41BFB3B4F4BC4631D7DC81011E9C897AA7038F918D55
SHA-512:	22B1473CC8C53C34AEAA9D0928C47298E2EF46A4D4A233D679500D09E0E894BB88428933054CBBAF895BDAB0051A6E232F6AFCF88C4C73F242FD32C2A68F008B
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CNXEVBC_uXgYg-7TgQIwAQ&v=APEucNXAj79iPx9r_X3B26fCPCh79sf5CCAfN2HuAI8PK4WOedtZHvv1_JlQyxByR1t4Hp9wARbUQaVqkhSGFmNg3__7P7nu4A
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=xaxis_dmp&google_cm" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=lkqd_dbm&google_cm" style="display:none;"/><img src="https://cs.lkqd.net/cs?partnerId=59&redirect=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dlkqd_dbm%26google_hm%3D%24%24rawlkqduserid%7Cbase64%24%24" style="display:none;"/></body></html>

Chrome Cache Entry: 873

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	159581
Entropy (8bit):	5.47421261332528
Encrypted:	false
SSDEEP:	3072:flpNCgZCIRWPAcPN3Mpcqc2uzDRyxXE0AJH:NPCIRWocl3MpdcnEy0cH
MD5:	D4437107AF61D80FD90F57A0808FA483
SHA1:	9E61CBA7C7F499197A2229B3431D8C76D7F52303
SHA-256:	4FA81A2BABD7AC6C723E36071474FDD0F043616D012053410A6AFAEC2D96513B
SHA-512:	AC6356DB085D25633D2750978AE9D4F633F697A3A1E2CBB76D6AF9E724EEC3458F2AFF11A432C60595763593B582978B0246F500E743C01820B2208B422A4547
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rx/ev/lib/comscore-6.3.5-min.js
Preview:	!function(n){"object"==typeof exports&&"undefined"!=typeof module?module.exports=n():"function"==typeof define&&define.amd?define([],n):("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).ns_=n()}(function(){return function o(u,s,a){function f(t,n){if(!s[t]){if(!u[t]){var e="function"==typeof require&&require;if(!n&&e)return e(t,!0);if(c)return c(t,!0);var i=new Error("Cannot find module '"+t+"'");throw i.code="MODULE_NOT_FOUND",i}var r=s[t]={exports:{}};u[t][0].call(r.exports,function(n){return f(u[t][1][n]\|\|n)},r,r.exports,o,u,s,a)}return s[t].exports}for(var c="function"==typeof require&&require,n=0;n<a.length;n++)f(a[n]);return f}({1:[function(n,t,e){var a=n(24),f=n(26),c=n(36);t.exports=function(t){var n=this,e=!1,i=-1,r=null;function o(n){i=n,t.t().set("plannedFlushTime",n+"")}function u(){t.flush(),o(-1),n.i()}function s(){r&&(c.clearTimeout(r),r=null)}a.extend(n,{start:function(){e=!0,!r&&0<t.getCacheFlushingInterval()&&null!

Chrome Cache Entry: 874

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	89
Entropy (8bit):	4.6758153040851855
Encrypted:	false
SSDEEP:	3:h/SaNLBKpqYFCu1YSHKHg4Rcgf+F/FCD:TZBK/hYoKA4mg24D
MD5:	42F21DB36AD72C8C36A737B4C5A568D1
SHA1:	391A315C736001175C1CEA254C588B932260D880
SHA-256:	31A34028CF64A9C5415FD0E5E5920A4057FADD0B5974ADDA1D13EB45AAFFBFC6
SHA-512:	D697AEE856C373450D1762C91AACE13499E57BE53D649A91311AE87DE1494729531CC87A1970A12E70FF0533ACA91ED3BE5CCEB8A24DB5792B42288C8835B831
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/globals.D0QH3NT1.js
Preview:	const o=typeof window<"u"?window:typeof globalThis<"u"?globalThis:global;export{o as g};.

Chrome Cache Entry: 875

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10418
Entropy (8bit):	6.8012580064080685
Encrypted:	false
SSDEEP:	96:CllcHitlIxv9vk7C1+I4wWHLihk/xrlZMsaBz5mY8VxhV5U3Otp888kWeeAO+r7:pIIHUCD4wa3C5NC8OOuWa
MD5:	14E32FEF5D9ADF17B36724C96C8AB04B
SHA1:	4B3602FADEBB1F0AB7A3D767950F2D95E3FA1CF7
SHA-256:	1810974F60414C97E0A3C13C98A1155CE4EC1DE694FC23E5DF9E110DAE33939D
SHA-512:	A198C25B93FAC9E064D85E5CDFC63ECBE26BD1A25A15FBD53DC418D7072E6A56125F99729E304D3255DBF47F8A6A9AF89C25540076B15AA2AA870A58E5A9713A
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/13461938776524376467/images/headline2.png
Preview:	.PNG........IHDR...X.........'.4....CiCCPICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R...J5e?

Chrome Cache Entry: 876

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3580), with no line terminators
Category:	downloaded
Size (bytes):	3580
Entropy (8bit):	5.6285651633913645
Encrypted:	false
SSDEEP:	48:CcyYbjzbpbPbaW/ZfTAmpGBlnt53kiMJOBtVedCKAHIagrsGJdNC8t5na0BBC5l8:CibPbpbPbaBOQJUgEdCbI3sya8tEXtJq
MD5:	47CC5D32CD39D7F0E3AD732FF375AF26
SHA1:	AF478D2FFA3EFD9CB82AC77BE48A58D2F0608539
SHA-256:	36069DB17D93DD2A5C22B87314E1A8512D3C8D53943A1A5AFD633E8AB7183715
SHA-512:	99BD0C1333DC092EA61C3C2023A65CFEB43C5AAB43AA9740D0D5601231A8D448BC6BE0B6554A9507B9637AB6DD0AFD364A6CFC3A985C6928C9EBC75B4BA3ED53
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=61089829&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://match.deepintent.com/usersync/141?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://rtb.adentifi.com/CookieSyncPubMa

Chrome Cache Entry: 877

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15024)
Category:	downloaded
Size (bytes):	15025
Entropy (8bit):	5.457441059247488
Encrypted:	false
SSDEEP:	384:rUN6AeaBq3t4CCeiU2vkcHzImAPY9pTB1+zHbKiMBX:gxeaBq3t4CCen2vjHzxAPY9p7+zHGiMV
MD5:	3CBC3F8DE1E9E2146A2B0F90547A8273
SHA1:	17892B390D1BF88474B7AEBD4FD3FB8B1159908F
SHA-256:	E14907866CD82F4CB2927A3F950EE112C896946556394AAE52A2B0948AA9F15C
SHA-512:	1B24D014C789A6E7FC695581744281DA91B7F512159911793CDDD828395EFC6FBABF9695027278E0E17DDEEE39D393EBD23AC5047B5760D499444450C4DED52C
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/ScreenerCard.D2lRUAzL.js
Preview:	import{f as $e,l as ue}from"./logUtil.nPJvQAyt.js";import{a as Ee,t as j,g as we,y as re,z as ye,A as Ie,d as Se,k as De}from"./commonUtil.Bb2Cnbsk.js";import{s as Ne,E as Ce,w as Y,k as P,i as m,e as E,t as B,b as U,d as w,f as y,h as G,j as H,p as C,l as d,m as he,n as Q,y as Te,L as be,a3 as M,M as Ae}from"./scheduler.ErneftFr.js";import{S as Ve,i as Me,c as L,b as F,m as O,t as g,a as h,d as z,g as se,e as le}from"./index.DsErXEH0.js";import{e as me}from"./each.DufB99sH.js";import{C as Pe}from"./Card.t2hG1sMc.js";import{E as Re}from"./ErrorMsg.vL5JXdY9.js";import{I as ee}from"./Icon.CDBsrPKz.js";import{L as Le}from"./Link.DZ6I_oHl.js";import{P as Fe}from"./PremiumLogo.DSPbU7gl.js";import{S as Oe}from"./StatusTag.DDomeXTV.js";import{T as ze}from"./Dialog.Cq9rVjnc.js";import{V as Ue}from"./ViewMoreLink.B3HK46JX.js";import{p as He,l as ke}from"./Tabs.DtDGbWu_.js";import{l as Be}from"./yf-unlock.DelAiXlN.js";const te="loadInvestmentIdeasV2",Ge=["neo_investment_ideas"];function Ye(a,t,r

Chrome Cache Entry: 878

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=81&gdpr=0&external_user_id=fACR1npTldFnUsSFfwaM1HNUkdJnUpSCeVLXvzrJ
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 879

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2092)
Category:	downloaded
Size (bytes):	2093
Entropy (8bit):	4.856383555195655
Encrypted:	false
SSDEEP:	48:nP1faPH9PnonkdkCneGtZCxFCx/exFexpOCxtexH3+A2g+YL+Fmb+BU+lT+yNOEU:nP1faPH9PnonkGCneGrCxFCx/exFexp2
MD5:	41BB1A02CE23B668C135D76247BBEE83
SHA1:	4C894C5149DD10D327E0049C272ED1A124549067
SHA-256:	00803D602596E5B0440E8B65CADFDA2B478A0B3FAF7037D6F5550453B807E082
SHA-512:	2237B6EBB2E5C38B80ECFA3E1D5F8A9CE87D05C550092ACB213BC19BEF51813225110B0FB1106BFB45DB1C540C8089BAE44ACBD27DC83863D5ADAEF89B4D378C
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/Card.FwFdRfUl.css
Preview:	.card.svelte-x3y2tz.svelte-x3y2tz{--card-spacing:var(--custom-spacing, var(--space-2));background-color:var(--surface2);border-radius:var(--border-radius-m);position:relative;gap:var(--card-spacing);padding:var(--card-spacing);display:flex;flex-direction:column}.card.sticky.svelte-x3y2tz.svelte-x3y2tz{scroll-snap-align:start}.card.bdr.svelte-x3y2tz.svelte-x3y2tz,.card.svelte-x3y2tz .card-link.bdr.svelte-x3y2tz,.card.svelte-x3y2tz .card-btn.bdr.svelte-x3y2tz{border:1px solid var(--separator)}.card.svelte-x3y2tz .card-link.svelte-x3y2tz,.card.svelte-x3y2tz .card-btn.svelte-x3y2tz{cursor:pointer;position:absolute;top:0;left:0;width:100%;height:100%;content:"";border-radius:inherit;border:1px solid transparent}.card.svelte-x3y2tz .card-link.svelte-x3y2tz:hover,.card.svelte-x3y2tz .card-link.svelte-x3y2tz:focus,.card.svelte-x3y2tz .card-btn.svelte-x3y2tz:hover,.card.svelte-x3y2tz .card-btn.svelte-x3y2tz:focus{box-shadow:var(--shadow1)}.card.svelte-x3y2tz .card-link.svelte-x3y2tz:disabled,.c

Chrome Cache Entry: 880

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/casale/ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB?gdpr_consent=&us_privacy=1YNN&gdpr=&gpp=DBAA&gpp_sid=-1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 881

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1753)
Category:	downloaded
Size (bytes):	38049
Entropy (8bit):	5.503039245858776
Encrypted:	false
SSDEEP:	768:0I4yvYUMH/Ve/RDuxG2D9ADwdjA34yTqeot0kkzlfW:07yfU/Ve/RDuDe9IyTqewLkVW
MD5:	BC080F6A89FE2B0B299FC53732C52D86
SHA1:	D4A54FCAA3F16601464F8917202D1CA00186E74E
SHA-256:	2241D391F10F461A915B6EF47BC0C8103BF0E7289AFF47E1BCFED5FF2A84D119
SHA-512:	56D0103528870E5F60C0042B86AE346713CA767497BC184BD3E4534AE907EEE3AF263540B7DFEB84013679E5A2C07F2A523E990A880D7F709D3D682163EEAC08
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/as/cb/cb_v1.js
Preview:	(function(){var g=void 0,h=true,j=null,m=false,n,o=this;.function aa(a){var b=typeof a;if(b=="object")if(a){if(a instanceof Array)return"array";else if(a instanceof Object)return b;var c=Object.prototype.toString.call(a);if(c=="[object Window]")return"object";if(c=="[object Array]"\|\|typeof a.length=="number"&&typeof a.splice!="undefined"&&typeof a.propertyIsEnumerable!="undefined"&&!a.propertyIsEnumerable("splice"))return"array";if(c=="[object Function]"\|\|typeof a.call!="undefined"&&typeof a.propertyIsEnumerable!="undefined"&&!a.propertyIsEnumerable("call"))return"function"}else return"null";.else if(b=="function"&&typeof a.call=="undefined")return"object";return b}function ba(a,b){function c(){}c.prototype=b.prototype;a.M=b.prototype;a.prototype=new c;a.prototype.constructor=a};function ca(){}.function da(a,b,c){switch(typeof b){case "string":ea(b,c);break;case "number":c.push(isFinite(b)&&!isNaN(b)?b:"null");break;case "boolean":c.push(b);break;case "undefined":c.push("null");break;c

Chrome Cache Entry: 882

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=NTQyMzQwNTM4Nzc5NDgzMDkzNA%3D%3D
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 883

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	"https://d.agkn.com/pixel/2387/?ct=US&st=&city=0&dma=10&zp=&bw=4&che=729764585&col=31411294,5071708,388507207,581726800,211538221"
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 884

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 34, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2331
Entropy (8bit):	7.732123200569469
Encrypted:	false
SSDEEP:	48:HCPVHbdLb/levTWdqgmGYDQpuYpdKqLxoh5F:HCNHxL4O0QpXKqOt
MD5:	D0E45188F6A8F2E8F2528E762FE55D33
SHA1:	42A007181ABDADCC4C79D03D74B08F39DDDC5127
SHA-256:	DEB2DC4C95EA5B692229713672E7AEAE32B3914BAFCD63F926116D6637BD1976
SHA-512:	0FD2F174A63472217D8BC23DE69DCBCAA1A583DED45152430D1A5BA455F6B1F360815DB34B5C8F96DA7DAAE232DB52197775F7F50955F497D6B664EB93B58800
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/yahoo_weather_web/accuweather-horizontal.png
Preview:	.PNG........IHDR.......".....V}.....{PLTE............................................................................................................................x.....(tRNS....!.k6...L........)....Y..D..q>.wdS_._.D...'IDATh..Y.0.M............!.^..z.....&.d.......,...@.....m.&x..l....M.-.k4....kZa.........Y..F....=I..jx.C..H..W......e....o.oO.\|..D..?#.D.{~..own...S.........7..K.....<...nA..~.8."q.@....C2...j...>..t}....(..M..@^....a..x..~J8.n{.G..b$..m_%.Y.........X.X)..Y.b.qk..].....`z...1=...vu..dj..7c').h....L..0.+eBC...S.....jyzb.\.........3G1K..`..{Kl..{_%....F.....g....h.)n..F...-&...K....)6...hV.e.#3.N..O,.....~'..s....SZ..!.).0..u.....v.1.....<...F...O.O...@....Bk.j.8[.D.4Y.5...h.-..:dAIzn.)>...\..1.....s.#[.{.....}.+.3....T.w..F.#.aaa.....7.5..QR...Q....].#..n....R..`,q...n..B:..4...=.w.../..fNN...<.P..j.U...D...c.T.(.R.X8..~el..>.h.]]5\....6.-...9#.$.:..a6..1.U..`L.4.%...v....+D.eN.znm....v...H..T....o...;)X.\..0...x..5}B...Q.

Chrome Cache Entry: 885

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (1262)
Category:	downloaded
Size (bytes):	1263
Entropy (8bit):	5.088519261879424
Encrypted:	false
SSDEEP:	24:fIz1V1aAUVKR3QW4JKRFK7re6n5CsD3qQpjLciqQksDiSa2KFGciqQpsDtZ+L:fIz1RHRgPJKp6hD3qQuiqQZDiSfK1iqy
MD5:	0D49913FAA8A4D6B9C1AE20DE30BB23F
SHA1:	BDF1EB07DE9A3684C0AFA01A4D65EEE3172F5F75
SHA-256:	48BA21FD1ABF040DF1298D21E3AC2BEA01EA3D8988CC80468BDA73C2F40E1A62
SHA-512:	9A610778FAA6A8923D3A1F15F2E3784B37B1D933378717B444B55115C73ABC949C18B074ED44B13FDA89ABDEBA0360ADD42BFFCAC3A1AB83F44A91E0573514D4
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/loadPredefinedListDetail.DdUHDKEF.js
Preview:	import{f as S,l as w}from"./logUtil.nPJvQAyt.js";import{a as b}from"./commonUtil.Bb2Cnbsk.js";async function y(t,{scrId:e,formatted:f=!0,count:r=5,fields:a,start:d=0,sortType:l="",sortField:p="",isPremium:g=!1,silent:i=!1,reuse:L=!0}){if(!e)return Promise.reject(new Error("Bad request for loadPredefinedListDetail: Missing sreener ids"));const[o]=await b(["screener"],t),s=o.getScreenerDetails(e,r);if(L&&(s==null?void 0:s.length)>=r)return s.slice(0,r);try{const n=await S(t,{key:"financeProd",pathname:g?"/v1/finance/premium/screener/predefined/saved":"/v1/finance/screener/predefined/saved",perfLabel:"loadPredefinedListDetail",query:{count:r,formatted:f,scrIds:e,sortField:p,sortType:l,start:d,...a!=null&&a.length?{fields:a}:{}}}),{result:P,error:c}=n.finance;if(c){const E=new Error(c.message??c);return w(t,{count:r,fields:a,formatted:f,isPremium:g,reuse:L,scrId:e,silent:i,sortField:p,sortType:l,start:d},{data:E,perfLabel:"loadPredefinedList"}),o.setError(c),null}const[D]=P??[],{quotes:h,r

Chrome Cache Entry: 886

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51508)
Category:	downloaded
Size (bytes):	52779
Entropy (8bit):	5.7271427969736255
Encrypted:	false
SSDEEP:	1536:j22oWm8mqBuir16X1/IeNvnWF96nZ0L1jdFyUrBhEg2VVXsulJsQp/47Q12YC/B:+4uy1szUkEl7tmg2VNlfKCC/B
MD5:	CC62D8C63B6256F213214BFF27DB794D
SHA1:	C49AE54263B028F7A0B825258684EF89B6933721
SHA-256:	C734DCEEA04B1735DF8F359DF430871831977E28511A879DC712250A893C63B3
SHA-512:	6E32DE43D4918297B48817429A2207D958A682CF78A14C5FF131530EACC373DFAA9D85CBF75F9AD363A487CB8566373389057B8A67F4ECFE8097BF9F609F86EC
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/xzTc7qBLFzXfjzWd9DCHGDGXfihRGoedxxIlCok8Y7M.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function P(g){return g}var b=function(g){return P.call(this,g)},t=this\|\|self,l=function(g,x,O,e,z,H,D,M,q,c,w,T){for(T=(w=91,48);;)try{if(50==w)break;else if(45==w)w=t.console?g:33;else if(93==w)T=56,q=M.createPolicy(H,{createHTML:b,createScript:b,createScriptURL:b}),w=33;else if(w==e)T=48,w=45;else if(91==w)M=t.trustedTypes,q=D,w=x;else{if(33==w)return T=48,q;if(w==O)return q;w==x?w=M&&M.createPolicy?93:O:w==g&&(t.console[z](c.message),w=33)}}catch(k){if(48==T)throw k;56==T&&(c=k,w=e)}};(0,eval)(function(g,x){return(x=l(40,70,44,97,"error","bg",null))&&1===g.eval(x.createScript("1"))?function(O){return x.createScript(O)}:function(O){return""+O}}(t)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;c

Chrome Cache Entry: 887

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 888

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.403365455844527
Encrypted:	false
SSDEEP:	24:4HksNgZh0q5/Jz2pRNrBZJuvu8goqc0ioNhc+C4+mI:2NCJz2bNrVENtmN+q+j
MD5:	12B6CC579876C2C90DA19B82B4A57217
SHA1:	49649315922A1B1BA8DB6F795E9E19FE260068C2
SHA-256:	AB01E0383B7B229294393E6DAABD8764D742CBFCEB3681BF5D0353078EE0305D
SHA-512:	022DBB09FAD4F7734A07CFCF18F44B850FC6E44CFBFCC4C454D20BE11AC0A932C372DAFD1A5CB056BCDA372DE4E0FDF2A11D44E44C6F0812B214F6B85FAA6647
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="8mywiRMSvjAjh4ELR8w86Q">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1711672933171');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 889

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=6D366468-71AF-422B-99AB-138A6DAB94F7
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 890

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=130&external_user_id=AAFJBk7MDBwAABSliZdkug&expiration=1712882499&us_privacy=1YNN
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 891

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (795)
Category:	downloaded
Size (bytes):	1401
Entropy (8bit):	5.334005870129127
Encrypted:	false
SSDEEP:	24:YECDmKKGJND4kQ9dSO6E+sl1XSDQkQSYRSYWu6jlqDEe:jnKtp4r3OEjl1iUkQ/R9r6jkDEe
MD5:	3B45F6675EBFFDE4BF3867B9DF292590
SHA1:	CB06C4A053C8B84317B4D09B245CCCE187C8ED0F
SHA-256:	4621EE9E5233793F4681764343CEC081F35DAA8BCA47DC7BF2B4707C5C76DA68
SHA-512:	8DFEC2AB652778A0CA1339563CA7A31692E468969CD49C1B6F7724717C3B2EE43B2BE8969DE84795FDA9A6914AF1D837E4F2922D05CEE5412B9D73950C60290B
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/index.Cq9lJqQB.js
Preview:	import{U as x,V as f}from"./scheduler.ErneftFr.js";function h(t){const r=t-1;return rrr+1}function v(t){return t/=.5,t<1?.5tt:(t--,-.5(t(t-2)-1))}function F(t,{delay:r=0,duration:p=400,easing:c=x}={}){const s=+getComputedStyle(t).opacity;return{delay:r,duration:p,easing:c,css:a=>`opacity: ${as}`}}function w(t,{delay:r=0,duration:p=400,easing:c=h,x:s=0,y:a=0,opacity:l=0}={}){const i=getComputedStyle(t),d=+i.opacity,n=i.transform==="none"?"":i.transform,e=d(1-l),[u,y]=f(s),[_,m]=f(a);return{delay:r,duration:p,easing:c,css:($,g)=>`....transform: ${n} translate(${(1-$)u}${y}, ${(1-$)_}${m});....opacity: ${d-e*g}`}}function C(t,{delay:r=0,duration:p=400,easing:c=h,axis:s="y"}={}){const a=getComputedStyle(t),l=+a.opacity,i=s==="y"?"height":"width",d=parseFloat(a[i]),n=s==="y"?["top","bottom"]:["left","right"],e=n.map(o=>`${o[0].toUpperCase()}${o.slice(1)}`),u=parseFloat(a[`padding${e[0]}`]),y=parseFloat(a[`padding${e[1]}`]),_=parseFloat(a[`margin${e[0]}`]),m=parseFloat(a[`margin${e

Chrome Cache Entry: 892

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4365), with no line terminators
Category:	downloaded
Size (bytes):	4365
Entropy (8bit):	5.145735525465993
Encrypted:	false
SSDEEP:	96:3hNzEpwq1krLq1Jr/9Ipefr4qN1lnA7O39IptQbmGMakwQy+p:3zEwuuLul/2pefN1lAC32Aa/akty+p
MD5:	9D2A8EFBE3FE9705E54DF41100EA2DAE
SHA1:	9CA39F309735BE4BDA4D6CE2D01C5F0857BD8E67
SHA-256:	F59452BBA989E5A78E9492AE296CBF910745529C3294B49A58EFA4EC7EBA8D45
SHA-512:	5D460C83F9DD30038422F843C68D1BE812E3006395355122BBA8E8608822B9751D2800FE024C85276FA36130D787364CF6CFAF333F9C0D3CC6FC2E3DEC796775
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-clipboard-copy-1.0.2-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-clipboard-copy",[],t):"object"==typeof exports?exports["wafer-clipboard-copy"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-clipboard-copy"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(o[r])return o[r].exports;var n=o[r]={i:r,l:!1,exports:{}};return e[r].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var o={};return t.m=e,t.c=o,t.d=function(e,o,r){t.o(e,o)\|\|Object.defineProperty(e,o,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var o=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(o,"a",o),o},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,o){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a cl

Chrome Cache Entry: 893

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 53884, version 1.0
Category:	downloaded
Size (bytes):	53884
Entropy (8bit):	7.995878551757057
Encrypted:	true
SSDEEP:	1536:gAJTrGlcp1/H4IgF0acoTGf14UjRF8w28zIbBxO1aByt:/FrJZgVcpfWUjs0J1z
MD5:	FF00245B9F2E06CD24C5FD72CBD46204
SHA1:	25ADB26BDAD0E01CEEC34BE5B0C4E941ED86461D
SHA-256:	CBB992FD0D0464F5ADED0D126E2BE003F2131FC63266E47C34656616C2CDC2E0
SHA-512:	DEF265ABE0DBF2EE2C962CDFE9AA30540622CECE05917C8AE8840DE24F86CBFE1F460026C258B788135973E222FFB09FE061E380C9E211FE40A97F10EBCAAA7C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/finance/fonts/GT-America-Standard-Regular.woff2
Preview:	wOF2OTTO...\|...........+...........................D..$.......`..j.6.$.......G. [0...Ucl.,..G4?...@.....M.0T..&..f..h...+.w+....\|......H6b....^.U--.j.....A..iQ..#...#b.1!..K..,:.eN".k...~...f.8)....Ub..RF........=.}/...gx.....]""......./NM95...t..m;..Y..F>..[D'9..... B..y...`.L.....HnHK..l..V...._V...7!..w..wG.......HH....5"j...V.^`K.oI..{..>.c.."D..@....W\|..R;.b.z..`............)D.!...r...1..l9....7..\...4..2...+..'5T.(..;q.6.dl.{.^.O..(.l..{.c.TFHe$...z.S_f<..k...e+..-7..V..aE...a../f.x1.&D.............#j;.'..<..s....R.Z.a.....L.....E.l..,.bq.f....v.d.`..9.c.FD.....P..B..7^_.#..}_..,.\|.oe(........m...P...0+e]...B.......>f.J..L..D.D"%@..B.(Q.......>.M.Y.?k..O..D.e...!.{.im<].8..P`S...$.V]B....B....#...$T.z.L....$..I):.i.Z6.}r.89.................~.EOn....Y.u..............c...../.-..F.4.f.i.!!...j..MI..K.....S\.d[.U..,c.n@..,..".....hd.a...Z.Kk._...'....;.......#I,\...1...S.\....E..E.;].&+f.ET0[XG.$A.. @.@..W.i8/o..................."^=.2..%...z

Chrome Cache Entry: 894

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (3203)
Category:	downloaded
Size (bytes):	3204
Entropy (8bit):	5.583152046451266
Encrypted:	false
SSDEEP:	96:HZtruqLPzWOevUBxcd6mgGXWWx7JXgRLFLWtlLWqgN+qV5t6777wSP+T5h:yaP6AU6m3XrJXAF66qgN+qV5t6777wSi
MD5:	85EC15627AA46B4AA226404951321D03
SHA1:	8D3300ECCA5FA183B3D1680C93AB325356D7C99F
SHA-256:	A81D28B9F97CF093596269C3F98D740C6B36D50D9E4FEC23EEC4F87FCE09F2A2
SHA-512:	37C2B7BE25CD86B19E5FF397E665236A263ECB553F6F8DF29ACE14D01F7873912433A6D237D8AF5668F15E8BE4C47B64E2D198C4F148CFF48667F0810C7311B1
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/ErrorMsg.vL5JXdY9.js
Preview:	import{s as k,e as M,b as O,t as j,d as N,f as w,j as D,h as T,i as b,p as _,L as h,M as r,k as A,l as I,m as P}from"./scheduler.ErneftFr.js";import{S as R,i as V,t as z,g as q,a as v,e as B,c as G,b as L,m as J,d as K}from"./index.DsErXEH0.js";import{I as Q}from"./Icon.CDBsrPKz.js";import{t as F}from"./commonUtil.Bb2Cnbsk.js";const U='<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M11 15h2v2h-2zm0-8h2v6h-2zm.99-5C6.47 2 2 6.48 2 12s4.47 10 9.99 10C17.52 22 22 17.52 22 12S17.52 2 11.99 2M12 20c-4.42 0-8-3.58-8-8s3.58-8 8-8 8 3.58 8 8-3.58 8-8 8"/></svg>';function H(n){let e,t;return e=new Q({props:{icon:U,type:n[6],size:n[8],className:n[13]}}),{c(){G(e.$$.fragment)},l(s){L(e.$$.fragment,s)},m(s,m){J(e,s,m),t=!0},p(s,m){const c={};m&64&&(c.type=s[6]),m&256&&(c.size=s[8]),m&8192&&(c.className=s[13]),e.$set(c)},i(s){t\|\|(z(e.$$.fragment,s),t=!0)},o(s){v(e.$$.fragment,s),t=!1},d(s){K(e,s)}}}function W(n){let e,t,s,m=F(n[3],n[4])+"",c,u,d,o,i=n[5]&&H(n);return{c(){e=M("

Chrome Cache Entry: 895

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 162 x 82, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7324
Entropy (8bit):	7.854163891509903
Encrypted:	false
SSDEEP:	192:iknrEB/tBTdMmhFbXmNtKh2zPHe73PnLq9P/Hu4:hnrUrTBmNtKh27eLPLq9PW4
MD5:	08E7E42D20A324381D05381B43BD496C
SHA1:	489C492B09849FBD0D0AFD9D6969EE2FFED5868B
SHA-256:	FFBE68D155920D39932B9EB4C1A4B436F595F448A5EBFEC23EDE37D7C2442700
SHA-512:	D0E0E72A0589362066857582C36BB0BA35C42867772D32CA884757303C425DE07EBDE4FE6DB8F5B606DFAC8734C9C2586CEAC4EFD289DAFD46BCBFAA74C5D716
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......R......`......pHYs...%...%.IR$.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.1 (Macintosh)" xmp:CreateDate="2022-11-16T11:59:04-08:00" xmp:ModifyDate="2022-11-16T12:00:19-08:00" xmp:MetadataDate="2022-11-16T12:00:19-08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:96771fda-fa8c-4ecd-a4fa-391e4700fa02" xmpMM:DocumentID="xmp.did:96771fda-fa8c-4ecd-a4fa-391e4700fa02" xmpMM:OriginalDocumentID="xmp.did:96771fda-fa8c-4e

Chrome Cache Entry: 896

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (1459)
Category:	downloaded
Size (bytes):	1460
Entropy (8bit):	5.384815030997657
Encrypted:	false
SSDEEP:	24:+5SPhFnZF4QPTHi2JBZHRu007TugGkPluz3g80+ALDjVarR/7M3VLZ7sFMRFA/k:+5SpFnZF4QPTHi27Zxa7TXdk10xHiRqR
MD5:	634D5C09D4B71F5787CA69F7C9118A59
SHA1:	7FCF2C69147AFDA59C4E5D18787E44E89C13D294
SHA-256:	D39E75845922DFFAF46F576DDF15E26B30968F499BA40F0DE81CC59BF4F7C2F4
SHA-512:	497550E0F928B3448E8DE4B2C7D8E6557D42DD4202775E8305B33D0A20B75853301169BFE282CD51317CDD12690CFD82CB7C90C8BBAAF1C3E3853F31CE0C012A
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/loadNewsStream.zkkLaOCt.js
Preview:	import{b as F,a as H,h as f}from"./commonUtil.Bb2Cnbsk.js";import{m as L,n as Q}from"./utils.HyUTigHj.js";import{l as _}from"./initializePage.Bz59rdd0.js";import{l as y}from"./logUtil.nPJvQAyt.js";const i=L(["132x99"]),d={adsFrequency:5,adsImageTags:i.tags,imageTags:i.tags},u={homeNewsStream:"homeNewsStreamNeo",newsHubNewsStream:"newsHubNewsStreamNeo"};async function V(t,{isPagination:g=!1,listName:n="home-news-stream",queryRef:s="homeNewsStream",payload:l,...S}={}){const[m,[p,a,c]]=await Promise.all([F(t),H(["config","ncpStreams","crumb"],t)]),{enablePlus:w=!1}=p.getPageConfig()\|\|{},{isHighValueUser:N=!1,premiumTierFeatures:{adLite:P=!1}={}}=(c==null?void 0:c.getSubscription())\|\|{},{enableIncreaseAdsTimeout:T,i13n:h,ads:A={}}=p.getPageConfig()??{},{spaceid:I}=h\|\|{},{adsSectionId:C}=A\|\|{},z=f(m,"enableNeoNCPQuery"),E=f(m,"enableTaboolaAds");s=z&&u[s]?u[s]:s,d.spaceId=I,d.adsSectionId=C;const e=n,M={adsEnabled:w?!P:!N,adsSlotsEnabled:E,imageTags:i.tags,key:"ncp_fin",...d,listName:n,perf

Chrome Cache Entry: 897

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (8369)
Category:	downloaded
Size (bytes):	8375
Entropy (8bit):	4.938986718408426
Encrypted:	false
SSDEEP:	96:rZD2NL8TnrzVQUOcMv3SkSLlS2zBGUJDC33BdLTaUOFuer2yymSn3rFq:1Oo5XU2zYSFFbr2ylYq
MD5:	72532AE716008FCD89700B170128D1B7
SHA1:	5339A7758DD1504BBF93576D7D4763F4E627EB22
SHA-256:	39666DD6C751375D8A257D2BA07D321EF84E3A99FFB3B12FED8289EBC38A5D67
SHA-512:	D7A994AB223A39AA6274B68FEF1CD28A8701BD74E6266F96451CECB34074E6350B2A97D51C4DC7A9A40073099D70D8F7747769BD96646414C1C21D336FFD54D9
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/videojs-bc-playlist-ui/5.1.1/videojs-bc-playlist-ui.css
Preview:	..vjs-playlist{padding:0;background-color:#1a1a1a;color:#fff;list-style-type:none}.vjs-playlist img{display:block}.vjs-playlist .vjs-playlist-item-list{position:relative;margin:0;padding:0;list-style:none}.vjs-playlist .vjs-playlist-item{position:relative;cursor:pointer;overflow:hidden}.vjs-playlist .vjs-playlist-thumbnail-placeholder{background:#303030}.vjs-playlist .vjs-playlist-now-playing-text{display:none;position:absolute;top:0;left:0;padding-left:2px;margin:.8rem}.vjs-playlist .vjs-playlist-duration{position:absolute;top:.5rem;left:.5rem;padding:2px 5px 3px;margin-left:2px;background-color:rgba(26, 26, 26, 0.8)}.vjs-playlist .vjs-playlist-title-container{position:absolute;bottom:0;box-sizing:border-box;width:100%;padding:.5rem .8rem;text-shadow:1px 1px 2px #000,-1px 1px 2px #000,1px -1px 2px #000,-1px -1px 2px #000}.vjs-playlist .vjs-playlist-name{display:block;max-height:2.5em;padding:0 0 4px 2px;font-style:normal;text-overflow:ellipsis;overflow:hidden;white-space:nowrap;line

Chrome Cache Entry: 898

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.0241026136709444
Encrypted:	false
SSDEEP:	3:CUmExltxlNXE:JQ
MD5:	B4682377DDFBE4E7DABFDDB2E543E842
SHA1:	328E472721A93345801ED5533240EAC2D1F8498C
SHA-256:	6D8BA81D1B60A18707722A1F2B62DAD48A6ACCED95A1933F49A68B5016620B93
SHA-512:	202612457D9042FE853DAAB3DDCC1F0F960C5FFDBE8462FA435713E4D1D85FF0C3F197DAF8DBA15BDA9F5266D7E1F9ECAEEE045CBC156A4892D2F931FE6FA1BB
Malicious:	false
Reputation:	low
URL:	https://www.yahoo.com/px.gif?ch=1&rn=9.35954851852123
Preview:	GIF89a.............!.......,...........2.;

Chrome Cache Entry: 899

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4025
Entropy (8bit):	7.913842303064947
Encrypted:	false
SSDEEP:	96:XNH8nq+XaXiRpDiMkAkUAX7+bz9aPyKqBHxCeJ5JLa2Ia6:ND+XaX2DiMkAkUAX7QpdBRCe1a2Ia6
MD5:	6D48C7493B5EA4C3306F6BC11638C9CF
SHA1:	00F32BDE322479596DD5022AFCE53CB67CE38B5A
SHA-256:	F8AB2778B292D70E077FC8C3C84526BBE581DC2A826165D72C7A29BEC439EBAE
SHA-512:	032E5CEF1DDB4F83F71C9A49A81555F263A36137E1F2F13E2515DC2F6D639587912DB330CC77D03EDAD75124D1665FE80F136EC55838A780EECE35B2A38080EC
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/14721375404797248074
Preview:	.PNG........IHDR..............F.....sRGB.........gAMA......a.....pHYs..........+.....NIDATx^.i....._.s........4`...!$....D...q...@.(Bq.... .\|.{..$H...P.....(.V8.....8.....stW...z=...U.;]3.'.......z..8..."A. .......F...#D@.." ....`..H0B.$.!......F...#D@.." ....`..H0B.$.!......F...#D@.." ....`..H0B.$.!......F...#D@.."....,.x.&R.v.U...d....pZ"......N.K...=M.y....X.\|..L.)....tj..(.W....P..(.......@..<L...7........H&...p0>,KNn&...gql.,. .. .s.9....3.9.......!..Z%...(<......6@..I..J.0.....B...S.b...ua.}.a..C4........, ...P...@\..eAAHn.6....^..q..lj........W..6.22.....7..wS.5.z.!.x....YFn;(..Q......G..IsNY.....G#..gP.$.U..m"5.R...g........q%0I..5]......d....&w.. =...B...Q......P.zE"..z.1.1....c...x .Xpz...3.G.T...gQ.y.R...2..>D.....[J.2.....D.............C.x.;..4g/$....,]..a....+...*?{..>@..2-!=..QceCy.4...Qe......M?&."...".]9..Cg.:.........=Q....=D..~..;....Xz.OTy.....U..K7%p.r0..X..\...:.X.p.C.\|........;baD........T..Tv.x.3`.1...[...W)...=.......&.F..T.aQ

Chrome Cache Entry: 900

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8333), with no line terminators
Category:	downloaded
Size (bytes):	8333
Entropy (8bit):	5.145631905508549
Encrypted:	false
SSDEEP:	192:36umTu6tHB4A+gQ/cRM+OqBFgTtuSd0Vo5L50+AjKHdQ2Y8:31mi6BBL+1WByRuSd0Vo5aK3Y8
MD5:	76AEB54211FCA21EC7F4F9A39B1D88D1
SHA1:	83D1BB0D1C280D5477EE4215BCDE68C4603F027B
SHA-256:	33D8BFDA78C83DE19751EC84E1D7F40DC5D7C81E7FB822069F811A9030D2D459
SHA-512:	444578A2F4A842A4590966D1970C9AF248FB070856243916E73BA5AB7825078ABB97E131F7AE5858FD3894FDF8BB2986239427BD20ACF917DC27675E0A267507
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-menu-1.3.0-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-menu",[],t):"object"==typeof exports?exports["wafer-menu"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-menu"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var n={};return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,n){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function o

Chrome Cache Entry: 901

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (799)
Category:	downloaded
Size (bytes):	800
Entropy (8bit):	5.2034481823854515
Encrypted:	false
SSDEEP:	24:C5pd2mKbbhBPoR5uUkwj+SxgdfmRyAqjVIMSR/DP8:CTd2mcbhGRFFyoamR1qhIl/o
MD5:	C3F804D1A18C284891D105E8DFD6CFD5
SHA1:	B4005B5F1C93BF200E7EF11C9FA9DE71D646F9F8
SHA-256:	8824EC1284EF781EF46B97708E6CD39A2D5A01694B456A0F512EB7D9FE4B879C
SHA-512:	688EF2320F7A56AEC5F6F2F00DD0F07C54FB34FFBCCE7EA866EB1779C97CFAEA6935B91EF2C25DD85DD59AA19C6040878D0BB9E376785391D0FAF238BC15B30B
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/SkeletonLoader.CyQaBkvN.js
Preview:	import{s as c,e as o,d as u,f as h,i as m,p as d,M as r,k as g,n as f}from"./scheduler.ErneftFr.js";import{S as _,i as I}from"./index.DsErXEH0.js";function w(t){let e,a;return{c(){e=o("div"),this.h()},l(s){e=u(s,"DIV",{class:!0}),h(e).forEach(m),this.h()},h(){d(e,"class",a="loader "+t[0]+" "+t[2]+" "+t[1]+" svelte-rqdstu"),r(e,"wideImg",t[2])},m(s,i){g(s,e,i)},p(s,[i]){i&7&&a!==(a="loader "+s[0]+" "+s[2]+" "+s[1]+" svelte-rqdstu")&&d(e,"class",a),i&7&&r(e,"wideImg",s[2])},i:f,o:f,d(s){s&&m(e)}}}function v(t,e,a){let{type:s="default"}=e,{className:i=""}=e,{wideImg:n=!1}=e;return t.$$set=l=>{"type"in l&&a(0,s=l.type),"className"in l&&a(1,i=l.className),"wideImg"in l&&a(2,n=l.wideImg)},[s,i,n]}class S extends _{constructor(e){super(),I(this,e,v,w,c,{type:0,className:1,wideImg:2})}}export{S};.

Chrome Cache Entry: 902

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15264)
Category:	downloaded
Size (bytes):	15697
Entropy (8bit):	5.53729719471769
Encrypted:	false
SSDEEP:	384:uQTCfjv99mW+911+Fl0YD0Dew/X2q5ulRIUeT:uQTCfGZ1+Fj9w/XuuT
MD5:	E2202E6ED6EF52CEC2C4A875C99225BA
SHA1:	FD48D3157CFA6B6E6FEC3E50787E357AA3288C88
SHA-256:	F2CFBD195DFF011843F93E2D32979F6F07926211CBF3EDDDC3B708B0BB04C8A2
SHA-512:	4E2AEFD87D89F4D5C00CFCAC8EE2D7748F84979BE9E66272475A621A19BA8FC884737DF604B3B7344FE4EB0C1154819880BC3769E25798BB4ABDDEF76EDC9B4F
Malicious:	false
Reputation:	low
URL:	https://help.yahoo.com/kb/rapidworker-1.2.js
Preview:	/* @preserve. * $Id: rawdeflate.js,v 0.3 2009/03/01 19:05:05 dankogai Exp dankogai $. . Original:. * http://www.onicos.com/staff/iz/amuse/javascript/expert/deflate.txt. /./ @preserve. * Copyright (C) 1999 Masanao Izumo <iz@onicos.co.jp>. * Version: 1.0.1. * LastModified: Dec 25 1999. /./. @preserve This code contains an altered version of the original source and is not meant to misrepresent the original software.. */.function base64(r){if("undefined"!=typeof btoa)return btoa(r);for(var t,e,n,f,o,i,a,l="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",u=[],s=0;r.length>s;)t=r.charCodeAt(s++),e=r.charCodeAt(s++),n=r.charCodeAt(s++),f=t>>2,o=(3&t)<<4\|e>>4,i=(15&e)<<2\|n>>6,a=63&n,isNaN(e)?i=a=64:isNaN(n)&&(a=64),u.push(l.charAt(f)+l.charAt(o)+l.charAt(i)+l.charAt(a));return u.join("")}function lzw_encode(r){for(var t,e={},n=(r+"").split(""),f=[],o=n[0],i=256,a=n.length,l=1;a>l;l++)t=n[l],null!=e[o+t]?o+=t:(f.push(o.length>1?e[o]:o.charCodeAt(0)),e[o+t]=i,i++,o

Chrome Cache Entry: 905

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=0&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 923

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 656x369, components 3
Category:	dropped
Size (bytes):	44196
Entropy (8bit):	7.920916746123509
Encrypted:	false
SSDEEP:	768:KYycUEvXVyFpsjkKpFXmaAWCff5MODZoORqcPkFnyxHnIbqtZaU5iUnx9AXu73Yj:KPEvXVhtpB4nlyOIcPkFn8n7kUx9Aesj
MD5:	F0F17A3582888E91E9BD37F3303D2587
SHA1:	4911D42FF7CCB29895DB4C62420492FF126278D6
SHA-256:	A6506B173D8EF34BE5F2C92138D29856FC575FACFFF9CD109750A5296C515FA5
SHA-512:	20D7F91318FED1FDC8686C65C25B21AC7C2514100DEDAA5C7F739584040F94DA54635F1A45F2EEEC15DBE630A84AD6898AFFF8A16FB9081200D4E585C9D37BE1
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 924

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 260 x 340
Category:	dropped
Size (bytes):	539840
Entropy (8bit):	7.950660003114956
Encrypted:	false
SSDEEP:	12288:OqzGmFxefUFk3+6w/AuS4Hf0FzU/VF4HxHi1u2k0SwU1TKd5I/Z+aC10n/:OqzGmfeMFF6buloUNGicgd8+J0n/
MD5:	2FB9D43C74752389405ABC1A5814B44A
SHA1:	BD551A3693F34693083D37EEE3113D667CE4F3C4
SHA-256:	7A18441E184306E7F51C5493C0C17F676C73E12F518DC468DCB565B25D90FC41
SHA-512:	D0CED802BD8B03554E538D1316CC37EEFA4E0CBA33E54242BA36F4C1A3D1B991135208B54064499E571A21562AEFC67DBBE691B38E333148CCAB2518B229AA80
Malicious:	false
Reputation:	low
Preview:	GIF89a..T.......................................................................U..R..Q..O........K..M..N..N..O..P..Q..Q..S..U..N................^<.mC.N..O..L".Q..S..[..M.....d.d?...pA.iM.h/.i........f...........................................................................................................w..o.rW.S..U..O..Q..S..^$.`0.M..N..O.....................}.hN.X5.X..o>.U..S..P..R..N...n.M..Q.............M%.W..r5..W..P..e..d.Y4.._&.Z$......v._=.^,.pR.Y#.kB.f5.}.O....R..S..S..}D............`@.hC.`3.....^5.U$.X..M"....M..U%.U!.a4.M..Q..M .N..N..Q..O..O..Q..P..U..U.........hD.w\...^<.uR.`1.z.]2.Z+.~.X).vQ.W..k...U..P...b.P...v.t.W..v..V.].pP...P..X"....X.{U........X,.f.v`.....^..vQ.L..L.....N).jN.\|].N..{N.qO.................!..NETSCAPE2.0.....!.)Optimized with https://ezgif.com/optimize.!.......,......T....................H........L..............L.....J.....j..........N....................(8HXhx..........)9IYiy..........*:JZjz

Chrome Cache Entry: 925

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	81314
Entropy (8bit):	7.991017996244541
Encrypted:	true
SSDEEP:	1536:0PpiQqJZ6KJHS7ndIMztzgvSe1CSSbF4TD6cVy+mzGo/CtRiX09Jg4mKLMZJD:0xNSfS7nBzZSYFbF4TD6cVqSPtCGwZ9
MD5:	FF76E493ABB1795309ADEDCB5408033F
SHA1:	6936179DE90C49315122172D6C6D97D47F5935CA
SHA-256:	41EA29FA209F46645BC3F00D30E4B613646A96ED6D0A198715744976236D380A
SHA-512:	1B38AD4242ECB291CD1B6CA0910E8E1C1D7A9FFAAAFEB4294D30516E9A457B5C3A0C365445CB65F92F9BC94844576DD8E2B992AD5DEB12DC0BB829DBD40DCB35
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/zfAlXE4gXTPcZHRxD2dicQ--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/495c67a0-ed60-11ee-bbdf-e84806c4f88e.cf.webp
Preview:	RIFF.=..WEBPVP8X.... .........ICCPH......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 926

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://r.casalemedia.com/rum?cm_dsp_id=64&external_user_id=316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 927

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (7228)
Category:	downloaded
Size (bytes):	7229
Entropy (8bit):	5.546409490027328
Encrypted:	false
SSDEEP:	192:gEjzs0X0AFKoedB3ujiLuWhgKLywa4t972PEQU1kpL:gEjzb839LuWhgOywX9TkN
MD5:	DB7C6B3D5DACECB364FAB710AA60C2BC
SHA1:	5CC0AF2B5C5C1321B2799C32025199D42F0C8D23
SHA-256:	94B5D344656BF8F4A23D67F0D0EFE6BDF106AD14D4617F1A7FB764776BCC16A7
SHA-512:	113CE75D3C9C1E5FC3D8AD49CB38C28A51CF18C66FF2FB458E7914E14AECDBEC15675794186DDDE92D8557484302D4ECC3E3F1454486AF743C9B4A06C819C4DB
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/plusUtil.DbMydUBe.js
Preview:	import{F as h}from"./commonUtil.Bb2Cnbsk.js";const b={"community-insights":"https://s.yimg.com/cv/apiv2/default/finance/subscriptions/communityInsightsUpsell.png","fair-value":"https://s.yimg.com/cv/apiv2/finance/subscription/fair-value-source.png","insider-sentiment":"https://s.yimg.com/cv/apiv2/finance/subscription/insider-sentiment-source.png",dividends:"https://s.yimg.com/cv/apiv2/finance/subscription/dividends-source.png","hiring-trends":"https://s.yimg.com/cv/apiv2/finance/subscription/hiring-trends-source.png"},N=8,v={adLite:{copy:{id:"AD_LITE",ns:"marketing"}},"community-insights":{copy:{id:"COMMUNITY_INSIGHTS",ns:"quote"},feature:"communityInsights"},communityInsights:{copy:{id:"COMMUNITY_INSIGHTS",ns:"quote"}},companyOutlook:{copy:{id:"COMPANY_OUTLOOK",ns:"quote"}},corporateEvents:{copy:{id:"CORPORATE_EVENTS",ns:"quote"}},dividends:{copy:{id:"DIVIDENDS",ns:"quote"},feature:"companyOutlook"},"fair-value":{copy:{id:"FAIR_VALUE",ns:"quote"},feature:"companyOutlook"},fairValue:{c

Chrome Cache Entry: 928

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3078
Entropy (8bit):	6.94385762456431
Encrypted:	false
SSDEEP:	48:l8PXpinYXi4aeI+3zSdJR7cJRrMJRhFS8aQbI94Ewo2N90:lQkqIWTrMJRhFS8a394EwoG90
MD5:	D931F61DFD447A9344635C81DEC1F497
SHA1:	F1C13AECBB9578BFA84E6D01CCDEE7EDC4CC2065
SHA-256:	8F5653761179C556EEA7C566B0A1F0E6C0349B76212C7F5D4AFC8A0350B20FBD
SHA-512:	FEDDBD532BE57C20A4F9C88B9A33D7755F758D2F9F2AEDA9692811B40926C18A0B25301DAFE9C034411C2EE7EDAACCA9953A6FEE777816899C8039C7F83702FE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X............;....PLTE............................................................................................................898...iji......DED]]]..........PQP...vvv............#tRNS...DP..@`wp .1....W........8e..h..;.....IDATx.........................................................................`..@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU.=8........m.UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa........._.AUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU....... ..FPUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU...@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU.=8........m.UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa........._.AUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU....... ..FPUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU...m9U.......u......y.w.&.(tl..iB....7..I.....................$..6j....._",.......@X.~*.I...

Chrome Cache Entry: 929

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 930

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2826
Entropy (8bit):	7.469814451499084
Encrypted:	false
SSDEEP:	48:z6Wa/IAShMSakTJkitm8urSZVKwnbOvgzDCn6Y9Ua8M7piKu:zdIIAS6SaklkiUhubnbOvg3o9AIpi5
MD5:	4E2D053E24B5FF3052CE30113243052A
SHA1:	866EDC72BE604B96874A592B3DB32CAC1670AFB3
SHA-256:	C3533BF171554B46CF2F93DB2836C686B939890FB488CB5383475DBF12E56884
SHA-512:	5A2453B6E8DB568ABE7A9313924EBD3C4184E020C9B5B652C197853D65561800F886B1D5D219EC6162852C8DC11D29E35B09EC48381177BB99ED7B7AB98A23A9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X..........):...0PLTE................................................c.M@....tRNS.Dw....3..f.U"........zIDATx............................................f........._.AUUUUUUUUUUUUUU.=8........m.UUUUUUU...wm"..8.U.6j.^q..6.QA.S....J.+h@D......&.? ....K.......Pk.1.o../..A.>C).k./.=$..>...<..<..<..m...aK..r.8"....S..b.<,.qzi..W......^_$......:.^j...;..5r.5Q. .......aQ.>'N..]&....I=......@.....Ch...7........@....5.q.....9..s..X..T5(.r.......c..$.\|@.6.:k.(..O..KUMPm.a......lM......\|.j....7.Ih.j.eX....A....H..._..@....{&..#..j..\....T.$w+&...k.<.....2.......5.]zGd..~d...m...3.s....).c.aea..,..7a.OX.En...8lJ-..[...0..f.@.[".D.........A.\v.V_.c.&.~Y.....?.....{...#{....z]{v.......bC.z.s.%...v... .......A.A.E..."..b#.Z...Vb......X{......l..@..\c.w...7o.<..d/....]....w...G.x^09B?...Q4_Z......x.Ol...^...g.\|......!..G.......e............0....;K.....+....k?./7e.P\|...........r..W0..XU.....u.....J..:...J...F....F......P....u.......9.Y..Wd

Chrome Cache Entry: 931

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://sync.targeting.unrulymedia.com/csync/RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 932

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3383), with no line terminators
Category:	downloaded
Size (bytes):	3383
Entropy (8bit):	5.756855465532132
Encrypted:	false
SSDEEP:	96:VfzQ5P6MWToT+Zp6L5dJe9JIoajU5CDeo:V7G6M5T+19TYN
MD5:	B6ECF40386A94DCF6F104B00D7C7F814
SHA1:	0BEAB6085B433FD0538AD46E97DA27FC8229D80D
SHA-256:	623E67256353332B24A2074D8816ABD4362594A04AA07CFEBFC346A190BC710D
SHA-512:	60DAF3C4D353FE547CA62CA9D3542BC4FE42E2F1CCF485E96EAD6A744C0FC4226F53BB4E81964BF4AAB2157780E30077AA9D3C7954CD42A033DBFE081AF95DED
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rx/ev/builds/1.4.8/evplayer.css
Preview:	.evp-main,.evp-player{position:relative;width:100%;height:100%;outline:none}.evp-main .evp-docked-meta{position:relative;opacity:0;visibility:hidden;display:none;height:68px;font-size:16px;color:#121717;background:#fff;line-height:20px;padding-top:16px;left:0;right:0;box-shadow:0 2px 8px 0 rgba(0,0,0,0.5)}.evp-main .evp-docked-meta .evp-docked-title{position:relative;margin:0 16px 5px 16px;max-height:40px;overflow:hidden;text-overflow:ellipsis;display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical}.evp-main .evp-docked-close-button{position:absolute;top:10px;right:8px;display:none;background-image:url("data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMjQiIGhlaWdodD0iMjQiIHZpZXdCb3g9IjAgMCAyNCAyNCIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj48dGl0bGU+YnV0dG9uLWNsb3NlPC90aXRsZT48ZGVmcz48ZmlsdGVyIHg9Ii01MCUiIHk9Ii01MCUiIHdpZHRoPSIyMDAlIiBoZWlnaHQ9IjIwMCUiIGZpbHRlclVuaXRzPSJvYmplY3RCb3VuZGluZ0JveCIgaWQ9ImEiPjxmZU9mZnNldCBkeD0iMSIgZHk9IjEiIGluPSJTb3VyY2VBbHBoYSIgcmVzdWx0PSJzaGFkb3

Chrome Cache Entry: 933

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 72, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1391
Entropy (8bit):	7.763598788410441
Encrypted:	false
SSDEEP:	24:tE18rshgbc3xtnee6jtTln6li6OvjcARaInltdmmGG0I5kCr/G7:rrsCbc3xtextl6pObcARaIXmmGhIG7
MD5:	DD31F56B9E4DFF40EB87447C3DC55B84
SHA1:	1908B34AF2D15440D33DFC81FCB93AA9B271DC58
SHA-256:	4F47EF8FF3DAD2A78360AB207CF35FF2905622511C0426109F6E225052CF5637
SHA-512:	057D2DCD66C48A2BB43D7B62BC38E4DACD3D7F3FDAA103AF178FDBC737BE91A81A369158BF02AB59C46F507F538536D01D5FC179D681375F9B77EE814E544407
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png
Preview:	.PNG........IHDR.......H............3PLTEGpL..................................................a....tRNS......=..T.v.h.#......IDATx^... ..9J...?m.....eL.ig..w.8.O.I.U.....(.S....R..I8N...\...=...yw`..I...(p...P...k.....<d...)oP{..;p..N...C...X).....,.v.N..>..9..0.,....>.....w1K........0......}.B.....&.J.......t..Q.....mn...,....=. ..<.)4.1..(.(H...O.....[.u^~c;.L...8."....k.q...6d....X.....wFs.,y!..b....j.........,.'F..C....CP2.'.$.M..A.].>.`m9.`...H<..Va.%SD6.0......a...W..p".q.P..a..yik...f..e..fe.<>.s..S... .%...N....<zaX...4..A..\lV.K......<'.G.D.duq..i........{.......M..f.3......?...4..d!..k.........C$...b.Y.RwC.Q.a....'..p.k..@x..{`o.r..7..K.-..D.k.J.....R"..0E).p../..0X...N....J.2.....n..j~v..HuA.sK._..feg....Ib...0....\...U....0k.J.....'....s.+5.k1...!.x^wl..&....P.6...\~....E...^..'wm...#U..p{.l.~.....i.......t..?..q..<%...d....WN\."[........5...Y....[.QH..$.k>....."........t#..W........&..</.y...+ .w.X...!...}..G.......q...E$..:..v..

Chrome Cache Entry: 934

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 36, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	779
Entropy (8bit):	7.410384444541054
Encrypted:	false
SSDEEP:	12:6v/7wjLJnuKWJ/sm01/i3IaFKtaWk+dprMGsOKwN5CWUYF2aSysvTuc:4J0J1McDxdpgGsO3nCOF2aSyy
MD5:	459C23291DE93EC831E2E6EBEB1FBB54
SHA1:	94BDABDCE708DE98A86DFFF36090A4A3444B0D21
SHA-256:	AFE5B7C7F94439BFCD9DB55C9BACFB19D1D627BADCE34029E45870C849F8D864
SHA-512:	B9DA25CDA90046A652D4792194643CCD7C6AF87347638623F21A6E18AB8AE6D4126AE95A72C6CDA8C83E67388CABABF28248801AF4640C0B20ADED1A391CC645
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......$.....90.....9PLTEGpL......................................................}<.M....tRNS.......Hm.Z..).d}<-=.>...oIDATx^... .D...x..?.dh..i....<...]....O.\..+q...:. .V?.A.e.............'.....i.(....VW.......)..P..(.....`.Z..f.\.,3/.........G..z9...~...d.L>..)[d..R.....e.P...[....p.B..z.f...Q.[(.b.Y .B?... ...d.....J.k'....#....0.Z.(...n...]<...`9.z....../.0^......ro.iM.Np.wNV#..G.3j.!..5M....z.3z~r0M.......`-.7..O..g-..-j.....Q.)..I.j..z..).....K/...X.n.....9.&v@.S...........^.rtz#.W........43...1.'..~.X.........\U....V.V.k?..".}n).Si...\.&....\|..Ct&.{L..#+ 3.).......`I.4.O.kA.GR.. .L.:w.....w.;........l.<FM_'.$.....D.K.. .....Y.'. ..mAA.BNG.A9.u.;H?...xAb...g..I\.]c..07(......>(....*....{...$F....IEND.B`.

Chrome Cache Entry: 935

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 936

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (907)
Category:	downloaded
Size (bytes):	908
Entropy (8bit):	5.092592977660667
Encrypted:	false
SSDEEP:	24:an1Oo+sGRWoQxL2ECkOmvtg1iujQgv1o4iBO+Nd1naKv:G1OoNGwoQx66OXLQxDBO2dR7
MD5:	472C6113B1D8C07D0ABF58E2DC75283F
SHA1:	5ED636A80B1E6B3243E3CCB317292B8356A2E416
SHA-256:	937607FEF945D078C07954160D2D82D5FAE4E36CE12AF8224E2CCAE2C5D5F8B1
SHA-512:	5794914E370A7690759200E051DD77D6070127DA4B9BB149AE4D2A18BC936CE619B6A88094DB3D4848DEDF715122962F6E9B9C9E0E755FB0085616DC3FAAFA8F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uc/finance/nimbus/_app/immutable/chunks/preload-helper.BQ24v_F8.js
Preview:	const d="modulepreload",m=function(a,l){return new URL(a,l).href},f={},E=function(l,i,c){let u=Promise.resolve();if(i&&i.length>0){const n=document.getElementsByTagName("link");u=Promise.all(i.map(e=>{if(e=m(e,c),e in f)return;f[e]=!0;const r=e.endsWith(".css"),h=r?'[rel="stylesheet"]':"";if(!!c)for(let s=n.length-1;s>=0;s--){const o=n[s];if(o.href===e&&(!r\|\|o.rel==="stylesheet"))return}else if(document.querySelector(`link[href="${e}"]${h}`))return;const t=document.createElement("link");if(t.rel=r?"stylesheet":d,r\|\|(t.as="script",t.crossOrigin=""),t.href=e,document.head.appendChild(t),r)return new Promise((s,o)=>{t.addEventListener("load",s),t.addEventListener("error",()=>o(new Error(`Unable to preload CSS for ${e}`)))})}))}return u.then(()=>l()).catch(n=>{const e=new Event("vite:preloadError",{cancelable:!0});if(e.payload=n,window.dispatchEvent(e),!e.defaultPrevented)throw n})};export{E as _};.

Chrome Cache Entry: 937

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19834)
Category:	downloaded
Size (bytes):	19835
Entropy (8bit):	4.945825451004695
Encrypted:	false
SSDEEP:	192:2vFjk1RuOv8oU0+94ZXugwClqVfT5onaOvKJfzwz6HjIGzmT9/fr:EauOvMVClqVfT5onaOvKk9/fr
MD5:	7033827423635920BD70F132185FBF1E
SHA1:	AE672BBFE502802BD5B0F2886BC12C761285D08F
SHA-256:	29D3AB36A0FB644E4040D1D35AC9D74D6F139AC3BA3D27F350907A8FBB068DCE
SHA-512:	D63DB46DB963CC22BC55802E2C164CF55BEBF2D052E222A61AED392C6E343B84A5CC22376767779E56839820525802188B3101700D0856647917F1D7AD0B46F9
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/15.BrY5_--X.css
Preview:	.module-hero.svelte-th214y.svelte-th214y{width:100%;display:flex;flex-direction:column;gap:var(--space-6);padding:var(--space-5) 0 var(--space-4) 0;border-bottom:1px solid var(--light-divider)}.hero-lead.svelte-th214y.svelte-th214y{display:flex;flex-direction:column;gap:var(--space-5)}.hero-headlines.svelte-th214y.svelte-th214y{background-color:var(--surface1);width:100%}.hero-headlines.leadLg.svelte-th214y.svelte-th214y{margin:0 auto}.hero-headlines.svelte-th214y .story-items.svelte-th214y{display:flex;flex-direction:column}.hero-headlines.svelte-th214y .story-item.svelte-th214y{padding-bottom:var(--space-2);margin-bottom:var(--space-2);border-bottom:1px solid var(--light-divider)}.hero-headlines.svelte-th214y .story-item.svelte-th214y:first-child{padding-top:var(--space-3);border-top:1px solid var(--light-divider)}.hero-headlines.svelte-th214y .story-item.headlineFz-medium.svelte-th214y:first-child{padding-top:var(--space-5)}.hero-headlines.svelte-th214y .noBorders.svelte-th214y{bord

Chrome Cache Entry: 938

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (304), with CRLF line terminators
Category:	downloaded
Size (bytes):	1997
Entropy (8bit):	4.7997230480312965
Encrypted:	false
SSDEEP:	48:wxdOc5QTN3x6VVXRmtOC/Eti6PIP/Lp2xHzG42Jv:Gd9qR3oVzC/DbQH8
MD5:	A94A96BF6690ACDF1341C85810B75FAE
SHA1:	251E114D7ADFA6869853E88FF0D06932A2BF35BF
SHA-256:	AED626790A608DC25DD2B4FBA34C4A03900C90EE005FAD2F9FC15325A662A0B1
SHA-512:	0B6B4346E96DFCF75B8F7E8E6605540D9AD767CB0D2070C73EB9177094193B70CE8C8152E4E50AD91BF7AE807620446E47DBA2D3BEAA9D8F3CD35F07F7AFD4CF
Malicious:	false
Reputation:	low
URL:	https://c.evidon.com/a/n/1063/162277.js
Preview:	BAP.copyJSON({.. "data": {.. "icon_position": "top-right",.. "default_icon": "_us",.. "mobile_in_app_url": "",.. "default_footer": "Privacy Controls by Evidon, Inc.",.. "icon_display": "expandable",.. "icon_grayscale": 50,.. "container_opacity": 60,.. "offset_x": 0,.. "offset_y": 0,.. "generic_icon": false,.. "icon_delay": 0,.. "nid": 162277,.. "nwid": null,.. "aid": 1063,.. "icid": null,.. "skip_L2": false,.. "behavioral": "custom",.. "generic_text": "This ad was delivered on behalf of Ford Motor Company. It may have been matched to your interests based on your browsing activity.\r\n<br />\r\nThe Ford Motor Company is committed to providing you with transparency and control over the types of online ads you receive from us.\r\n",.. "adv_name": "Ford Motor Company",.. "adv_msg": "Ford Privacy Policy",.. "adv_logo": "http://c.betrad.com/a/l/n/1063/4552/us/1326126768888.png",.. "adv_link": "https://www.ford.com/help/priva

Chrome Cache Entry: 939

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x600, components 3
Category:	downloaded
Size (bytes):	57191
Entropy (8bit):	7.960932861162818
Encrypted:	false
SSDEEP:	1536:iUZTUYpCEYavY63QdRqaBkTvlw0gjhvDd4n:iUZP8z963QdRq46l/gjh7dA
MD5:	EFC3058CD92227066CE71E47370DC481
SHA1:	3A481ABC9397E8A98EEB3F7381C1F328ED36C652
SHA-256:	60A9F1D72B0D75B4D3C6DD6D07720C5377F1BBC7017161FFC3724CC0034843D1
SHA-512:	D9C11D53FE016AED50F8FA089C71BFA0B4AD64FBD6ECFA114707E119E5CECC8674F54BACD91D214AA3F03D000953508472F022A966754205C46F04FE1977DBBD
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/473513299895995753/images/bg2.jpg
Preview:	......Exif..II*.................Ducky.......=......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0580117407206811A61396797EE4D8D6" xmpMM:DocumentID="xmp.did:1840AE9ACF9D11EE8137FF27797BBF91" xmpMM:InstanceID="xmp.iid:1840AE99CF9D11EE8137FF27797BBF91" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:078ee284-1fbf-4ce6-b416-ac8cb9e377c6" stRef:documentID="adobe:docid:photoshop:774fc835-3ecb-bd45-bacb-20d3199f7597"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................

Chrome Cache Entry: 940

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5503), with no line terminators
Category:	downloaded
Size (bytes):	5503
Entropy (8bit):	5.376984635806113
Encrypted:	false
SSDEEP:	96:TeUg4KTMgKq8NGOzZZQujpcM8pmB9Q0C3MzDCprDVQ1nGXuX8Avva+b/70ApZV:6Ug4KTyNl/Qm3cy9SMHCpqp86a+joej
MD5:	19720D3A285ABA8024B11FC9955795FE
SHA1:	8E174FF6003772BC71FFAF2B655E23FC4B8794CA
SHA-256:	00A54A79B12A7E6DC344AE20DEA91F7772A088C14CF9B12D4DD8CEFF8B374C11
SHA-512:	B296C7311263B3B153353904B0D65131ED72F70F9A646795C07CE8DD3735329A6D6AAD99BD1C0F74742FC9E515D7CA1E78F44377EBBA55018331A986C93481A0
Malicious:	false
Reputation:	low
URL:	https://opus.analytics.yahoo.com/tag/opus-frame.html?referrer=https%3A%2F%2Fwww.yahoo.com%2F&tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb&axids=gam%3Dy-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A%26dv360%3DeS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B%26ydsp%3Dy-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A%26tbla%3Dy-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1
Preview:	<!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width,initial-scale=1"><script defer="defer">(()=>{"use strict";var t=function(t){if(t)return t;try{return document.location.hostname.match(/[\w]+\.([\w]+\|co.uk)$/)[0]}catch(t){return""}};const e=function(e,n,r,o){(o\|\|window.document).cookie="".concat(e,"=").concat(n,";Max-Age=").concat(31536e3,";Domain=").concat(t(r),";path=/;Secure;SameSite=None")},n=function(t){return new URLSearchParams(document.location.search.slice(1)).get(t)\|\|""};var r,o=function(){var t=new Date("January 1, 2011 00:00:00 GMT").getTime()/1e3,e=(new Date).getTime()/1e3;return parseInt((e-t)/60/60,10)};!function(t){if(r&&!t)return r;var e=function(t){return parseInt(t,36)};r={};var n=function(t,e){for(var n="".concat(t,"="),r=(e\|\|window.document).cookie.split(";"),o=0;o<r.length;o++){var a=(r[o]\|\|"").trim();

Chrome Cache Entry: 941

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2937)
Category:	downloaded
Size (bytes):	219590
Entropy (8bit):	5.417751116201984
Encrypted:	false
SSDEEP:	6144:KdEQmJ1czbrKWehWXp7T21homAbas7J9UaOl:9zHgaU7JmJ
MD5:	BF18FBE8845812C2A5531EDAFE8B94B1
SHA1:	833CDE93A2199FACD32AC560913EA02F5E8AB1B4
SHA-256:	F2BB46EFF3A507B385FCF4CE0295CD00837CDDB4CD187AC4FEC01EC8413BB444
SHA-512:	431B7B6FEB5E0226BB30E685B7B6D92F26E8F4F2C05098E1B8864A045F5F6DE6591ADD335DA53E9335765F6886DAD9BEDC8F363EE6E17743E0444930D337F6FC
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),q=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(f,g){this.dh=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.dh};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 942

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2658)
Category:	downloaded
Size (bytes):	2659
Entropy (8bit):	4.807983134302773
Encrypted:	false
SSDEEP:	48:WO92rXH40en2tV4EMOmy65rkHaS5eLauoqcx45dgWF7fHWF9MY:6XHkn2tuEMOt5UFFSF/
MD5:	06E27BAE8BDAA3D40CBC72ECE7A0A187
SHA1:	DFDB9C5E0F704E0BC807F03CE0F2A147DC8E138C
SHA-256:	3FB6392E91473E4B000E575F7EF0E4B764E4D81CAF8103E7761649C07A563FC2
SHA-512:	AC339D53184D0EB4304EACFA0421C9A73835DF228AA0EB99E10B1A363933017FC64970F67C9C6D920613373EB4265BCAA8F767C49768917967390950FFF682B3
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/EventCalendarPreview.BSw8eqA0.css
Preview:	.upscaled-title.svelte-y7ocoj.svelte-y7ocoj{display:none}.wrapper.svelte-y7ocoj.svelte-y7ocoj{display:flex;flex-direction:column;height:90%;padding:0 var(--space-3)}.empty-state.svelte-y7ocoj.svelte-y7ocoj{color:var(--text2);height:100%;display:flex;flex-direction:column;justify-content:center;align-items:center;margin:var(--space-5) 0}li.svelte-y7ocoj.svelte-y7ocoj{border-bottom:1px dashed var(--separator);padding-top:var(--space-1);padding-bottom:var(--space-1)}li.svelte-y7ocoj.svelte-y7ocoj:hover{background-color:var(--table-hover)}li.svelte-y7ocoj .actual.svelte-y7ocoj{display:none}li.past.svelte-y7ocoj .actual.svelte-y7ocoj{display:block}li.past.svelte-y7ocoj .pill.svelte-y7ocoj{font-size:var(--font-s);font-weight:var(--font-normal);background-color:var(--separator)}li.clickability.svelte-y7ocoj .pill.svelte-y7ocoj{background-color:transparent;padding-left:0;padding-right:0}li.svelte-y7ocoj.svelte-y7ocoj:last-child{border-bottom-width:0}li.svelte-y7ocoj .data-wrapper.svelte-y7ocoj

Chrome Cache Entry: 943

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-D6ijlX_hhIFoTDsk62IONg-VtyZpFTp2WsgIhkyVKtEuNkUcwsWWAK9hDkwFVPkwN3X9ReTisVhBE7kc2d3j7TkcxdGY16N-9vOjsvEZkqDcP1wV8
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 944

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.747851312870916
Encrypted:	false
SSDEEP:	3:JSx/FEuag5Ne5ZGfjnVMJFJXRzv:O+g5NFrni5
MD5:	DFE9927CA509A0AE71CC9C24BE9CC489
SHA1:	0493F8AA945F65FFE21A379F73A8761040812593
SHA-256:	2B19B165FFA8C61F6E3E89734921256B2CD2F162C851770BCDB708B9708A271D
SHA-512:	2568E1E9B832E8E68C9AE37D132091EA1D82A0DC73CF3B68D7201A39507BC687A2977CFCD6660E21A5C219B0ACD4B277F55799937764AC17564E1105156E7E80
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/entry/start.Df8dWLea.js
Preview:	import{c as a}from"../chunks/entry.CqbZzrN3.js";export{a as start};.

Chrome Cache Entry: 945

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1098), with no line terminators
Category:	downloaded
Size (bytes):	1098
Entropy (8bit):	5.494398412034402
Encrypted:	false
SSDEEP:	24:2mhBgJpuadP1GYcT1nGmBzQ1QX0q/Fyx3yVAuN94gNY:2wWzt+ThGm98Qkuyx3+3NOf
MD5:	12660967F278923AFDEF719651A9A0B0
SHA1:	C92812796488BE1692B7C36C9463038B546D02C7
SHA-256:	A9DBD6829056B4333C6397109C86BCBA923F6C927736461A68B3F6C4A5FCD394
SHA-512:	8A0B4676EEC2A35ED5D8C89FB5D77B3611B078053C8BACFE0260B6373781FC1172333E1FD4FBA7AFDE852738D979E15DF23559DDBA30D988ECB76267B9642469
Malicious:	false
Reputation:	low
URL:	https://tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=1&ttmms=51&ttfrms=148&brid=3&brver=117.0.0.0&bridua=3&bds=1&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETauU2%3F4r92%3A%3Fl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETar9EEADTbpTauTau_ag%60%60376g%607572335_6_6ce_h%60c%60fa6h%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3ETar9EEADTbpTauTau_ag%60%60376g%607572335_6_6ce_h%60c%60fa6h%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3E&srcurlD=0&aUrlD=0&ssl=https:&dfs=2100&ddur=1530&uid=1711672899477415&jsCallback=dvCallback_1711672899477116&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&htmlmsging=1&chro=1&hist=1&winh=600&winw=300&wouh=984&wouw=1280&scah=984&scaw=1280&jsver=5684&tgjsver=5684&lvvn=28&m1=15&refD=2&referrer=https%3A%2F%2F02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&sfe=1&fcifrms=17&brh=1&dvp_epl=344&noc=4&nav_pltfrm=Win32&ctx=20006197&cmp=31411294&sid=5071708&plc=388507207&crt=211538221&adsrv=1&advid=3876771&unit=300x600&turl=https://www.yahoo.com/&c1=1982032&bsimpid=a088deb529ba4c1899d301c788f6fede&prr=1&errorURL=https://tps.doubleverify.com/visit.jpg&ppid=103&audeal=IX3MPADScope3DISP6Kqa8MAC&auevent=ABAjH0gQDp_4c-0JAi6rZSx5hhRK&aucmp=21039716546&aucrtv=553954458&auorder=1015903071&ausite=2328226494&auxch=13&pltfrm=13&aufilter1=1982032&autt=1&mib=0&mon=1&blk=1&dvp_cawf=crtwrp&cm360cw=1&dvp_rcp=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=1375353221538.1655&ee_dp_sukv=1375353221538.1655&dvp_tukv=17591451939.44182&ee_dp_tukv=17591451939.44182&ee_dp_dvtpurl=https%3A%2F%2Fcdn.doubleverify.com%2Fdvbm.js&dvp_strhd=0.29999999998835847&dvpx_strhd=0.29999999998835847&dvp_tuid=1434562293200&jurtd=1377703399
Preview:	try{var dv_win = window._dv_win \|\| window.parent._dv_win; dv_win['dvCallback_1711672899477116']($dv,window,'f6401e7fd4004956be533ce8a493d3fa','tpsc-ue1.doubleverify.com',{"ce":{"ddt":1,"dt":1}});}catch(e){try{var image=window.document.createElement('img');image.src=('https://tps.doubleverify.com/visit.jpg'\|\|(window.location.protocol+'//tps30.doubleverify.com/visit.jpg'))+'?ctx=818052&cmp=1619415&dvtagver=6.1.src&dvp_cbError='+encodeURIComponent(e.message)}catch(e){}}var dvObj=$dv;var impId='f6401e7fd4004956be533ce8a493d3fa';var dup='';dvObj.pubSub.subscribe('ImpressionServed',impId,'ResearchIPv6FromAkamai',function(){ var tagObj = dvObj.tags[impId]; var serverName = tagObj['ServerPublicDns'].substr(0, tagObj['ServerPublicDns'].indexOf('.')); var tpsServerUrl = 'https://cdn.doubleverify.com/redirect/?host=' + serverName + '&param=akipv6&impid=' + impId + '&dup=' + dup + '&eoid=1000'; dvObj.domUtilities.addImage(tpsServerUrl, null, true);});$dv.tags[$uid].set({"bgm":1});try{$dv.p

Chrome Cache Entry: 946

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23479), with no line terminators
Category:	downloaded
Size (bytes):	23479
Entropy (8bit):	5.181521598468942
Encrypted:	false
SSDEEP:	384:rFfj/6GpZNfFQi4mvfm0N+Dzao0QMyb0+qB9M:5L/vLNQi4m3m02zMQMyb05s
MD5:	E6A743E22F5B7027F77359F0A549572B
SHA1:	3EE7D7C1F50B654AFF770E4EED916502D7D62B7B
SHA-256:	E6C22E612E82D6AF3F495357F5EF64A81467312A4A817F3625B15490629257EA
SHA-512:	6A440F8772A29CF710417746BBF0AF9994C6C609BAD6B313DAB3FFC8F73BB4947E7AF8D52D3DEEBC78B4863BC961F5501A03768C78AD2BECC490CBB0838819FB
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/notifications/js/sh-5.17.91.js
Preview:	!function(){var r="BrowserSubscriptionHelper",i=["chrome","chrome mobile"],p="error",f="info",n="pushNotifications",o="undefined",t="Unsupported Browser.",u="granted",a="denied",c="subscriptions",s="type",d="push",e="display-push-promos",l="js-push-subscribe",h="rapidnofollow",b="subscriptionFail",m="Permission denied by user";function g(e,n,i){this.init(e,n,i)}if(g.prototype={init:function(e,n,i){var r=this;r.beaconer=n,r.tracker=i,r.config={appServerPubKey:e.appServerPubKey,bucket:e.bucket,confirmationNotification:e.confirmationNotification\|\|{},enableIndexedDbDurationBeacon:e.enableIndexedDbDurationBeacon\|\|!1,enablePermissionChangeBeacon:e.enablePermissionChangeBeacon\|\|!1,overlay:e.overlay\|\|{},resubscribeOnChurn:e.resubscribeOnChurn\|\|!1,serviceWorkerScope:e.serviceWorkerScope\|\|"/",serviceWorkerUrl:e.serviceWorkerUrl,spaceId:e.spaceId,subscriptionService:e.subscriptionService\|\|{},supportedBrowsers:e.supportedBrowsers\|\|{},userAgent:e.userAgent\|\|{}},r.appServerPubKeyArr=r.urlB64ToUint8A

Chrome Cache Entry: 948

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4148
Entropy (8bit):	5.160156282685301
Encrypted:	false
SSDEEP:	96:JNOBvN39NOBDEfC/nEVSNnxiLIBNOuozqDh:JNONNNiIazNxiKNCY
MD5:	C5D648BE4D27BF09CECEC58D0E80FC44
SHA1:	86457D479ADF369984C85E08E8DE1E330EF6E3FC
SHA-256:	111BBD52EF9690563238A73CBAAA6C4996857B45C4E82E51C0CD77D5216E0CF0
SHA-512:	98F9857B17769C23DCE57926108850FCF1D66796293C8DFBD7E3705AC1D3EDE1391551D78CE2E8E52531880AE8DC0BC5B30CB7AD73A96C85332F56B358EEF9C2
Malicious:	false
Reputation:	low
URL:	https://query2.finance.yahoo.com/v1/finance/trending/US?count=5&useQuotes=true&fields=shortName%2ClongName%2ClogoUrl%2CregularMarketChangePercent
Preview:	{"finance":{"result":[{"count":5,"quotes":[{"language":"en-US","region":"US","quoteType":"EQUITY","typeDisp":"Equity","quoteSourceName":"Delayed Quote","triggerable":false,"customPriceAlertConfidence":"LOW","trendingScore":39.0434943695718,"hasPrePostMarketData":true,"firstTradeDateMilliseconds":1601472600000,"priceHint":2,"regularMarketChangePercent":-6.11995,"regularMarketTime":1711656002,"exchange":"NYQ","market":"us_market","fullExchangeName":"NYSE","shortName":"Palantir Technologies Inc.","longName":"Palantir Technologies Inc.","marketState":"POSTPOST","sourceInterval":15,"exchangeDataDelayedBy":0,"exchangeTimezoneName":"America/New_York","exchangeTimezoneShortName":"EDT","gmtOffSetMilliseconds":-14400000,"esgPopulated":false,"tradeable":false,"cryptoTradeable":false,"symbol":"PLTR"},{"language":"en-US","region":"US","quoteType":"EQUITY","typeDisp":"Equity","quoteSourceName":"Delayed Quote","triggerable":false,"customPriceAlertConfidence":"LOW","trendingScore":35.44519774212569,"h

Chrome Cache Entry: 949

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x180, components 3
Category:	dropped
Size (bytes):	29834
Entropy (8bit):	7.954928635253754
Encrypted:	false
SSDEEP:	384:2ta8BrX9mjcT3XxJQ4RRQHJpyXGNMHI4jxoWvwU2xwcUVYQRlPGp/6NspHNkNvjw:2tXX9Qqx2Mo45q6Rl/NaHNM7hHG
MD5:	8BF0A2463057A080F3955ED9215F406C
SHA1:	EBF5020C794F4646E82FC7A73D0FCA7C8FAC3EF9
SHA-256:	FF64D5B23C6FA76D22EADF457DF0215AA9AD0D72F15F6502F1DDEB37C17E1144
SHA-512:	018F32CA16F977A0F7D0FF4C8177891FACE1E1B59F2A5E47CB47D96A62827DF176087D05A37B05DF82AE1D8713E63EC980BC57AA59436059458FC6F59D6B950B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.........................................................................d............................................J..........................!.1A.."Qa.2q...BR.#3b....$CSr........%4c....d..................................7........................!1..A.."2Q.#a.3Bq...$R...CD..............?........%.....7...C.:.S.....l.._.,F

Chrome Cache Entry: 950

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 951

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4195
Entropy (8bit):	4.404449346852167
Encrypted:	false
SSDEEP:	96:QdKzti2LpViMFnRMr5jJFcfONXAhapRGQ:9zti22MFnRGbReabV
MD5:	5703D186BB29595E087B3EDFC80F1E75
SHA1:	EDC2AC305701AE04111A8982E490C69949E09464
SHA-256:	27DB4F1EA5C6D5B950DBDC2AD700C06975871D4F6F4D1810657D5954C71B0469
SHA-512:	A37CDB98F1D81D4C4B31588D95409859ADBDBF2FB194BC899091F2B08B15AF0878404F2B464F5E8EECE66F4A36A0C152711D3F71579C11148BB57898F551C5E3
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_sports_spnews_gray.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 64 (93537) - https://sketch.com -->. <title>icon_prod_sports_spnews_gray</title>. <desc>Created with Sketch.</desc>. <g id="icon_prod_sports_spnews_gray" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="fantasyFootball" transform="translate(2.000000, 0.000000)" fill="#454545">. <path d="M0.993939392,2.55454546 C1.7780303,2.55530303 2.41363637,3.20151515 2.41363637,3.98484848 C2.41363637,4.11515152 2.51969697,4.22121213 2.65,4.22121213 C2.78106061,4.22121213 2.88636363,4.11515152 2.88636363,3.98484848 C2.88636363,3.20151515 3.5219697,2.55530303 4.30606061,2.55530303 C4.43712121,2.55530303 4.54545454,2.44848485 4.54545454,2.31818182 C4.54545454,2.18787879 4.43712121,2.08181818 4.30606061,2.08181818 C3.5219697,2.08181818 2.88636363,

Chrome Cache Entry: 952

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	639518
Entropy (8bit):	5.44934074331372
Encrypted:	false
SSDEEP:	6144:7I+BXdk7aUL9f6ZV3zpdonDGuYNMEVVzQfISxfTrYpGoUs6gY1Sd/ZK4bfkGN3W2:7IXb6hVzrJNBvWOgvM
MD5:	16893B77A58DA8F805437ECFD8A40C69
SHA1:	22EC79122C5874881072DF1B266D1EAAF9846AAA
SHA-256:	3C99D693A8BC75BE33452E33097EE1847FA375E90D1D6B83C909DA3DEE041F1C
SHA-512:	673F90294A2131029BF1795659E00944D1FBBED40D5CE0EEAFC4EA9E50A47F49A09747C8539CBF6FAB6802134F11C8BDA0CC852D15376E6AFF417B9D732F51AB
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/bidexchange.js?cid=8YHB97349&version=12.1&dn=finance.yahoo.com&ysection=main&yregion=US&ylang=en-US&ysite=finance&ydevice=desktop
Preview:	try {(()=>{var e={4764:(e,t,i)=>{"use strict";i.d(t,{QE:()=>r});var n=i(8386);n.eP.getConfig("abpWhtlstUrlsRgx");const r=n.eP.getConfig("AbpAcptPrm")},5364:(e,t,i)=>{"use strict";var n=i(859),r=i(3277);const s=new class{constructor(){this.trackerMap=new Map}add(e){return(0,r.DM)(e)&&this.trackerMap.set(e.id,e),this}each(e){this.trackerMap.forEach(((t,i)=>{e(t,i)}))}find(e){const t=this.trackerMap.get(e);return(0,r.DM)(t)?t:null}remove(e){return this.trackerMap.delete(e.id),this}};var o,a=i(4612),c=i(8626);!function(e){e[e.TRACKING=0]="TRACKING",e[e.DISABLED=1]="DISABLED"}(o\|\|(o={}));class d extends c.Z{constructor(e,t){super(),this.stateMap=new Map,this.detectorMap=new Map,this.id=t;for(const t of e)this.stateMap.set(t.type,o.TRACKING),this.detectorMap.set(t.type,t),t.startTracking(((e={})=>{this.isActive(t.type)&&(t.isOneTimeEvent()&&(t.disable(this.id),this.stateMap.set(t.type,o.DISABLED)),this.emit(t.event,e))}),this.id)}getMeta(e){const t=this.detectorMap.get(e);retur

Chrome Cache Entry: 953

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1840)
Category:	downloaded
Size (bytes):	1841
Entropy (8bit):	4.914482074217495
Encrypted:	false
SSDEEP:	24:j1CKgFH7LlUue53e0V35BWX1uesuX+6ArhqjV1WF5XU3/x3o:pgUuYXNiJdNVo
MD5:	3B31A4FCC40BE04453FC6CFAC5FD67B1
SHA1:	D8CED46B57D44C9E1F7B1BF83577936198B00FDD
SHA-256:	CF47B3ABCD114633CBA4695A27412E6EE5F24E1348ED83E87611A306C971B6A1
SHA-512:	8E7069BFCA1610E6FE2E0717F5B09B2C7691D376DD4886E55E5F74A1F65033D7AEB1B362FA6A2826481CEA3CF1DA03378555D28944D24CAF52669DEA0B406376
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/FeatureBarNeo.qfirPRiI.css
Preview:	.paddedQSP.svelte-xxx6bz.svelte-xxx6bz{margin:var(--space-4) var(--space-4) 0}.gridLayout .no-p-b.svelte-xxx6bz.svelte-xxx6bz{border-bottom:unset;padding-bottom:unset}.fb-wrapper.svelte-xxx6bz.svelte-xxx6bz{margin-top:var(--space-3)}.fb-wrapper.paddingBottom.svelte-xxx6bz.svelte-xxx6bz{padding-bottom:var(--space-4)}.fb-contents.svelte-xxx6bz.svelte-xxx6bz{display:flex;width:100%;background-color:var(--surface4);border-radius:var(--border-radius-s)}.label.svelte-xxx6bz.svelte-xxx6bz{background-color:var(--ui-brand);font-size:var(--font-m);font-weight:var(--font-bold);color:var(--text-inverse);align-items:center;border-radius:var(--border-radius-s);display:flex;width:-moz-fit-content;width:fit-content;padding:.625rem var(--space-2)}.label.redLabel.svelte-xxx6bz.svelte-xxx6bz{background-color:var(--negative)}.title-wrapper.svelte-xxx6bz.svelte-xxx6bz{display:flex;justify-content:center;flex-direction:column}.title.svelte-xxx6bz.svelte-xxx6bz{margin:var(--space-1) 0 var(--space-1) var(--sp

Chrome Cache Entry: 954

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	12472
Entropy (8bit):	7.934636804983483
Encrypted:	false
SSDEEP:	192:5GDy21SREXT97Ug5asJ37XY3Ym2KmaGdgfahq5BVb74I1k2Wxwpqh5v2xMkIjsKK:k31SGmXsZkYm2Kmab357k2wNhZkIY
MD5:	3F67CE8C697BA06A6BA84E4861DA27D3
SHA1:	97A5A631C947C29644983CC596D9A49C1CC5CC83
SHA-256:	3E2336D51A4681522C0839E3C5A393AF3ECED80C889B5185500922C3946BB136
SHA-512:	7E0C5A937ECD1326CFC19484A23380A7F7F0FB478DD12A6FE4E8EDBE8C1DB31F8A6A8289A3A6F24EE9BFB70153E3FAC745C27D5D4DFC1A426965E0A6D451098D
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/aKMXvSoVtv7RskBHCCkbOw--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/644d1fd159a0d4d95b364a1ff409b0d5.cf.webp
Preview:	RIFF.0..WEBPVP8X.... ...c.....ICCP0......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 Z........d...>y2.G...!-..X...A...x..?3...?.....#..?........./....^.2.......{....................P....Q./..6..k.S7}.jY....m.....B...@....~7..n=....:...?`O....yH...o..I?Gg,$..y..0(...C.3..S.T..J..r..'....y.?A)X.;....;...4!>zz...`.....Pw.Z>?...P...h..j..p?z!..`.....t...(-H....E... C.YL.H..uR....h ue....[...5...Z."...3o.J..}mR..X.`..Cn[.j7.!.T....6...e.OX.ps.?[s.\|W.x...Q?.oH

Chrome Cache Entry: 955

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 956

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	441
Entropy (8bit):	7.342351860318296
Encrypted:	false
SSDEEP:	12:6v/7BNipNeLqa1oVTecT8S2Ny/NU8Pymomd79X7:qipY+a1onUfVmomdJ7
MD5:	1B94DFF87A916CE0A949B09EEC3884C2
SHA1:	DD5E6C67D01084008E09EFB93DD3AAFF98983D6C
SHA-256:	0F1E6E58C6EDC6E7C6F4C00D610CE034D3263CC9ECB52A1F6E33098EFF3809E3
SHA-512:	44C82197E8832DC20737074904AAE35C783DDA27A9C22DB55F6CE0A62278F6D070C1D4FC1BF19857E57D2E2940C74CAAE8EBAE276D2B8DC850EA69DA2115CF2C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(........m....sRGB........sIDATX...=o.0.......K%@0Ru...P$....@{o.B.....E..O.\|X.[H~H.%7...,.O.....~..&.U2*V..U../@.s.....`9K.......N..E...7..L.2.{'.5....@..<..q..j.%........i..B.\|..q5H7...;.....A....9.N.>.<.u.&.D...x.c.j..[.......8i;=...../&....N{ .c.A.z...vO.".p..0djX....Y.s..987d.....g.l.k...5CZ.k9.....slln-~Oz.xQ...\6.k.^.J..zr.?b..S#V.{.m......XM'.5...b..X..j:...k...[i.0../'..,..~....IEND.B`.

Chrome Cache Entry: 957

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.653660689688186
Encrypted:	false
SSDEEP:	3:C/tWmcgfX6Ken:C/t8giKen
MD5:	9E650B4FABFD64E9034C97B2D85F2DA6
SHA1:	6A7C5ADDF6C280163BB658424F011B8B3CFE7BC6
SHA-256:	5448674D9C501AF62F8516DE42D5EFFF4B6F25B02F7E081C924DC290EFDC7D39
SHA-512:	4D8112C51030F6432CBFB54A7882187CAD8D571AAE47470F6997C07BDEB44B0907A894E64052FBB3FD01A86D9293DE2D9089E904F4F0D54C8E564DB5D3C60DFF
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/tcb.js?&cb=window.advBidxc.multiBidTemplatefetch&v=1
Preview:	window.advBidxc.multiBidTemplatefetch({"_":"''"});

Chrome Cache Entry: 958

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60922)
Category:	downloaded
Size (bytes):	60923
Entropy (8bit):	5.04867687274052
Encrypted:	false
SSDEEP:	1536:rX9WMbj9LtGgExfjOY3ow1wKoArEiNwswgMR44/YN5Jz7P5z6XfYp:If6kWvgMRz/Yb
MD5:	FB60206F4BF7E574D9EBB2B0F52E4152
SHA1:	7199B47EBB6672E858EA906D7FF3D187D6E69998
SHA-256:	F35CF7C75013B366974368E3199E34DA28F15F118A60324489866AB6201BC965
SHA-512:	9DFB9CB662B0FF60F288F81D9FB00C6ABE980D12D1D8228539293000ED4CC9D666687F33D7225DEE42FFE12BEE8CDC318A9E48029332BA54A6CA8303042DF1DB
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/2.B2V3kFk2.css
Preview:	:root{--font-weight-black: 900;--font-weight-extrabold: 800;--font-weight-bold: 700;--font-weight-semibold: 600;--font-weight-medium: 500;--font-weight-normal: 400;--font-weight-light: 300;--size-space-15: 4rem;--size-space-14: 3.5rem;--size-space-13: 3rem;--size-space-12: 2.5rem;--size-space-11: 2rem;--size-space-10: 1.75rem;--size-space-9: 1.5rem;--size-space-8: 1.25rem;--size-space-7: 1rem;--size-space-6: .75rem;--size-space-5: .625rem;--size-space-4: .5rem;--size-space-3: .375rem;--size-space-2: .25rem;--size-space-1: .125rem;--size-space-0: 0;--size-font-14xl: 4.5rem;--size-font-10xl: 3.5rem;--size-font-8xl: 2.5rem;--size-font-7xl: 2.375rem;--size-font-6xl: 2rem;--size-font-5xl: 1.875rem;--size-font-4xl: 1.75rem;--size-font-3xl: 1.5rem;--size-font-2xl: 1.25rem;--size-font-xl: 1.125rem;--size-font-l: 1rem;--size-font-m: .875rem;--size-font-s: .75rem;--size-font-xs: .6875rem;--size-border-radius-2xl: 2.25rem;--size-border-radius-xl: 2rem;--size-border-radius-l: 1rem;--size-border-ra

Chrome Cache Entry: 959

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	52434
Entropy (8bit):	7.991764867492475
Encrypted:	true
SSDEEP:	1536:qJw2jJNPc1QcjjMVLLyeEu5abASE7iUbJ5yQ8p:qJTTPcdMVKu5a6jzyn
MD5:	663BBF55473AA38691BF5B4A6BDE972C
SHA1:	76C8785F8FA31C5AF4B37D0E58A8819453A07EBA
SHA-256:	5DF6D962F9C0256A19EA87D8D9CCB0FE10BE52F3F671F18007700D01AE127ED3
SHA-512:	8B345F9C0D0F9A72BD7DFE3E7C22A5D3966628029147C447AB8E4940AAEF84AE8FA0E02AB2789828EF80E8F49309153C8D532A5D652DDFFBFB30B076CDF73423
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/WpktrU2qWbIUypW2ykNmfA--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/361d4cf0-ed5f-11ee-b63e-945d160be8bf.cf.webp
Preview:	RIFF....WEBPVP8X.... .........ICCP0......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 t.......*....>...B!.Z.k..q,..j@o.Z.x{.....~...?./..C.?]...%......Q.......g.....]........................~._...?...?....?...v..C................?p..}.....2.4.....?.=K?7............O.o...?.?j...o...?...~......3.g.....W.../.......~...~..'.W..............3.....o...~.......W~T.t.Vs...H..z.D.oau......./..;.0..?..;..@aG+.G...........C.3.9..>.;....eo.a.9....Z..T. .s..I5}a..y;....B./.

Chrome Cache Entry: 960

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8254), with no line terminators
Category:	downloaded
Size (bytes):	8254
Entropy (8bit):	5.339222492199265
Encrypted:	false
SSDEEP:	192:6EuL8zG7CAQyinBudEIrfp4CrxdHtxVhyQRyfTSTvTsTyT2Y3mkot:juL8uCByinBxmB4CrxtTHySyfWDYOyY8
MD5:	1ED4FE71B1FC647DDBF37A7050944309
SHA1:	7D959D812262C51C4C11D7D31BE040692248F438
SHA-256:	FAF50015DE5B96281DCBF145FDF58222EFC35C962759A3E915F4E95F510D7B78
SHA-512:	7E1332BF492D83256CD7E6507811FA188D3D1F23659B4697C15563254B77E8184CF3E23064D5E9DFD4A22229DAD02EA300FE57CF4E77C4093D8F29C6B1DFD0EA
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/js/react-wafer-stream.custom.modern.1ed4fe71b1fc647ddbf37a7050944309.js
Preview:	window.wafer&&window.wafer.ready((function(){var e="show-drawer",t=null,a=null,r="wafer-fetch-error",i="wafer-fetch-complete",n="stream-related-drawer",o="StreamRelated",s="react-wafer-stream",c="json",d="wafer-fetch",l="stream-uuid-list",u=[],w=document.querySelectorAll(".stream-items"),m=window.innerWidth\|\|document.documentElement.clientWidth,f="js-sponsored-moments-dwell-time",A=window.wafer&&window.wafer.utils,g={INARTICLE:9/16,reservemoments:16/9},p=function e(t){var a,r,i=t.getAttribute("data-da-position");if("reservemoments"===i&&(t=t.querySelector("#defaultRESERVEMOMENTS")),a=t.getAttribute("data-html"),r=t.getAttribute("data-darla-config"),a&&r){(r=JSON.parse(r)).dest;var n=window.DARLA.prefetched();if(!window.DARLA.config()\|\|window.DARLA.inProgress()\|\|n&&0!==n.length)setTimeout((function(){e(t)}),500);else{if(!r.h&&!r.w){var o=Math.floor(m*g[i]),s={flex:{h:{min:o},w:{min:m}},h:o,w:m};Object.assign(r,s)}var c=r.id;window.DARLA.addPos(r);var d=new window.DARLA.Response(c,{});a=

Chrome Cache Entry: 961

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	228599
Entropy (8bit):	4.888056984154172
Encrypted:	false
SSDEEP:	1536:ptwtS88yS8ycNBPbp0pMkpM7LFIYYdvvbLqVjIYkCSfTE+H3o1Je9:UtS88yzBVjNkCxi
MD5:	C1D5691A4BC858F13FB882109E060EF8
SHA1:	36D67AB3E28B75D2154FB159F3360477954AF8D7
SHA-256:	31B4F730BC562BBB5F7330CD45C045B4462962E31F5C9C53A9F0F4DFF49FCA59
SHA-512:	62D68F5F8E5D0BAC1CA9FC9D1618B6F553476C2E0376F97FEC2D97ECC4EA1F7E8EC49D4CCC5DA29FD2C423D8F98C98FA856345764B5110523C610660250542D0
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/c/36d67ab.caas-news_web.min.css
Preview:	@keyframes slideUp{0%{transform:translateY(200%)}to{transform:translateY(0)}}@keyframes adhide{0%{visibility:visible}to{visibility:hidden}}@keyframes show-success-message{0%{opacity:0;transform:translateY(10px)}80%{opacity:1;transform:translateY(0)}to{opacity:0;transform:translateY(-10px)}}@keyframes immersive-share-appear-in{0%{opacity:0}to{opacity:1}}@keyframes fade{0%{opacity:1}to{opacity:0}}@keyframes shine{0%,to{opacity:1}50%{opacity:.5}}@keyframes wave{0%,60%,to{transform:initial}30%{transform:translateY(-4px)}}@keyframes inlineXrayTooltipFadeIn{0%{opacity:0}to{opacity:1}}@keyframes liveBadgePulse{0%{transform:scale(.43,.43);opacity:1}to{transform:scale(1,1);opacity:0}}@keyframes ellipsesAnimation{0%,30.43%{content:"."}34.78%,65.21%{content:".."}69.56%,to{content:"..."}}@keyframes loader-animate{0%{transform:translate3d(-100%,0,0)}to{transform:translate3d(100%,0,0)}}@font-face{font-family:"YahooSerifDisplay";src:local("Yahoo Serif Display"),url(https://s.yimg.com/cv/apiv2/default

Chrome Cache Entry: 962

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://pmp.mxptint.net/sn.ashx?ak=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 963

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (577), with no line terminators
Category:	downloaded
Size (bytes):	577
Entropy (8bit):	5.506418944439762
Encrypted:	false
SSDEEP:	12:C35JHlhpwx13zOSC+MV31Ahz5RmgukYx135MDIdO08kDp:CpJHvyx1jOSC+CYPmiYx1C8dO0Rp
MD5:	00A467D84ECDB8119886F0B0B0DFBF9C
SHA1:	989BB7126FA234407C5789E7099AA11AA78998FF
SHA-256:	B2011CB324BC9DECD10E320D819182FBD4CF9A8062BA5698207749F62EC5AEE7
SHA-512:	42B8EB7E4A283D4939B14B165FE73FFFB4CB1806B8B7542968723C575A02CBEED44E47C7C0AAF2819EBB76D23540091CF81B339CAED8B7CA84802FFB4F3573A2
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=20972925&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://bpi.rtactivate.com/tag/?id=20909&user_id=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=6D366468-71AF-422B-99AB-138A6DAB94F7');PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://io.narrative.io/?companyId=673&id=pubmatic_id:6D366468-71AF-422B-99AB-138A6DAB94F7.');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 964

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	11168
Entropy (8bit):	4.811490833880467
Encrypted:	false
SSDEEP:	192:XAsuMzMcY21AMVu3X21Ocu/wcfb421nQLuOV21nUcf:QsuM+29VuH27u/Zb42mSOV2z
MD5:	5ADFF5D2C88AC228618E40C279435540
SHA1:	16F1CCBBC85EB6CB806889C5606888FBC73ABD29
SHA-256:	5136684991154D2D181B4E4684D53C063E1A8DA412D89824A91B1427FF1318D6
SHA-512:	1954ACB4E36B269841586B09F2D8DE9A88FE7E9537A302CA9194311C7704A26D86998C545ABA1DD6FF20C5A760EBC994B2B7726303626A5FA44FB922DB0EB5FF
Malicious:	false
Reputation:	low
URL:	https://query1.finance.yahoo.com/v7/finance/spark?symbols=PLTR%2CCLSK%2CDOGE-USD%2CMSTR%2CAMC&range=1d&interval=5m&indicators=close&includeTimestamps=false&includePrePost=false&corsDomain=finance.yahoo.com&.tsrc=finance
Preview:	{"spark":{"result":[{"symbol":"DOGE-USD","response":[{"meta":{"currency":"USD","symbol":"DOGE-USD","exchangeName":"CCC","fullExchangeName":"CCC","instrumentType":"CRYPTOCURRENCY","firstTradeDate":1510185600,"regularMarketTime":1711672860,"hasPrePostMarketData":false,"gmtoffset":0,"timezone":"UTC","exchangeTimezoneName":"UTC","regularMarketPrice":0.22392029,"fiftyTwoWeekHigh":0.22413634,"fiftyTwoWeekLow":0.22003423,"regularMarketDayHigh":0.22413634,"regularMarketDayLow":0.22003423,"regularMarketVolume":6390142464,"chartPreviousClose":0.22003423,"previousClose":0.22003423,"scale":8,"priceHint":6,"currentTradingPeriod":{"pre":{"timezone":"UTC","start":1711670400,"end":1711670400,"gmtoffset":0},"regular":{"timezone":"UTC","start":1711670400,"end":1711756740,"gmtoffset":0},"post":{"timezone":"UTC","start":1711756740,"end":1711756740,"gmtoffset":0}},"tradingPeriods":[[{"timezone":"UTC","start":1711670400,"end":1711756740,"gmtoffset":0}]],"dataGranularity":"5m","range":"1d","validRanges":["1d

Chrome Cache Entry: 965

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (634)
Category:	downloaded
Size (bytes):	1174
Entropy (8bit):	5.74166936214599
Encrypted:	false
SSDEEP:	24:hY6t2eJJBewfHDdUg8EcvjHODQMJXeK+C6uS/MLmeK+C6uSGymWAuDSXeMzCUtVv:9V4goLHODS1CTXT1CTVyPyCM6Nu
MD5:	2FE2B1F17888E326B010A8CDA72D48D3
SHA1:	59CBBEEDE4C472024C482BAE8529144119BBBD27
SHA-256:	9A9B7FB32E01FD70747F32EFDBD0472FD681C85EEBB0C42D10C7A514820A0062
SHA-512:	30BE2E73020EB97A67709E47DED40E999D352DA9B94EDD946D1315BDA65AD616AAA3CDFCFA675D061E4ED4AE1BAE3F0D245908D44411B2425C49B4345D2F6607
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html
Preview:	<!DOCTYPE html>.<html>.<head>. <title></title>. <script type="text/javascript">(function(){var f=null,g=null;function l(a){var b="";n(a,function(a){b+=String.fromCharCode(a)});return b}function n(a,b){function c(b){for(;e<a.length;){var c=a.charAt(e++),d=g[c];if(null!=d)return d;if(!/^[\s\xa0]*$/.test(c))throw Error("Unknown base64 encoding at char: "+c);}return b}p();for(var e=0;;){var d=c(-1),m=c(0),h=c(64),k=c(64);if(64===k&&-1===d)break;b(d<<2\|m>>4);64!=h&&(b(m<<4&240\|h>>2),64!=k&&b(h<<6&192\|k))}}.function p(){if(!f){f={};g={};for(var a=0;65>a;a++)f[a]="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt(a),g[f[a]]=a,62<=a&&(g["ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_.".charAt(a)]=a)}};function q(){for(var a=window.location.hash.substring(1).split(","),b=0;b<a.length;b++){var c=l(a[b]),e=window;e.google_image_requests\|\|(e.google_image_requests=[]);var d=e.document.createElement("img");d.src=c;e.google_image_requests.push(d)}}var r=!1;

Chrome Cache Entry: 966

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1321)
Category:	downloaded
Size (bytes):	17314
Entropy (8bit):	5.342134706855769
Encrypted:	false
SSDEEP:	384:cCDFzlR6exHAiyyrYuy9ckdnfczIk7LcuNP/p:DlsexHAlii9NmIeLcE
MD5:	2CC87E9764AEBCBBF36FF2061E6A2793
SHA1:	B4F2FFDF4C695AA79F0E63651C18A88729C2407B
SHA-256:	61C32059A5E94075A7ECFF678B33907966FC9CFA384DAA01AA057F872DA14DBB
SHA-512:	4ED31BF4F54EB0666539D6426C851503E15079601A2B7EC7410EBF0F3D1EEC6A09F9D79F5CF40106249A710037A36DE58105A72D8A909E0CFCE872C736CB5E48
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},u={};function w(a,b){var c=u[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}.function x(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var g=d[0],h;!a&&g in r?h=r:h=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in h))break a;h=h[e]}d=d[d.length-1];c=p&&"es6"===c?h[d]:null;b=b(c);

Chrome Cache Entry: 967

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	5.084962500721159
Encrypted:	false
SSDEEP:	3:YEOBHRQGV8B4/iY:YEOBxtiY
MD5:	6054205AB5C4C8073BD8AA04C271E2AF
SHA1:	AC52469FF983DC607F87F4B91AEFB1E65679E82F
SHA-256:	A1D955F3AB5EA04E18002A6B9FAD6D9979A6E235AAEE165A8D5DD09F8B83715A
SHA-512:	84D390B51B85FE0B8C344588E8BB6674462E10E2034A57FE9BB138C232C68352C7537BBB1D1F3DADEB7AB27A211501F3F978D821CEE92BF95E9C55D1990D3B38
Malicious:	false
Reputation:	low
Preview:	{"axid": "y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A"}

Chrome Cache Entry: 968

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 500, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	24177
Entropy (8bit):	7.937836181573967
Encrypted:	false
SSDEEP:	384:7s0bdIJ8KofuMNkoHglezJn+WCvbRUwhWiSp6nmruHtl9AWQFmG+Dqqt+:7s00RuPNkwwFRUwspxCHtP1G+D90
MD5:	6ABDC799DC327FB9EC9172E99E821DB7
SHA1:	F95BA2D4013E13EFB298F021045C1FD5532D11C2
SHA-256:	D9A9CEDF5AEE200BE97CBD4363386B3C0E0BDCAAE158B3A0814752C5F4E54DD3
SHA-512:	B2918D4B5BCED119B95920AF4BA233CBBC1A19D581697366D1C11D56EDC6000685211E515929CD7FC015CECA6AF7F3D5181E377EAD332EFDB0044A53F79F5E05
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X.........n2...^8IDATx...3.]....e..j../c.m..m.F...QEM..c......w..k....;O.............7......B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..&.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..W.\..oL..O.W\|.{""#?.>...BH....?..\|.M.-.8.....!.m..-...Y....02.yM.....[....`...... .!....B8.......!.U.....K{Q.....3.~.......!.<...<@.g..YS......S..../.3..B....th..A+!...TU...~..F..B.!.q1...\|...1..#....Z.!................wR......a..(h...%..@........A...47.!.(.aKs.}....o.;.`Y....k..z7..m..k....m..".E.:.3y.{.o.....nM.....3...l.Ao..^L...?Z\|.j.>.5<...T..#.FK..^.z.=.w._w..J.yk.I..e.W.8....p.....?W........q.......;2.>.~'\|...?V?uN..hl4.....Tl.J..U.,....VS...7.tEJ.z_..?.....M.v..f...aw..?S...[.#..H.....iF.....d..{.9.......}Io.{.`0"......).2[....X.v.,[uC{....7..z.L..4FnCS.........r......7.-.t).E.0W..K.Y..Ny_.@.+.m.......K.......A.......4..w.p....z..2.-7..Ku`0..N.c#.7..6.^\|..uT..K..eJ..B$W..l...;.

Chrome Cache Entry: 969

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	152442
Entropy (8bit):	5.864156546289807
Encrypted:	false
SSDEEP:	1536:aOGNzmzrM7rJUzs4vmK0HiWdZzf7jjrSFbAzqq5E8gSn6UI:aJkHqzDjjrS2qq4f
MD5:	F49A4EE2C66883AF94DFC024B8F98725
SHA1:	FA329F0633C0936EAFAED4FD456697C95AF0DEF2
SHA-256:	06A9E32923947D9C2EE2595E0D35A5FBDDF51B06D81D7D337072C09D61DBC2F3
SHA-512:	9B55708CCA36ED5CE01208F85D78B847DE116875FDA30E8532A9E1547697BE22383EE5EC237419C378810DE578D5F6CA1135504801DC95D93608F41BE8E0479B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/f10d509c/d3lm64ch1c76ug.js
Preview:	(new function(){var c=['BMf2AwDHDgu=','C2v0','we1mshr0CfjLCxvLC3q=','CNvU','yxbPvxnLCNnJCMLWDa==','DxnLCKfJDgL2yxrPB24=','ruXftuvovf9ot0rf','D2vIA2L0qxvKAw9ezwnVzgvKqNL0zunVDw50','C3lrGq==','Dgv4Dc9ODg1S','C3rHy2S=','lcbUBY1LDMfSoIa=','y29UC29Szq==','BM9Kzu5HBwu=','zMv0y2G=','Aw50zxj2zw50Aw9U','iL0UCNvUkhT3BMq6D2LUzg93lhnQCZO=','C29Tzq==','rLjbtuu=','yMLKuMvXq291BNq=','y29UzMLNlNnLzwr0ywCUy29Tl3n0yw5KyxjKlwLMCMfTzs9PBMrLEc52mq==','CNvUvgfYz2v0Aw5Nqvbo','qxvKAw9cDwzMzxjtB3vYy2voB2rL','rKjmuG==','q09j','qvjfqsbcuIbdt0WGru1cruqGsfiGteLosYbqqvjbtsbtt1vsq0uGvfjbq0SGv0jsifnuwuXfifrjveXf','C2vSzG==','C2HPzNq=','v1nytYaVia==','B2jZzxj2zq==','kgmPienSzwfUlMLVieLUyY4SidiWmJiUiefSBcbsAwDODhmGuMvZzxj2zwq=','y2zJB21Wyxq=','Bwv0yq==','yMXVyJO=','y2HPBgrfBgvTzw50q291BNq=','jMnOzwnRzwq9','v2LUzg93lMnSAwnR','jNf1B3q7','C3jJ','CgfYzw50','ugfNzq==','qurtveSY','zNjVBq==','rg9JDw1LBNq=','Ahr0Chm6','lMrVy3vTzw50la==','C3DY','Bs5OyI55ywHVBY5UzxqVCNrIl3LOyG==','ksbTzxnZywDLCW==','ksKUCNvUka==','Dg9mB3DLCKnHC2

Chrome Cache Entry: 970

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 362x362, components 3
Category:	dropped
Size (bytes):	4654
Entropy (8bit):	7.60581534032708
Encrypted:	false
SSDEEP:	96:WN0Cqu0/P2yxZpo3MGmMEda07hEyFyUJT/5ua/58HnJF5d3G/yIY:Wf4PBZo3MGmMEXhEAz56jn3G/M
MD5:	DFAF002CA13689235F064A5DCFFF1A64
SHA1:	2BB1A54BE7D36AAA5A25C4ACB7CFED5102A70A3F
SHA-256:	D97F11019F99C29D9715C1A37385197D6ED762216E474FADFCD93370E30B32D1
SHA-512:	89C679DDD0D93361E84CA6ADC1D82178371B96CA97B9262F4DA8890FBA0CE575D480CF53B73A8CBA845B3B4F39D00095724086ED5DABEED6B5CCAEB8BDBEB7D7
Malicious:	false
Reputation:	low
Preview:	......JFIF..................................................(( ..%...!1!%)+.....383-7(-.0...........+..%--------------------------------------------------......j.j..".......................................1........................!1.A.."Qq2a.B..#3R.b.................................$.......................!1.A.."BQa.............?...Q@................................T.Q@................................T.Q@................................T.Q@.......F....4h...F....4h................".(.B.(........`...6.l................4(.(......E@P..HP......pe.....{...t..zcN.Eo.f%....F... . .&.(..........9.;....t.7.;...^g.?..:8.{......^,.@98.B...[We...... .........!...:.R&#.-.f6.v.9..ne..z..q.....Z.5..S.{j.^.....b....]......Rbb_Y..e......7..l.K.3.^...~.9.\|..X.:.X5..............d...b..O..R.....z..um..Y..^/....F....7vQ..7X....z5.1.^...d..g...R.Uya>.O...P.pr......v,.......6.gY..O..]...n...].%....B.<.......-..y.6..K..qm...*s.W._N..s[#>G..r(...]3w=...g>...[.Y....;....

Chrome Cache Entry: 971

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	237
Entropy (8bit):	4.83091758375983
Encrypted:	false
SSDEEP:	6:H02OEqaqa5ig2OEA77Xla6ZRul2OEGcul2g:d1qa5g8706ZJzg
MD5:	7750BEE364F2398AC07DF7327E48F7AB
SHA1:	A3BAABA27D4C9E3D71AE645D104965B068C3B5DB
SHA-256:	581F3461B9F8A082B83EEFB0B3AE98F5727DA4112216EDB507350A065CB0CB93
SHA-512:	622901D600B47C1486D3CE1C93EE6DC8A98EC2A8897997534D301DFA3F358880C081272CCC9C97CD8C15C12DC976627DF389DAEFF5577C362936B8EC2A872E5B
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/SectionFooter.FWLFyP6-.css
Preview:	.footer.svelte-1qpyi02{margin-top:var(--space-4);display:flex}.top-gap.svelte-1qpyi02{margin-top:0}@media only screen and (min-width: 1050px){.footer.os.svelte-1qpyi02{margin-top:0;display:none}.footer.os.svelte-1qpyi02 a{display:none}}.

Chrome Cache Entry: 972

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (775)
Category:	downloaded
Size (bytes):	777
Entropy (8bit):	4.863687809884511
Encrypted:	false
SSDEEP:	12:PbR83GbMcJGJWRliEtGexV/rrXo06F2EVLokFbRKjV3q1GbnwFF:PbMGbhGwligV/LmVNFbi61GbwD
MD5:	1BB35BB1042022865903EE11921AF8A1
SHA1:	5BD44B2B9753457730AB34A5CA5CC40EEF6B387F
SHA-256:	7AAD9B3353784E8976E43173CFBDF7497B5DEDC42F18A644214AFEA6C778567C
SHA-512:	CCFCA715DFE192E320627EA997E32D681301DE1F36948C925A0733EF96BBD3CA7946C2C34A9C3AE972495B53399920A134088A520203A5933356774F9F13A8B5
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/PrivacyLinks.Cxgco9wn.css
Preview:	@charset "UTF-8";.privacy-container.svelte-1levbtk.svelte-1levbtk{display:none}.privacy-container.svelte-1levbtk>.svelte-1levbtk:nth-child(1){margin-top:0}.privacy-icon.svelte-1levbtk.svelte-1levbtk{max-width:2.188rem}.link-groups.svelte-1levbtk.svelte-1levbtk{display:flex;justify-content:center;align-items:center;-moz-column-gap:.188rem;column-gap:.188rem;margin:var(--space-2) 0}.column.svelte-1levbtk.svelte-1levbtk{justify-content:left;text-align:left;flex-direction:column;gap:var(--space-1);align-items:flex-start;margin:0}@media only screen and (min-width: 768px){.privacy-container.svelte-1levbtk.svelte-1levbtk{display:block;text-align:center;margin-bottom:var(--space-3)}.privacy-container.svelte-1levbtk .center-dot:before{content:" . ";font-size:var(--font-l)}}.

Chrome Cache Entry: 973

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9855)
Category:	downloaded
Size (bytes):	9856
Entropy (8bit):	5.431271324924828
Encrypted:	false
SSDEEP:	192:jkfUz2IPo2kAzWbkUMZNZyZWZSizvoagrnBzwZJDzAZDd5b81gZTcAIaJJxD/Z0M:AfMPoBIPnYMS2oB4J+D3bDTcAUdjbjW
MD5:	DB85447F1A840EDDA0949B408FB8C624
SHA1:	A6A72A085ADD0A5A37A18734561DCE1078A7E4A4
SHA-256:	21378DE84AE23A3CACA45C49D538167547CB9CF5828DCF02C85832302BE71B28
SHA-512:	5ABA85AABCBA31D393B352D309E01C07CF206A639AF8F88515768EF3AC41BE3DF4866F76EA7621CDB6C95ED51E13C26E1EF1B761A479A3960B7D9C45ACB6BE62
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/PrivacyLinks.Bqj66uD6.js
Preview:	import{s as ne,e as b,b as y,d as w,f as S,j as A,i as d,T as p,p as V,M as T,k as $,l as g,o as ie,t as L,w as K,h as N,n as B,m as se,A as oe}from"./scheduler.ErneftFr.js";import{S as ae,i as re,c as O,b as R,m as Y,g as Q,a as D,e as X,t as k,d as G}from"./index.DsErXEH0.js";import{g as fe,n as ue,t as j,o as Z}from"./commonUtil.Bb2Cnbsk.js";import{L as q}from"./Link.DZ6I_oHl.js";function ce(n){let e,t,l,s,i,o,a;return t=new q({props:{i13nModel:n[11],href:n[9],size:n[3],variant:"subtle",noUnderline:!0,$$slots:{default:[de]},$$scope:{ctx:n}}}),i=new q({props:{i13nModel:n[11],href:n[10],size:n[3],className:n[0]?"center-dot":"",variant:"subtle",noUnderline:!0,$$slots:{default:[me]},$$scope:{ctx:n}}}),{c(){e=b("div"),l=b("div"),O(t.$$.fragment),s=y(),o=b("div"),O(i.$$.fragment),this.h()},l(r){e=w(r,"DIV",{class:!0});var f=S(e);l=w(f,"DIV",{style:!0});var v=S(l);R(t.$$.fragment,v),s=A(f),o=w(f,"DIV",{style:!0});var c=S(o);R(i.$$.fragment,c),f.forEach(d),this.h()},h(){p(l,"display","conte

Chrome Cache Entry: 974

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x600, components 3
Category:	downloaded
Size (bytes):	48771
Entropy (8bit):	7.949364151909664
Encrypted:	false
SSDEEP:	768:fVb2d4AJifmdIOihmb21eKgLrYEHEwmBrRZbpWSTBj6UhMBIhOXSINO7JR2oPd7q:fVcxMcIhGbrYEkwmBjdjphgIhOSdJPVO
MD5:	C405D6C82F1731A9C123186A541980C5
SHA1:	F73D860955C3DF98621FAF013C35EA2B15D23D41
SHA-256:	819D7F281EE9DE76963F59E23F94DFA3A130B3B5C6B7063755875F397E948A0B
SHA-512:	057B0D01D401564259EF5B6DAA5E0A2B713B8CA4DBFA8C21118788145A67ABA0B2C98C875BA4E074532780936A373D799EDA9CF8BFE0AC357BD3CEEF5EB42C14
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/473513299895995753/images/bg3.jpg
Preview:	......Exif..II*.................Ducky.......=......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0580117407206811A61396797EE4D8D6" xmpMM:DocumentID="xmp.did:1840AE9ECF9D11EE8137FF27797BBF91" xmpMM:InstanceID="xmp.iid:1840AE9DCF9D11EE8137FF27797BBF91" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:078ee284-1fbf-4ce6-b416-ac8cb9e377c6" stRef:documentID="adobe:docid:photoshop:774fc835-3ecb-bd45-bacb-20d3199f7597"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................

Chrome Cache Entry: 975

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (907)
Category:	downloaded
Size (bytes):	908
Entropy (8bit):	5.092592977660667
Encrypted:	false
SSDEEP:	24:an1Oo+sGRWoQxL2ECkOmvtg1iujQgv1o4iBO+Nd1naKv:G1OoNGwoQx66OXLQxDBO2dR7
MD5:	472C6113B1D8C07D0ABF58E2DC75283F
SHA1:	5ED636A80B1E6B3243E3CCB317292B8356A2E416
SHA-256:	937607FEF945D078C07954160D2D82D5FAE4E36CE12AF8224E2CCAE2C5D5F8B1
SHA-512:	5794914E370A7690759200E051DD77D6070127DA4B9BB149AE4D2A18BC936CE619B6A88094DB3D4848DEDF715122962F6E9B9C9E0E755FB0085616DC3FAAFA8F
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/preload-helper.BQ24v_F8.js
Preview:	const d="modulepreload",m=function(a,l){return new URL(a,l).href},f={},E=function(l,i,c){let u=Promise.resolve();if(i&&i.length>0){const n=document.getElementsByTagName("link");u=Promise.all(i.map(e=>{if(e=m(e,c),e in f)return;f[e]=!0;const r=e.endsWith(".css"),h=r?'[rel="stylesheet"]':"";if(!!c)for(let s=n.length-1;s>=0;s--){const o=n[s];if(o.href===e&&(!r\|\|o.rel==="stylesheet"))return}else if(document.querySelector(`link[href="${e}"]${h}`))return;const t=document.createElement("link");if(t.rel=r?"stylesheet":d,r\|\|(t.as="script",t.crossOrigin=""),t.href=e,document.head.appendChild(t),r)return new Promise((s,o)=>{t.addEventListener("load",s),t.addEventListener("error",()=>o(new Error(`Unable to preload CSS for ${e}`)))})}))}return u.then(()=>l()).catch(n=>{const e=new Event("vite:preloadError",{cancelable:!0});if(e.payload=n,window.dispatchEvent(e),!e.defaultPrevented)throw n})};export{E as _};.

Chrome Cache Entry: 976

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 700x420, components 3
Category:	dropped
Size (bytes):	52249
Entropy (8bit):	7.969476644804523
Encrypted:	false
SSDEEP:	1536:OFJTunAU0vil3btevAjAEC90TuivWjaGhJi+f4WV8yb:fnAxvil3Zev8A/90TucrG6ZW+yb
MD5:	9928271310E4473286E3179159C1C159
SHA1:	A409D65FD51787ED7EBA62CE33B38EF8E23A860E
SHA-256:	D65EC1F916748FB8AEA874CB1AFD9E854CC0DEFADAD085E32FDDE75F45D542C8
SHA-512:	0B6B8E83239AC5174FAA86F75A51B10ECA008B1BCE91599A2E98D9F05102F18002724146D90CE990A7368F26DFA8C9B6465E6A92FF00C95F45F02E5E758AEDB1
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C......................................................................................................................H........................!..1A."Qa.2q.....BR....#..br..$3C...%4S...Ds...................................1.......................!.1A.."Q2a.B.#q.$3R4C.br............?......R.O...iG...'...-R...{+.'5.N\v....,...O6..ej..^JK..c.M...JI...R'.-\rQ...I...L...[c.......K..s....n..[L.5hJx...t....."...]....z..-..]5..SL...v....SH..*..+." .Q...... ..........6.,...a.d....&.Yn..T..g.O^.`.[x....{.$....>...v....V\|z.V.]..<s.^..........39f.[1.\.....a.cG.e.'L#.P........'..c.....WO\|........Q.H..y....Ew.....?.UzJ..c:..2-....8D.Y..S^).j.q.a.Q....SS..n.I].wSi\|K.P....co.%..)..@..n..{"........$....q>..F..e~.I!-.Yq@...Ii.C.H....H...iK...n&.4...<.....{7.g.?m.......x.......s.....On.Et........U.+..t.^.N\|..+,.,.`.=....4..{....H.$.2...c.....!..#..I?.....[:.nr..I.......

Chrome Cache Entry: 977

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 978

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	83
Entropy (8bit):	4.596761390457542
Encrypted:	false
SSDEEP:	3:YQ3/eHiraIPIRUGINJd/4RdXi7wWK1:YQ3e1UfNT/4RdXi7wd
MD5:	310673E3699E46568F1C70FA90A0D62C
SHA1:	38497B0C25047D7DE386A61AFD62276DE12F21BD
SHA-256:	68B4C96D4076E3573D8F95000BB32E8A7ABBECABEEFE2DC461F0EEC1C308F856
SHA-512:	B9B37998709B9178476424A3A3F1F14DFBC57624D632333B7379EA682A94A1D27D5413319B187A6FF3BFD46ABED6CF1F179D95AB49074C9397C219DB5392E3A2
Malicious:	false
Reputation:	low
URL:	https://api.taboola.com/1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8
Preview:	{"user":{"id":"92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb","isNewUser":true}}

Chrome Cache Entry: 979

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3955), with no line terminators
Category:	downloaded
Size (bytes):	3955
Entropy (8bit):	5.217953662864592
Encrypted:	false
SSDEEP:	48:skFwv436hsVK5c5zvvDVCTqienJ08RjD/FsAHV+XoOsHoE0:/ws6huZ5vvRoanJ08P/FsA1TOsIE0
MD5:	BA168FFD366790B33C70F335BB5937F0
SHA1:	A633D7D74B30E4AB0A9F15655127689E5DA1FF4D
SHA-256:	8C4E4F16E31F3803F6CEC9524929BE42BAF5EBBAA6AD8988F2E0C538BDFA6E60
SHA-512:	05675C21F1F55098283D001AFA5B42EEF73098BD9B79DC744945141FB7B8A1BF78B742EA545824369D6F190330F7471F67A908A2714D009804BA9069C0C09ECB
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/nel/css/tdv2-wafer-related-content.ClusterContent.atomic.ltr.ba168ffd366790b33c70f335bb5937f0.min.css
Preview:	#atomic .Ai$c${align-items:center}#atomic .Bd$n$,.Bd$n${border:none}#atomic .Bdc$\#232a31${border-color:#232a31}#atomic .Bdc$separatorBorderColor${border-color:transparent transparent #232a31}#atomic .Bds$s${border-style:solid}#atomic .Bdw$2px${border-width:2px}#atomic .Bdw$separatorBorderWidth${border-width:0 0 2px}#atomic .Bdrs$24px${border-radius:24px}#atomic .Bdrs$8px${border-radius:8px}#atomic .Bg$n${background:none}#atomic .Bgc$\#fff${background-color:#fff}#atomic .Bgc$\$c-fuji-purple-a${background-color:#6001d2}#atomic .Bgc$\#232a31$\:h:hover{background-color:#232a31}#atomic .Bgz$20px\,20px${background-size:20px}#atomic .Bxz$bb${box-sizing:border-box}#atomic .C$\#232a31$,#atomic .C$\$c-fuji-grey-m$,#atomic .C$\$titleColor${color:#232a31}#atomic .C$\$c-fuji-grey-h${color:#767d84}#atomic .C$\#fff$\:h:hover{color:#fff}#atomic .Cur$p${cursor:pointer}#atomic .D$f${display:flex}#atomic .D$ib${display:inline-block}#atomic .D$n${display:

Chrome Cache Entry: 980

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 960x640, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	57710
Entropy (8bit):	7.996973635684839
Encrypted:	true
SSDEEP:	1536:mB1p82qOF3oiTr67PJLCbN8hZ/5lNOVhBdcXl2BGh:mj0Kr6S4/FqhBOXEIh
MD5:	63B071BD032DF47466D1EF3F7D772A2B
SHA1:	2D30180D5F68C98BF027709FB972BEA05A4D2629
SHA-256:	596F4367B6E0C35582CA65C8389F02FF1FDFC6D315CC6EA0AAB8A624CC0A046B
SHA-512:	0E31CB6FC40E9E80AB55FA0B06F676A19C1D261D5A8B3CFE48F0DE07BC85736BEFE7339F55F88640E5A68D41BDD0F569700B80EB58F464B6DA779155A63312FA
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/ny/api/res/1.2/f.YDy9OVwzl.nV5GxqScQA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZj13ZWJw/https://media.zenfs.com/en/bloomberg_markets_842/4454d5cb457add7be7828fc5a55e4ff1
Preview:	RIFFf...WEBPVP8 Z............>a.E.".%.r.)...dm..i....f.J..k_.........=...(.W.....8./...w..g....w?...\|.q.h..........k..?..o....N........C....................K.....?.>....g...........n^............3...e.......#.7.O...............[.?.....s._.3/.G....o...w.......z...4....^..u......\|3..t.$.T..N.q..S.C..3..gp&/.4g.....>.....$..^v....NF.1..S..3.. aG.VZ...n1.n..O@....v_.#....k.8.W.,..u..G........C.%..........o..5....1.J.P~.....N_^..^.....mf.G..kG..]...c.............F2..{.........g.\|.u.VP.w/E.d..a.p......$.?....y=..bA..3...'..?I-..{...jk......#....M.@.&./."....b...qb...N2.....%y..[.<.O79r.......AS.Qj.../MT.Q.>T/..VH..4...E`..[~...S.X....e...+A.K.....5~...%... f[m>.~..F..\..z.Yh.4^.....Z#..dY._'?.....K.!..A..h....XW.g<..c.....@....u.7..9.7.^.P..c...<qw..0/._).J.xo..n.u.0-..'c!...z.1v.&78.....n0....N.p...nzZ.......]oH?.c.j1vW..GI.....>..!.0.SA3.A..S.&.........r?6K...K..}<.p0...}...Q...(5I..tl..i.8'.h.*........+<..)8/..5..w.Tr.l..)?.o..bWx...u....

Chrome Cache Entry: 981

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (596)
Category:	downloaded
Size (bytes):	511331
Entropy (8bit):	5.71888713211764
Encrypted:	false
SSDEEP:	12288:7e12rSHPSBGm98q91OOf9Ni6CG9/xuQ7PieaImmUkFBP:Edqbw+/3lfpFBP
MD5:	48C590D47C8B1868CECAB334E9A34CBE
SHA1:	5F1A9F94294EC337F657AC2EBEC1C74E097CE5B3
SHA-256:	F3756825DF5194A174B7A55EBD3B484C276766EEF21343D34B053B98ED386801
SHA-512:	24B9E42BCEBEFCB81D2DC8760256A63E84846C2A49CEE2A6B3904EB5DBA4551DBEA599E0892C7FA6674E32D6E047CA31B396ADD5467F6D3FADFE8F9B3A72A6F2
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT./.var nA=function(){return[function(M,a,q,C,W,O){return 4>(M>>((W=[2,1,9],M&101)==M&&(qT\|\|D[40](22,"Edge"),CA\|\|(qT(),CA=a),Pj.add(q,C)),W)[0]&8)&&5<=(M>>W[1]&7)&&(D[8](W[0],function(Y){S[24](28,0,"end",Y,a)},wT),t[6](W[2],!1,wT)\|\|Z[33](5)),O},function(M,a,q,C,W,O,Y,P){return 2==(M+1&(M-6<<1<(((P=[22,57,33],10)>(M<<2&12)&&10<=(M>>1&11)&&(C=new be,Y=I[24](37,C,a,q)),M&42)==M&&(Y=Hj('<textarea id="'+J[41](3,a)+'" name="'+J[41](P[2],q)+'" class="g-recaptcha-response"></textarea>')),M)&&(M-2^P[0])>=M&&(D[25](61,.a,DG)\|\|D[25](P[1],a,Sf)?C=c[P[2]](36,a):(a instanceof Ur?q=c[P[2]](32,Z[3](31,a)):(a instanceof IN?W=c[P[2]](12,t[44](70,a).toString

Chrome Cache Entry: 982

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	93
Entropy (8bit):	4.514244499364558
Encrypted:	false
SSDEEP:	3:YAv+ejadWrjHvALuCKxBAVWUpZKxVWR4V:YAmUad+TIuzxBWWUfdR4V
MD5:	EADFCE794A6A63B46A25AEB1B62607DB
SHA1:	BF21A194D4CD30D3CDE62FDC58CC3321A8DFE60F
SHA-256:	1972A9798645E0E54859B82C0F0994116425C8AF9F4BF407480C4DC0350A8AE3
SHA-512:	7A521C2B2FE270802B4841CF209E2E1970D257B2E2488126FAA66710E4AEA37AE9A22528CE004D328EE42883D5A11DFA84AF2F04EDA739B9423F258A56EDD4C3
Malicious:	false
Reputation:	low
Preview:	{"errors":[{"httpStatus":400,"message":"No origin header found.","errorCode":"bad_request"}]}

Chrome Cache Entry: 983

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	879881
Entropy (8bit):	6.056438876713482
Encrypted:	false
SSDEEP:	24576:bm8XRJ1CSYKaQwyGqqGhmZP1Sswi7Ju6FDDCqylmN:SstXaXLDx7gQzyc
MD5:	7023DE5408FFA052A862BA84DBEDEA53
SHA1:	2DE51AB317838302A14B33180ADD0386E787D2EB
SHA-256:	FC0D81C23CC7191B8D6F9216725C78D42F81F34037C8802DF4D21556AD0F7C69
SHA-512:	9A2DC8170A4BB120B72F9346458208953F7AE7245B513814C8B4B615433CDCB64150367FC3EB95A2FB243B1C50D6DE76E3CE8B4A35300209C627A52B677B7653
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/mbr/images/show-v0.0.1.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 23.0.4, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [..<!ENTITY ns_extend "http://ns.adobe.com/Extensibility/1.0/">..<!ENTITY ns_ai "http://ns.adobe.com/AdobeIllustrator/10.0/">..<!ENTITY ns_graphs "http://ns.adobe.com/Graphs/1.0/">..<!ENTITY ns_vars "http://ns.adobe.com/Variables/1.0/">..<!ENTITY ns_imrep "http://ns.adobe.com/ImageReplacement/1.0/">..<!ENTITY ns_sfw "http://ns.adobe.com/SaveForWeb/1.0/">..<!ENTITY ns_custom "http://ns.adobe.com/GenericCustomNamespace/1.0/">..<!ENTITY ns_adobe_xpath "http://ns.adobe.com/XPath/1.0/">.]>.<svg version="1.1" xmlns:x="&ns_extend;" xmlns:i="&ns_ai;" xmlns:graph="&ns_graphs;".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 48 48".. style="enable-background:new 0 0 48 48;" xml:space="preserve">.<style type=

Chrome Cache Entry: 984

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4027)
Category:	downloaded
Size (bytes):	4028
Entropy (8bit):	4.9555769705479875
Encrypted:	false
SSDEEP:	48:1qSwT9RdAPNmcBwcBiTITQ0ANIqARCQ+DPveOWJZHDH69JZ6FHWKUICxpNWuLNc/:8Sbmc6cG0ATARG7Wra9iF+dRkOo
MD5:	5387A24E155272C15CBCA4CD6DE481A2
SHA1:	083D6F9E5A861E0A2C2741C70063695558F3935C
SHA-256:	247FC22DF25620AFF43311B06C4462CAF5948D779837D46B40C60F1693288716
SHA-512:	A0B3D55D5FA83A0240ABA7DBFA7928ECA76D2A83CFE415504F6C78A50AB7703FF951B9835D312ACE40DB3F613E24EB4F35315346BDDB8935B549810872902398
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/assets/Layout.BNkgo1JV.css
Preview:	.toast-container.svelte-1b3ckcy{position:fixed;bottom:10px;left:40%;z-index:10}.container.svelte-1b3ckcy{background-color:var(--surface2);box-shadow:var(--shadow1);padding:var(--space-3);border-radius:var(--border-radius-m);border:1px solid var(--light-divider);display:flex;gap:var(--space-2);align-items:center}.gridLayout.svelte-4egosq.svelte-4egosq{--_grid-border-color:var(--light-divider);--_grid-border-width:1px}.gridLayout.svelte-4egosq>{border-bottom:var(--_grid-border-width) solid var(--_grid-border-color)}.gridLayout.svelte-4egosq>:last-child{border-bottom:0}@layer layout{.ad.svelte-4egosq.svelte-4egosq{position:initial}.ad.svelte-4egosq~header.svelte-4egosq,.ad.svelte-4egosq~.layoutContainer.svelte-4egosq{--ad-top:calc(55px + var(--space-4))}.ad.svelte-4egosq:has(#sda-E2E div:empty)~header.svelte-4egosq,.ad.svelte-4egosq:has(#sda-E2E div:empty)~.layoutContainer.svelte-4egosq{--ad-top:0px}header.svelte-4egosq.svelte-4egosq{z-index:10;position:sticky;top:0}header.svelte-4egosq

Chrome Cache Entry: 985

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 536x284, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	17806
Entropy (8bit):	7.98846719315388
Encrypted:	false
SSDEEP:	384:y3DqVF1GvqK3LYnZXVh52P74ZaQeHf8ReQurNaDSIVowYsTaex:smV2vqK3LYD07Qy/8ReurYsTaex
MD5:	00E07A1FF6FBAD2803CDF8F15CAA410F
SHA1:	C525C6C25FCECD57C205A7A530F999C9E954825F
SHA-256:	B44FC1AEA47D1C28A580F6FBCF505CDE4540E54F0643FA1756F1DBC934462229
SHA-512:	60D92510CE5C49B3F13A1F1597B5CF20389D79EE8B95CDCB40D50B27377F672DEF0DBBDF8D46F0848381E4104EAF0B3C37B1C6E9A215DA65914478BD16434F95
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/sE5UQVWKRLiLgilpJTcvHA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/0b844ca7b4d78611fb5815f9a7e26822.cf.webp
Preview:	RIFF.E..WEBPVP8 zE...........>y0.F$...2..p...e.....'_......MY.6/...^.y.........i....5.C...~......\|..V..D\|Y....!...........?..o...{...#.n........1O..0...NW.s...?..E...f.........X..G.....A..}.9R...w....).>.n.\|.._.....3w..!r..H.....m...SN.Y_....mk.fU.=.G....L.....%..^..SU..3.)".....n.B2w;@v.. ...."..m....s..^t.Nq..z@..5...(]...x.w....>R.q..33.h0f.E\|6...69.D......<J....o;P...c6.x.;......Y.1:\U.N_1}5.y....\|d.........&[$.3.../..A.#6....H1!D......=D....W..c....K/=z.>U...,.L7..LFH..M..y..z.}..FD.J..=.G..l ..^.....)E..9...8.......Ci....~.bz...h..%.ci..V.E....X.<Bq;....c4.....{.zS.h...........6.U. .>.W.4B.3...^....I#.....S..C..0O.f.ZM,...q.$..rv...2W..'.~...-;..Qp...>\..KY......(ah.`X...........%a....X...\|..>...VT..6..A...........N.....'.V_....0..{i......).w0i1...9u.:...\...6..?......I..D.`.......b...*..W+..6..id./+......=B.k.[......3.......;.bw....cj...&.y..}8..^!....&.J'. ..Q.....+.`...2...kg......X....J....&8.N...w.R1.I(4Y.[....m.....

Chrome Cache Entry: 986

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (2714)
Category:	downloaded
Size (bytes):	2715
Entropy (8bit):	5.391464774813482
Encrypted:	false
SSDEEP:	48:H1iJ/2S1C1SYh0D3FXhF6iSEnXiUktyqc9dPYn/qmqb5WciJYw9625:ViJ/2S1C1tKLFfsEnfgy99d3dVWcQ168
MD5:	F51BF9A3AC3BBABDADADACF46C7601DB
SHA1:	1FA003A107080586670604053338CAAFA4191F79
SHA-256:	A82A2BFBB25BAD1652A9784DD17C96C7D7DA52CDFB99C0B0145E3E45762A9C81
SHA-512:	0D8071A70BEAA1C35A6D82989DDE88E972DCDAF19D220EEF9D48107484C123F269D8536EEDADFE30BB385E92FBFBCAC335A51A6DC0A87C6EC823B757303E4E36
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/Image.DyHyi9jI.js
Preview:	import{s as G,w as I,k as h,i as b,e as C,d as w,p as n,A,B as R,C as U,n as y,c as q,u as E,g as F,a as M}from"./scheduler.ErneftFr.js";import{S as Y,i as J,g as K,a as m,e as O,t as g}from"./index.DsErXEH0.js";const Q=r=>({}),N=r=>({});function V(r){let e,l,s,t,c,i;return{c(){e=C("img"),this.h()},l(f){e=w(f,"IMG",{class:!0,alt:!0,src:!0,srcset:!0,fetchpriority:!0,loading:!0}),this.h()},h(){n(e,"class",l=`tw-bg-opacity-25 ${r[4]}`),n(e,"alt",r[3]),A(e.src,s=r[1])\|\|n(e,"src",s),R(e,t=r[2])\|\|n(e,"srcset",t),n(e,"fetchpriority",r[6]),n(e,"loading",r[0])},m(f,a){h(f,e,a),c\|\|(i=U(e,"error",r[11]),c=!0)},p(f,a){a&16&&l!==(l=`tw-bg-opacity-25 ${f[4]}`)&&n(e,"class",l),a&8&&n(e,"alt",f[3]),a&2&&!A(e.src,s=f[1])&&n(e,"src",s),a&4&&t!==(t=f[2])&&n(e,"srcset",t),a&64&&n(e,"fetchpriority",f[6]),a&1&&n(e,"loading",f[0])},i:y,o:y,d(f){f&&b(e),c=!1,i()}}}function j(r){let e;const l=r[10].fallback,s=q(l,r,r[9],N),t=s\|\|X(r);return{c(){t&&t.c()},l(c){t&&t.l(c)},m(c,i){t&&t.m(c,i),e=!0},p(c,i){s?s.p&&(!

Chrome Cache Entry: 987

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2222)
Category:	downloaded
Size (bytes):	42217
Entropy (8bit):	5.396200966239423
Encrypted:	false
SSDEEP:	384:/xEVUMByh/fa6cSOUkxHT72sDWB75/0D0PmfDpl2yk/Z7SNJQ0Wu3PI3Prx/ttoI:hRS6cbHTi7iFkOvLbAN9gzRON1Rxwi
MD5:	1C33A4D6D63C7E6E38CC72E6245FC107
SHA1:	19EA40DED1698EC0617604DC3E09897F7A8FF640
SHA-256:	435DB380C9936C0970DCD3D9941EAB6AEC2FCF2A38C3E2B4E02D957E8E76BD1F
SHA-512:	CA55321C3C847819553238850525E59C6ED5C37BCA116358D5080971037E56A3407D256B6A78DBE38F4B91CC97E62D899296C620F80701598983BA0624E086E7
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/Q12zgMmT.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Aa=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Aa};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 988

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 656x369, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	10896
Entropy (8bit):	7.981930612580859
Encrypted:	false
SSDEEP:	192:5Qg477TkMaNKYu2XTXWoL2v34KWmvZbsDPCwxbgKmoQpc+sh/+hQ/MTTLwZlqp9H:CgSkyMbWYiHdsDpxbbpNkTHqM9H
MD5:	7A7C6A0EF7F216CBA4BDF056A1CC1827
SHA1:	856607048880B5F4F3BA0F49BE4E34554F684E3E
SHA-256:	3553A8DB9270BC7ED4B6D64825F58177C45173644622D430DD6E53D856825C39
SHA-512:	940463FD6F74FF142780D32B20B98E28AD893845434373995D8FC0D658C7B3FE88BCD955EDB5D8FFF33C1661875345625A6ECEAA66CEC3415081A5FCB21A93D3
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/KTuqbLK.EutV1QveD0ubtg--~B/Zmk9c3RyaW07aD0zNjk7cT04MDt3PTY1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/bloomberg_markets_842/e35ed8c7f75a178189eb45b8f12ee806.cf.webp
Preview:	RIFF...WEBPVP8 \|..p/...*..q.>y6.J$.....+.p..inP.8...c..\L.=...;.{.=?...S.I...............w.E.Ng.._.'...f.....=+>......w.x.....7.O...y~.......g.o.H}......ug.}<..Kd.x.....I...._>..mx...#c/.Y.....Yj..=c>........G+1.s.G.6.,..... .n..l...2..r..X. h\/)........O)^F.......I...Q.+....%.j;.......s. ...j.......8..EP!&D.e.`....l..Cj .#C.......u....N.v3(......s.Q.... .........v........q0....../.4...`.XT...z ..C..<p..j.bw..0,..K.CD...TA2..l.hq...u......>...B.l.nt...Yj9.R.m.=6.x]~.....@..'....8...O..R}@f...3{,.b:D..d\|.z........'..v.n<..g...d....T..S../...CA&....&.....Ox...<.w........F./o......+...F..Imm..D[WV...}E.>N J..C.Bk~..l.TE7X..u)...p....Q.. k..C.If..E...\.#..4)."4a.nj[..2...!..a4.&..<+....M.......$..I.Y0~.....Fb.[...3aJ!.........yc'p,._.....V.M..^S.G..g..,,.DQ..RJB...&....+RM.G.T;...jSh....%@.R!K%....I.K{.d..L.!..V..s...$n.~../..........W`\|...)...,.Y~bI..z.....#o..Fu..l..;H+&z...d.....y'eD..o..tJ_....~...N.$..x~..j......w.K...4wt.e

Chrome Cache Entry: 989

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.528894946696052
Encrypted:	false
SSDEEP:	24:Vn+0EpHeEpHeEwIFr/BHCdpn1f/HM8QhC0Vtn8oIM:l+Xpwsr/NCX9HMThPtxn
MD5:	B74B37E40EAAC216573199B31F9B4B8A
SHA1:	DAE74154C89E7BF7B8F451E71C9199BD9F1359FD
SHA-256:	F47955FB79A1FA64C851013CFBA0094A85250A4D5D8B1C166141EAAF48B08600
SHA-512:	78C7F8FCA8234EF21BBBF79B124C956AA5D1103699AEF7C06B2B24451E54B599EF7D19C95DD62C060E16A6F9AD1D283F5D04ADF48AEC47411D331C0A746C8368
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X............;...6PLTE......898...cdc......BCBXYX...yyy......MNM...non.............tRNS.@..f....IDATx.........................................................................`..@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU.=8........m.UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa........._.AUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU....... ..FPUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU...@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU.=8........m.UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa........._.AUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU....... ..FPUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU...@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU.=8........m.UUUUUUUUUUUUUUUUUUUUUUUUUUUUU..........7=.{.I[......>.p_...:(..A....uP....}....p_...:(..A....uP....c..V[..(.fM.m...?{....B.-..C....4.....'9.

Chrome Cache Entry: 990

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8260), with no line terminators
Category:	downloaded
Size (bytes):	8260
Entropy (8bit):	5.238261028208202
Encrypted:	false
SSDEEP:	192:L2JhEpTVHpBTRgbW8DdlWzMEqt16lOTlKW5BCNaCV5WgeTYy3:L2JhEjpBKC8DjWpc16oBKAAaqeky
MD5:	DFA69F455EFA8A49A71AF52519927C3F
SHA1:	07E3A5A50D74E9150408B2D5A50AE1242F6A5A33
SHA-256:	6014DBEF5594ADD5F4104CE8597BC8C6B755E9DCA6B32E40EB04246E55588406
SHA-512:	72673CB76FB5C77B570C44AD5A156DD634C9E57E8C1FF0845C9C021FA492061804FE07C7C8CBEEA8049C3644C4352C17A575903428C1ACC00255E38C27F4D010
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-autocomplete-1.31.8-modern-a4f31e10ae.chunk.js
Preview:	webpackJsonpwafer_wafers_wafer_autocomplete([0],{"./src/types recursive ^\\.\\/.$":function(e,t,r){function a(e){return r(s(e))}function s(e){var t=i[e];if(!(t+1))throw new Error("Cannot find module '"+e+"'.");return t}var i={"./aol-location":"./src/types/aol-location.js","./aol-location.js":"./src/types/aol-location.js","./aol-markets":"./src/types/aol-markets.js","./aol-markets.js":"./src/types/aol-markets.js","./aol-recipes":"./src/types/aol-recipes.js","./aol-recipes.js":"./src/types/aol-recipes.js","./gossip":"./src/types/gossip.js","./gossip.js":"./src/types/gossip.js","./sports-teams":"./src/types/sports-teams.js","./sports-teams.js":"./src/types/sports-teams.js","./weather":"./src/types/weather.js","./weather.js":"./src/types/weather.js"};a.keys=function(){return Object.keys(i)},a.resolve=s,e.exports=a,a.id="./src/types recursive ^\\.\\/.$"},"./src/types/aol-location.js":function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),r.d(t,"getListMarkup",functi

Chrome Cache Entry: 991

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10121)
Category:	downloaded
Size (bytes):	10122
Entropy (8bit):	5.288322875328675
Encrypted:	false
SSDEEP:	192:8ee/zgBJrBmZ0IWyhB/ns9Yz3beMHj8r4sIyw:8eVJrBw0NyzS2reMc8yw
MD5:	0E42BEC99A1367AFDC4400599EE6533E
SHA1:	EEECD99B41961D259C91092353829A8645466A7E
SHA-256:	544548F5B046174F89F2F2CB48C3D4C557980DAF5C3FD26F8C72F76F191CA323
SHA-512:	9FE8388C87014F74759C6EC0F939EC83F0C28E0CAD309E5E9A1C464E3FE1F1544C25E5FE92CD9330F45D80181701C25A7C915131D88288174741A7BD13EB9D2A
Malicious:	false
Reputation:	low
URL:	https://finance.yahoo.com/assets/_app/immutable/chunks/index.BPtEJa1O.js
Preview:	import{c as M,g as _n}from"./_commonjsHelpers.Cpj98o6Y.js";var F={exports:{}};F.exports;(function(w,U){var Ot=200,W="__lodash_hash_undefined__",wt=800,Ct=16,X=9007199254740991,Y="[object Arguments]",jt="[object Array]",xt="[object AsyncFunction]",St="[object Boolean]",It="[object Date]",Et="[object Error]",Z="[object Function]",Pt="[object GeneratorFunction]",zt="[object Map]",Mt="[object Number]",Ft="[object Null]",Q="[object Object]",Ut="[object Proxy]",Dt="[object RegExp]",Nt="[object Set]",Gt="[object String]",Rt="[object Undefined]",Ht="[object WeakMap]",Lt="[object ArrayBuffer]",Bt="[object DataView]",$t="[object Float32Array]",Kt="[object Float64Array]",qt="[object Int8Array]",Vt="[object Int16Array]",Jt="[object Int32Array]",Wt="[object Uint8Array]",Xt="[object Uint8ClampedArray]",Yt="[object Uint16Array]",Zt="[object Uint32Array]",Qt=/[\\^$.+?()[\]{}\|]/g,kt=/^\[object .+?Constructor\]$/,te=/^(?:0\|[1-9]\d)$/,u={};u[$t]=u[Kt]=u[qt]=u[Vt]=u[Jt]=u[Wt]=u[Xt]=u[Yt]=u[Zt]=!0,u[Y]=u

Chrome Cache Entry: 992

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	113120
Entropy (8bit):	5.902494808834138
Encrypted:	false
SSDEEP:	1536:8wkx4xZnp+zUOE53Oy73u5VqA5Gb9ZkLTF2oWtJI7RIbiLKQ3inQ1j1xMmHb31jr:8nwB8fEfUUYtQmIbiLKs8m7F4Qb9tks
MD5:	70DF13D82C06686A3283FDCD4B75E00B
SHA1:	3D9CDD073A85C8BFCD17CC8EA644737016F29E51
SHA-256:	3CE0855FA7BA64FBA2470DB387DE94980DF82377AE752E98D2D533145FE2285C
SHA-512:	18BF6EF0C89EC02CA9B5923DDAA2AF4AA916063F054BC3BB0BD9C4D491A601A1C112726586634398407B89AC353C44444364F11EF356157FC3E044A2FC92ADD1
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-DoK9Rnk5L5Lf5MzDHvlvVUpEbICedRZ16iGdXxG79-k1k6XULZvXpqbiue58yUl3J0Iv1NjRY4HjHz2ROP-HAUwgxUY4Hv_aiF3v12K1Vyii9dVEoyxcCtf0KNlDHA5Y9JmOjBstWJsb5bdUUWqSXhJJvanZr53hUkyM5hlpKC2wVTwx1HkMK68sd_yOMjF4yTHXoAGAJxH30ChkpYUsOsNmut-w&dbm_d=AKAmf-Db798LXYL2BiP-L1ihhA4zwlJvlnboqQgF_6CsnH_uyr3RW85wKC6Fa0JLM7cbVXCEGsNDtUkFzkqybHqDycAqlIemIyg3Roqwbwhgg9xArh3frI3VMydDm7aoEme1JKLFAPr4dnhtmFLgCiXwQ1t9cnlqVjO1DbAk2xLB_10YbTGp9VV6fSE3rfQKRIFOqgDpcJygY43T38DoeYKDQq_LBphzJ4V0_EGWKqYs_xGdBGZuMX46zZrl8Ma7ahHuEGYVunPF1TuISd2ECXMMI0dhLWmOEx5-_IUP9P8dnaDoKk0Oeq2dSnOtWUt76Io95TG80qyA17IVui-symq87AeVHiB6MqTvOOC6oL10OUOkB1-DGLionXxu9-N7EykZpgmWJtKzUBq7LCknIfLuT94UgYAI76_rtHmXg6_d8ZFdFcF03tHPIpOjKpEw-9NeD-BxUBBRWhDoCq9nx3ZP8vqUY3wfHP6UkpmAX2NPeD2P254GslEWDy8sVVSiW3KSwMeL2pKcv4M4zk7Mr-V5q9UMKFzEdNYgNaCb_0lfzF5b-dX9hG4XxumkXsal69bb7lGkWAw-uNuELA-mYZPzvrmc9sDczWNYRUSDIIHML4CuSlsbO_I-rIYE7paJmzlXYYULduCWEmM2MBbrjHG03-6Sc_sl9OkG2YeXU1V25sPiwJQllP7DBN_ygac8BpLK_vVF4IKzIlbN5sl1_0649jHtMuXOuAiR1dWjN3g6oGajEi3FmY6Qn-qCvZmKTIAATD3fnqUghQTJftZOsNXGIYiBNQgYODiPJoQhEKjn1Od0Q31t9ct1xAN-gNoBfxVjV8X1xmRBnqXPo9jUoDq3nT1rrTSER8WLAkpXaTtTBBEc1tAUGEygiOPq9eJLUqPIxg1ww6_u85onybeK94H6tjoAdG0W6exBOIMNfdDJ0n4OIXB2ZJk4jIF9KuvFfcNJl72EXiN1CO0gSKnKNRLMwSQrevjv2HrmDKOUrSyc8qkDPANI9_yqgUO7qSTTu_BTVCSQIxe4VDlsBB_nX5jBe6mwkjmqYP-7yh8FNWZv12FDU3HIvX8d1smWf9Uil6PaH6FYC_6IphEKJO11b2s2QZ_pgaUXuuaOBo0NL07PYQoolijNHld815MBpfZDsZ58rEEE5Hc5t64JN3epDOaIVZhuMHWg0p9h02kwPvoM3oXuTIVzsco6UcLDDJZPv8fZBl-x3PDhTVUxf9q3yAy2T-os2xrouhOzmXLBejKdvngR_1z_AB-STMmLWe3-iKmtc9ISYalvPiTouyRAKMSKeMojSvyBwnVzlEDtHPxbQoqSpLQo6__YICC9SD424jQ_zgihDNzrH4rmJKYlSG66esAX2X8g2H0l8NSHgWMrZxzHov2DL60THHcBqDskjgOmNMyL4eo72wypjA7zCM4jZCUSWJfMSW95ICY5rhz1TaVZgVlaTSRZxCO-t7lAc03T0U3CnZ6kYt6kOaGuGTAhiIIG5hFkOZceG-JvxQxpb7RaF4GMuxC9D2UEmfQ1pYPKAyEWlUvbw_tFamUk-nXsw7SjCzYgYu2RzyEo6PxyCCFSpe3F2-k7fnvFr0VfJYA_2VSDmXw9Tf0ZISzjFn1SdPtZapFhfx4QBixQHgeIS5CgHOUluK8LPQRRpWau22dkpkXaAU5QBvjDZJf2Ytq3-ZNSxQQtnNUI11zYLqP6j4c0HBaP64TIqoqfGu0a7EX9I0agDgXDDVmlkypYQx1PombhOtlPZqyzydh3TA7FA1r8eJQvtKRlzRqoDyTptg3Uq4OzHyEn_TdyM9Kz8nID90_XahLzpK2khTXutwLXoSO7PcdzQcqoOPO2Qmmqf3tHJlfWmPfb61-rQ8o1yecUXmGDBK0kcI6eQyc2AKBCHJSDsAhOuuBSLnXq-9GulDMW6aUdQ-lVO_invD_dLFKL4-w_Sb9sNprRdljcGb4raphAWcRBj2wK9m6dwDNp-dXGJYjqZUOlbtRMQF2p8San01H3m2DuJPgGCf12Tv3JcQGadpoSlXOTyPjvh1CXIsKVIjJz-8WBEKF09dILiiMklBwe11i5JxXhhmgEP2sdVEY4c9DJChLrPgtIQwbctnwl6-H5FUGuDW00fKHbSeqREsIS9_C2s-iBGYaU13sKdUducnxHWPDupJzR-LnrTlSBfPPVDeBRwFvqT2IKziMJoF8YxUo5xv1Ygypcd-WTiXi5VyY4iJJagZe5SlGwD_7v_s2Idur7coUoj_KIOL3hvAamPfq7EteuH3GyRT9P44NYkFIMxB-a6wTZ0Aj0h-5CL8bJ_s6wUUuQmXJn7A7Pkqan8bbk7Mttz7TPdpARTpqYicyzkyNE2EyN4ABVBBKoeb4qRVB5dtGhYsSxT3_Ld3aLpsMlepclUnlCaLgYV2SMS_WihxDfRryvXFRC5r3V9ziCb-L3g0eyEAs4T8P_QfMRWpr79oK7eV6oiwZboJgpjqAAvAbteg0woRtVVbtvHRE8_OuYXEFg5cx_30dJFUGW_KjoLYuhGd8NGEnN3k7EbkcXcrCZaYmSxJB65cvy2o_KdRDtiVXi9wFzmbhWroJMyvHbK20SYF1dZvGQbF39IuZ3WFg7P0IoegLSS3C-edS5EyL-ko6-2jCq85wCrhn31VVq_3l2nvs0bz1KsDFLkHggYjhv4iyUzu7KTlm3aEdqsvUYYljD-ZdNA4liiWuq7iBpNYpV91dhIgVsVxJFZ9cmn8AXspTn2VFN_m4HsBsEOTFYlVZNPyLe9RrIKsnEuz1zlYGkCnty6SkPCzLGEKv5Z92a6qXsI8w6Ntegg5YBqxTSvHcrvpXLBKFT5jxxQCv802ysbABnRxV6L7T66xqA0ltcjKtbVJBEneyNGAxITyBLBN3M8k66bLnOwt5TQiTH5rTp750xHDbseW4kOgP6RI2xe-GhIIiz56yyZvP59spxLMdVCz__WS1DnISAFhHdb3qdJVKb7uFJOJkdwUOzyco85sGD4WlavBJSUuAH8Accg0kd40n6WafwDjMz5YJqaP6tBpHX4Hi7ftviPSigB1dvS6EZ2zoa-EBJYmRpvXftTq0tpz1hSsGAMOtB-pzZRYkg4fvdgDvugz0J1vZ_e-2RfF-H_yYDG9Z1YTsg4jJBoD6a4aZNNbkQ1qDe5hYsWJZROmpKTBLRUWVCBsVr-jQJKJbslERckxrVk_BDqvlsWxAwlsz7AI65EQ7A1f3pGZ6Y3aeTwk0D_VhezTPpUVl_CeBzHIy9-3-l_FA_vjR332rSoqORnINEE_-y3A0xg_4CHXYzRs4rkMreqnf-trQ1sfQo1apZPEHLQdNzY2slnDYEncVA9gIGnRT0X2aXsFMuKUA9HJYgA7VRsV89OQE2QXoYm0SEacd-N-nMeMPevI9qNSMKDeiv1YfYyEEyklr76CImuvSLYE1RaY7Vw5yl-OLS9sjTjU37KD7Wz69TSNx5KhR3nLMuZG4fddZiUBduV6qoZI_ILCUJCI8NAnuZ5RlyWh6d8K5yQE7jLq3it9Huk0xZP6FoYrrOm65OMCdi17RdB3bjpxqJK4-GNlQQw-RvIP19U_0FUvJFxpEZic-Ti2fRx_Vg9voF9VadyfKzzV53YTFPdro-SZRIGYyHlRUpLJ3a-cw1MXk65sQ718iXCltgPJgbGMLi8CX3VMXpSxEKv_beNlFO-6GWf_bvL4F82dsF-wk6ZeEhy12brLVN4bgMFjPv6-n2SI_IFP_heWqrdhpYAfPiC0HYuOet_jdg7fg3UrOsb4gvg0btd5vdIjfU_Ms1KhI73QVq7kZKfpZjsG0MQRMooK5Gmr3iKnZbzLKbDYqipysHIBaPAnkBgxZ2iiculTAQgm2FpR977hQMpHDE_JojeMQ5aV0nCBFX5dP0xpBx9GdG2kP_Unr-Ih3tPqR1bny8N4Ur_KyaW9ZPXuYJv8EoQf3l1u59Zq5fY_xRBMv1esBQVsH8l-mLxBlE3yVFulDigvMFjg&cid=CAQSPAB7FLtqRU6LHA3L-lx-gL-XJW9q8pZum25LnAWY7KRb5O7SHxSFcmhVmQ8bLsn3pgND5gPsOUDCo_KsjBgB&dv3_ver=m202402290101&nel=1&rfl=https%3A%2F%2Fwww.yahoo.com%2F&ds=l&xdt=1&iif=1&cor=14595782112229718000&adk=496764935&dtd=76
Preview:	document.write('\x3cdiv id\x3d\x22brand_safety_ag4GZqGGONGdoPMP18udoAU\x22 style\x3d\x22visibility:hidden\x22 \x3e\x3cscript data-jc\x3d\x2288\x22 data-jc-version\x3d\x22r20240327\x22 data-jcp-jscd\x3d\x22[\x26quot;https://cdn.doubleverify.com/dvbm.js\x26quot;,\x26quot;ctx\x3d20006197\\u0026cmp\x3d31411294\\u0026sid\x3d5071708\\u0026plc\x3d388507207\\u0026crt\x3d212200008\\u0026advid\x3d3876771\\u0026adsrv\x3d1\\u0026mon\x3d1\\u0026blk\x3d1\\u0026dvp_cawf\x3dcrtwrp\\u0026cm360cw\x3d1\\u0026unit\x3d300x600\\u0026prr\x3d1\\u0026turl\x3dhttps://www.yahoo.com/\\u0026aucmp\x3d21039716546\\u0026auevent\x3dABAjH0i0yoUwlkeVmzcj-GmykGOd\\u0026autt\x3d1\\u0026ppid\x3d103\\u0026aubndl\x3d\\u0026aucrtv\x3d553954458\\u0026auorder\x3d1015903071\\u0026pltfrm\x3d1\\u0026ausite\x3d2328226494\\u0026auxch\x3d1\\u0026aufilter1\x3d1982032\\u0026c1\x3d1982032\\u0026audeal\x3d\x26quot;,null,\x26quot;doubleverify\x26quot;,null,\x26quot;ag4GZqGGONGdoPMP18udoAU\x26quot;,\x26quot;https://googleads4.g.doubleclick

Chrome Cache Entry: 993

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 656x369, components 3
Category:	dropped
Size (bytes):	137456
Entropy (8bit):	7.9645095987591885
Encrypted:	false
SSDEEP:	3072:KxF38TfqUoOb+mcpbPCPJ9ZeI5NWEpRUjbyL8Ob/k2SrRh:WFseAb+lqPJ9Zz5NrUjq8ObM2ih
MD5:	AF086785450335F17587A4D40F9ED141
SHA1:	4BCF2D97FF72D9BE5A58133F83FD8CBEC97CF9FE
SHA-256:	61DF76BD4852AF084E1FD5B5C7A94B4378CB4D3ADFB1127ADB328996E90E1694
SHA-512:	9469ED7AB813D0CDAA228E57BE1D9B225B72D0C862041E050C1F0C5E0EBF3336B9CA37C38976A0108D980D94DB656C9880A65CBC56F3C1F42D54C02754273B9D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 995

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65484)
Category:	downloaded
Size (bytes):	184464
Entropy (8bit):	5.449610683212188
Encrypted:	false
SSDEEP:	1536:CmzNNlFchunXBo4P5/vurL73G8HbREzC1H9RrMrjbJPySO+/U+wSS60ibrLr2pmx:CmzNNlFchunXBhPh90iWglWO/
MD5:	6863CE0703CE4F482389F8A7E640E4E6
SHA1:	7554A71C742AD65ADA09C7819E853F2F71D88D52
SHA-256:	D08DEDFB38AA5AE7DEDADCAE8425F632C17CE61ABA51990D9275FB71A2B28387
SHA-512:	36FA691795A4125FC052D4A75FEAB5B83059676B66C8D927E28EE56AC66B0BFA73021CB26C66953E49C3BDE0D41005D67D6F15D26AD8DA6140C5153EB9488390
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/cmp/version/6.4.1/cmp.js
Preview:	/! CMP 6.4.1 Copyright 2018 Oath Holdings, Inc. /.!function(){var e={4184:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}e.exports=function(){for(var e,n,r=[],i=window,o=i;o;){try{if(o.frames.__tcfapiLocator){e=o;break}}catch(e){}if(o===i.top)break;o=o.parent}e\|\|(function e(){var t=i.document,n=!!i.frames.__tcfapiLocator;if(!n)if(t.body){var r=t.createElement("iframe");r.style.cssText="display:none",r.name="__tcfapiLocator",t.body.appendChild(r)}else setTimeout(e,5);return!n}(),i.__tcfapi=function(){for(var e=arguments.length,t=new Array(e),i=0;i<e;i++)t[i]=arguments[i];if(!t.length)return r;"setGdprApplies"===t[0]?t.length>3&&2===parseInt(t[1],10)&&"boolean"==typeof t[3]&&(n=t[3],"function"==typeof t[2]&&t[2]("set",!0)):"ping"===t[0]?"function"==typeof t[2]&&t[2]({gdprApplies:n,c

Chrome Cache Entry: 996

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	7580
Entropy (8bit):	5.894802453604427
Encrypted:	false
SSDEEP:	96:lChU9mN5Io3MIsjI3+7h79N1NMlS8OlwDJe8FPHBO1NiNG32JRY:lFo332AWPN1NgSZgk8F/BQEG30a
MD5:	20DAEFA714B50CA02A56889B97AD1968
SHA1:	C4ACD6A54FFFC4F50EBC2FD3025B80F6500C989A
SHA-256:	8EE3848CBD9580F41FB3C9056382ADAE6C00D43072939E1503954894BE255107
SHA-512:	ED67393EC834AAA4797D761E4271AE55A65F52375E026A21EF49052F146AE2BFF34F9F55E9EA1E08D2ED28DA40BBC60BBE8F6146AAC4C002967D64D4D01E0B59
Malicious:	false
Reputation:	low
URL:	https://video-api.yql.yahoo.com/v1/video/sapi/streams/232e0854-e2dc-36d3-8206-f4d7dd4ef4dd?adLite=false&svc=YS6PlBuVeHG&srid=112148678&protocol=http&format=m3u8%2Cmp4%2Cwebm&rt=html&devtype=desktop&offnetwork=false&plid=a4781829-839f-4c9d-8bdc-e9ad825f2d2a&region=US&site=finance&expb=fin-neo-10&expn=y20-neo&bckt=Treatment_Oath_Player&lang=en-US&width=562&height=316&resize=true&ps=4liecpqi&autoplay=false&image_sizes=&excludePS=true&isDockable=0&acctid=&synd=&pspid=1183300002&plidl=&topic=&pver=1.4.8&try=1&failover_count=0&ads=ima&ad.pl=up&ad.pd=&ad.pt=home&ad.pct=&evp=bcp&hlspre=false&ad.plseq=1&pblob=lu%3A0%3Bver%3Animbus%3Bpt%3Ahome&gdpr=false&iabconsent=&usprv=1YNN&gpp=DBAA&gppSid=-1
Preview:	{"query":{"results":{"mediaObj":[{"id":"232e0854-e2dc-36d3-8206-f4d7dd4ef4dd","meta":{"attribution":"","description":"<p>A federal judge has <a data-i13n=\"cpos:1;pos:1\" href=\"https://finance.yahoo.com/video/sam-bankman-fried-sentenced-25-160604036.html\">sentenced former FTX CEO Sam Bankman-Fried to 25 years</a> for defrauding the crypto exchange's (<a data-i13n=\"cpos:2;pos:1\" href=\"https://finance.yahoo.com/quote/FTT-USD?.tsrc=fin-srch\">FTT-USD</a>) investors and customer base. Bankman-Fried has been ordered to forfeit $11 billion to compensate the victims.</p>\n<p>CoinDesk Managing Editor Nik De sits down with Yahoo Finance Live in-studio to discuss Bankman-Fried's sentencing, how much time the disgraced FTX co-founder will likely be made to serve in prison, and other details from Thursday's ruling.</p>\n<p>"From the beginning, it felt like prosecutors were making this... almost a poster child of what they can bring to bear against alleged criminal activity in

Chrome Cache Entry: 997

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1695
Entropy (8bit):	5.177312516380945
Encrypted:	false
SSDEEP:	24:tCbYLbGPGuXVGTIshQGzGeLGSoGQlnGMGlsXGlbvOu3aYrpRDnOG3KwS7x7SyFYb:Di+hVdqUGSbQMHNDq8glIyxI
MD5:	93DC53D369DCA8F09877C3ECC9A41DE3
SHA1:	346D07BC2A3B65CD75CF0B3F938348969CA1A7C5
SHA-256:	E689333AEAB6ADA00BE85106F30DEDD1E069EFCF70B78E13CE407CC04B1B1189
SHA-512:	9D084CFA903CA9B6C253937B5F5628582C2080826124613CB5F70E6869ED472DF8541DF52E69DCDA55AFC11ED015BC0083DF5C1074717979544168F1E80ECB3E
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="-36.396%" y1="32.854%" x2="33.396%" y2="133.313%" id="a">. <stop stop-color="#FFF5B2" offset=".013%"/>. <stop stop-color="#FFDE00" offset="39.944%"/>. <stop stop-color="#FFA700" offset="100%"/>. </linearGradient>. <linearGradient x1="11.357%" y1="56.982%" x2="74.1%" y2="26.47%" id="b">. <stop stop-color="#FFB92B" stop-opacity=".05" offset="0%"/>. <stop stop-color="#FF6900" offset="100%"/>. </linearGradient>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="c">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <path d="M29.428 9.083c-4.944.213-9.017 4.055-9.642 9.094a6.54 6.54 0 00-5.162.923c-1.899 1.144-3.201 3.098-3.552 5.33a7.336 7.336 0 00.435 3.706c.46 1.083 1.502 1.7

Chrome Cache Entry: 998

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4249), with no line terminators
Category:	downloaded
Size (bytes):	4249
Entropy (8bit):	5.242820679038457
Encrypted:	false
SSDEEP:	96:a6z95q7wimgV1H1BSaQg77uSy7hG1UrpsUtKkmxMtP7iCs5wqrtgfP7cujy/L4:a6x5Tg/C1cuS3W6kKpMtPeCPqrSfnjyk
MD5:	BCDA778B736C3A054AF62F437B536E78
SHA1:	08E2CDBD2D1CA160834B205D6748DC2CAB5FDD99
SHA-256:	892E2F5E07FEF6DE0428E4DCB284201B3D110C0A6F2D8EF899CD2CD2C61EB546
SHA-512:	A0D6449A03045E723D2F668898541625E36D7394E30327F5E89E1F0640F97A1A0268F500D89E804CD8DC8FBF395DBDFA71B429E89E737E3C2DAC7A2C196EA3A7
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/nel/js/tdv2-wafer-utils.customErrorHandler.bcda778b736c3a054af62f437b536e78.js
Preview:	"use strict";function _typeof(e){return _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},_typeof(e)}!function(){var e,n,t,o,r=window,a=r.onerror,i=["apptype","rid","bucketId","bucket","device","osName","browserName","browserVersion"],c=/^resource:\/\//,s=/ActionScript\|Decompress\sfail/,f={beaconPath:"p.gif",site:"fp"},d=0,w=function(){var e=r.navigator&&(navigator.connection\|\|navigator.mozConnection\|\|navigator.webkitConnection)\|\|{};return{downlink:e.downlink\|\|"",downlinkMax:e.downlinkMax\|\|"",effectiveType:e.effectiveType\|\|"",rtt:e.rtt\|\|"",saveData:e.saveData\|\|"",type:e.type\|\|""}},u=function(){var e=r.YAHOO&&r.YAHOO.context\|\|r.Af&&r.Af.context\|\|{},n="";return i.forEach((function(t){"undefined"!==_typeof(e[t])&&(n+="&".concat(encodeURIComponent(t),"=").concat(encodeURIComponent(e[t])))})),n},g=function(e,n,t,o){if(!(d>3\|\|r.naviga

Chrome Cache Entry: 999

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25683)
Category:	downloaded
Size (bytes):	27483
Entropy (8bit):	5.284515392726493
Encrypted:	false
SSDEEP:	768:IaJXZkPw7/PwL8F8mE3iqoHg/tzCsxoJOfv8wgR+JAZxmSvROpcTVzgIW86ggr85:tNRNHgngQL3863zrFAzb
MD5:	FF35E81C87E54C47BC1A504FC8847CC9
SHA1:	1734640147460A85EE7A361DE5181299D8DB3789
SHA-256:	334104FB4C63C12B1B876D4B65F0DB8FFC18E96353BF257D0D860F14885CF878
SHA-512:	C750F8105D8948B8B8FC13813F62192C8E078352E102F115A86299DC39C3510D467D51141CD64CAB690FE081A50E7BDCECCC6F4AE44A7B5A532EE5B9E4EC09BF
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uc/finance/nimbus/_app/immutable/chunks/entry.CqbZzrN3.js
Preview:	import{n as q,s as lt,K as ft,v as ut,P as dt,a6 as ht,G as pt}from"./scheduler.ErneftFr.js";import{H as ne,S as _e,R as Fe}from"./control.CYgJF_JY.js";new URL("sveltekit-internal://");function gt(e,t){return e==="/"\|\|t==="ignore"?e:t==="never"?e.endsWith("/")?e.slice(0,-1):e:t==="always"&&!e.endsWith("/")?e+"/":e}function mt(e){return e.split("%25").map(decodeURI).join("%25")}function _t(e){for(const t in e)e[t]=decodeURIComponent(e[t]);return e}function ue({href:e}){return e.split("#")[0]}const yt=["href","pathname","search","toString","toJSON"];function wt(e,t,n){const r=new URL(e);Object.defineProperty(r,"searchParams",{value:new Proxy(r.searchParams,{get(a,o){if(o==="get"\|\|o==="getAll"\|\|o==="has")return s=>(n(s),a[o](s));t();const i=Reflect.get(a,o);return typeof i=="function"?i.bind(a):i}}),enumerable:!0,configurable:!0});for(const a of yt)Object.defineProperty(r,a,{get(){return t(),e[a]},enumerable:!0,configurable:!0});return r}const vt="/__data.json",bt=".html__data.json";funct

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 29, 2024 01:41:10.813992023 CET	192.168.2.4	1.1.1.1	0x9359	Standard query (0)	depl.pages.dev	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:10.814138889 CET	192.168.2.4	1.1.1.1	0x582	Standard query (0)	depl.pages.dev	65	IN (0x0001)	false
Mar 29, 2024 01:41:11.523313999 CET	192.168.2.4	1.1.1.1	0x85ff	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:11.523462057 CET	192.168.2.4	1.1.1.1	0x3b5d	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:11.529592991 CET	192.168.2.4	1.1.1.1	0x7038	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:11.529802084 CET	192.168.2.4	1.1.1.1	0x7997	Standard query (0)	google.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:11.622400045 CET	192.168.2.4	1.1.1.1	0x4944	Standard query (0)	geo.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:11.622687101 CET	192.168.2.4	1.1.1.1	0xd823	Standard query (0)	geo.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:11.627454042 CET	192.168.2.4	1.1.1.1	0xa3db	Standard query (0)	geo.query.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:11.627588034 CET	192.168.2.4	1.1.1.1	0x6c20	Standard query (0)	geo.query.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:12.055725098 CET	192.168.2.4	1.1.1.1	0x35fa	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:12.055870056 CET	192.168.2.4	1.1.1.1	0xdae7	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:12.515559912 CET	192.168.2.4	1.1.1.1	0xd362	Standard query (0)	fc.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:12.515688896 CET	192.168.2.4	1.1.1.1	0x573e	Standard query (0)	fc.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:12.571909904 CET	192.168.2.4	1.1.1.1	0x9bd4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:12.572050095 CET	192.168.2.4	1.1.1.1	0x37ad	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:12.685069084 CET	192.168.2.4	1.1.1.1	0x94d9	Standard query (0)	3p-udc.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:12.685250998 CET	192.168.2.4	1.1.1.1	0x12f3	Standard query (0)	3p-udc.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:14.512933969 CET	192.168.2.4	1.1.1.1	0x8b4e	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:14.513531923 CET	192.168.2.4	1.1.1.1	0xbfc6	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:23.785729885 CET	192.168.2.4	1.1.1.1	0x8186	Standard query (0)	www.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:23.786976099 CET	192.168.2.4	1.1.1.1	0xeba	Standard query (0)	www.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:23.864356995 CET	192.168.2.4	1.1.1.1	0x1972	Standard query (0)	3p-geo.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:23.864701033 CET	192.168.2.4	1.1.1.1	0xb1dd	Standard query (0)	3p-geo.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:24.456825972 CET	192.168.2.4	1.1.1.1	0xf475	Standard query (0)	geo.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:24.457407951 CET	192.168.2.4	1.1.1.1	0xb468	Standard query (0)	geo.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:24.458535910 CET	192.168.2.4	1.1.1.1	0x5490	Standard query (0)	geo.query.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:24.459039927 CET	192.168.2.4	1.1.1.1	0x28ca	Standard query (0)	geo.query.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:24.459876060 CET	192.168.2.4	1.1.1.1	0xd851	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:24.460267067 CET	192.168.2.4	1.1.1.1	0x406e	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:24.556663990 CET	192.168.2.4	1.1.1.1	0x5aa5	Standard query (0)	search.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:24.556955099 CET	192.168.2.4	1.1.1.1	0xc8a	Standard query (0)	search.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:25.229365110 CET	192.168.2.4	1.1.1.1	0x9e87	Standard query (0)	consent.cmp.oath.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:25.230509996 CET	192.168.2.4	1.1.1.1	0xb237	Standard query (0)	consent.cmp.oath.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:25.776313066 CET	192.168.2.4	1.1.1.1	0x1a	Standard query (0)	edge-mcdn.secure.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:25.776586056 CET	192.168.2.4	1.1.1.1	0x75cb	Standard query (0)	edge-mcdn.secure.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:26.224153042 CET	192.168.2.4	1.1.1.1	0xf0be	Standard query (0)	guce.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:26.224497080 CET	192.168.2.4	1.1.1.1	0xd4a	Standard query (0)	guce.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:28.144747972 CET	192.168.2.4	1.1.1.1	0x9a64	Standard query (0)	guce.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.144897938 CET	192.168.2.4	1.1.1.1	0x3ca5	Standard query (0)	guce.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:28.447416067 CET	192.168.2.4	1.1.1.1	0xdbd1	Standard query (0)	udc.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.447588921 CET	192.168.2.4	1.1.1.1	0x8e00	Standard query (0)	udc.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:28.559075117 CET	192.168.2.4	1.1.1.1	0x80	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.559442043 CET	192.168.2.4	1.1.1.1	0x1039	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:28.560319901 CET	192.168.2.4	1.1.1.1	0x2970	Standard query (0)	opus.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.561245918 CET	192.168.2.4	1.1.1.1	0x10f0	Standard query (0)	opus.analytics.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:29.147254944 CET	192.168.2.4	1.1.1.1	0xfe24	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.147528887 CET	192.168.2.4	1.1.1.1	0x7095	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:29.156250000 CET	192.168.2.4	1.1.1.1	0x6806	Standard query (0)	west-bid-gps.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.156250000 CET	192.168.2.4	1.1.1.1	0x697e	Standard query (0)	west-bid-gps.ybp.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:29.487234116 CET	192.168.2.4	1.1.1.1	0x4c56	Standard query (0)	www.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.487462997 CET	192.168.2.4	1.1.1.1	0xb75	Standard query (0)	www.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:29.547950983 CET	192.168.2.4	1.1.1.1	0x4c77	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:29.547950983 CET	192.168.2.4	1.1.1.1	0x8bac	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.548698902 CET	192.168.2.4	1.1.1.1	0x5a6b	Standard query (0)	prebid.media.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.548698902 CET	192.168.2.4	1.1.1.1	0xc283	Standard query (0)	prebid.media.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:29.550698042 CET	192.168.2.4	1.1.1.1	0x80b0	Standard query (0)	c2shb-oao.ssp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.550921917 CET	192.168.2.4	1.1.1.1	0x3c73	Standard query (0)	c2shb-oao.ssp.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:29.551392078 CET	192.168.2.4	1.1.1.1	0xad68	Standard query (0)	m.hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.551589966 CET	192.168.2.4	1.1.1.1	0x4e94	Standard query (0)	m.hb.yahoo.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:29.646775961 CET	192.168.2.4	1.1.1.1	0x1d0	Standard query (0)	rtb-cache.hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.646775961 CET	192.168.2.4	1.1.1.1	0xbfa2	Standard query (0)	rtb-cache.hb.yahoo.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:29.679630041 CET	192.168.2.4	1.1.1.1	0xf1e6	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:29.679630041 CET	192.168.2.4	1.1.1.1	0xeb6e	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.081664085 CET	192.168.2.4	1.1.1.1	0x1855	Standard query (0)	pa.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.081806898 CET	192.168.2.4	1.1.1.1	0x2a83	Standard query (0)	pa.ybp.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:30.331756115 CET	192.168.2.4	1.1.1.1	0x221b	Standard query (0)	idx.liadm.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.332320929 CET	192.168.2.4	1.1.1.1	0x4d70	Standard query (0)	idx.liadm.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:30.349806070 CET	192.168.2.4	1.1.1.1	0xad45	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.349988937 CET	192.168.2.4	1.1.1.1	0x333c	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:30.834222078 CET	192.168.2.4	1.1.1.1	0x4cb7	Standard query (0)	rp.liadm.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.834382057 CET	192.168.2.4	1.1.1.1	0x1995	Standard query (0)	rp.liadm.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:30.848401070 CET	192.168.2.4	1.1.1.1	0x2b1e	Standard query (0)	idx.liadm.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.848601103 CET	192.168.2.4	1.1.1.1	0x23ea	Standard query (0)	idx.liadm.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:31.003221035 CET	192.168.2.4	1.1.1.1	0x70f2	Standard query (0)	api.taboola.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:31.003561020 CET	192.168.2.4	1.1.1.1	0x26e8	Standard query (0)	api.taboola.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:31.368897915 CET	192.168.2.4	1.1.1.1	0x544b	Standard query (0)	edge-mcdn.secure.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:31.369074106 CET	192.168.2.4	1.1.1.1	0xec61	Standard query (0)	edge-mcdn.secure.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:31.516158104 CET	192.168.2.4	1.1.1.1	0x1ef3	Standard query (0)	tsdtocl.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:31.516304970 CET	192.168.2.4	1.1.1.1	0xde1d	Standard query (0)	tsdtocl.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:31.531450987 CET	192.168.2.4	1.1.1.1	0x51c9	Standard query (0)	api.taboola.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:31.531624079 CET	192.168.2.4	1.1.1.1	0xd03c	Standard query (0)	api.taboola.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:31.995454073 CET	192.168.2.4	1.1.1.1	0x67b9	Standard query (0)	display.bidder.taboola.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:31.995954037 CET	192.168.2.4	1.1.1.1	0x3b47	Standard query (0)	display.bidder.taboola.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:32.002469063 CET	192.168.2.4	1.1.1.1	0x7f11	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.002882004 CET	192.168.2.4	1.1.1.1	0x151d	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:32.025114059 CET	192.168.2.4	1.1.1.1	0x55b3	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.025283098 CET	192.168.2.4	1.1.1.1	0x149	Standard query (0)	cdn.taboola.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:32.025892973 CET	192.168.2.4	1.1.1.1	0x4995	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.026068926 CET	192.168.2.4	1.1.1.1	0x8e83	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:32.036175966 CET	192.168.2.4	1.1.1.1	0xf0e1	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.036621094 CET	192.168.2.4	1.1.1.1	0xd7b8	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:32.213243008 CET	192.168.2.4	1.1.1.1	0x9fb0	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.213361025 CET	192.168.2.4	1.1.1.1	0x3ca9	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:32.213761091 CET	192.168.2.4	1.1.1.1	0xaa94	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.213916063 CET	192.168.2.4	1.1.1.1	0x4bcd	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:32.214843035 CET	192.168.2.4	1.1.1.1	0x9c00	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.214993000 CET	192.168.2.4	1.1.1.1	0x8f39	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:32.317037106 CET	192.168.2.4	1.1.1.1	0x30fa	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.317173004 CET	192.168.2.4	1.1.1.1	0x3918	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:32.534183025 CET	192.168.2.4	1.1.1.1	0xef45	Standard query (0)	rp.liadm.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.534332991 CET	192.168.2.4	1.1.1.1	0xac2a	Standard query (0)	rp.liadm.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:32.803356886 CET	192.168.2.4	1.1.1.1	0x281e	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.803741932 CET	192.168.2.4	1.1.1.1	0x903d	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:32.825737000 CET	192.168.2.4	1.1.1.1	0x9db9	Standard query (0)	m.hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.826113939 CET	192.168.2.4	1.1.1.1	0x4953	Standard query (0)	m.hb.yahoo.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:32.921892881 CET	192.168.2.4	1.1.1.1	0xfc9f	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.922138929 CET	192.168.2.4	1.1.1.1	0x8269	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:32.944891930 CET	192.168.2.4	1.1.1.1	0xc66c	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.945349932 CET	192.168.2.4	1.1.1.1	0x1240	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:33.024797916 CET	192.168.2.4	1.1.1.1	0xdb15	Standard query (0)	i.clean.gg	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.024995089 CET	192.168.2.4	1.1.1.1	0x222c	Standard query (0)	i.clean.gg	65	IN (0x0001)	false
Mar 29, 2024 01:41:33.029400110 CET	192.168.2.4	1.1.1.1	0xdb03	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.029532909 CET	192.168.2.4	1.1.1.1	0x6397	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:33.072736025 CET	192.168.2.4	1.1.1.1	0x77df	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.072892904 CET	192.168.2.4	1.1.1.1	0xc696	Standard query (0)	js-sec.indexww.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:33.095524073 CET	192.168.2.4	1.1.1.1	0x6895	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.095664978 CET	192.168.2.4	1.1.1.1	0xc781	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:33.099503994 CET	192.168.2.4	1.1.1.1	0xcbc7	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.099739075 CET	192.168.2.4	1.1.1.1	0x8771	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:33.123096943 CET	192.168.2.4	1.1.1.1	0xff8c	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.123243093 CET	192.168.2.4	1.1.1.1	0xe090	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:33.390744925 CET	192.168.2.4	1.1.1.1	0x6c3c	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.390896082 CET	192.168.2.4	1.1.1.1	0x294	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:33.541587114 CET	192.168.2.4	1.1.1.1	0x58dc	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.541728020 CET	192.168.2.4	1.1.1.1	0xbc4c	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:33.549844027 CET	192.168.2.4	1.1.1.1	0x7ff8	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.549988985 CET	192.168.2.4	1.1.1.1	0xd813	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:33.864331007 CET	192.168.2.4	1.1.1.1	0xa858	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.864474058 CET	192.168.2.4	1.1.1.1	0x23fb	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:33.929640055 CET	192.168.2.4	1.1.1.1	0xe751	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.929920912 CET	192.168.2.4	1.1.1.1	0x1687	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:33.957096100 CET	192.168.2.4	1.1.1.1	0xecde	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.957218885 CET	192.168.2.4	1.1.1.1	0x913c	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.079077005 CET	192.168.2.4	1.1.1.1	0xfebf	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.079319954 CET	192.168.2.4	1.1.1.1	0x4085	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.080353022 CET	192.168.2.4	1.1.1.1	0x118d	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.080605030 CET	192.168.2.4	1.1.1.1	0x1d45	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.081005096 CET	192.168.2.4	1.1.1.1	0x8496	Standard query (0)	us01.z.antigena.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.081141949 CET	192.168.2.4	1.1.1.1	0x33d4	Standard query (0)	us01.z.antigena.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.081449986 CET	192.168.2.4	1.1.1.1	0x1e3c	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.081654072 CET	192.168.2.4	1.1.1.1	0x5a85	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.084091902 CET	192.168.2.4	1.1.1.1	0x1494	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.084309101 CET	192.168.2.4	1.1.1.1	0x291b	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.084928989 CET	192.168.2.4	1.1.1.1	0x4dd5	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.085057020 CET	192.168.2.4	1.1.1.1	0x1982	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.085387945 CET	192.168.2.4	1.1.1.1	0xb67d	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.085505009 CET	192.168.2.4	1.1.1.1	0xcc80	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.086795092 CET	192.168.2.4	1.1.1.1	0xde2a	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.086978912 CET	192.168.2.4	1.1.1.1	0xcecd	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.142746925 CET	192.168.2.4	1.1.1.1	0x508c	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.142885923 CET	192.168.2.4	1.1.1.1	0xcc13	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.155502081 CET	192.168.2.4	1.1.1.1	0xb6f3	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.155631065 CET	192.168.2.4	1.1.1.1	0x7188	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.268162012 CET	192.168.2.4	1.1.1.1	0x272c	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.268306971 CET	192.168.2.4	1.1.1.1	0xf95a	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.269540071 CET	192.168.2.4	1.1.1.1	0xc950	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.269675016 CET	192.168.2.4	1.1.1.1	0x242c	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.271047115 CET	192.168.2.4	1.1.1.1	0x7553	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.271261930 CET	192.168.2.4	1.1.1.1	0x3c39	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.272670984 CET	192.168.2.4	1.1.1.1	0x4689	Standard query (0)	visitor.omnitagjs.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.272800922 CET	192.168.2.4	1.1.1.1	0x2203	Standard query (0)	visitor.omnitagjs.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.274100065 CET	192.168.2.4	1.1.1.1	0xa4f	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.274359941 CET	192.168.2.4	1.1.1.1	0x3033	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.276294947 CET	192.168.2.4	1.1.1.1	0x11e6	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.276424885 CET	192.168.2.4	1.1.1.1	0xf7fd	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.279359102 CET	192.168.2.4	1.1.1.1	0x91da	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.279494047 CET	192.168.2.4	1.1.1.1	0x98b7	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.411129951 CET	192.168.2.4	1.1.1.1	0x8c25	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.411268950 CET	192.168.2.4	1.1.1.1	0x3bb1	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.414480925 CET	192.168.2.4	1.1.1.1	0x83da	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.414623022 CET	192.168.2.4	1.1.1.1	0xe364	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.452528000 CET	192.168.2.4	1.1.1.1	0x5f13	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.452663898 CET	192.168.2.4	1.1.1.1	0x9182	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.454219103 CET	192.168.2.4	1.1.1.1	0xa0f6	Standard query (0)	i.clean.gg	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.454396009 CET	192.168.2.4	1.1.1.1	0x46a6	Standard query (0)	i.clean.gg	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.457870007 CET	192.168.2.4	1.1.1.1	0x2392	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.458024025 CET	192.168.2.4	1.1.1.1	0xfe3	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.676351070 CET	192.168.2.4	1.1.1.1	0x76e5	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.676474094 CET	192.168.2.4	1.1.1.1	0xb2e6	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.900801897 CET	192.168.2.4	1.1.1.1	0x38bd	Standard query (0)	noa.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.901070118 CET	192.168.2.4	1.1.1.1	0xb5c9	Standard query (0)	noa.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.925077915 CET	192.168.2.4	1.1.1.1	0xbff6	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.925208092 CET	192.168.2.4	1.1.1.1	0x6bfd	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:34.968347073 CET	192.168.2.4	1.1.1.1	0xbab9	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.968481064 CET	192.168.2.4	1.1.1.1	0x1e76	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:35.716741085 CET	192.168.2.4	1.1.1.1	0x4a06	Standard query (0)	lg1.hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.717075109 CET	192.168.2.4	1.1.1.1	0xc41	Standard query (0)	lg1.hb.yahoo.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:35.794466019 CET	192.168.2.4	1.1.1.1	0x6f5d	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.794612885 CET	192.168.2.4	1.1.1.1	0x3bc3	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:36.041609049 CET	192.168.2.4	1.1.1.1	0xf713	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:36.041754961 CET	192.168.2.4	1.1.1.1	0xeef2	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:36.049571991 CET	192.168.2.4	1.1.1.1	0x2170	Standard query (0)	a5589.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:36.049866915 CET	192.168.2.4	1.1.1.1	0x756a	Standard query (0)	a5589.casalemedia.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:36.157114029 CET	192.168.2.4	1.1.1.1	0x76	Standard query (0)	lg1.hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:36.157272100 CET	192.168.2.4	1.1.1.1	0xbe04	Standard query (0)	lg1.hb.yahoo.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:36.159571886 CET	192.168.2.4	1.1.1.1	0x2d2f	Standard query (0)	prebid-ny.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:36.159692049 CET	192.168.2.4	1.1.1.1	0xa490	Standard query (0)	prebid-ny.casalemedia.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:36.200845957 CET	192.168.2.4	1.1.1.1	0x230b	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:36.201085091 CET	192.168.2.4	1.1.1.1	0x3f30	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:36.821201086 CET	192.168.2.4	1.1.1.1	0xc5f3	Standard query (0)	cs.lkqd.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:36.821342945 CET	192.168.2.4	1.1.1.1	0x845	Standard query (0)	cs.lkqd.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:36.910310984 CET	192.168.2.4	1.1.1.1	0x6ec3	Standard query (0)	a3558.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:36.910442114 CET	192.168.2.4	1.1.1.1	0xe30f	Standard query (0)	a3558.casalemedia.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:36.911218882 CET	192.168.2.4	1.1.1.1	0x48d7	Standard query (0)	bid.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:36.911336899 CET	192.168.2.4	1.1.1.1	0xfca8	Standard query (0)	bid.g.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:36.988945961 CET	192.168.2.4	1.1.1.1	0x1d88	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:36.989085913 CET	192.168.2.4	1.1.1.1	0x4a04	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.298497915 CET	192.168.2.4	1.1.1.1	0xb0e3	Standard query (0)	mid.rkdms.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.298625946 CET	192.168.2.4	1.1.1.1	0x6f44	Standard query (0)	mid.rkdms.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.302839994 CET	192.168.2.4	1.1.1.1	0xc290	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.303082943 CET	192.168.2.4	1.1.1.1	0xba58	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.314445019 CET	192.168.2.4	1.1.1.1	0xda6	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.314661980 CET	192.168.2.4	1.1.1.1	0xf166	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.315004110 CET	192.168.2.4	1.1.1.1	0xd1e0	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.315133095 CET	192.168.2.4	1.1.1.1	0xa2c2	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.316215992 CET	192.168.2.4	1.1.1.1	0xd15e	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.316346884 CET	192.168.2.4	1.1.1.1	0xdf54	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.316704988 CET	192.168.2.4	1.1.1.1	0x44d9	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.316926003 CET	192.168.2.4	1.1.1.1	0x73d0	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.404943943 CET	192.168.2.4	1.1.1.1	0x2fb2	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.405091047 CET	192.168.2.4	1.1.1.1	0x2e3	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.426935911 CET	192.168.2.4	1.1.1.1	0x6a9e	Standard query (0)	odr.mookie1.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.427067995 CET	192.168.2.4	1.1.1.1	0x13bc	Standard query (0)	odr.mookie1.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.854207993 CET	192.168.2.4	1.1.1.1	0x3a81	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.854480982 CET	192.168.2.4	1.1.1.1	0x41f3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.899012089 CET	192.168.2.4	1.1.1.1	0x307c	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.899167061 CET	192.168.2.4	1.1.1.1	0x5c12	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.903142929 CET	192.168.2.4	1.1.1.1	0xd457	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.903279066 CET	192.168.2.4	1.1.1.1	0x7ac2	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.904221058 CET	192.168.2.4	1.1.1.1	0xe030	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.904479980 CET	192.168.2.4	1.1.1.1	0x598d	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.906279087 CET	192.168.2.4	1.1.1.1	0x893e	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.906428099 CET	192.168.2.4	1.1.1.1	0x3cb	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.917588949 CET	192.168.2.4	1.1.1.1	0x4d85	Standard query (0)	a5589.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.917907953 CET	192.168.2.4	1.1.1.1	0x74d9	Standard query (0)	a5589.casalemedia.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.919562101 CET	192.168.2.4	1.1.1.1	0xaedc	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.919703007 CET	192.168.2.4	1.1.1.1	0xbc2c	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.925313950 CET	192.168.2.4	1.1.1.1	0xa80d	Standard query (0)	lg1.hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.925493002 CET	192.168.2.4	1.1.1.1	0xd79c	Standard query (0)	lg1.hb.yahoo.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.928452015 CET	192.168.2.4	1.1.1.1	0xa5f7	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.928648949 CET	192.168.2.4	1.1.1.1	0x7caa	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.944137096 CET	192.168.2.4	1.1.1.1	0xde26	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.944374084 CET	192.168.2.4	1.1.1.1	0xadbb	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.945533991 CET	192.168.2.4	1.1.1.1	0x1d4d	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.945771933 CET	192.168.2.4	1.1.1.1	0xe444	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.946954966 CET	192.168.2.4	1.1.1.1	0xdf57	Standard query (0)	a3558.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.947242975 CET	192.168.2.4	1.1.1.1	0xae83	Standard query (0)	a3558.casalemedia.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.956248999 CET	192.168.2.4	1.1.1.1	0xe05e	Standard query (0)	cs.lkqd.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.956469059 CET	192.168.2.4	1.1.1.1	0x5cc5	Standard query (0)	cs.lkqd.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.957087040 CET	192.168.2.4	1.1.1.1	0xd447	Standard query (0)	bid.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.957231998 CET	192.168.2.4	1.1.1.1	0x19d6	Standard query (0)	bid.g.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.960695982 CET	192.168.2.4	1.1.1.1	0x7080	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.960832119 CET	192.168.2.4	1.1.1.1	0x1c7f	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:37.961921930 CET	192.168.2.4	1.1.1.1	0x39ae	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.962104082 CET	192.168.2.4	1.1.1.1	0x6b33	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.002877951 CET	192.168.2.4	1.1.1.1	0x5377	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.002990007 CET	192.168.2.4	1.1.1.1	0xc05d	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.055921078 CET	192.168.2.4	1.1.1.1	0x48ef	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.056056976 CET	192.168.2.4	1.1.1.1	0xd03b	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.056472063 CET	192.168.2.4	1.1.1.1	0xa6ea	Standard query (0)	cdn.doubleverify.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.056624889 CET	192.168.2.4	1.1.1.1	0x1e0e	Standard query (0)	cdn.doubleverify.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.058233976 CET	192.168.2.4	1.1.1.1	0x9fa5	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.058403969 CET	192.168.2.4	1.1.1.1	0xa0c3	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.141590118 CET	192.168.2.4	1.1.1.1	0xb137	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.142082930 CET	192.168.2.4	1.1.1.1	0x6c8b	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.142398119 CET	192.168.2.4	1.1.1.1	0x8263	Standard query (0)	c.evidon.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.142518997 CET	192.168.2.4	1.1.1.1	0x4100	Standard query (0)	c.evidon.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.143043995 CET	192.168.2.4	1.1.1.1	0x66f6	Standard query (0)	ford.demdex.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.143207073 CET	192.168.2.4	1.1.1.1	0x297a	Standard query (0)	ford.demdex.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.178554058 CET	192.168.2.4	1.1.1.1	0xf607	Standard query (0)	cm.adgrx.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.178720951 CET	192.168.2.4	1.1.1.1	0xbe7a	Standard query (0)	cm.adgrx.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.193254948 CET	192.168.2.4	1.1.1.1	0x96ce	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.193378925 CET	192.168.2.4	1.1.1.1	0xb60f	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.508075953 CET	192.168.2.4	1.1.1.1	0x5f56	Standard query (0)	sync.technoratimedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.508272886 CET	192.168.2.4	1.1.1.1	0x2f53	Standard query (0)	sync.technoratimedia.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.515233040 CET	192.168.2.4	1.1.1.1	0x3537	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.515393019 CET	192.168.2.4	1.1.1.1	0xe659	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.516519070 CET	192.168.2.4	1.1.1.1	0x5836	Standard query (0)	beacon.lynx.cognitivlabs.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.516647100 CET	192.168.2.4	1.1.1.1	0x8ba6	Standard query (0)	beacon.lynx.cognitivlabs.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.517004967 CET	192.168.2.4	1.1.1.1	0x8325	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.517112017 CET	192.168.2.4	1.1.1.1	0x7f09	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.550602913 CET	192.168.2.4	1.1.1.1	0x6877	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.550769091 CET	192.168.2.4	1.1.1.1	0x8978	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.582849026 CET	192.168.2.4	1.1.1.1	0x5ba	Standard query (0)	ssp-sync.criteo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.582983971 CET	192.168.2.4	1.1.1.1	0x8025	Standard query (0)	ssp-sync.criteo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.678909063 CET	192.168.2.4	1.1.1.1	0x7bab	Standard query (0)	aol-match.dotomi.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.679059982 CET	192.168.2.4	1.1.1.1	0xcd3c	Standard query (0)	aol-match.dotomi.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.755918026 CET	192.168.2.4	1.1.1.1	0x4c2f	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.756050110 CET	192.168.2.4	1.1.1.1	0x8e64	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.988187075 CET	192.168.2.4	1.1.1.1	0x79d7	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.988507032 CET	192.168.2.4	1.1.1.1	0xa285	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.989002943 CET	192.168.2.4	1.1.1.1	0x2822	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.989111900 CET	192.168.2.4	1.1.1.1	0xdae7	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.989551067 CET	192.168.2.4	1.1.1.1	0x14bb	Standard query (0)	casale-match.dotomi.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.989655018 CET	192.168.2.4	1.1.1.1	0x9187	Standard query (0)	casale-match.dotomi.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.991081953 CET	192.168.2.4	1.1.1.1	0x5ea0	Standard query (0)	dmp.brand-display.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.991205931 CET	192.168.2.4	1.1.1.1	0x4e83	Standard query (0)	dmp.brand-display.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:38.995150089 CET	192.168.2.4	1.1.1.1	0xf411	Standard query (0)	cm.ctnsnet.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.995541096 CET	192.168.2.4	1.1.1.1	0xf56a	Standard query (0)	cm.ctnsnet.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:39.481092930 CET	192.168.2.4	1.1.1.1	0x6663	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.481209993 CET	192.168.2.4	1.1.1.1	0x1ebd	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:39.571922064 CET	192.168.2.4	1.1.1.1	0x3fcc	Standard query (0)	c.betrad.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.572076082 CET	192.168.2.4	1.1.1.1	0x5d17	Standard query (0)	c.betrad.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:39.582453966 CET	192.168.2.4	1.1.1.1	0xde90	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.582587957 CET	192.168.2.4	1.1.1.1	0x2393	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:39.656727076 CET	192.168.2.4	1.1.1.1	0xf703	Standard query (0)	pool.admedo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.656864882 CET	192.168.2.4	1.1.1.1	0x2388	Standard query (0)	pool.admedo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:39.942477942 CET	192.168.2.4	1.1.1.1	0x1492	Standard query (0)	rtb0.doubleverify.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.942616940 CET	192.168.2.4	1.1.1.1	0x71ee	Standard query (0)	rtb0.doubleverify.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:39.949361086 CET	192.168.2.4	1.1.1.1	0x5219	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.950004101 CET	192.168.2.4	1.1.1.1	0x23cd	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Mar 29, 2024 01:41:39.950562954 CET	192.168.2.4	1.1.1.1	0x8fce	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.950714111 CET	192.168.2.4	1.1.1.1	0x9dae	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:39.951101065 CET	192.168.2.4	1.1.1.1	0xbc2f	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.951282978 CET	192.168.2.4	1.1.1.1	0x2090	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:40.176723003 CET	192.168.2.4	1.1.1.1	0xea5c	Standard query (0)	i.ctnsnet.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.176862001 CET	192.168.2.4	1.1.1.1	0x595a	Standard query (0)	i.ctnsnet.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:40.187036037 CET	192.168.2.4	1.1.1.1	0xbbf9	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.187241077 CET	192.168.2.4	1.1.1.1	0x5810	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:40.189110994 CET	192.168.2.4	1.1.1.1	0x23af	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.189249992 CET	192.168.2.4	1.1.1.1	0xde03	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:40.189477921 CET	192.168.2.4	1.1.1.1	0x6642	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.189595938 CET	192.168.2.4	1.1.1.1	0x21cf	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:40.244227886 CET	192.168.2.4	1.1.1.1	0xad3e	Standard query (0)	ums.acuityplatform.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.244354963 CET	192.168.2.4	1.1.1.1	0x9a86	Standard query (0)	ums.acuityplatform.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:40.337409019 CET	192.168.2.4	1.1.1.1	0x168	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.337563992 CET	192.168.2.4	1.1.1.1	0x74bf	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:40.489197969 CET	192.168.2.4	1.1.1.1	0x3eb6	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.489325047 CET	192.168.2.4	1.1.1.1	0xe17f	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
Mar 29, 2024 01:41:40.583215952 CET	192.168.2.4	1.1.1.1	0x668	Standard query (0)	gocm.c.appier.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.583347082 CET	192.168.2.4	1.1.1.1	0x3df3	Standard query (0)	gocm.c.appier.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:40.659300089 CET	192.168.2.4	1.1.1.1	0x293f	Standard query (0)	tps.doubleverify.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.659446955 CET	192.168.2.4	1.1.1.1	0xb9b	Standard query (0)	tps.doubleverify.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:40.660286903 CET	192.168.2.4	1.1.1.1	0x20b	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.660664082 CET	192.168.2.4	1.1.1.1	0x67d2	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:40.735519886 CET	192.168.2.4	1.1.1.1	0x6aa4	Standard query (0)	ipac.ctnsnet.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.735652924 CET	192.168.2.4	1.1.1.1	0x71f3	Standard query (0)	ipac.ctnsnet.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:40.874660015 CET	192.168.2.4	1.1.1.1	0x71dc	Standard query (0)	px.owneriq.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.874803066 CET	192.168.2.4	1.1.1.1	0x8d50	Standard query (0)	px.owneriq.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:41.023572922 CET	192.168.2.4	1.1.1.1	0xe17f	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.023718119 CET	192.168.2.4	1.1.1.1	0x68bc	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:41.065669060 CET	192.168.2.4	1.1.1.1	0x87de	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.065784931 CET	192.168.2.4	1.1.1.1	0x9f0b	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:41.068785906 CET	192.168.2.4	1.1.1.1	0xe076	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.068909883 CET	192.168.2.4	1.1.1.1	0xfdfb	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:41.069251060 CET	192.168.2.4	1.1.1.1	0x93f1	Standard query (0)	sync.bfmio.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.069485903 CET	192.168.2.4	1.1.1.1	0xb17f	Standard query (0)	sync.bfmio.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:41.069839001 CET	192.168.2.4	1.1.1.1	0xc160	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.070000887 CET	192.168.2.4	1.1.1.1	0xe8a4	Standard query (0)	pubmatic-match.dotomi.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:41.070658922 CET	192.168.2.4	1.1.1.1	0xf6a3	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.070772886 CET	192.168.2.4	1.1.1.1	0x95e	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:41.071120977 CET	192.168.2.4	1.1.1.1	0x6c86	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.071240902 CET	192.168.2.4	1.1.1.1	0x5cc3	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:41.071885109 CET	192.168.2.4	1.1.1.1	0x7b9d	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.072000027 CET	192.168.2.4	1.1.1.1	0x3088	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:41.490504026 CET	192.168.2.4	1.1.1.1	0x2877	Standard query (0)	dsum.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.490613937 CET	192.168.2.4	1.1.1.1	0xf808	Standard query (0)	dsum.casalemedia.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:41.492191076 CET	192.168.2.4	1.1.1.1	0x996a	Standard query (0)	d.turn.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.492304087 CET	192.168.2.4	1.1.1.1	0x8dbb	Standard query (0)	d.turn.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:42.379947901 CET	192.168.2.4	1.1.1.1	0xba44	Standard query (0)	ad.mrtnsvr.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.380108118 CET	192.168.2.4	1.1.1.1	0x851f	Standard query (0)	ad.mrtnsvr.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:42.551254034 CET	192.168.2.4	1.1.1.1	0x66b4	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.551378012 CET	192.168.2.4	1.1.1.1	0x3f46	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:42.570612907 CET	192.168.2.4	1.1.1.1	0x715f	Standard query (0)	t.adx.opera.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.570743084 CET	192.168.2.4	1.1.1.1	0x4152	Standard query (0)	t.adx.opera.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:42.699706078 CET	192.168.2.4	1.1.1.1	0x7df7	Standard query (0)	core.iprom.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.700005054 CET	192.168.2.4	1.1.1.1	0xdce2	Standard query (0)	core.iprom.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:42.833132982 CET	192.168.2.4	1.1.1.1	0x4e40	Standard query (0)	matching.truffle.bid	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.833265066 CET	192.168.2.4	1.1.1.1	0xc28e	Standard query (0)	matching.truffle.bid	65	IN (0x0001)	false
Mar 29, 2024 01:41:42.852977991 CET	192.168.2.4	1.1.1.1	0xf3f4	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.853111982 CET	192.168.2.4	1.1.1.1	0xeb0a	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:42.853604078 CET	192.168.2.4	1.1.1.1	0xcb3	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.853754997 CET	192.168.2.4	1.1.1.1	0xd0c	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:42.854985952 CET	192.168.2.4	1.1.1.1	0x9e28	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.855120897 CET	192.168.2.4	1.1.1.1	0xfc48	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:42.890382051 CET	192.168.2.4	1.1.1.1	0xe74f	Standard query (0)	tpsc-ue1.doubleverify.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.890517950 CET	192.168.2.4	1.1.1.1	0xf0b0	Standard query (0)	tpsc-ue1.doubleverify.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:42.972394943 CET	192.168.2.4	1.1.1.1	0x22e4	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.972651958 CET	192.168.2.4	1.1.1.1	0x6df6	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:43.063513041 CET	192.168.2.4	1.1.1.1	0xda24	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:43.063653946 CET	192.168.2.4	1.1.1.1	0x2807	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:43.307988882 CET	192.168.2.4	1.1.1.1	0xae65	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:43.308142900 CET	192.168.2.4	1.1.1.1	0x47f	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:43.642911911 CET	192.168.2.4	1.1.1.1	0x9770	Standard query (0)	rtbc-ue1.doubleverify.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:43.643187046 CET	192.168.2.4	1.1.1.1	0x9c19	Standard query (0)	rtbc-ue1.doubleverify.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:43.799496889 CET	192.168.2.4	1.1.1.1	0x2388	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:43.799643040 CET	192.168.2.4	1.1.1.1	0xe5ca	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.103291988 CET	192.168.2.4	1.1.1.1	0xb03	Standard query (0)	odr.mookie1.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.103425026 CET	192.168.2.4	1.1.1.1	0xd1a2	Standard query (0)	odr.mookie1.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.106949091 CET	192.168.2.4	1.1.1.1	0x8e78	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.107086897 CET	192.168.2.4	1.1.1.1	0x4728	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.115403891 CET	192.168.2.4	1.1.1.1	0x63e3	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.115607977 CET	192.168.2.4	1.1.1.1	0x462e	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.251297951 CET	192.168.2.4	1.1.1.1	0x12f7	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.251427889 CET	192.168.2.4	1.1.1.1	0x5767	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.254489899 CET	192.168.2.4	1.1.1.1	0xbab8	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.254745960 CET	192.168.2.4	1.1.1.1	0x26d1	Standard query (0)	pippio.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.281122923 CET	192.168.2.4	1.1.1.1	0x91ea	Standard query (0)	l.evidon.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.281258106 CET	192.168.2.4	1.1.1.1	0xba96	Standard query (0)	l.evidon.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.415477991 CET	192.168.2.4	1.1.1.1	0x6773	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.415615082 CET	192.168.2.4	1.1.1.1	0x2c7b	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.495338917 CET	192.168.2.4	1.1.1.1	0x8bf4	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.495651007 CET	192.168.2.4	1.1.1.1	0xa6b1	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.496175051 CET	192.168.2.4	1.1.1.1	0x716c	Standard query (0)	ford.demdex.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.496392012 CET	192.168.2.4	1.1.1.1	0xc5c4	Standard query (0)	ford.demdex.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.507709026 CET	192.168.2.4	1.1.1.1	0x1b82	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.507848024 CET	192.168.2.4	1.1.1.1	0x8919	Standard query (0)	js-sec.indexww.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.509109020 CET	192.168.2.4	1.1.1.1	0x7971	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.509322882 CET	192.168.2.4	1.1.1.1	0xf926	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.515045881 CET	192.168.2.4	1.1.1.1	0x1b1	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.515192986 CET	192.168.2.4	1.1.1.1	0x10b	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.532603025 CET	192.168.2.4	1.1.1.1	0xc1b2	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.532799959 CET	192.168.2.4	1.1.1.1	0xb73c	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.533210039 CET	192.168.2.4	1.1.1.1	0xa8d7	Standard query (0)	c.evidon.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.533466101 CET	192.168.2.4	1.1.1.1	0xebc9	Standard query (0)	c.evidon.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.578310966 CET	192.168.2.4	1.1.1.1	0x434d	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.578566074 CET	192.168.2.4	1.1.1.1	0xa109	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.645888090 CET	192.168.2.4	1.1.1.1	0x117c	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.646080017 CET	192.168.2.4	1.1.1.1	0x4196	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.713279963 CET	192.168.2.4	1.1.1.1	0x9b81	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.713421106 CET	192.168.2.4	1.1.1.1	0x8e79	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.751085997 CET	192.168.2.4	1.1.1.1	0x2495	Standard query (0)	dsum.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.751216888 CET	192.168.2.4	1.1.1.1	0xda1b	Standard query (0)	dsum.casalemedia.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.756155968 CET	192.168.2.4	1.1.1.1	0xac4	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.756294012 CET	192.168.2.4	1.1.1.1	0x1b32	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.808149099 CET	192.168.2.4	1.1.1.1	0xd0e0	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.808299065 CET	192.168.2.4	1.1.1.1	0x8239	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.963128090 CET	192.168.2.4	1.1.1.1	0x8135	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.963385105 CET	192.168.2.4	1.1.1.1	0xa5f9	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.967005014 CET	192.168.2.4	1.1.1.1	0x734	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.967190027 CET	192.168.2.4	1.1.1.1	0x1ddc	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:44.976373911 CET	192.168.2.4	1.1.1.1	0x320e	Standard query (0)	r.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.976496935 CET	192.168.2.4	1.1.1.1	0xe0ab	Standard query (0)	r.casalemedia.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:45.105674028 CET	192.168.2.4	1.1.1.1	0xd3b8	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:45.106193066 CET	192.168.2.4	1.1.1.1	0x1a62	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:45.450679064 CET	192.168.2.4	1.1.1.1	0x984	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:45.450814009 CET	192.168.2.4	1.1.1.1	0xc691	Standard query (0)	pippio.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:45.469162941 CET	192.168.2.4	1.1.1.1	0xeb40	Standard query (0)	1f2e7.v.fwmrm.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:45.469316959 CET	192.168.2.4	1.1.1.1	0xbc3e	Standard query (0)	1f2e7.v.fwmrm.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:45.491503954 CET	192.168.2.4	1.1.1.1	0x7e79	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:45.491677999 CET	192.168.2.4	1.1.1.1	0x42d8	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:46.159435034 CET	192.168.2.4	1.1.1.1	0xacfe	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.159565926 CET	192.168.2.4	1.1.1.1	0xf027	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:46.161778927 CET	192.168.2.4	1.1.1.1	0xba57	Standard query (0)	io.narrative.io	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.162004948 CET	192.168.2.4	1.1.1.1	0x6ac	Standard query (0)	io.narrative.io	65	IN (0x0001)	false
Mar 29, 2024 01:41:46.387978077 CET	192.168.2.4	1.1.1.1	0xa3bc	Standard query (0)	p.adsymptotic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.388108015 CET	192.168.2.4	1.1.1.1	0x151	Standard query (0)	p.adsymptotic.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:46.456906080 CET	192.168.2.4	1.1.1.1	0xcf8d	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.457035065 CET	192.168.2.4	1.1.1.1	0xf6f7	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:46.467677116 CET	192.168.2.4	1.1.1.1	0x3362	Standard query (0)	r.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.467809916 CET	192.168.2.4	1.1.1.1	0x2796	Standard query (0)	r.casalemedia.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:46.483935118 CET	192.168.2.4	1.1.1.1	0x14e3	Standard query (0)	p.adsymptotic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.484261990 CET	192.168.2.4	1.1.1.1	0x4819	Standard query (0)	p.adsymptotic.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:46.603435040 CET	192.168.2.4	1.1.1.1	0x912e	Standard query (0)	p.adsymptotic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.771316051 CET	192.168.2.4	1.1.1.1	0x116b	Standard query (0)	help.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.771461964 CET	192.168.2.4	1.1.1.1	0x978f	Standard query (0)	help.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:47.035011053 CET	192.168.2.4	1.1.1.1	0xfc4a	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.035269022 CET	192.168.2.4	1.1.1.1	0x7929	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Mar 29, 2024 01:41:47.158287048 CET	192.168.2.4	1.1.1.1	0x264a	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.158427000 CET	192.168.2.4	1.1.1.1	0x95d1	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:47.273062944 CET	192.168.2.4	1.1.1.1	0xe536	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.273241997 CET	192.168.2.4	1.1.1.1	0x2bd9	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:47.274012089 CET	192.168.2.4	1.1.1.1	0xa50f	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.274149895 CET	192.168.2.4	1.1.1.1	0xbf4e	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:47.704279900 CET	192.168.2.4	1.1.1.1	0x1f76	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.704515934 CET	192.168.2.4	1.1.1.1	0x56e0	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:48.400412083 CET	192.168.2.4	1.1.1.1	0xfa38	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:48.400518894 CET	192.168.2.4	1.1.1.1	0x1e3d	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:48.941544056 CET	192.168.2.4	1.1.1.1	0xd6d6	Standard query (0)	dispatcher.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:48.941695929 CET	192.168.2.4	1.1.1.1	0x1bc6	Standard query (0)	dispatcher.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:48.942199945 CET	192.168.2.4	1.1.1.1	0xeae5	Standard query (0)	dbrd449anfbv4.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:48.942333937 CET	192.168.2.4	1.1.1.1	0xc32c	Standard query (0)	dbrd449anfbv4.cloudfront.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:48.942737103 CET	192.168.2.4	1.1.1.1	0x65c9	Standard query (0)	s.aolcdn.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:48.942888021 CET	192.168.2.4	1.1.1.1	0x6e1d	Standard query (0)	s.aolcdn.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:49.106924057 CET	192.168.2.4	1.1.1.1	0x567d	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.107068062 CET	192.168.2.4	1.1.1.1	0xf56b	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Mar 29, 2024 01:41:49.627949953 CET	192.168.2.4	1.1.1.1	0x1463	Standard query (0)	s.aolcdn.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.628240108 CET	192.168.2.4	1.1.1.1	0xdb6c	Standard query (0)	s.aolcdn.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:49.878084898 CET	192.168.2.4	1.1.1.1	0xcf10	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.878237009 CET	192.168.2.4	1.1.1.1	0x7411	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:50.222456932 CET	192.168.2.4	1.1.1.1	0x7d93	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:50.222600937 CET	192.168.2.4	1.1.1.1	0x7be8	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:50.338381052 CET	192.168.2.4	1.1.1.1	0x22ab	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:50.338473082 CET	192.168.2.4	1.1.1.1	0x77dc	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:50.461796999 CET	192.168.2.4	1.1.1.1	0xe5ed	Standard query (0)	help.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:50.461925983 CET	192.168.2.4	1.1.1.1	0xaf9a	Standard query (0)	help.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:50.662826061 CET	192.168.2.4	1.1.1.1	0x89fe	Standard query (0)	help.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:50.927436113 CET	192.168.2.4	1.1.1.1	0x1b9e	Standard query (0)	oath-us.api.shopinsync.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:50.927494049 CET	192.168.2.4	1.1.1.1	0x579	Standard query (0)	oath-us.api.shopinsync.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:51.311846972 CET	192.168.2.4	1.1.1.1	0xb16c	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.312108994 CET	192.168.2.4	1.1.1.1	0xab28	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:51.378561974 CET	192.168.2.4	1.1.1.1	0x5f93	Standard query (0)	help.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.378688097 CET	192.168.2.4	1.1.1.1	0x1a6b	Standard query (0)	help.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:51.592278957 CET	192.168.2.4	1.1.1.1	0xb3a9	Standard query (0)	help.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.941051006 CET	192.168.2.4	1.1.1.1	0x436d	Standard query (0)	oath-us.api.shopinsync.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.941175938 CET	192.168.2.4	1.1.1.1	0x17b5	Standard query (0)	oath-us.api.shopinsync.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:52.230979919 CET	192.168.2.4	1.1.1.1	0x4ee5	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:52.231098890 CET	192.168.2.4	1.1.1.1	0x5298	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:52.503894091 CET	192.168.2.4	1.1.1.1	0x9dd2	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:52.504057884 CET	192.168.2.4	1.1.1.1	0xda40	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:53.924105883 CET	192.168.2.4	1.1.1.1	0xdc06	Standard query (0)	d2c0xhqyhmtkod.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:53.924420118 CET	192.168.2.4	1.1.1.1	0x1348	Standard query (0)	d2c0xhqyhmtkod.cloudfront.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:54.610469103 CET	192.168.2.4	1.1.1.1	0x3fa3	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:54.610780001 CET	192.168.2.4	1.1.1.1	0x3f60	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:54.763334036 CET	192.168.2.4	1.1.1.1	0x18a1	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:54.763494968 CET	192.168.2.4	1.1.1.1	0x6523	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:54.806488991 CET	192.168.2.4	1.1.1.1	0xc2c6	Standard query (0)	d2c0xhqyhmtkod.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:54.806685925 CET	192.168.2.4	1.1.1.1	0x9f62	Standard query (0)	d2c0xhqyhmtkod.cloudfront.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:55.297821045 CET	192.168.2.4	1.1.1.1	0x1352	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:55.297986984 CET	192.168.2.4	1.1.1.1	0x891f	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:55.416110992 CET	192.168.2.4	1.1.1.1	0x2319	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:55.416239023 CET	192.168.2.4	1.1.1.1	0xbaf	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:55.883050919 CET	192.168.2.4	1.1.1.1	0x609	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:55.883218050 CET	192.168.2.4	1.1.1.1	0x80d1	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Mar 29, 2024 01:41:56.552546024 CET	192.168.2.4	1.1.1.1	0x99b8	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Mar 29, 2024 01:41:56.552546024 CET	192.168.2.4	1.1.1.1	0x97cc	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:59.513438940 CET	192.168.2.4	1.1.1.1	0x9905	Standard query (0)	p.adsymptotic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:03.795757055 CET	192.168.2.4	1.1.1.1	0x1532	Standard query (0)	finance.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:03.795943022 CET	192.168.2.4	1.1.1.1	0x4d49	Standard query (0)	finance.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:06.207995892 CET	192.168.2.4	1.1.1.1	0xaa29	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:06.208442926 CET	192.168.2.4	1.1.1.1	0x5785	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:10.815483093 CET	192.168.2.4	1.1.1.1	0x4e5d	Standard query (0)	l.yimg.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:10.815671921 CET	192.168.2.4	1.1.1.1	0xbd09	Standard query (0)	l.yimg.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:10.816482067 CET	192.168.2.4	1.1.1.1	0xae2a	Standard query (0)	query1.finance.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:10.816637039 CET	192.168.2.4	1.1.1.1	0x676c	Standard query (0)	query1.finance.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:10.817900896 CET	192.168.2.4	1.1.1.1	0x239	Standard query (0)	query2.finance.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:10.817986012 CET	192.168.2.4	1.1.1.1	0x9907	Standard query (0)	query2.finance.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:12.262198925 CET	192.168.2.4	1.1.1.1	0x797b	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:12.262341022 CET	192.168.2.4	1.1.1.1	0xa737	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:13.581403017 CET	192.168.2.4	1.1.1.1	0xa8b	Standard query (0)	c2shb-oao.ssp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:13.581614017 CET	192.168.2.4	1.1.1.1	0xe48	Standard query (0)	c2shb-oao.ssp.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:13.583539009 CET	192.168.2.4	1.1.1.1	0x3da9	Standard query (0)	query1.finance.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:13.583656073 CET	192.168.2.4	1.1.1.1	0x3884	Standard query (0)	query1.finance.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:14.508857012 CET	192.168.2.4	1.1.1.1	0xb64f	Standard query (0)	streamer.finance.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:14.509083986 CET	192.168.2.4	1.1.1.1	0xcc84	Standard query (0)	streamer.finance.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:20.475708008 CET	192.168.2.4	1.1.1.1	0xc1ab	Standard query (0)	p.adsymptotic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:20.912206888 CET	192.168.2.4	1.1.1.1	0x4edb	Standard query (0)	video-api.yql.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:20.912357092 CET	192.168.2.4	1.1.1.1	0xf863	Standard query (0)	video-api.yql.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:20.914488077 CET	192.168.2.4	1.1.1.1	0xc24b	Standard query (0)	bats.video.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:20.914635897 CET	192.168.2.4	1.1.1.1	0x1c1	Standard query (0)	bats.video.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:22.002774954 CET	192.168.2.4	1.1.1.1	0xde21	Standard query (0)	ping.chartbeat.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:22.002923012 CET	192.168.2.4	1.1.1.1	0x8a4c	Standard query (0)	ping.chartbeat.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:24.164931059 CET	192.168.2.4	1.1.1.1	0xb618	Standard query (0)	players.brightcove.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:24.165371895 CET	192.168.2.4	1.1.1.1	0xb41c	Standard query (0)	players.brightcove.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:24.422034025 CET	192.168.2.4	1.1.1.1	0x1017	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:24.422192097 CET	192.168.2.4	1.1.1.1	0x2f7c	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:25.926899910 CET	192.168.2.4	1.1.1.1	0xeb6b	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:25.927042007 CET	192.168.2.4	1.1.1.1	0x9cbc	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:26.151396036 CET	192.168.2.4	1.1.1.1	0x3030	Standard query (0)	geo.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:26.151563883 CET	192.168.2.4	1.1.1.1	0x8cc2	Standard query (0)	geo.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:26.180480003 CET	192.168.2.4	1.1.1.1	0x578a	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:26.180646896 CET	192.168.2.4	1.1.1.1	0x85c9	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:27.304414034 CET	192.168.2.4	1.1.1.1	0xdbe0	Standard query (0)	a1653.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:27.304534912 CET	192.168.2.4	1.1.1.1	0xb88e	Standard query (0)	a1653.casalemedia.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:27.764461994 CET	192.168.2.4	1.1.1.1	0x43b0	Standard query (0)	search.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:27.764601946 CET	192.168.2.4	1.1.1.1	0x87a4	Standard query (0)	search.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:30.802150011 CET	192.168.2.4	1.1.1.1	0xa8bd	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:30.802644014 CET	192.168.2.4	1.1.1.1	0xaee9	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:30.959456921 CET	192.168.2.4	1.1.1.1	0x61ca	Standard query (0)	sports.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:30.959456921 CET	192.168.2.4	1.1.1.1	0x3d68	Standard query (0)	sports.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:31.037461996 CET	192.168.2.4	1.1.1.1	0x1b0b	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:31.037818909 CET	192.168.2.4	1.1.1.1	0x3c04	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:31.152386904 CET	192.168.2.4	1.1.1.1	0xe905	Standard query (0)	jac.yahoosandbox.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:31.155543089 CET	192.168.2.4	1.1.1.1	0x7b57	Standard query (0)	jac.yahoosandbox.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:31.671400070 CET	192.168.2.4	1.1.1.1	0xa30f	Standard query (0)	www.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:31.671552896 CET	192.168.2.4	1.1.1.1	0x4f4a	Standard query (0)	www.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:32.132837057 CET	192.168.2.4	1.1.1.1	0x8da0	Standard query (0)	b.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.133059025 CET	192.168.2.4	1.1.1.1	0x9a6c	Standard query (0)	b.scorecardresearch.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:32.233977079 CET	192.168.2.4	1.1.1.1	0xf2	Standard query (0)	yep.video.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.234277964 CET	192.168.2.4	1.1.1.1	0xbf5e	Standard query (0)	yep.video.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:32.385288000 CET	192.168.2.4	1.1.1.1	0x6225	Standard query (0)	c2shb-oao.ssp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.385325909 CET	192.168.2.4	1.1.1.1	0xf3a	Standard query (0)	c2shb-oao.ssp.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:32.606820107 CET	192.168.2.4	1.1.1.1	0x526a	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.607635975 CET	192.168.2.4	1.1.1.1	0xd8df	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:32.653862953 CET	192.168.2.4	1.1.1.1	0x79a0	Standard query (0)	finance.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.653862953 CET	192.168.2.4	1.1.1.1	0xf00a	Standard query (0)	finance.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:32.672071934 CET	192.168.2.4	1.1.1.1	0xe0d8	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.672103882 CET	192.168.2.4	1.1.1.1	0x74f3	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:32.735892057 CET	192.168.2.4	1.1.1.1	0x9038	Standard query (0)	ping.chartbeat.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.736016989 CET	192.168.2.4	1.1.1.1	0x309f	Standard query (0)	ping.chartbeat.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:32.749389887 CET	192.168.2.4	1.1.1.1	0x93e6	Standard query (0)	video-api.yql.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.749389887 CET	192.168.2.4	1.1.1.1	0x7b1c	Standard query (0)	video-api.yql.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:32.754853964 CET	192.168.2.4	1.1.1.1	0xc984	Standard query (0)	idx.liadm.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.754853964 CET	192.168.2.4	1.1.1.1	0x7693	Standard query (0)	idx.liadm.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:32.771136999 CET	192.168.2.4	1.1.1.1	0x990b	Standard query (0)	rp.liadm.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.771261930 CET	192.168.2.4	1.1.1.1	0xe311	Standard query (0)	rp.liadm.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:32.924417973 CET	192.168.2.4	1.1.1.1	0xd0c6	Standard query (0)	finance.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:33.023397923 CET	192.168.2.4	1.1.1.1	0xd5c8	Standard query (0)	a1653.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:33.023696899 CET	192.168.2.4	1.1.1.1	0xac69	Standard query (0)	a1653.casalemedia.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:33.154270887 CET	192.168.2.4	1.1.1.1	0x3553	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:33.155174017 CET	192.168.2.4	1.1.1.1	0xc228	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:33.681997061 CET	192.168.2.4	1.1.1.1	0xcc64	Standard query (0)	rp.liadm.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:33.682360888 CET	192.168.2.4	1.1.1.1	0xcbf1	Standard query (0)	rp.liadm.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:34.908714056 CET	192.168.2.4	1.1.1.1	0xf546	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:34.908807993 CET	192.168.2.4	1.1.1.1	0x26f4	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:34.909501076 CET	192.168.2.4	1.1.1.1	0x8bcd	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:34.909501076 CET	192.168.2.4	1.1.1.1	0x7cda	Standard query (0)	sync.search.spotxchange.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:35.005861998 CET	192.168.2.4	1.1.1.1	0xfd78	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:35.365943909 CET	192.168.2.4	1.1.1.1	0x4062	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:35.366189957 CET	192.168.2.4	1.1.1.1	0xfb73	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:35.539503098 CET	192.168.2.4	1.1.1.1	0xce80	Standard query (0)	cdn.ampproject.org	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:35.540057898 CET	192.168.2.4	1.1.1.1	0xb740	Standard query (0)	cdn.ampproject.org	65	IN (0x0001)	false
Mar 29, 2024 01:42:36.250463963 CET	192.168.2.4	1.1.1.1	0xe1a8	Standard query (0)	mweb.ck.inmobi.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:36.250617981 CET	192.168.2.4	1.1.1.1	0xb6fa	Standard query (0)	mweb.ck.inmobi.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:36.250926018 CET	192.168.2.4	1.1.1.1	0x75f0	Standard query (0)	dsp.adkernel.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:36.251054049 CET	192.168.2.4	1.1.1.1	0x7751	Standard query (0)	dsp.adkernel.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:37.305619001 CET	192.168.2.4	1.1.1.1	0x969a	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:37.305752993 CET	192.168.2.4	1.1.1.1	0x28d4	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:38.883862019 CET	192.168.2.4	1.1.1.1	0x1166	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:38.884088993 CET	192.168.2.4	1.1.1.1	0xeaea	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:39.088047981 CET	192.168.2.4	1.1.1.1	0x5290	Standard query (0)	a.rfihub.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.088423014 CET	192.168.2.4	1.1.1.1	0x5459	Standard query (0)	a.rfihub.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:39.214565992 CET	192.168.2.4	1.1.1.1	0xf8e	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.214566946 CET	192.168.2.4	1.1.1.1	0x4ffc	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:39.237772942 CET	192.168.2.4	1.1.1.1	0xd3d4	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.237772942 CET	192.168.2.4	1.1.1.1	0xb2b	Standard query (0)	sync.search.spotxchange.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:39.286145926 CET	192.168.2.4	1.1.1.1	0x422f	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:39.286145926 CET	192.168.2.4	1.1.1.1	0xbbef	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.334775925 CET	192.168.2.4	1.1.1.1	0x7ff1	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.472804070 CET	192.168.2.4	1.1.1.1	0xfe92	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.472804070 CET	192.168.2.4	1.1.1.1	0xbfe7	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:39.492710114 CET	192.168.2.4	1.1.1.1	0xe3c6	Standard query (0)	query2.finance.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:39.492710114 CET	192.168.2.4	1.1.1.1	0x5f83	Standard query (0)	query2.finance.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.496629000 CET	192.168.2.4	1.1.1.1	0x2780	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.496629000 CET	192.168.2.4	1.1.1.1	0x852f	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:39.552212000 CET	192.168.2.4	1.1.1.1	0x812d	Standard query (0)	display.bidder.taboola.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.552212000 CET	192.168.2.4	1.1.1.1	0x67f9	Standard query (0)	display.bidder.taboola.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:39.691051006 CET	192.168.2.4	1.1.1.1	0x49a3	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.691437006 CET	192.168.2.4	1.1.1.1	0x1215	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:41.244431973 CET	192.168.2.4	1.1.1.1	0xd0b7	Standard query (0)	display.bidder.taboola.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:41.247243881 CET	192.168.2.4	1.1.1.1	0x8ec8	Standard query (0)	display.bidder.taboola.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:41.258903027 CET	192.168.2.4	1.1.1.1	0x783f	Standard query (0)	lg1.hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:41.258903027 CET	192.168.2.4	1.1.1.1	0xdfed	Standard query (0)	lg1.hb.yahoo.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:41.466814041 CET	192.168.2.4	1.1.1.1	0x3fa0	Standard query (0)	www.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:41.466976881 CET	192.168.2.4	1.1.1.1	0x1096	Standard query (0)	www.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:41.602149963 CET	192.168.2.4	1.1.1.1	0x62b4	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:41.602535009 CET	192.168.2.4	1.1.1.1	0x5a6e	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:43.556005001 CET	192.168.2.4	1.1.1.1	0xccc2	Standard query (0)	cdn.doubleverify.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:43.556446075 CET	192.168.2.4	1.1.1.1	0x89da	Standard query (0)	cdn.doubleverify.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:43.556760073 CET	192.168.2.4	1.1.1.1	0xa58a	Standard query (0)	c.evidon.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:43.557077885 CET	192.168.2.4	1.1.1.1	0x5de7	Standard query (0)	c.evidon.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:44.048655033 CET	192.168.2.4	1.1.1.1	0xddc	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:44.048882008 CET	192.168.2.4	1.1.1.1	0x2e11	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:44.479058027 CET	192.168.2.4	1.1.1.1	0xdf9c	Standard query (0)	ncp-gw-sports.media.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:44.479121923 CET	192.168.2.4	1.1.1.1	0x50a6	Standard query (0)	ncp-gw-sports.media.yahoo.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:44.664139986 CET	192.168.2.4	1.1.1.1	0x310e	Standard query (0)	l.evidon.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:44.664478064 CET	192.168.2.4	1.1.1.1	0x917a	Standard query (0)	l.evidon.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:44.666121006 CET	192.168.2.4	1.1.1.1	0x2805	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:44.666668892 CET	192.168.2.4	1.1.1.1	0xa755	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:44.788137913 CET	192.168.2.4	1.1.1.1	0x3d1d	Standard query (0)	rtb0.doubleverify.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:44.788311005 CET	192.168.2.4	1.1.1.1	0x782e	Standard query (0)	rtb0.doubleverify.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:45.085974932 CET	192.168.2.4	1.1.1.1	0x9e76	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.086225033 CET	192.168.2.4	1.1.1.1	0xcd4e	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:45.293369055 CET	192.168.2.4	1.1.1.1	0xd115	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.293478012 CET	192.168.2.4	1.1.1.1	0x2542	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:45.296669960 CET	192.168.2.4	1.1.1.1	0x59a7	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.296830893 CET	192.168.2.4	1.1.1.1	0x5051	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:45.299202919 CET	192.168.2.4	1.1.1.1	0x3193	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.299314022 CET	192.168.2.4	1.1.1.1	0x2620	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:45.300575018 CET	192.168.2.4	1.1.1.1	0x9bfc	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.300733089 CET	192.168.2.4	1.1.1.1	0x67b1	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:45.306633949 CET	192.168.2.4	1.1.1.1	0x4ca7	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.306819916 CET	192.168.2.4	1.1.1.1	0xd21e	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 29, 2024 01:42:46.052279949 CET	192.168.2.4	1.1.1.1	0xce14	Standard query (0)	tps.doubleverify.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:46.052388906 CET	192.168.2.4	1.1.1.1	0x33	Standard query (0)	tps.doubleverify.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:46.813086033 CET	192.168.2.4	1.1.1.1	0xb5db	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:46.813086033 CET	192.168.2.4	1.1.1.1	0x8516	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:46.866229057 CET	192.168.2.4	1.1.1.1	0xd9e2	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:46.866388083 CET	192.168.2.4	1.1.1.1	0x965b	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
Mar 29, 2024 01:42:47.834975004 CET	192.168.2.4	1.1.1.1	0x77ca	Standard query (0)	jelly.mdhv.io	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:47.835097075 CET	192.168.2.4	1.1.1.1	0x4393	Standard query (0)	jelly.mdhv.io	65	IN (0x0001)	false
Mar 29, 2024 01:42:48.069577932 CET	192.168.2.4	1.1.1.1	0xdb72	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:48.069802999 CET	192.168.2.4	1.1.1.1	0x14da	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 29, 2024 01:41:10.915988922 CET	1.1.1.1	192.168.2.4	0x9359	No error (0)	depl.pages.dev		172.66.47.32	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:10.915988922 CET	1.1.1.1	192.168.2.4	0x9359	No error (0)	depl.pages.dev		172.66.44.224	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:10.916841984 CET	1.1.1.1	192.168.2.4	0x582	No error (0)	depl.pages.dev			65	IN (0x0001)	false
Mar 29, 2024 01:41:11.618324041 CET	1.1.1.1	192.168.2.4	0x85ff	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:11.618324041 CET	1.1.1.1	192.168.2.4	0x85ff	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:11.618324041 CET	1.1.1.1	192.168.2.4	0x85ff	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:11.619049072 CET	1.1.1.1	192.168.2.4	0x3b5d	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:11.626498938 CET	1.1.1.1	192.168.2.4	0x7997	No error (0)	google.com			65	IN (0x0001)	false
Mar 29, 2024 01:41:11.626718044 CET	1.1.1.1	192.168.2.4	0x7038	No error (0)	google.com		142.251.163.113	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:11.626718044 CET	1.1.1.1	192.168.2.4	0x7038	No error (0)	google.com		142.251.163.101	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:11.626718044 CET	1.1.1.1	192.168.2.4	0x7038	No error (0)	google.com		142.251.163.100	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:11.626718044 CET	1.1.1.1	192.168.2.4	0x7038	No error (0)	google.com		142.251.163.138	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:11.626718044 CET	1.1.1.1	192.168.2.4	0x7038	No error (0)	google.com		142.251.163.102	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:11.626718044 CET	1.1.1.1	192.168.2.4	0x7038	No error (0)	google.com		142.251.163.139	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:11.720146894 CET	1.1.1.1	192.168.2.4	0x4944	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:11.720146894 CET	1.1.1.1	192.168.2.4	0x4944	No error (0)	geo-atsv2.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:11.721369982 CET	1.1.1.1	192.168.2.4	0xd823	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:11.724837065 CET	1.1.1.1	192.168.2.4	0xa3db	No error (0)	geo.query.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:11.724837065 CET	1.1.1.1	192.168.2.4	0xa3db	No error (0)	udc-ats.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:11.725517035 CET	1.1.1.1	192.168.2.4	0x6c20	No error (0)	geo.query.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:11.855381012 CET	1.1.1.1	192.168.2.4	0xc2bf	Name error (3)	y.analytics.yahoo.com	none	none	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:11.855453968 CET	1.1.1.1	192.168.2.4	0xd4f9	Name error (3)	y.analytics.yahoo.com	none	none	65	IN (0x0001)	false
Mar 29, 2024 01:41:11.952476025 CET	1.1.1.1	192.168.2.4	0xd2d6	Name error (3)	y.analytics.yahoo.com	none	none	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:12.153439045 CET	1.1.1.1	192.168.2.4	0xdae7	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:12.155127048 CET	1.1.1.1	192.168.2.4	0x35fa	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:12.155127048 CET	1.1.1.1	192.168.2.4	0x35fa	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:12.155127048 CET	1.1.1.1	192.168.2.4	0x35fa	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:12.612771988 CET	1.1.1.1	192.168.2.4	0x573e	No error (0)	fc.yahoo.com	sdarlasplitroute.gapx.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:12.612812042 CET	1.1.1.1	192.168.2.4	0xd362	No error (0)	fc.yahoo.com	sdarlasplitroute.gapx.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:12.612812042 CET	1.1.1.1	192.168.2.4	0xd362	No error (0)	sdarlasplitroute.gapx.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:12.612812042 CET	1.1.1.1	192.168.2.4	0xd362	No error (0)	sdarlasplitroute.gapx.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:12.668764114 CET	1.1.1.1	192.168.2.4	0x9bd4	No error (0)	www.google.com		142.251.163.99	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:12.668764114 CET	1.1.1.1	192.168.2.4	0x9bd4	No error (0)	www.google.com		142.251.163.105	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:12.668764114 CET	1.1.1.1	192.168.2.4	0x9bd4	No error (0)	www.google.com		142.251.163.147	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:12.668764114 CET	1.1.1.1	192.168.2.4	0x9bd4	No error (0)	www.google.com		142.251.163.103	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:12.668764114 CET	1.1.1.1	192.168.2.4	0x9bd4	No error (0)	www.google.com		142.251.163.104	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:12.668764114 CET	1.1.1.1	192.168.2.4	0x9bd4	No error (0)	www.google.com		142.251.163.106	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:12.668797016 CET	1.1.1.1	192.168.2.4	0x37ad	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 29, 2024 01:41:12.780293941 CET	1.1.1.1	192.168.2.4	0x94d9	No error (0)	3p-udc.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:12.780293941 CET	1.1.1.1	192.168.2.4	0x94d9	No error (0)	udc-ats.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:12.781255007 CET	1.1.1.1	192.168.2.4	0x12f3	No error (0)	3p-udc.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:14.608372927 CET	1.1.1.1	192.168.2.4	0xbfc6	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:14.608402967 CET	1.1.1.1	192.168.2.4	0x8b4e	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:14.608402967 CET	1.1.1.1	192.168.2.4	0x8b4e	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:14.608402967 CET	1.1.1.1	192.168.2.4	0x8b4e	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:23.882978916 CET	1.1.1.1	192.168.2.4	0x8186	No error (0)	www.yahoo.com	me-ycpi-cf-www.g06.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:23.882978916 CET	1.1.1.1	192.168.2.4	0x8186	No error (0)	me-ycpi-cf-www.g06.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:23.882978916 CET	1.1.1.1	192.168.2.4	0x8186	No error (0)	me-ycpi-cf-www.g06.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:23.899981022 CET	1.1.1.1	192.168.2.4	0xeba	No error (0)	www.yahoo.com	me-ycpi-cf-www.g06.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:23.959990978 CET	1.1.1.1	192.168.2.4	0x1972	No error (0)	3p-geo.yahoo.com	fam-geo-atsv2.prod.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:23.959990978 CET	1.1.1.1	192.168.2.4	0x1972	No error (0)	fam-geo-atsv2.prod.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:23.961641073 CET	1.1.1.1	192.168.2.4	0xb1dd	No error (0)	3p-geo.yahoo.com	fam-geo-atsv2.prod.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:24.551980972 CET	1.1.1.1	192.168.2.4	0xf475	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:24.551980972 CET	1.1.1.1	192.168.2.4	0xf475	No error (0)	geo-atsv2.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:24.552809954 CET	1.1.1.1	192.168.2.4	0xb468	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:24.554138899 CET	1.1.1.1	192.168.2.4	0x28ca	No error (0)	geo.query.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:24.554721117 CET	1.1.1.1	192.168.2.4	0xd851	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:24.554721117 CET	1.1.1.1	192.168.2.4	0xd851	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:24.554721117 CET	1.1.1.1	192.168.2.4	0xd851	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:24.555013895 CET	1.1.1.1	192.168.2.4	0x5490	No error (0)	geo.query.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:24.555013895 CET	1.1.1.1	192.168.2.4	0x5490	No error (0)	udc-ats.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:24.555659056 CET	1.1.1.1	192.168.2.4	0x406e	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:24.651988029 CET	1.1.1.1	192.168.2.4	0x5aa5	No error (0)	search.yahoo.com	ds-global3.l7.search.ystg1.b.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:24.651988029 CET	1.1.1.1	192.168.2.4	0x5aa5	No error (0)	ds-global3.l7.search.ystg1.b.yahoo.com		66.218.84.137	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:24.653079033 CET	1.1.1.1	192.168.2.4	0xc8a	No error (0)	search.yahoo.com	ds-global3.l7.search.ystg1.b.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:25.326128006 CET	1.1.1.1	192.168.2.4	0xb237	No error (0)	consent.cmp.oath.com	cs550162656.adn.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:25.327120066 CET	1.1.1.1	192.168.2.4	0x9e87	No error (0)	consent.cmp.oath.com	cs550162656.adn.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:25.327120066 CET	1.1.1.1	192.168.2.4	0x9e87	No error (0)	cs550162656.adn.psicdn.net		152.195.55.192	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:25.872586012 CET	1.1.1.1	192.168.2.4	0x1a	No error (0)	edge-mcdn.secure.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:25.872586012 CET	1.1.1.1	192.168.2.4	0x1a	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:25.872586012 CET	1.1.1.1	192.168.2.4	0x1a	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:25.873051882 CET	1.1.1.1	192.168.2.4	0x75cb	No error (0)	edge-mcdn.secure.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:26.321410894 CET	1.1.1.1	192.168.2.4	0xd4a	No error (0)	guce.yahoo.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:26.321410894 CET	1.1.1.1	192.168.2.4	0xd4a	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:26.321645975 CET	1.1.1.1	192.168.2.4	0xf0be	No error (0)	guce.yahoo.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:26.321645975 CET	1.1.1.1	192.168.2.4	0xf0be	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:26.321645975 CET	1.1.1.1	192.168.2.4	0xf0be	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		34.227.4.2	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:26.321645975 CET	1.1.1.1	192.168.2.4	0xf0be	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		54.208.5.107	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:26.321645975 CET	1.1.1.1	192.168.2.4	0xf0be	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.71.241.117	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:26.321645975 CET	1.1.1.1	192.168.2.4	0xf0be	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		3.94.229.74	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:26.321645975 CET	1.1.1.1	192.168.2.4	0xf0be	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.55.3.94	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:26.321645975 CET	1.1.1.1	192.168.2.4	0xf0be	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		54.174.232.255	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:26.321645975 CET	1.1.1.1	192.168.2.4	0xf0be	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.45.146.30	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:26.321645975 CET	1.1.1.1	192.168.2.4	0xf0be	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.72.120.154	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:26.855489016 CET	1.1.1.1	192.168.2.4	0xbd85	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:26.855489016 CET	1.1.1.1	192.168.2.4	0xbd85	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.241103888 CET	1.1.1.1	192.168.2.4	0x9a64	No error (0)	guce.yahoo.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:28.241103888 CET	1.1.1.1	192.168.2.4	0x9a64	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:28.241103888 CET	1.1.1.1	192.168.2.4	0x9a64	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		54.210.0.216	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.241103888 CET	1.1.1.1	192.168.2.4	0x9a64	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		35.171.246.129	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.241103888 CET	1.1.1.1	192.168.2.4	0x9a64	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		34.234.186.97	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.241103888 CET	1.1.1.1	192.168.2.4	0x9a64	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.3.114.203	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.241103888 CET	1.1.1.1	192.168.2.4	0x9a64	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		54.208.5.107	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.241103888 CET	1.1.1.1	192.168.2.4	0x9a64	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.2.116.152	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.241103888 CET	1.1.1.1	192.168.2.4	0x9a64	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.45.146.30	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.241103888 CET	1.1.1.1	192.168.2.4	0x9a64	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		35.170.227.225	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.241884947 CET	1.1.1.1	192.168.2.4	0x3ca5	No error (0)	guce.yahoo.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:28.241884947 CET	1.1.1.1	192.168.2.4	0x3ca5	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:28.542196035 CET	1.1.1.1	192.168.2.4	0xdbd1	No error (0)	udc.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:28.542196035 CET	1.1.1.1	192.168.2.4	0xdbd1	No error (0)	udc-ats.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.543487072 CET	1.1.1.1	192.168.2.4	0x8e00	No error (0)	udc.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:28.654185057 CET	1.1.1.1	192.168.2.4	0x80	No error (0)	hb.yahoo.net		23.43.243.35	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.654185057 CET	1.1.1.1	192.168.2.4	0x80	No error (0)	hb.yahoo.net		23.43.243.27	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.654185057 CET	1.1.1.1	192.168.2.4	0x80	No error (0)	hb.yahoo.net		23.43.243.41	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.654185057 CET	1.1.1.1	192.168.2.4	0x80	No error (0)	hb.yahoo.net		23.43.243.34	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.654185057 CET	1.1.1.1	192.168.2.4	0x80	No error (0)	hb.yahoo.net		23.43.243.32	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.654185057 CET	1.1.1.1	192.168.2.4	0x80	No error (0)	hb.yahoo.net		23.43.243.26	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.654185057 CET	1.1.1.1	192.168.2.4	0x80	No error (0)	hb.yahoo.net		23.43.243.25	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.654185057 CET	1.1.1.1	192.168.2.4	0x80	No error (0)	hb.yahoo.net		23.43.243.19	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.655612946 CET	1.1.1.1	192.168.2.4	0x2970	No error (0)	opus.analytics.yahoo.com	cs964.wpc.9465e.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:28.655612946 CET	1.1.1.1	192.168.2.4	0x2970	No error (0)	cs964.wpc.9465e.mucdn.net	cs964199420.wpc.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:28.655612946 CET	1.1.1.1	192.168.2.4	0x2970	No error (0)	cs964199420.wpc.mucdn.net		152.199.24.48	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:28.657406092 CET	1.1.1.1	192.168.2.4	0x10f0	No error (0)	opus.analytics.yahoo.com	cs964.wpc.9465e.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:28.657406092 CET	1.1.1.1	192.168.2.4	0x10f0	No error (0)	cs964.wpc.9465e.mucdn.net	cs964199420.wpc.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.243319035 CET	1.1.1.1	192.168.2.4	0xfe24	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.243319035 CET	1.1.1.1	192.168.2.4	0xfe24	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.243319035 CET	1.1.1.1	192.168.2.4	0xfe24	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.243319035 CET	1.1.1.1	192.168.2.4	0xfe24	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.243319035 CET	1.1.1.1	192.168.2.4	0xfe24	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.243382931 CET	1.1.1.1	192.168.2.4	0x7095	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.243382931 CET	1.1.1.1	192.168.2.4	0x7095	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.243382931 CET	1.1.1.1	192.168.2.4	0x7095	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.252921104 CET	1.1.1.1	192.168.2.4	0x6806	No error (0)	west-bid-gps.ybp.yahoo.com	bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.252921104 CET	1.1.1.1	192.168.2.4	0x6806	No error (0)	bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud		52.24.220.218	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.252921104 CET	1.1.1.1	192.168.2.4	0x6806	No error (0)	bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud		54.148.67.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.252921104 CET	1.1.1.1	192.168.2.4	0x6806	No error (0)	bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud		34.211.200.13	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.252921104 CET	1.1.1.1	192.168.2.4	0x6806	No error (0)	bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud		54.200.153.203	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.252921104 CET	1.1.1.1	192.168.2.4	0x6806	No error (0)	bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud		52.27.101.191	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.252921104 CET	1.1.1.1	192.168.2.4	0x6806	No error (0)	bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud		35.83.92.21	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.252921104 CET	1.1.1.1	192.168.2.4	0x6806	No error (0)	bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud		54.213.61.50	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.252921104 CET	1.1.1.1	192.168.2.4	0x6806	No error (0)	bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud		54.245.63.118	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.252954006 CET	1.1.1.1	192.168.2.4	0x697e	No error (0)	west-bid-gps.ybp.yahoo.com	bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.589019060 CET	1.1.1.1	192.168.2.4	0x4c56	No error (0)	www.yahoo.com	me-ycpi-cf-www.g06.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.589019060 CET	1.1.1.1	192.168.2.4	0x4c56	No error (0)	me-ycpi-cf-www.g06.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.589019060 CET	1.1.1.1	192.168.2.4	0x4c56	No error (0)	me-ycpi-cf-www.g06.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.592389107 CET	1.1.1.1	192.168.2.4	0xb75	No error (0)	www.yahoo.com	me-ycpi-cf-www.g06.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.642632008 CET	1.1.1.1	192.168.2.4	0x4c77	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.642914057 CET	1.1.1.1	192.168.2.4	0x8bac	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.642914057 CET	1.1.1.1	192.168.2.4	0x8bac	No error (0)	securepubads46.g.doubleclick.net		142.251.167.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.642914057 CET	1.1.1.1	192.168.2.4	0x8bac	No error (0)	securepubads46.g.doubleclick.net		142.251.167.156	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.642914057 CET	1.1.1.1	192.168.2.4	0x8bac	No error (0)	securepubads46.g.doubleclick.net		142.251.167.154	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.642914057 CET	1.1.1.1	192.168.2.4	0x8bac	No error (0)	securepubads46.g.doubleclick.net		142.251.167.157	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.643632889 CET	1.1.1.1	192.168.2.4	0x5a6b	No error (0)	prebid.media.net		34.120.63.153	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.645811081 CET	1.1.1.1	192.168.2.4	0x3c73	No error (0)	c2shb-oao.ssp.yahoo.com	web-oao.ssp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.645811081 CET	1.1.1.1	192.168.2.4	0x3c73	No error (0)	web-oao.ssp.yahoo.com	web-oao.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.645811081 CET	1.1.1.1	192.168.2.4	0x3c73	No error (0)	web-oao.one-mobile-prod.aws.oath.cloud	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.646862984 CET	1.1.1.1	192.168.2.4	0x80b0	No error (0)	c2shb-oao.ssp.yahoo.com	web-oao.ssp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.646862984 CET	1.1.1.1	192.168.2.4	0x80b0	No error (0)	web-oao.ssp.yahoo.com	web-oao.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.646862984 CET	1.1.1.1	192.168.2.4	0x80b0	No error (0)	web-oao.one-mobile-prod.aws.oath.cloud	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.646862984 CET	1.1.1.1	192.168.2.4	0x80b0	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		3.230.217.116	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.646862984 CET	1.1.1.1	192.168.2.4	0x80b0	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		52.4.33.45	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.646862984 CET	1.1.1.1	192.168.2.4	0x80b0	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		3.92.156.8	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.646862984 CET	1.1.1.1	192.168.2.4	0x80b0	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		34.236.83.94	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.647610903 CET	1.1.1.1	192.168.2.4	0xad68	No error (0)	m.hb.yahoo.net		34.111.85.214	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.744184017 CET	1.1.1.1	192.168.2.4	0x1d0	No error (0)	rtb-cache.hb.yahoo.net		34.110.207.99	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.774405956 CET	1.1.1.1	192.168.2.4	0xeb6e	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.774405956 CET	1.1.1.1	192.168.2.4	0xeb6e	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.774405956 CET	1.1.1.1	192.168.2.4	0xeb6e	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.774405956 CET	1.1.1.1	192.168.2.4	0xeb6e	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.774405956 CET	1.1.1.1	192.168.2.4	0xeb6e	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:29.774610043 CET	1.1.1.1	192.168.2.4	0xf1e6	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.774610043 CET	1.1.1.1	192.168.2.4	0xf1e6	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:29.774610043 CET	1.1.1.1	192.168.2.4	0xf1e6	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:30.178634882 CET	1.1.1.1	192.168.2.4	0x1855	No error (0)	pa.ybp.yahoo.com	d9z32kqpe67oo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:30.178634882 CET	1.1.1.1	192.168.2.4	0x1855	No error (0)	d9z32kqpe67oo.cloudfront.net		3.162.125.83	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.178634882 CET	1.1.1.1	192.168.2.4	0x1855	No error (0)	d9z32kqpe67oo.cloudfront.net		3.162.125.49	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.178634882 CET	1.1.1.1	192.168.2.4	0x1855	No error (0)	d9z32kqpe67oo.cloudfront.net		3.162.125.108	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.178634882 CET	1.1.1.1	192.168.2.4	0x1855	No error (0)	d9z32kqpe67oo.cloudfront.net		3.162.125.2	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.180253029 CET	1.1.1.1	192.168.2.4	0x2a83	No error (0)	pa.ybp.yahoo.com	d9z32kqpe67oo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:30.426887989 CET	1.1.1.1	192.168.2.4	0x221b	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:30.426887989 CET	1.1.1.1	192.168.2.4	0x221b	No error (0)	idx.cph.liveintent.com		3.226.25.25	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.426887989 CET	1.1.1.1	192.168.2.4	0x221b	No error (0)	idx.cph.liveintent.com		34.230.170.191	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.426887989 CET	1.1.1.1	192.168.2.4	0x221b	No error (0)	idx.cph.liveintent.com		54.88.135.165	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.426887989 CET	1.1.1.1	192.168.2.4	0x221b	No error (0)	idx.cph.liveintent.com		44.216.212.178	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.426887989 CET	1.1.1.1	192.168.2.4	0x221b	No error (0)	idx.cph.liveintent.com		34.204.222.218	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.426887989 CET	1.1.1.1	192.168.2.4	0x221b	No error (0)	idx.cph.liveintent.com		54.173.8.60	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.426887989 CET	1.1.1.1	192.168.2.4	0x221b	No error (0)	idx.cph.liveintent.com		3.222.7.28	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.426887989 CET	1.1.1.1	192.168.2.4	0x221b	No error (0)	idx.cph.liveintent.com		34.238.17.47	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.427253962 CET	1.1.1.1	192.168.2.4	0x4d70	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:30.446417093 CET	1.1.1.1	192.168.2.4	0xad45	No error (0)	hb.yahoo.net		23.43.243.43	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.446417093 CET	1.1.1.1	192.168.2.4	0xad45	No error (0)	hb.yahoo.net		23.43.243.25	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.446417093 CET	1.1.1.1	192.168.2.4	0xad45	No error (0)	hb.yahoo.net		23.43.243.49	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.446417093 CET	1.1.1.1	192.168.2.4	0xad45	No error (0)	hb.yahoo.net		23.43.243.27	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.446417093 CET	1.1.1.1	192.168.2.4	0xad45	No error (0)	hb.yahoo.net		23.43.243.34	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.446417093 CET	1.1.1.1	192.168.2.4	0xad45	No error (0)	hb.yahoo.net		23.43.243.32	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.446417093 CET	1.1.1.1	192.168.2.4	0xad45	No error (0)	hb.yahoo.net		23.43.243.24	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.446417093 CET	1.1.1.1	192.168.2.4	0xad45	No error (0)	hb.yahoo.net		23.43.243.50	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.930064917 CET	1.1.1.1	192.168.2.4	0x4cb7	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:30.930064917 CET	1.1.1.1	192.168.2.4	0x4cb7	No error (0)	livepixel-production.bln.liveintent.com		44.197.69.112	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.930064917 CET	1.1.1.1	192.168.2.4	0x4cb7	No error (0)	livepixel-production.bln.liveintent.com		18.235.133.160	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.930064917 CET	1.1.1.1	192.168.2.4	0x4cb7	No error (0)	livepixel-production.bln.liveintent.com		52.23.99.235	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.930064917 CET	1.1.1.1	192.168.2.4	0x4cb7	No error (0)	livepixel-production.bln.liveintent.com		34.198.16.32	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.930064917 CET	1.1.1.1	192.168.2.4	0x4cb7	No error (0)	livepixel-production.bln.liveintent.com		52.7.27.132	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.930064917 CET	1.1.1.1	192.168.2.4	0x4cb7	No error (0)	livepixel-production.bln.liveintent.com		100.26.85.214	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.930064917 CET	1.1.1.1	192.168.2.4	0x4cb7	No error (0)	livepixel-production.bln.liveintent.com		18.209.40.243	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.930064917 CET	1.1.1.1	192.168.2.4	0x4cb7	No error (0)	livepixel-production.bln.liveintent.com		54.225.222.132	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.930129051 CET	1.1.1.1	192.168.2.4	0x1995	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:30.945530891 CET	1.1.1.1	192.168.2.4	0x2b1e	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:30.945530891 CET	1.1.1.1	192.168.2.4	0x2b1e	No error (0)	idx.cph.liveintent.com		34.238.17.47	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.945530891 CET	1.1.1.1	192.168.2.4	0x2b1e	No error (0)	idx.cph.liveintent.com		54.173.8.60	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.945530891 CET	1.1.1.1	192.168.2.4	0x2b1e	No error (0)	idx.cph.liveintent.com		34.230.170.191	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.945530891 CET	1.1.1.1	192.168.2.4	0x2b1e	No error (0)	idx.cph.liveintent.com		44.216.212.178	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.945530891 CET	1.1.1.1	192.168.2.4	0x2b1e	No error (0)	idx.cph.liveintent.com		34.198.209.31	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.945530891 CET	1.1.1.1	192.168.2.4	0x2b1e	No error (0)	idx.cph.liveintent.com		3.222.7.28	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.945530891 CET	1.1.1.1	192.168.2.4	0x2b1e	No error (0)	idx.cph.liveintent.com		54.88.135.165	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.945530891 CET	1.1.1.1	192.168.2.4	0x2b1e	No error (0)	idx.cph.liveintent.com		34.204.222.218	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:30.945544958 CET	1.1.1.1	192.168.2.4	0x23ea	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:31.099817038 CET	1.1.1.1	192.168.2.4	0x70f2	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:31.099817038 CET	1.1.1.1	192.168.2.4	0x70f2	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:31.099817038 CET	1.1.1.1	192.168.2.4	0x70f2	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:31.099817038 CET	1.1.1.1	192.168.2.4	0x70f2	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:31.099817038 CET	1.1.1.1	192.168.2.4	0x70f2	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:31.102001905 CET	1.1.1.1	192.168.2.4	0x26e8	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:31.463907957 CET	1.1.1.1	192.168.2.4	0x544b	No error (0)	edge-mcdn.secure.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:31.463907957 CET	1.1.1.1	192.168.2.4	0x544b	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:31.463907957 CET	1.1.1.1	192.168.2.4	0x544b	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:31.465543032 CET	1.1.1.1	192.168.2.4	0xec61	No error (0)	edge-mcdn.secure.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:31.611354113 CET	1.1.1.1	192.168.2.4	0x1ef3	No error (0)	tsdtocl.com		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:31.611354113 CET	1.1.1.1	192.168.2.4	0x1ef3	No error (0)	tsdtocl.com		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:31.611354113 CET	1.1.1.1	192.168.2.4	0x1ef3	No error (0)	tsdtocl.com		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:31.611354113 CET	1.1.1.1	192.168.2.4	0x1ef3	No error (0)	tsdtocl.com		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:31.627619028 CET	1.1.1.1	192.168.2.4	0xd03c	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:31.629223108 CET	1.1.1.1	192.168.2.4	0x51c9	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:31.629223108 CET	1.1.1.1	192.168.2.4	0x51c9	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:31.629223108 CET	1.1.1.1	192.168.2.4	0x51c9	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:31.629223108 CET	1.1.1.1	192.168.2.4	0x51c9	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:31.629223108 CET	1.1.1.1	192.168.2.4	0x51c9	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.092504025 CET	1.1.1.1	192.168.2.4	0x3b47	No error (0)	display.bidder.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:32.093441010 CET	1.1.1.1	192.168.2.4	0x67b9	No error (0)	display.bidder.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:32.093441010 CET	1.1.1.1	192.168.2.4	0x67b9	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.093441010 CET	1.1.1.1	192.168.2.4	0x67b9	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.093441010 CET	1.1.1.1	192.168.2.4	0x67b9	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.093441010 CET	1.1.1.1	192.168.2.4	0x67b9	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.099608898 CET	1.1.1.1	192.168.2.4	0x151d	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Mar 29, 2024 01:41:32.099621058 CET	1.1.1.1	192.168.2.4	0x7f11	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.099621058 CET	1.1.1.1	192.168.2.4	0x7f11	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.121046066 CET	1.1.1.1	192.168.2.4	0x149	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:32.121366024 CET	1.1.1.1	192.168.2.4	0x55b3	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:32.121366024 CET	1.1.1.1	192.168.2.4	0x55b3	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.121366024 CET	1.1.1.1	192.168.2.4	0x55b3	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.121366024 CET	1.1.1.1	192.168.2.4	0x55b3	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.121366024 CET	1.1.1.1	192.168.2.4	0x55b3	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.122723103 CET	1.1.1.1	192.168.2.4	0x8e83	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:32.125272989 CET	1.1.1.1	192.168.2.4	0x4995	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:32.131596088 CET	1.1.1.1	192.168.2.4	0xf0e1	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:32.131596088 CET	1.1.1.1	192.168.2.4	0xf0e1	No error (0)	hbprebid-v3.pubmnet.com	gob-sv3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:32.131596088 CET	1.1.1.1	192.168.2.4	0xf0e1	No error (0)	gob-sv3.pubmnet.com		204.237.133.116	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.131900072 CET	1.1.1.1	192.168.2.4	0xd7b8	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:32.131900072 CET	1.1.1.1	192.168.2.4	0xd7b8	No error (0)	hbprebid-v3.pubmnet.com	gob-pairb-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:32.308128119 CET	1.1.1.1	192.168.2.4	0x9fb0	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:32.308187008 CET	1.1.1.1	192.168.2.4	0x3ca9	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:32.309272051 CET	1.1.1.1	192.168.2.4	0xaa94	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:32.309272051 CET	1.1.1.1	192.168.2.4	0xaa94	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.309272051 CET	1.1.1.1	192.168.2.4	0xaa94	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.309272051 CET	1.1.1.1	192.168.2.4	0xaa94	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.309272051 CET	1.1.1.1	192.168.2.4	0xaa94	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.309376001 CET	1.1.1.1	192.168.2.4	0x4bcd	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:32.309547901 CET	1.1.1.1	192.168.2.4	0x9c00	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:32.309547901 CET	1.1.1.1	192.168.2.4	0x9c00	No error (0)	securepubads46.g.doubleclick.net		172.253.115.156	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.309547901 CET	1.1.1.1	192.168.2.4	0x9c00	No error (0)	securepubads46.g.doubleclick.net		172.253.115.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.310255051 CET	1.1.1.1	192.168.2.4	0x8f39	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:32.412384987 CET	1.1.1.1	192.168.2.4	0x30fa	No error (0)	sb.scorecardresearch.com		18.238.49.124	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.412384987 CET	1.1.1.1	192.168.2.4	0x30fa	No error (0)	sb.scorecardresearch.com		18.238.49.74	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.412384987 CET	1.1.1.1	192.168.2.4	0x30fa	No error (0)	sb.scorecardresearch.com		18.238.49.52	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.412384987 CET	1.1.1.1	192.168.2.4	0x30fa	No error (0)	sb.scorecardresearch.com		18.238.49.99	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.630542994 CET	1.1.1.1	192.168.2.4	0xac2a	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:32.667778015 CET	1.1.1.1	192.168.2.4	0xef45	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:32.667778015 CET	1.1.1.1	192.168.2.4	0xef45	No error (0)	livepixel-production.bln.liveintent.com		54.225.222.132	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.667778015 CET	1.1.1.1	192.168.2.4	0xef45	No error (0)	livepixel-production.bln.liveintent.com		52.7.27.132	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.667778015 CET	1.1.1.1	192.168.2.4	0xef45	No error (0)	livepixel-production.bln.liveintent.com		18.209.40.243	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.667778015 CET	1.1.1.1	192.168.2.4	0xef45	No error (0)	livepixel-production.bln.liveintent.com		52.23.99.235	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.667778015 CET	1.1.1.1	192.168.2.4	0xef45	No error (0)	livepixel-production.bln.liveintent.com		44.218.251.145	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.667778015 CET	1.1.1.1	192.168.2.4	0xef45	No error (0)	livepixel-production.bln.liveintent.com		52.2.208.15	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.667778015 CET	1.1.1.1	192.168.2.4	0xef45	No error (0)	livepixel-production.bln.liveintent.com		34.198.16.32	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.667778015 CET	1.1.1.1	192.168.2.4	0xef45	No error (0)	livepixel-production.bln.liveintent.com		44.197.69.112	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.899014950 CET	1.1.1.1	192.168.2.4	0x281e	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:32.899014950 CET	1.1.1.1	192.168.2.4	0x281e	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.899014950 CET	1.1.1.1	192.168.2.4	0x281e	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.899014950 CET	1.1.1.1	192.168.2.4	0x281e	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.899014950 CET	1.1.1.1	192.168.2.4	0x281e	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:32.902910948 CET	1.1.1.1	192.168.2.4	0x903d	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:32.921593904 CET	1.1.1.1	192.168.2.4	0x9db9	No error (0)	m.hb.yahoo.net		34.111.85.214	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.017620087 CET	1.1.1.1	192.168.2.4	0xfc9f	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.018738031 CET	1.1.1.1	192.168.2.4	0x8269	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.040977955 CET	1.1.1.1	192.168.2.4	0xc66c	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.040977955 CET	1.1.1.1	192.168.2.4	0xc66c	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.040977955 CET	1.1.1.1	192.168.2.4	0xc66c	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.040977955 CET	1.1.1.1	192.168.2.4	0xc66c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.238.61.171	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.040977955 CET	1.1.1.1	192.168.2.4	0xc66c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.206.166.116	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.040977955 CET	1.1.1.1	192.168.2.4	0xc66c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.205.173.75	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.040977955 CET	1.1.1.1	192.168.2.4	0xc66c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.85.83.242	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.040977955 CET	1.1.1.1	192.168.2.4	0xc66c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.223.253.145	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.040977955 CET	1.1.1.1	192.168.2.4	0xc66c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.202.107.174	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.040977955 CET	1.1.1.1	192.168.2.4	0xc66c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.209.112.121	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.040977955 CET	1.1.1.1	192.168.2.4	0xc66c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.226.212.104	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.041385889 CET	1.1.1.1	192.168.2.4	0x1240	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.041385889 CET	1.1.1.1	192.168.2.4	0x1240	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.041385889 CET	1.1.1.1	192.168.2.4	0x1240	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.120110989 CET	1.1.1.1	192.168.2.4	0xdb15	No error (0)	i.clean.gg		34.95.69.49	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.124356031 CET	1.1.1.1	192.168.2.4	0xdb03	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.124356031 CET	1.1.1.1	192.168.2.4	0xdb03	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.110	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.124356031 CET	1.1.1.1	192.168.2.4	0xdb03	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.83	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.124356031 CET	1.1.1.1	192.168.2.4	0xdb03	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.128	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.124356031 CET	1.1.1.1	192.168.2.4	0xdb03	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.118	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.127125025 CET	1.1.1.1	192.168.2.4	0x6397	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.167999983 CET	1.1.1.1	192.168.2.4	0xc696	No error (0)	js-sec.indexww.com			65	IN (0x0001)	false
Mar 29, 2024 01:41:33.168262005 CET	1.1.1.1	192.168.2.4	0x77df	No error (0)	js-sec.indexww.com		104.18.38.76	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.168262005 CET	1.1.1.1	192.168.2.4	0x77df	No error (0)	js-sec.indexww.com		172.64.149.180	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.190843105 CET	1.1.1.1	192.168.2.4	0xc781	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.192888021 CET	1.1.1.1	192.168.2.4	0x6895	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.192888021 CET	1.1.1.1	192.168.2.4	0x6895	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.196007013 CET	1.1.1.1	192.168.2.4	0x8771	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Mar 29, 2024 01:41:33.196053982 CET	1.1.1.1	192.168.2.4	0xcbc7	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.196053982 CET	1.1.1.1	192.168.2.4	0xcbc7	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.218338013 CET	1.1.1.1	192.168.2.4	0xe090	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.218338013 CET	1.1.1.1	192.168.2.4	0xe090	No error (0)	image6v2.pubmnet.com	pugm-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.218672037 CET	1.1.1.1	192.168.2.4	0xff8c	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.218672037 CET	1.1.1.1	192.168.2.4	0xff8c	No error (0)	image6v2.pubmnet.com	pugm-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.218672037 CET	1.1.1.1	192.168.2.4	0xff8c	No error (0)	pugm-nje1.pubmnet.com		207.65.37.181	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.486944914 CET	1.1.1.1	192.168.2.4	0x294	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.486944914 CET	1.1.1.1	192.168.2.4	0x294	No error (0)	hbprebid-v3.pubmnet.com	gob-pairb-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.486988068 CET	1.1.1.1	192.168.2.4	0x6c3c	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.486988068 CET	1.1.1.1	192.168.2.4	0x6c3c	No error (0)	hbprebid-v3.pubmnet.com	gob-pairb-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.486988068 CET	1.1.1.1	192.168.2.4	0x6c3c	No error (0)	gob-pairb-nje1.pubmnet.com		207.65.37.179	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.525451899 CET	1.1.1.1	192.168.2.4	0x6651	No error (0)	pagead-googlehosted.l.google.com		142.251.163.132	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.637320995 CET	1.1.1.1	192.168.2.4	0x58dc	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.638068914 CET	1.1.1.1	192.168.2.4	0xbc4c	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.645032883 CET	1.1.1.1	192.168.2.4	0xd813	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.645032883 CET	1.1.1.1	192.168.2.4	0xd813	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.645032883 CET	1.1.1.1	192.168.2.4	0xd813	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.649034977 CET	1.1.1.1	192.168.2.4	0x7ff8	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.649034977 CET	1.1.1.1	192.168.2.4	0x7ff8	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.649034977 CET	1.1.1.1	192.168.2.4	0x7ff8	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:33.649034977 CET	1.1.1.1	192.168.2.4	0x7ff8	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.649034977 CET	1.1.1.1	192.168.2.4	0x7ff8	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:33.959589005 CET	1.1.1.1	192.168.2.4	0xa858	No error (0)	s.amazon-adsystem.com		52.46.151.131	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.027240038 CET	1.1.1.1	192.168.2.4	0xe751	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.027240038 CET	1.1.1.1	192.168.2.4	0xe751	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.027240038 CET	1.1.1.1	192.168.2.4	0xe751	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.027240038 CET	1.1.1.1	192.168.2.4	0xe751	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.027240038 CET	1.1.1.1	192.168.2.4	0xe751	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.027240038 CET	1.1.1.1	192.168.2.4	0xe751	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.027240038 CET	1.1.1.1	192.168.2.4	0xe751	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.027240038 CET	1.1.1.1	192.168.2.4	0xe751	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.027240038 CET	1.1.1.1	192.168.2.4	0xe751	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.027240038 CET	1.1.1.1	192.168.2.4	0xe751	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.027240038 CET	1.1.1.1	192.168.2.4	0xe751	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.027240038 CET	1.1.1.1	192.168.2.4	0xe751	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.027240038 CET	1.1.1.1	192.168.2.4	0xe751	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.027240038 CET	1.1.1.1	192.168.2.4	0xe751	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.051867962 CET	1.1.1.1	192.168.2.4	0xecde	No error (0)	match.prod.bidr.io		54.156.236.4	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.051867962 CET	1.1.1.1	192.168.2.4	0xecde	No error (0)	match.prod.bidr.io		54.159.124.221	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.051867962 CET	1.1.1.1	192.168.2.4	0xecde	No error (0)	match.prod.bidr.io		52.70.229.134	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.051867962 CET	1.1.1.1	192.168.2.4	0xecde	No error (0)	match.prod.bidr.io		54.156.183.4	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.051867962 CET	1.1.1.1	192.168.2.4	0xecde	No error (0)	match.prod.bidr.io		52.71.111.248	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.051867962 CET	1.1.1.1	192.168.2.4	0xecde	No error (0)	match.prod.bidr.io		54.163.152.50	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.051867962 CET	1.1.1.1	192.168.2.4	0xecde	No error (0)	match.prod.bidr.io		54.144.190.182	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.051867962 CET	1.1.1.1	192.168.2.4	0xecde	No error (0)	match.prod.bidr.io		54.146.101.13	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.174269915 CET	1.1.1.1	192.168.2.4	0xfebf	No error (0)	cm.g.doubleclick.net		172.253.62.157	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.174269915 CET	1.1.1.1	192.168.2.4	0xfebf	No error (0)	cm.g.doubleclick.net		172.253.62.154	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.175052881 CET	1.1.1.1	192.168.2.4	0x118d	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.175848961 CET	1.1.1.1	192.168.2.4	0x8496	No error (0)	us01.z.antigena.com		40.76.134.238	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.176461935 CET	1.1.1.1	192.168.2.4	0x5a85	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.176461935 CET	1.1.1.1	192.168.2.4	0x5a85	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.176480055 CET	1.1.1.1	192.168.2.4	0x1e3c	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.176480055 CET	1.1.1.1	192.168.2.4	0x1e3c	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.176480055 CET	1.1.1.1	192.168.2.4	0x1e3c	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.176480055 CET	1.1.1.1	192.168.2.4	0x1e3c	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.179263115 CET	1.1.1.1	192.168.2.4	0x1494	No error (0)	um.simpli.fi		35.236.220.17	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.179263115 CET	1.1.1.1	192.168.2.4	0x1494	No error (0)	um.simpli.fi		35.194.66.159	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.179263115 CET	1.1.1.1	192.168.2.4	0x1494	No error (0)	um.simpli.fi		34.150.170.96	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.180480957 CET	1.1.1.1	192.168.2.4	0x4dd5	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.180480957 CET	1.1.1.1	192.168.2.4	0x4dd5	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.180480957 CET	1.1.1.1	192.168.2.4	0x4dd5	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.180480957 CET	1.1.1.1	192.168.2.4	0x4dd5	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.180553913 CET	1.1.1.1	192.168.2.4	0xb67d	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.180553913 CET	1.1.1.1	192.168.2.4	0xb67d	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.195.186.221	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.180553913 CET	1.1.1.1	192.168.2.4	0xb67d	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		184.73.166.124	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.180553913 CET	1.1.1.1	192.168.2.4	0xb67d	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		3.222.125.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.180553913 CET	1.1.1.1	192.168.2.4	0xb67d	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		107.22.88.141	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.180951118 CET	1.1.1.1	192.168.2.4	0xcc80	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.182532072 CET	1.1.1.1	192.168.2.4	0xde2a	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.182532072 CET	1.1.1.1	192.168.2.4	0xde2a	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.182532072 CET	1.1.1.1	192.168.2.4	0xde2a	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.182532072 CET	1.1.1.1	192.168.2.4	0xde2a	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.182532072 CET	1.1.1.1	192.168.2.4	0xde2a	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.182940960 CET	1.1.1.1	192.168.2.4	0xcecd	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.182940960 CET	1.1.1.1	192.168.2.4	0xcecd	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.182940960 CET	1.1.1.1	192.168.2.4	0xcecd	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.238082886 CET	1.1.1.1	192.168.2.4	0xcc13	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 29, 2024 01:41:34.238547087 CET	1.1.1.1	192.168.2.4	0x508c	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.238547087 CET	1.1.1.1	192.168.2.4	0x508c	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.250444889 CET	1.1.1.1	192.168.2.4	0xb6f3	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.250444889 CET	1.1.1.1	192.168.2.4	0xb6f3	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.251979113 CET	1.1.1.1	192.168.2.4	0x7188	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.251979113 CET	1.1.1.1	192.168.2.4	0x7188	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.365113020 CET	1.1.1.1	192.168.2.4	0x272c	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.365113020 CET	1.1.1.1	192.168.2.4	0x272c	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.365113020 CET	1.1.1.1	192.168.2.4	0x272c	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.365113020 CET	1.1.1.1	192.168.2.4	0x272c	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.365113020 CET	1.1.1.1	192.168.2.4	0x272c	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.366010904 CET	1.1.1.1	192.168.2.4	0x3c39	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.366010904 CET	1.1.1.1	192.168.2.4	0x3c39	No error (0)	vap.lijit.com	nava.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.366010904 CET	1.1.1.1	192.168.2.4	0x3c39	No error (0)	nava.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.366051912 CET	1.1.1.1	192.168.2.4	0xf95a	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.366489887 CET	1.1.1.1	192.168.2.4	0x7553	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.366489887 CET	1.1.1.1	192.168.2.4	0x7553	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.366489887 CET	1.1.1.1	192.168.2.4	0x7553	No error (0)	nase.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.366489887 CET	1.1.1.1	192.168.2.4	0x7553	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.20.213.72	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.366489887 CET	1.1.1.1	192.168.2.4	0x7553	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.233.219.73	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.366489887 CET	1.1.1.1	192.168.2.4	0x7553	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.221.207.200	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.366489887 CET	1.1.1.1	192.168.2.4	0x7553	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.228.34.104	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.366489887 CET	1.1.1.1	192.168.2.4	0x7553	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		35.175.88.90	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.366489887 CET	1.1.1.1	192.168.2.4	0x7553	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.234.169.62	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.366489887 CET	1.1.1.1	192.168.2.4	0x7553	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.231.201.217	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.366489887 CET	1.1.1.1	192.168.2.4	0x7553	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.83.234.14	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.366775990 CET	1.1.1.1	192.168.2.4	0xc950	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.366775990 CET	1.1.1.1	192.168.2.4	0xc950	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.367567062 CET	1.1.1.1	192.168.2.4	0x2203	No error (0)	visitor.omnitagjs.com	visitor-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.367762089 CET	1.1.1.1	192.168.2.4	0x4689	No error (0)	visitor.omnitagjs.com	visitor-usa02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.367762089 CET	1.1.1.1	192.168.2.4	0x4689	No error (0)	visitor-usa02.omnitagjs.com		195.244.31.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.367762089 CET	1.1.1.1	192.168.2.4	0x4689	No error (0)	visitor-usa02.omnitagjs.com		195.244.31.10	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.369975090 CET	1.1.1.1	192.168.2.4	0xa4f	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.369975090 CET	1.1.1.1	192.168.2.4	0xa4f	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.369975090 CET	1.1.1.1	192.168.2.4	0xa4f	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.370728970 CET	1.1.1.1	192.168.2.4	0x3033	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.370728970 CET	1.1.1.1	192.168.2.4	0x3033	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.370728970 CET	1.1.1.1	192.168.2.4	0x3033	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.371409893 CET	1.1.1.1	192.168.2.4	0xf7fd	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.374015093 CET	1.1.1.1	192.168.2.4	0x11e6	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.374912977 CET	1.1.1.1	192.168.2.4	0x91da	No error (0)	cs.media.net		23.222.200.28	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.506232023 CET	1.1.1.1	192.168.2.4	0x8c25	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.507100105 CET	1.1.1.1	192.168.2.4	0x3bb1	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.509380102 CET	1.1.1.1	192.168.2.4	0x83da	No error (0)	sb.scorecardresearch.com		108.139.47.92	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.509380102 CET	1.1.1.1	192.168.2.4	0x83da	No error (0)	sb.scorecardresearch.com		108.139.47.50	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.509380102 CET	1.1.1.1	192.168.2.4	0x83da	No error (0)	sb.scorecardresearch.com		108.139.47.108	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.509380102 CET	1.1.1.1	192.168.2.4	0x83da	No error (0)	sb.scorecardresearch.com		108.139.47.33	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.550148010 CET	1.1.1.1	192.168.2.4	0x9182	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.550148010 CET	1.1.1.1	192.168.2.4	0x9182	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.550148010 CET	1.1.1.1	192.168.2.4	0x9182	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.550160885 CET	1.1.1.1	192.168.2.4	0x5f13	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.550160885 CET	1.1.1.1	192.168.2.4	0x5f13	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.550160885 CET	1.1.1.1	192.168.2.4	0x5f13	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.550160885 CET	1.1.1.1	192.168.2.4	0x5f13	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.214.164.33	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.550160885 CET	1.1.1.1	192.168.2.4	0x5f13	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.90.95.196	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.550160885 CET	1.1.1.1	192.168.2.4	0x5f13	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.208.249.25	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.550160885 CET	1.1.1.1	192.168.2.4	0x5f13	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.218.59.136	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.550160885 CET	1.1.1.1	192.168.2.4	0x5f13	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.206.37.105	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.550160885 CET	1.1.1.1	192.168.2.4	0x5f13	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.224.64.60	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.550160885 CET	1.1.1.1	192.168.2.4	0x5f13	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.95.44.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.550160885 CET	1.1.1.1	192.168.2.4	0x5f13	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		23.21.169.14	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.550201893 CET	1.1.1.1	192.168.2.4	0xa0f6	No error (0)	i.clean.gg		34.95.69.49	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.554982901 CET	1.1.1.1	192.168.2.4	0x2392	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.554982901 CET	1.1.1.1	192.168.2.4	0x2392	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.557039976 CET	1.1.1.1	192.168.2.4	0xfe3	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.771369934 CET	1.1.1.1	192.168.2.4	0xb2e6	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.771369934 CET	1.1.1.1	192.168.2.4	0xb2e6	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.771548986 CET	1.1.1.1	192.168.2.4	0x76e5	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.771548986 CET	1.1.1.1	192.168.2.4	0x76e5	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.771548986 CET	1.1.1.1	192.168.2.4	0x76e5	No error (0)	spug-vac.pubmnet.com		8.28.7.84	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.995985985 CET	1.1.1.1	192.168.2.4	0x38bd	No error (0)	noa.yahoo.com	noa-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:34.995985985 CET	1.1.1.1	192.168.2.4	0x38bd	No error (0)	noa-atsv2.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:34.996241093 CET	1.1.1.1	192.168.2.4	0xb5c9	No error (0)	noa.yahoo.com	noa-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:35.020517111 CET	1.1.1.1	192.168.2.4	0xbff6	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:35.020517111 CET	1.1.1.1	192.168.2.4	0xbff6	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:35.020517111 CET	1.1.1.1	192.168.2.4	0xbff6	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.020531893 CET	1.1.1.1	192.168.2.4	0x6bfd	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:35.020531893 CET	1.1.1.1	192.168.2.4	0x6bfd	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:35.063711882 CET	1.1.1.1	192.168.2.4	0xbab9	No error (0)	sync.ipredictive.com		52.86.217.207	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.063711882 CET	1.1.1.1	192.168.2.4	0xbab9	No error (0)	sync.ipredictive.com		54.167.230.135	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.063711882 CET	1.1.1.1	192.168.2.4	0xbab9	No error (0)	sync.ipredictive.com		52.54.15.240	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.063711882 CET	1.1.1.1	192.168.2.4	0xbab9	No error (0)	sync.ipredictive.com		52.70.178.63	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.063711882 CET	1.1.1.1	192.168.2.4	0xbab9	No error (0)	sync.ipredictive.com		52.6.135.22	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.063711882 CET	1.1.1.1	192.168.2.4	0xbab9	No error (0)	sync.ipredictive.com		54.157.68.100	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.063711882 CET	1.1.1.1	192.168.2.4	0xbab9	No error (0)	sync.ipredictive.com		54.166.87.8	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.063711882 CET	1.1.1.1	192.168.2.4	0xbab9	No error (0)	sync.ipredictive.com		52.87.49.60	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.811939001 CET	1.1.1.1	192.168.2.4	0x4a06	No error (0)	lg1.hb.yahoo.net		23.43.243.50	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.811939001 CET	1.1.1.1	192.168.2.4	0x4a06	No error (0)	lg1.hb.yahoo.net		23.43.243.25	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.811939001 CET	1.1.1.1	192.168.2.4	0x4a06	No error (0)	lg1.hb.yahoo.net		23.43.243.51	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.811939001 CET	1.1.1.1	192.168.2.4	0x4a06	No error (0)	lg1.hb.yahoo.net		23.43.243.27	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.811939001 CET	1.1.1.1	192.168.2.4	0x4a06	No error (0)	lg1.hb.yahoo.net		23.43.243.34	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.811939001 CET	1.1.1.1	192.168.2.4	0x4a06	No error (0)	lg1.hb.yahoo.net		23.43.243.43	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.811939001 CET	1.1.1.1	192.168.2.4	0x4a06	No error (0)	lg1.hb.yahoo.net		23.43.243.49	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.811939001 CET	1.1.1.1	192.168.2.4	0x4a06	No error (0)	lg1.hb.yahoo.net		23.43.243.32	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.894141912 CET	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:35.894141912 CET	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.150	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.894141912 CET	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.121	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.894141912 CET	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.40	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.894141912 CET	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.172	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.894141912 CET	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.72	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.894141912 CET	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.73	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.894141912 CET	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.57	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.894141912 CET	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.56	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.894141912 CET	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.173	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.894141912 CET	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.120	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.894141912 CET	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.8	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.894141912 CET	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.151	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.894141912 CET	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.105	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.894141912 CET	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.137	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.894141912 CET	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.136	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.894141912 CET	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.9	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.894141912 CET	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.106	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.894141912 CET	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.41	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:35.894408941 CET	1.1.1.1	192.168.2.4	0x3bc3	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:36.136548042 CET	1.1.1.1	192.168.2.4	0xf713	No error (0)	googleads.g.doubleclick.net		172.253.122.156	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:36.136548042 CET	1.1.1.1	192.168.2.4	0xf713	No error (0)	googleads.g.doubleclick.net		172.253.122.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:36.138660908 CET	1.1.1.1	192.168.2.4	0xeef2	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Mar 29, 2024 01:41:36.145741940 CET	1.1.1.1	192.168.2.4	0x2170	No error (0)	a5589.casalemedia.com		209.204.229.30	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:36.254089117 CET	1.1.1.1	192.168.2.4	0x76	No error (0)	lg1.hb.yahoo.net		23.43.243.136	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:36.254089117 CET	1.1.1.1	192.168.2.4	0x76	No error (0)	lg1.hb.yahoo.net		23.43.243.169	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:36.254089117 CET	1.1.1.1	192.168.2.4	0x76	No error (0)	lg1.hb.yahoo.net		23.43.243.146	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:36.254089117 CET	1.1.1.1	192.168.2.4	0x76	No error (0)	lg1.hb.yahoo.net		23.43.243.137	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:36.254757881 CET	1.1.1.1	192.168.2.4	0x2d2f	No error (0)	prebid-ny.casalemedia.com		192.40.39.248	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:36.295476913 CET	1.1.1.1	192.168.2.4	0x230b	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:36.295476913 CET	1.1.1.1	192.168.2.4	0x230b	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:36.295476913 CET	1.1.1.1	192.168.2.4	0x230b	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:36.296212912 CET	1.1.1.1	192.168.2.4	0x3f30	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:36.296212912 CET	1.1.1.1	192.168.2.4	0x3f30	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:36.917190075 CET	1.1.1.1	192.168.2.4	0xc5f3	No error (0)	cs.lkqd.net		69.20.43.192	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.005594015 CET	1.1.1.1	192.168.2.4	0x6ec3	No error (0)	a3558.casalemedia.com		209.204.233.130	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.006283045 CET	1.1.1.1	192.168.2.4	0x48d7	No error (0)	bid.g.doubleclick.net		142.251.167.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.006283045 CET	1.1.1.1	192.168.2.4	0x48d7	No error (0)	bid.g.doubleclick.net		142.251.167.157	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.006283045 CET	1.1.1.1	192.168.2.4	0x48d7	No error (0)	bid.g.doubleclick.net		142.251.111.154	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.006283045 CET	1.1.1.1	192.168.2.4	0x48d7	No error (0)	bid.g.doubleclick.net		142.251.16.157	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.006283045 CET	1.1.1.1	192.168.2.4	0x48d7	No error (0)	bid.g.doubleclick.net		172.253.62.154	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.006283045 CET	1.1.1.1	192.168.2.4	0x48d7	No error (0)	bid.g.doubleclick.net		172.253.115.156	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.006283045 CET	1.1.1.1	192.168.2.4	0x48d7	No error (0)	bid.g.doubleclick.net		142.251.163.154	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.006283045 CET	1.1.1.1	192.168.2.4	0x48d7	No error (0)	bid.g.doubleclick.net		172.253.62.157	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.006283045 CET	1.1.1.1	192.168.2.4	0x48d7	No error (0)	bid.g.doubleclick.net		142.250.31.156	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.006283045 CET	1.1.1.1	192.168.2.4	0x48d7	No error (0)	bid.g.doubleclick.net		172.253.122.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.006283045 CET	1.1.1.1	192.168.2.4	0x48d7	No error (0)	bid.g.doubleclick.net		172.253.122.156	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.006283045 CET	1.1.1.1	192.168.2.4	0x48d7	No error (0)	bid.g.doubleclick.net		142.251.163.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.006283045 CET	1.1.1.1	192.168.2.4	0x48d7	No error (0)	bid.g.doubleclick.net		172.253.115.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.006283045 CET	1.1.1.1	192.168.2.4	0x48d7	No error (0)	bid.g.doubleclick.net		142.251.167.156	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.006283045 CET	1.1.1.1	192.168.2.4	0x48d7	No error (0)	bid.g.doubleclick.net		142.251.167.154	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.006283045 CET	1.1.1.1	192.168.2.4	0x48d7	No error (0)	bid.g.doubleclick.net		142.251.16.156	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.006520987 CET	1.1.1.1	192.168.2.4	0xfca8	No error (0)	bid.g.doubleclick.net			65	IN (0x0001)	false
Mar 29, 2024 01:41:37.083467007 CET	1.1.1.1	192.168.2.4	0x4a04	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.083467007 CET	1.1.1.1	192.168.2.4	0x4a04	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.083981991 CET	1.1.1.1	192.168.2.4	0x1d88	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.083981991 CET	1.1.1.1	192.168.2.4	0x1d88	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.083981991 CET	1.1.1.1	192.168.2.4	0x1d88	No error (0)	lga-direct-bgp.contextweb.com		198.148.27.131	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.394416094 CET	1.1.1.1	192.168.2.4	0xb0e3	No error (0)	mid.rkdms.com		34.193.223.137	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.394416094 CET	1.1.1.1	192.168.2.4	0xb0e3	No error (0)	mid.rkdms.com		52.204.171.179	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.398118973 CET	1.1.1.1	192.168.2.4	0xc290	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.398118973 CET	1.1.1.1	192.168.2.4	0xc290	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.399019003 CET	1.1.1.1	192.168.2.4	0xba58	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 29, 2024 01:41:37.410058975 CET	1.1.1.1	192.168.2.4	0xda6	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.410058975 CET	1.1.1.1	192.168.2.4	0xda6	No error (0)	idaas-ext.cph.liveintent.com		107.22.223.168	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.410058975 CET	1.1.1.1	192.168.2.4	0xda6	No error (0)	idaas-ext.cph.liveintent.com		34.200.9.9	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.410058975 CET	1.1.1.1	192.168.2.4	0xda6	No error (0)	idaas-ext.cph.liveintent.com		52.206.222.15	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.410058975 CET	1.1.1.1	192.168.2.4	0xda6	No error (0)	idaas-ext.cph.liveintent.com		34.196.176.115	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.410058975 CET	1.1.1.1	192.168.2.4	0xda6	No error (0)	idaas-ext.cph.liveintent.com		3.221.31.99	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.410058975 CET	1.1.1.1	192.168.2.4	0xda6	No error (0)	idaas-ext.cph.liveintent.com		3.214.19.47	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.410058975 CET	1.1.1.1	192.168.2.4	0xda6	No error (0)	idaas-ext.cph.liveintent.com		3.234.11.34	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.410058975 CET	1.1.1.1	192.168.2.4	0xda6	No error (0)	idaas-ext.cph.liveintent.com		3.225.226.136	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.410329103 CET	1.1.1.1	192.168.2.4	0xa2c2	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.410329103 CET	1.1.1.1	192.168.2.4	0xa2c2	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.410921097 CET	1.1.1.1	192.168.2.4	0xd15e	No error (0)	rtb.adentifi.com		54.236.94.254	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.410921097 CET	1.1.1.1	192.168.2.4	0xd15e	No error (0)	rtb.adentifi.com		54.204.233.13	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.410921097 CET	1.1.1.1	192.168.2.4	0xd15e	No error (0)	rtb.adentifi.com		23.22.126.75	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.410921097 CET	1.1.1.1	192.168.2.4	0xd15e	No error (0)	rtb.adentifi.com		3.221.141.3	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.410921097 CET	1.1.1.1	192.168.2.4	0xd15e	No error (0)	rtb.adentifi.com		54.227.94.79	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.410921097 CET	1.1.1.1	192.168.2.4	0xd15e	No error (0)	rtb.adentifi.com		54.88.74.145	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.411346912 CET	1.1.1.1	192.168.2.4	0x44d9	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.411346912 CET	1.1.1.1	192.168.2.4	0x44d9	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.411346912 CET	1.1.1.1	192.168.2.4	0x44d9	No error (0)	zemanta-nychi2.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.411346912 CET	1.1.1.1	192.168.2.4	0x44d9	No error (0)	nydc1.outbrain.org		70.42.32.191	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.411454916 CET	1.1.1.1	192.168.2.4	0x73d0	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.411454916 CET	1.1.1.1	192.168.2.4	0x73d0	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.411454916 CET	1.1.1.1	192.168.2.4	0x73d0	No error (0)	zemanta-nychi2.outbrain.org	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.411921978 CET	1.1.1.1	192.168.2.4	0xf166	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.413099051 CET	1.1.1.1	192.168.2.4	0xd1e0	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.413099051 CET	1.1.1.1	192.168.2.4	0xd1e0	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.413099051 CET	1.1.1.1	192.168.2.4	0xd1e0	No error (0)	global.px.quantserve.com		192.184.68.166	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.413099051 CET	1.1.1.1	192.168.2.4	0xd1e0	No error (0)	global.px.quantserve.com		192.184.68.228	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.413099051 CET	1.1.1.1	192.168.2.4	0xd1e0	No error (0)	global.px.quantserve.com		192.184.68.134	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.413099051 CET	1.1.1.1	192.168.2.4	0xd1e0	No error (0)	global.px.quantserve.com		192.184.68.254	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.413099051 CET	1.1.1.1	192.168.2.4	0xd1e0	No error (0)	global.px.quantserve.com		192.184.68.215	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.500143051 CET	1.1.1.1	192.168.2.4	0x2fb2	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.500143051 CET	1.1.1.1	192.168.2.4	0x2fb2	No error (0)	image4-v2.pubmnet.com	spug-nje1pb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.500143051 CET	1.1.1.1	192.168.2.4	0x2fb2	No error (0)	spug-nje1pb.pubmnet.com		207.65.37.182	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.500519037 CET	1.1.1.1	192.168.2.4	0x2e3	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.500519037 CET	1.1.1.1	192.168.2.4	0x2e3	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.522139072 CET	1.1.1.1	192.168.2.4	0x6a9e	No error (0)	odr.mookie1.com	tagr-gcp-odr-use1.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.522139072 CET	1.1.1.1	192.168.2.4	0x6a9e	No error (0)	tagr-gcp-odr-use1.mookie1.com		35.190.90.30	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.522644043 CET	1.1.1.1	192.168.2.4	0x13bc	No error (0)	odr.mookie1.com	tagr-gcp-odr-use1.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.949270964 CET	1.1.1.1	192.168.2.4	0x3a81	No error (0)	www.google.com		172.253.115.105	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.949270964 CET	1.1.1.1	192.168.2.4	0x3a81	No error (0)	www.google.com		172.253.115.106	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.949270964 CET	1.1.1.1	192.168.2.4	0x3a81	No error (0)	www.google.com		172.253.115.104	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.949270964 CET	1.1.1.1	192.168.2.4	0x3a81	No error (0)	www.google.com		172.253.115.99	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.949270964 CET	1.1.1.1	192.168.2.4	0x3a81	No error (0)	www.google.com		172.253.115.147	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.949270964 CET	1.1.1.1	192.168.2.4	0x3a81	No error (0)	www.google.com		172.253.115.103	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.949525118 CET	1.1.1.1	192.168.2.4	0x41f3	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 29, 2024 01:41:37.993799925 CET	1.1.1.1	192.168.2.4	0x307c	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.993799925 CET	1.1.1.1	192.168.2.4	0x307c	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		35.169.97.227	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.993799925 CET	1.1.1.1	192.168.2.4	0x307c	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.206.160.179	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.993799925 CET	1.1.1.1	192.168.2.4	0x307c	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.206.29.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.993799925 CET	1.1.1.1	192.168.2.4	0x307c	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		107.22.88.141	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.995174885 CET	1.1.1.1	192.168.2.4	0x5c12	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.998378992 CET	1.1.1.1	192.168.2.4	0x7ac2	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.998426914 CET	1.1.1.1	192.168.2.4	0xd457	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.998426914 CET	1.1.1.1	192.168.2.4	0xd457	No error (0)	securepubads46.g.doubleclick.net		172.253.122.156	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.998426914 CET	1.1.1.1	192.168.2.4	0xd457	No error (0)	securepubads46.g.doubleclick.net		172.253.122.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:37.999609947 CET	1.1.1.1	192.168.2.4	0xe030	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.999609947 CET	1.1.1.1	192.168.2.4	0xe030	No error (0)	image4-v2.pubmnet.com	spug-nje1pb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:37.999609947 CET	1.1.1.1	192.168.2.4	0xe030	No error (0)	spug-nje1pb.pubmnet.com		207.65.37.182	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.001346111 CET	1.1.1.1	192.168.2.4	0x598d	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.001346111 CET	1.1.1.1	192.168.2.4	0x598d	No error (0)	image4-v2.pubmnet.com	spug-nje1pb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.001471996 CET	1.1.1.1	192.168.2.4	0x3cb	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.001471996 CET	1.1.1.1	192.168.2.4	0x3cb	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.002648115 CET	1.1.1.1	192.168.2.4	0x893e	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.002648115 CET	1.1.1.1	192.168.2.4	0x893e	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.002648115 CET	1.1.1.1	192.168.2.4	0x893e	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.002648115 CET	1.1.1.1	192.168.2.4	0x893e	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.012860060 CET	1.1.1.1	192.168.2.4	0x4d85	No error (0)	a5589.casalemedia.com		209.204.229.30	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.014764071 CET	1.1.1.1	192.168.2.4	0xbc2c	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.014764071 CET	1.1.1.1	192.168.2.4	0xbc2c	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.015050888 CET	1.1.1.1	192.168.2.4	0xaedc	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.015050888 CET	1.1.1.1	192.168.2.4	0xaedc	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.015050888 CET	1.1.1.1	192.168.2.4	0xaedc	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.023332119 CET	1.1.1.1	192.168.2.4	0x7caa	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.023332119 CET	1.1.1.1	192.168.2.4	0x7caa	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.023889065 CET	1.1.1.1	192.168.2.4	0xa5f7	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.023889065 CET	1.1.1.1	192.168.2.4	0xa5f7	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.023889065 CET	1.1.1.1	192.168.2.4	0xa5f7	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.032116890 CET	1.1.1.1	192.168.2.4	0xa80d	No error (0)	lg1.hb.yahoo.net		23.43.243.147	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.032116890 CET	1.1.1.1	192.168.2.4	0xa80d	No error (0)	lg1.hb.yahoo.net		23.43.243.161	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.032116890 CET	1.1.1.1	192.168.2.4	0xa80d	No error (0)	lg1.hb.yahoo.net		23.43.243.170	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.039199114 CET	1.1.1.1	192.168.2.4	0xadbb	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.040693998 CET	1.1.1.1	192.168.2.4	0x1d4d	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.040792942 CET	1.1.1.1	192.168.2.4	0xde26	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.043219090 CET	1.1.1.1	192.168.2.4	0xdf57	No error (0)	a3558.casalemedia.com		209.204.233.130	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.050916910 CET	1.1.1.1	192.168.2.4	0xe05e	No error (0)	cs.lkqd.net		69.20.43.192	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.052248955 CET	1.1.1.1	192.168.2.4	0x19d6	No error (0)	bid.g.doubleclick.net			65	IN (0x0001)	false
Mar 29, 2024 01:41:38.052274942 CET	1.1.1.1	192.168.2.4	0xd447	No error (0)	bid.g.doubleclick.net		172.253.115.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.052274942 CET	1.1.1.1	192.168.2.4	0xd447	No error (0)	bid.g.doubleclick.net		172.253.115.156	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.052274942 CET	1.1.1.1	192.168.2.4	0xd447	No error (0)	bid.g.doubleclick.net		172.253.122.156	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.052274942 CET	1.1.1.1	192.168.2.4	0xd447	No error (0)	bid.g.doubleclick.net		172.253.63.154	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.052274942 CET	1.1.1.1	192.168.2.4	0xd447	No error (0)	bid.g.doubleclick.net		172.253.63.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.052274942 CET	1.1.1.1	192.168.2.4	0xd447	No error (0)	bid.g.doubleclick.net		142.251.167.157	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.052274942 CET	1.1.1.1	192.168.2.4	0xd447	No error (0)	bid.g.doubleclick.net		142.251.16.157	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.052274942 CET	1.1.1.1	192.168.2.4	0xd447	No error (0)	bid.g.doubleclick.net		142.251.16.156	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.052274942 CET	1.1.1.1	192.168.2.4	0xd447	No error (0)	bid.g.doubleclick.net		172.253.62.154	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.052274942 CET	1.1.1.1	192.168.2.4	0xd447	No error (0)	bid.g.doubleclick.net		172.253.62.157	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.052274942 CET	1.1.1.1	192.168.2.4	0xd447	No error (0)	bid.g.doubleclick.net		142.251.163.154	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.052274942 CET	1.1.1.1	192.168.2.4	0xd447	No error (0)	bid.g.doubleclick.net		172.253.122.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.052274942 CET	1.1.1.1	192.168.2.4	0xd447	No error (0)	bid.g.doubleclick.net		142.251.167.156	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.052274942 CET	1.1.1.1	192.168.2.4	0xd447	No error (0)	bid.g.doubleclick.net		142.251.163.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.052274942 CET	1.1.1.1	192.168.2.4	0xd447	No error (0)	bid.g.doubleclick.net		142.251.167.154	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.052274942 CET	1.1.1.1	192.168.2.4	0xd447	No error (0)	bid.g.doubleclick.net		142.251.167.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.056452036 CET	1.1.1.1	192.168.2.4	0x7080	No error (0)	cm.g.doubleclick.net		142.251.167.154	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.056452036 CET	1.1.1.1	192.168.2.4	0x7080	No error (0)	cm.g.doubleclick.net		142.251.167.156	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.056452036 CET	1.1.1.1	192.168.2.4	0x7080	No error (0)	cm.g.doubleclick.net		142.251.167.157	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.056452036 CET	1.1.1.1	192.168.2.4	0x7080	No error (0)	cm.g.doubleclick.net		142.251.167.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.056838989 CET	1.1.1.1	192.168.2.4	0x39ae	No error (0)	s.amazon-adsystem.com		52.46.130.91	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.098006964 CET	1.1.1.1	192.168.2.4	0xc05d	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.098743916 CET	1.1.1.1	192.168.2.4	0x5377	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.098743916 CET	1.1.1.1	192.168.2.4	0x5377	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.154084921 CET	1.1.1.1	192.168.2.4	0x48ef	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.154084921 CET	1.1.1.1	192.168.2.4	0x48ef	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.154084921 CET	1.1.1.1	192.168.2.4	0x48ef	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.154084921 CET	1.1.1.1	192.168.2.4	0x48ef	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.154084921 CET	1.1.1.1	192.168.2.4	0x48ef	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.154098034 CET	1.1.1.1	192.168.2.4	0xa6ea	No error (0)	cdn.doubleverify.com	cdn.doubleverify.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.154112101 CET	1.1.1.1	192.168.2.4	0x1e0e	No error (0)	cdn.doubleverify.com	cdn.doubleverify.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.154123068 CET	1.1.1.1	192.168.2.4	0x9fa5	No error (0)	s0.2mdn.net		142.251.163.148	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.154123068 CET	1.1.1.1	192.168.2.4	0x9fa5	No error (0)	s0.2mdn.net		142.251.163.149	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.236845016 CET	1.1.1.1	192.168.2.4	0xb137	No error (0)	ad.doubleclick.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.236845016 CET	1.1.1.1	192.168.2.4	0xb137	No error (0)	ad.doubleclick.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.237234116 CET	1.1.1.1	192.168.2.4	0x6c8b	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 29, 2024 01:41:38.237895012 CET	1.1.1.1	192.168.2.4	0x4100	No error (0)	c.evidon.com	newwildcard.evidon.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.237983942 CET	1.1.1.1	192.168.2.4	0x8263	No error (0)	c.evidon.com	newwildcard.evidon.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.239388943 CET	1.1.1.1	192.168.2.4	0x297a	No error (0)	ford.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.239388943 CET	1.1.1.1	192.168.2.4	0x297a	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.239388943 CET	1.1.1.1	192.168.2.4	0x297a	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.239959002 CET	1.1.1.1	192.168.2.4	0x66f6	No error (0)	ford.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.239959002 CET	1.1.1.1	192.168.2.4	0x66f6	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.239959002 CET	1.1.1.1	192.168.2.4	0x66f6	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.239959002 CET	1.1.1.1	192.168.2.4	0x66f6	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.41.168.67	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.239959002 CET	1.1.1.1	192.168.2.4	0x66f6	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		35.83.124.239	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.239959002 CET	1.1.1.1	192.168.2.4	0x66f6	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.40.174.159	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.239959002 CET	1.1.1.1	192.168.2.4	0x66f6	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		54.191.97.222	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.239959002 CET	1.1.1.1	192.168.2.4	0x66f6	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		44.233.207.130	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.239959002 CET	1.1.1.1	192.168.2.4	0x66f6	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		44.233.104.234	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.239959002 CET	1.1.1.1	192.168.2.4	0x66f6	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		35.83.103.149	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.239959002 CET	1.1.1.1	192.168.2.4	0x66f6	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		100.20.48.124	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.273488998 CET	1.1.1.1	192.168.2.4	0xf607	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.273488998 CET	1.1.1.1	192.168.2.4	0xf607	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.275264025 CET	1.1.1.1	192.168.2.4	0xbe7a	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.275264025 CET	1.1.1.1	192.168.2.4	0xbe7a	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.288259983 CET	1.1.1.1	192.168.2.4	0xb60f	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.288384914 CET	1.1.1.1	192.168.2.4	0x96ce	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.288384914 CET	1.1.1.1	192.168.2.4	0x96ce	No error (0)	cdn.w55c.net		52.54.57.187	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.288384914 CET	1.1.1.1	192.168.2.4	0x96ce	No error (0)	cdn.w55c.net		52.73.176.61	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.288384914 CET	1.1.1.1	192.168.2.4	0x96ce	No error (0)	cdn.w55c.net		54.166.48.10	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.288384914 CET	1.1.1.1	192.168.2.4	0x96ce	No error (0)	cdn.w55c.net		54.175.248.252	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.288384914 CET	1.1.1.1	192.168.2.4	0x96ce	No error (0)	cdn.w55c.net		54.156.21.247	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.288384914 CET	1.1.1.1	192.168.2.4	0x96ce	No error (0)	cdn.w55c.net		52.7.252.24	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.288384914 CET	1.1.1.1	192.168.2.4	0x96ce	No error (0)	cdn.w55c.net		54.167.117.6	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.288384914 CET	1.1.1.1	192.168.2.4	0x96ce	No error (0)	cdn.w55c.net		52.86.126.204	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.603349924 CET	1.1.1.1	192.168.2.4	0x2f53	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.603697062 CET	1.1.1.1	192.168.2.4	0x5f56	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.603697062 CET	1.1.1.1	192.168.2.4	0x5f56	No error (0)	adserver.technoratimedia.com		150.136.25.38	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.610189915 CET	1.1.1.1	192.168.2.4	0x3537	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.611294031 CET	1.1.1.1	192.168.2.4	0xe659	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.611871004 CET	1.1.1.1	192.168.2.4	0x5836	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.611871004 CET	1.1.1.1	192.168.2.4	0x5836	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		44.222.46.243	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.611871004 CET	1.1.1.1	192.168.2.4	0x5836	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		34.203.68.24	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.611871004 CET	1.1.1.1	192.168.2.4	0x5836	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		52.73.191.19	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.611871004 CET	1.1.1.1	192.168.2.4	0x5836	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		18.206.50.161	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.612104893 CET	1.1.1.1	192.168.2.4	0x8ba6	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.612323046 CET	1.1.1.1	192.168.2.4	0x7f09	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.612323046 CET	1.1.1.1	192.168.2.4	0x7f09	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.645869017 CET	1.1.1.1	192.168.2.4	0x6877	No error (0)	sync.srv.stackadapt.com		54.156.138.144	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.645869017 CET	1.1.1.1	192.168.2.4	0x6877	No error (0)	sync.srv.stackadapt.com		54.210.145.203	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.645869017 CET	1.1.1.1	192.168.2.4	0x6877	No error (0)	sync.srv.stackadapt.com		54.145.45.250	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.645869017 CET	1.1.1.1	192.168.2.4	0x6877	No error (0)	sync.srv.stackadapt.com		54.198.227.184	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.645869017 CET	1.1.1.1	192.168.2.4	0x6877	No error (0)	sync.srv.stackadapt.com		54.152.60.86	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.645869017 CET	1.1.1.1	192.168.2.4	0x6877	No error (0)	sync.srv.stackadapt.com		54.164.17.132	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.645869017 CET	1.1.1.1	192.168.2.4	0x6877	No error (0)	sync.srv.stackadapt.com		54.145.153.101	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.645869017 CET	1.1.1.1	192.168.2.4	0x6877	No error (0)	sync.srv.stackadapt.com		54.172.158.143	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.678530931 CET	1.1.1.1	192.168.2.4	0x8025	No error (0)	ssp-sync.criteo.com	ssp-sync.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.678786993 CET	1.1.1.1	192.168.2.4	0x5ba	No error (0)	ssp-sync.criteo.com	ssp-sync.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.678786993 CET	1.1.1.1	192.168.2.4	0x5ba	No error (0)	ssp-sync.va1.vip.prod.criteo.com		74.119.119.73	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:38.774034023 CET	1.1.1.1	192.168.2.4	0x7bab	No error (0)	aol-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.775446892 CET	1.1.1.1	192.168.2.4	0xcd3c	No error (0)	aol-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:38.851134062 CET	1.1.1.1	192.168.2.4	0x4c2f	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.082928896 CET	1.1.1.1	192.168.2.4	0x79d7	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:39.082928896 CET	1.1.1.1	192.168.2.4	0x79d7	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:39.082928896 CET	1.1.1.1	192.168.2.4	0x79d7	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.082928896 CET	1.1.1.1	192.168.2.4	0x79d7	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.082928896 CET	1.1.1.1	192.168.2.4	0x79d7	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.082928896 CET	1.1.1.1	192.168.2.4	0x79d7	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.082928896 CET	1.1.1.1	192.168.2.4	0x79d7	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.082928896 CET	1.1.1.1	192.168.2.4	0x79d7	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.082928896 CET	1.1.1.1	192.168.2.4	0x79d7	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.082928896 CET	1.1.1.1	192.168.2.4	0x79d7	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.082928896 CET	1.1.1.1	192.168.2.4	0x79d7	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.082928896 CET	1.1.1.1	192.168.2.4	0x79d7	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.082928896 CET	1.1.1.1	192.168.2.4	0x79d7	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.082928896 CET	1.1.1.1	192.168.2.4	0x79d7	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.084383011 CET	1.1.1.1	192.168.2.4	0x2822	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:39.084383011 CET	1.1.1.1	192.168.2.4	0x2822	No error (0)	s.dsp-prod.demandbase.com		34.96.71.22	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.084852934 CET	1.1.1.1	192.168.2.4	0xdae7	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:39.085061073 CET	1.1.1.1	192.168.2.4	0x9187	No error (0)	casale-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:39.086363077 CET	1.1.1.1	192.168.2.4	0x5ea0	No error (0)	dmp.brand-display.com		34.160.19.107	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.090984106 CET	1.1.1.1	192.168.2.4	0xf411	No error (0)	cm.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.101634979 CET	1.1.1.1	192.168.2.4	0x14bb	No error (0)	casale-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:39.575995922 CET	1.1.1.1	192.168.2.4	0x6663	No error (0)	ad.doubleclick.net		142.251.167.149	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.575995922 CET	1.1.1.1	192.168.2.4	0x6663	No error (0)	ad.doubleclick.net		142.251.167.148	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.576514006 CET	1.1.1.1	192.168.2.4	0x1ebd	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 29, 2024 01:41:39.667248964 CET	1.1.1.1	192.168.2.4	0x3fcc	No error (0)	c.betrad.com	newwildcard.evidon.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:39.668181896 CET	1.1.1.1	192.168.2.4	0x5d17	No error (0)	c.betrad.com	newwildcard.evidon.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:39.677933931 CET	1.1.1.1	192.168.2.4	0xde90	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:39.677933931 CET	1.1.1.1	192.168.2.4	0xde90	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:39.677933931 CET	1.1.1.1	192.168.2.4	0xde90	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.102	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.677933931 CET	1.1.1.1	192.168.2.4	0xde90	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.87	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.677933931 CET	1.1.1.1	192.168.2.4	0xde90	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.113	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.677933931 CET	1.1.1.1	192.168.2.4	0xde90	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.48	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.678145885 CET	1.1.1.1	192.168.2.4	0x2393	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:39.678145885 CET	1.1.1.1	192.168.2.4	0x2393	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:39.753009081 CET	1.1.1.1	192.168.2.4	0xf703	No error (0)	pool.admedo.com	pool-com.adizio.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:39.753009081 CET	1.1.1.1	192.168.2.4	0xf703	No error (0)	pool-com.adizio.iponweb.net	adizio.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:39.753009081 CET	1.1.1.1	192.168.2.4	0xf703	No error (0)	adizio.geo.iponweb.net		35.210.53.219	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:39.767808914 CET	1.1.1.1	192.168.2.4	0x2388	No error (0)	pool.admedo.com	pool-com.adizio.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:39.767808914 CET	1.1.1.1	192.168.2.4	0x2388	No error (0)	pool-com.adizio.iponweb.net	adizio.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.037945032 CET	1.1.1.1	192.168.2.4	0x1492	No error (0)	rtb0.doubleverify.com	bs-geo.dvgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.037945032 CET	1.1.1.1	192.168.2.4	0x1492	No error (0)	rtbc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.037945032 CET	1.1.1.1	192.168.2.4	0x1492	No error (0)	tps-ue1.doubleverify.com		34.117.228.201	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.037997007 CET	1.1.1.1	192.168.2.4	0x71ee	No error (0)	rtb0.doubleverify.com	bs-geo.dvgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.037997007 CET	1.1.1.1	192.168.2.4	0x71ee	No error (0)	rtbc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.044362068 CET	1.1.1.1	192.168.2.4	0x5219	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.045401096 CET	1.1.1.1	192.168.2.4	0x8fce	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.045401096 CET	1.1.1.1	192.168.2.4	0x8fce	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.045401096 CET	1.1.1.1	192.168.2.4	0x8fce	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.045401096 CET	1.1.1.1	192.168.2.4	0x8fce	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		44.195.161.142	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.045401096 CET	1.1.1.1	192.168.2.4	0x8fce	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.217.2.212	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.045401096 CET	1.1.1.1	192.168.2.4	0x8fce	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.88.150.5	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.045401096 CET	1.1.1.1	192.168.2.4	0x8fce	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.213.4.28	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.045401096 CET	1.1.1.1	192.168.2.4	0x8fce	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		18.235.73.61	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.045401096 CET	1.1.1.1	192.168.2.4	0x8fce	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.197.119.23	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.045401096 CET	1.1.1.1	192.168.2.4	0x8fce	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		52.201.42.86	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.045401096 CET	1.1.1.1	192.168.2.4	0x8fce	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		52.20.162.114	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.046155930 CET	1.1.1.1	192.168.2.4	0x9dae	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.046155930 CET	1.1.1.1	192.168.2.4	0x9dae	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.046155930 CET	1.1.1.1	192.168.2.4	0x9dae	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.046411991 CET	1.1.1.1	192.168.2.4	0xbc2f	No error (0)	rtb.gumgum.com		54.81.188.163	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.046411991 CET	1.1.1.1	192.168.2.4	0xbc2f	No error (0)	rtb.gumgum.com		18.210.160.10	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.046411991 CET	1.1.1.1	192.168.2.4	0xbc2f	No error (0)	rtb.gumgum.com		44.220.113.62	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.046411991 CET	1.1.1.1	192.168.2.4	0xbc2f	No error (0)	rtb.gumgum.com		44.208.175.182	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.046411991 CET	1.1.1.1	192.168.2.4	0xbc2f	No error (0)	rtb.gumgum.com		54.159.33.150	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.046411991 CET	1.1.1.1	192.168.2.4	0xbc2f	No error (0)	rtb.gumgum.com		3.222.57.186	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.046411991 CET	1.1.1.1	192.168.2.4	0xbc2f	No error (0)	rtb.gumgum.com		52.72.54.211	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.046411991 CET	1.1.1.1	192.168.2.4	0xbc2f	No error (0)	rtb.gumgum.com		54.82.87.47	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.273956060 CET	1.1.1.1	192.168.2.4	0xea5c	No error (0)	i.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.282310009 CET	1.1.1.1	192.168.2.4	0x5810	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 29, 2024 01:41:40.283010006 CET	1.1.1.1	192.168.2.4	0xbbf9	No error (0)	ad.doubleclick.net		142.251.167.148	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.283010006 CET	1.1.1.1	192.168.2.4	0xbbf9	No error (0)	ad.doubleclick.net		142.251.167.149	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.284007072 CET	1.1.1.1	192.168.2.4	0x23af	No error (0)	ad.doubleclick.net		142.251.167.148	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.284007072 CET	1.1.1.1	192.168.2.4	0x23af	No error (0)	ad.doubleclick.net		142.251.167.149	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.284049034 CET	1.1.1.1	192.168.2.4	0xde03	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 29, 2024 01:41:40.284728050 CET	1.1.1.1	192.168.2.4	0x6642	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.284728050 CET	1.1.1.1	192.168.2.4	0x6642	No error (0)	match-us-east-1-ecs.sharethrough.com		44.209.20.160	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.284728050 CET	1.1.1.1	192.168.2.4	0x6642	No error (0)	match-us-east-1-ecs.sharethrough.com		34.194.99.5	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.284728050 CET	1.1.1.1	192.168.2.4	0x6642	No error (0)	match-us-east-1-ecs.sharethrough.com		54.81.60.186	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.284728050 CET	1.1.1.1	192.168.2.4	0x6642	No error (0)	match-us-east-1-ecs.sharethrough.com		52.4.117.138	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.284728050 CET	1.1.1.1	192.168.2.4	0x6642	No error (0)	match-us-east-1-ecs.sharethrough.com		3.220.79.159	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.284728050 CET	1.1.1.1	192.168.2.4	0x6642	No error (0)	match-us-east-1-ecs.sharethrough.com		34.230.154.32	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.284728050 CET	1.1.1.1	192.168.2.4	0x6642	No error (0)	match-us-east-1-ecs.sharethrough.com		3.216.0.45	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.284728050 CET	1.1.1.1	192.168.2.4	0x6642	No error (0)	match-us-east-1-ecs.sharethrough.com		44.198.196.248	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.286120892 CET	1.1.1.1	192.168.2.4	0x21cf	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.339862108 CET	1.1.1.1	192.168.2.4	0xad3e	No error (0)	ums.acuityplatform.com		69.90.254.78	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.432713985 CET	1.1.1.1	192.168.2.4	0x168	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.432713985 CET	1.1.1.1	192.168.2.4	0x168	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.432713985 CET	1.1.1.1	192.168.2.4	0x168	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.433147907 CET	1.1.1.1	192.168.2.4	0x74bf	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.584443092 CET	1.1.1.1	192.168.2.4	0x3eb6	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.584443092 CET	1.1.1.1	192.168.2.4	0x3eb6	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.238.211	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.584443092 CET	1.1.1.1	192.168.2.4	0x3eb6	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.183.94	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.584443092 CET	1.1.1.1	192.168.2.4	0x3eb6	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.183.97	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.584443092 CET	1.1.1.1	192.168.2.4	0x3eb6	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.244.54	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.584443092 CET	1.1.1.1	192.168.2.4	0x3eb6	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.249.171	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.584443092 CET	1.1.1.1	192.168.2.4	0x3eb6	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.241.54	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.584443092 CET	1.1.1.1	192.168.2.4	0x3eb6	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.160.59	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.584443092 CET	1.1.1.1	192.168.2.4	0x3eb6	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.229.219	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.584460974 CET	1.1.1.1	192.168.2.4	0xe17f	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.680027008 CET	1.1.1.1	192.168.2.4	0x3df3	No error (0)	gocm.c.appier.net	gocm-geo.c.appier.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.680453062 CET	1.1.1.1	192.168.2.4	0x668	No error (0)	gocm.c.appier.net	gocm-geo.c.appier.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.754105091 CET	1.1.1.1	192.168.2.4	0x293f	No error (0)	tps.doubleverify.com	tps-geo.dvgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.754105091 CET	1.1.1.1	192.168.2.4	0x293f	No error (0)	tpsc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.754105091 CET	1.1.1.1	192.168.2.4	0x293f	No error (0)	tps-ue1.doubleverify.com		34.117.228.201	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.756057024 CET	1.1.1.1	192.168.2.4	0xb9b	No error (0)	tps.doubleverify.com	tps-geo.dvgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.756057024 CET	1.1.1.1	192.168.2.4	0xb9b	No error (0)	tpsc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.756066084 CET	1.1.1.1	192.168.2.4	0x20b	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.756066084 CET	1.1.1.1	192.168.2.4	0x20b	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.756227016 CET	1.1.1.1	192.168.2.4	0x67d2	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 29, 2024 01:41:40.834677935 CET	1.1.1.1	192.168.2.4	0x6aa4	No error (0)	ipac.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:40.970289946 CET	1.1.1.1	192.168.2.4	0x8d50	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:40.970771074 CET	1.1.1.1	192.168.2.4	0x71dc	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:41.002949953 CET	1.1.1.1	192.168.2.4	0x935a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:41.002949953 CET	1.1.1.1	192.168.2.4	0x935a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.119405031 CET	1.1.1.1	192.168.2.4	0xe17f	No error (0)	thrtle.com		34.225.72.47	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.119405031 CET	1.1.1.1	192.168.2.4	0xe17f	No error (0)	thrtle.com		107.21.29.170	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.119405031 CET	1.1.1.1	192.168.2.4	0xe17f	No error (0)	thrtle.com		52.203.90.63	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.119405031 CET	1.1.1.1	192.168.2.4	0xe17f	No error (0)	thrtle.com		34.192.94.3	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.119405031 CET	1.1.1.1	192.168.2.4	0xe17f	No error (0)	thrtle.com		67.202.50.136	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.119405031 CET	1.1.1.1	192.168.2.4	0xe17f	No error (0)	thrtle.com		3.210.126.173	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.161766052 CET	1.1.1.1	192.168.2.4	0x9f0b	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:41.162147045 CET	1.1.1.1	192.168.2.4	0x87de	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:41.162147045 CET	1.1.1.1	192.168.2.4	0x87de	No error (0)	widget.va1.vip.prod.criteo.com		74.119.119.150	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.164052010 CET	1.1.1.1	192.168.2.4	0xe076	No error (0)	crb.kargo.com		52.202.181.167	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.164052010 CET	1.1.1.1	192.168.2.4	0xe076	No error (0)	crb.kargo.com		52.22.143.242	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.164052010 CET	1.1.1.1	192.168.2.4	0xe076	No error (0)	crb.kargo.com		18.204.186.145	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.164052010 CET	1.1.1.1	192.168.2.4	0xe076	No error (0)	crb.kargo.com		3.209.218.8	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.164052010 CET	1.1.1.1	192.168.2.4	0xe076	No error (0)	crb.kargo.com		34.198.236.129	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.164052010 CET	1.1.1.1	192.168.2.4	0xe076	No error (0)	crb.kargo.com		3.94.60.39	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.165132999 CET	1.1.1.1	192.168.2.4	0x93f1	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:41.165132999 CET	1.1.1.1	192.168.2.4	0x93f1	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.54.190.52	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.165132999 CET	1.1.1.1	192.168.2.4	0x93f1	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		54.146.162.235	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.165132999 CET	1.1.1.1	192.168.2.4	0x93f1	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.6.28.237	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.165132999 CET	1.1.1.1	192.168.2.4	0x93f1	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.70.84.90	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.165132999 CET	1.1.1.1	192.168.2.4	0x93f1	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.73.47.87	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.165132999 CET	1.1.1.1	192.168.2.4	0x93f1	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.3.95.188	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.165132999 CET	1.1.1.1	192.168.2.4	0x93f1	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.22.88.168	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.165132999 CET	1.1.1.1	192.168.2.4	0x93f1	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.6.199.203	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.165486097 CET	1.1.1.1	192.168.2.4	0xb17f	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:41.166511059 CET	1.1.1.1	192.168.2.4	0x6c86	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:41.166615963 CET	1.1.1.1	192.168.2.4	0xc160	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:41.166874886 CET	1.1.1.1	192.168.2.4	0xf6a3	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.166884899 CET	1.1.1.1	192.168.2.4	0x3088	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:41.166982889 CET	1.1.1.1	192.168.2.4	0x5cc3	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:41.167330027 CET	1.1.1.1	192.168.2.4	0x7b9d	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:41.198904037 CET	1.1.1.1	192.168.2.4	0xe8a4	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:41.585985899 CET	1.1.1.1	192.168.2.4	0x2877	No error (0)	dsum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.585985899 CET	1.1.1.1	192.168.2.4	0x2877	No error (0)	dsum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:41.587061882 CET	1.1.1.1	192.168.2.4	0x8dbb	No error (0)	d.turn.com	d.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:41.587136030 CET	1.1.1.1	192.168.2.4	0x996a	No error (0)	d.turn.com	d.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:41.587425947 CET	1.1.1.1	192.168.2.4	0xf808	No error (0)	dsum.casalemedia.com			65	IN (0x0001)	false
Mar 29, 2024 01:41:42.475891113 CET	1.1.1.1	192.168.2.4	0xba44	No error (0)	ad.mrtnsvr.com		34.102.163.6	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.646347046 CET	1.1.1.1	192.168.2.4	0x3f46	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Mar 29, 2024 01:41:42.647085905 CET	1.1.1.1	192.168.2.4	0x66b4	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.647085905 CET	1.1.1.1	192.168.2.4	0x66b4	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.666655064 CET	1.1.1.1	192.168.2.4	0x4152	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:42.666917086 CET	1.1.1.1	192.168.2.4	0x715f	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:42.666917086 CET	1.1.1.1	192.168.2.4	0x715f	No error (0)	outspot2-ams.adx.opera.com		82.145.213.8	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.794457912 CET	1.1.1.1	192.168.2.4	0x7df7	No error (0)	core.iprom.net		195.5.165.20	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.929332972 CET	1.1.1.1	192.168.2.4	0x4e40	No error (0)	matching.truffle.bid		23.88.86.2	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.929332972 CET	1.1.1.1	192.168.2.4	0x4e40	No error (0)	matching.truffle.bid		162.55.120.196	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.949517965 CET	1.1.1.1	192.168.2.4	0xcb3	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.950164080 CET	1.1.1.1	192.168.2.4	0x9e28	No error (0)	bcp.crwdcntrl.net		44.219.90.173	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.950164080 CET	1.1.1.1	192.168.2.4	0x9e28	No error (0)	bcp.crwdcntrl.net		44.205.216.19	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.950164080 CET	1.1.1.1	192.168.2.4	0x9e28	No error (0)	bcp.crwdcntrl.net		34.232.211.121	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.950164080 CET	1.1.1.1	192.168.2.4	0x9e28	No error (0)	bcp.crwdcntrl.net		34.224.142.24	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.950164080 CET	1.1.1.1	192.168.2.4	0x9e28	No error (0)	bcp.crwdcntrl.net		107.23.193.229	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.950164080 CET	1.1.1.1	192.168.2.4	0x9e28	No error (0)	bcp.crwdcntrl.net		52.207.168.130	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.950164080 CET	1.1.1.1	192.168.2.4	0x9e28	No error (0)	bcp.crwdcntrl.net		34.198.123.133	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.950164080 CET	1.1.1.1	192.168.2.4	0x9e28	No error (0)	bcp.crwdcntrl.net		54.234.166.1	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.950304985 CET	1.1.1.1	192.168.2.4	0xf3f4	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.58	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.950304985 CET	1.1.1.1	192.168.2.4	0xf3f4	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.37	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.950304985 CET	1.1.1.1	192.168.2.4	0xf3f4	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.15	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.950304985 CET	1.1.1.1	192.168.2.4	0xf3f4	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.69	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.985347986 CET	1.1.1.1	192.168.2.4	0xe74f	No error (0)	tpsc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:42.985347986 CET	1.1.1.1	192.168.2.4	0xe74f	No error (0)	tps-ue1.doubleverify.com		34.117.228.201	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:42.985641956 CET	1.1.1.1	192.168.2.4	0xf0b0	No error (0)	tpsc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:43.068645954 CET	1.1.1.1	192.168.2.4	0x22e4	No error (0)	pmp.mxptint.net		38.98.69.175	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:43.164166927 CET	1.1.1.1	192.168.2.4	0xda24	No error (0)	sync.crwdcntrl.net		34.232.211.121	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:43.164166927 CET	1.1.1.1	192.168.2.4	0xda24	No error (0)	sync.crwdcntrl.net		107.23.193.229	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:43.164166927 CET	1.1.1.1	192.168.2.4	0xda24	No error (0)	sync.crwdcntrl.net		18.214.22.186	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:43.164166927 CET	1.1.1.1	192.168.2.4	0xda24	No error (0)	sync.crwdcntrl.net		52.207.168.130	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:43.164166927 CET	1.1.1.1	192.168.2.4	0xda24	No error (0)	sync.crwdcntrl.net		44.219.90.173	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:43.164166927 CET	1.1.1.1	192.168.2.4	0xda24	No error (0)	sync.crwdcntrl.net		34.224.142.24	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:43.164166927 CET	1.1.1.1	192.168.2.4	0xda24	No error (0)	sync.crwdcntrl.net		34.198.123.133	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:43.164166927 CET	1.1.1.1	192.168.2.4	0xda24	No error (0)	sync.crwdcntrl.net		44.205.216.19	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:43.403381109 CET	1.1.1.1	192.168.2.4	0xae65	No error (0)	s.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:43.403381109 CET	1.1.1.1	192.168.2.4	0xae65	No error (0)	s.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:43.404603004 CET	1.1.1.1	192.168.2.4	0x47f	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Mar 29, 2024 01:41:43.738235950 CET	1.1.1.1	192.168.2.4	0x9c19	No error (0)	rtbc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:43.741301060 CET	1.1.1.1	192.168.2.4	0x9770	No error (0)	rtbc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:43.741301060 CET	1.1.1.1	192.168.2.4	0x9770	No error (0)	tps-ue1.doubleverify.com		34.117.228.201	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:43.894860983 CET	1.1.1.1	192.168.2.4	0x2388	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:43.894860983 CET	1.1.1.1	192.168.2.4	0x2388	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:43.895277977 CET	1.1.1.1	192.168.2.4	0xe5ca	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.198182106 CET	1.1.1.1	192.168.2.4	0xd1a2	No error (0)	odr.mookie1.com	tagr-gcp-odr-use1.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.198626995 CET	1.1.1.1	192.168.2.4	0xb03	No error (0)	odr.mookie1.com	tagr-gcp-odr-use1.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.198626995 CET	1.1.1.1	192.168.2.4	0xb03	No error (0)	tagr-gcp-odr-use1.mookie1.com		35.190.90.30	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.204596043 CET	1.1.1.1	192.168.2.4	0x8e78	No error (0)	hb.yahoo.net		23.43.243.169	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.204596043 CET	1.1.1.1	192.168.2.4	0x8e78	No error (0)	hb.yahoo.net		23.43.243.136	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.204596043 CET	1.1.1.1	192.168.2.4	0x8e78	No error (0)	hb.yahoo.net		23.43.243.146	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.204596043 CET	1.1.1.1	192.168.2.4	0x8e78	No error (0)	hb.yahoo.net		23.43.243.137	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.210858107 CET	1.1.1.1	192.168.2.4	0x63e3	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.210858107 CET	1.1.1.1	192.168.2.4	0x63e3	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.211662054 CET	1.1.1.1	192.168.2.4	0x462e	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 29, 2024 01:41:44.346240044 CET	1.1.1.1	192.168.2.4	0x12f7	No error (0)	ad.doubleclick.net		142.251.16.149	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.346240044 CET	1.1.1.1	192.168.2.4	0x12f7	No error (0)	ad.doubleclick.net		142.251.16.148	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.346410990 CET	1.1.1.1	192.168.2.4	0x5767	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 29, 2024 01:41:44.349801064 CET	1.1.1.1	192.168.2.4	0xbab8	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.375720978 CET	1.1.1.1	192.168.2.4	0x91ea	No error (0)	l.evidon.com	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.375720978 CET	1.1.1.1	192.168.2.4	0x91ea	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		3.228.195.183	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.375720978 CET	1.1.1.1	192.168.2.4	0x91ea	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		34.231.239.183	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.375720978 CET	1.1.1.1	192.168.2.4	0x91ea	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		34.232.189.111	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.375720978 CET	1.1.1.1	192.168.2.4	0x91ea	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		54.89.171.38	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.375720978 CET	1.1.1.1	192.168.2.4	0x91ea	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		52.2.227.200	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.375720978 CET	1.1.1.1	192.168.2.4	0x91ea	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		3.208.252.17	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.376925945 CET	1.1.1.1	192.168.2.4	0xba96	No error (0)	l.evidon.com	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.511564970 CET	1.1.1.1	192.168.2.4	0x6773	No error (0)	s0.2mdn.net		142.251.16.149	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.511564970 CET	1.1.1.1	192.168.2.4	0x6773	No error (0)	s0.2mdn.net		142.251.16.148	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.590445042 CET	1.1.1.1	192.168.2.4	0x8bf4	No error (0)	ad.doubleclick.net		142.251.167.148	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.590445042 CET	1.1.1.1	192.168.2.4	0x8bf4	No error (0)	ad.doubleclick.net		142.251.167.149	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.590780020 CET	1.1.1.1	192.168.2.4	0xa6b1	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 29, 2024 01:41:44.592420101 CET	1.1.1.1	192.168.2.4	0x716c	No error (0)	ford.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.592420101 CET	1.1.1.1	192.168.2.4	0x716c	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.592420101 CET	1.1.1.1	192.168.2.4	0x716c	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.592420101 CET	1.1.1.1	192.168.2.4	0x716c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.20.162.91	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.592420101 CET	1.1.1.1	192.168.2.4	0x716c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.2.228.88	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.592420101 CET	1.1.1.1	192.168.2.4	0x716c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.238.61.171	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.592420101 CET	1.1.1.1	192.168.2.4	0x716c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.167.155.45	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.592420101 CET	1.1.1.1	192.168.2.4	0x716c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.208.238.164	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.592420101 CET	1.1.1.1	192.168.2.4	0x716c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.204.28.10	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.592420101 CET	1.1.1.1	192.168.2.4	0x716c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.211.136.228	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.592420101 CET	1.1.1.1	192.168.2.4	0x716c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.92.238.208	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.603789091 CET	1.1.1.1	192.168.2.4	0x8919	No error (0)	js-sec.indexww.com			65	IN (0x0001)	false
Mar 29, 2024 01:41:44.604059935 CET	1.1.1.1	192.168.2.4	0x1b82	No error (0)	js-sec.indexww.com		172.64.149.180	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.604059935 CET	1.1.1.1	192.168.2.4	0x1b82	No error (0)	js-sec.indexww.com		104.18.38.76	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.606226921 CET	1.1.1.1	192.168.2.4	0x7971	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.607017994 CET	1.1.1.1	192.168.2.4	0xf926	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.611113071 CET	1.1.1.1	192.168.2.4	0x10b	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 29, 2024 01:41:44.611627102 CET	1.1.1.1	192.168.2.4	0x1b1	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.611627102 CET	1.1.1.1	192.168.2.4	0x1b1	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.614372969 CET	1.1.1.1	192.168.2.4	0xc5c4	No error (0)	ford.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.614372969 CET	1.1.1.1	192.168.2.4	0xc5c4	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.614372969 CET	1.1.1.1	192.168.2.4	0xc5c4	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.628264904 CET	1.1.1.1	192.168.2.4	0xc1b2	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.628264904 CET	1.1.1.1	192.168.2.4	0xc1b2	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.628264904 CET	1.1.1.1	192.168.2.4	0xc1b2	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.48	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.628264904 CET	1.1.1.1	192.168.2.4	0xc1b2	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.113	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.628264904 CET	1.1.1.1	192.168.2.4	0xc1b2	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.102	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.628264904 CET	1.1.1.1	192.168.2.4	0xc1b2	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.87	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.628664017 CET	1.1.1.1	192.168.2.4	0xa8d7	No error (0)	c.evidon.com	newwildcard.evidon.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.628874063 CET	1.1.1.1	192.168.2.4	0xb73c	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.628874063 CET	1.1.1.1	192.168.2.4	0xb73c	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.629179955 CET	1.1.1.1	192.168.2.4	0xebc9	No error (0)	c.evidon.com	newwildcard.evidon.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.673167944 CET	1.1.1.1	192.168.2.4	0xa109	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.674756050 CET	1.1.1.1	192.168.2.4	0x434d	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:44.674756050 CET	1.1.1.1	192.168.2.4	0x434d	No error (0)	idaas6.cph.liveintent.com		52.203.99.111	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.674756050 CET	1.1.1.1	192.168.2.4	0x434d	No error (0)	idaas6.cph.liveintent.com		34.194.241.212	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.674756050 CET	1.1.1.1	192.168.2.4	0x434d	No error (0)	idaas6.cph.liveintent.com		34.194.29.142	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.740971088 CET	1.1.1.1	192.168.2.4	0x117c	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.740971088 CET	1.1.1.1	192.168.2.4	0x117c	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.807920933 CET	1.1.1.1	192.168.2.4	0x9b81	No error (0)	crb.kargo.com		52.202.181.167	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.807920933 CET	1.1.1.1	192.168.2.4	0x9b81	No error (0)	crb.kargo.com		18.204.186.145	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.807920933 CET	1.1.1.1	192.168.2.4	0x9b81	No error (0)	crb.kargo.com		3.94.60.39	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.807920933 CET	1.1.1.1	192.168.2.4	0x9b81	No error (0)	crb.kargo.com		34.198.236.129	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.807920933 CET	1.1.1.1	192.168.2.4	0x9b81	No error (0)	crb.kargo.com		52.22.143.242	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.807920933 CET	1.1.1.1	192.168.2.4	0x9b81	No error (0)	crb.kargo.com		3.209.218.8	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.847609043 CET	1.1.1.1	192.168.2.4	0xda1b	No error (0)	dsum.casalemedia.com			65	IN (0x0001)	false
Mar 29, 2024 01:41:44.847661972 CET	1.1.1.1	192.168.2.4	0x2495	No error (0)	dsum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.847661972 CET	1.1.1.1	192.168.2.4	0x2495	No error (0)	dsum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.850934029 CET	1.1.1.1	192.168.2.4	0xac4	No error (0)	thrtle.com		107.21.29.170	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.850934029 CET	1.1.1.1	192.168.2.4	0xac4	No error (0)	thrtle.com		3.210.126.173	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.850934029 CET	1.1.1.1	192.168.2.4	0xac4	No error (0)	thrtle.com		34.225.72.47	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.850934029 CET	1.1.1.1	192.168.2.4	0xac4	No error (0)	thrtle.com		52.203.90.63	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.850934029 CET	1.1.1.1	192.168.2.4	0xac4	No error (0)	thrtle.com		34.192.94.3	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.850934029 CET	1.1.1.1	192.168.2.4	0xac4	No error (0)	thrtle.com		67.202.50.136	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.904433966 CET	1.1.1.1	192.168.2.4	0xd0e0	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.105	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.904433966 CET	1.1.1.1	192.168.2.4	0xd0e0	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.111	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.904433966 CET	1.1.1.1	192.168.2.4	0xd0e0	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.49	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:44.904433966 CET	1.1.1.1	192.168.2.4	0xd0e0	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.47	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:45.058398008 CET	1.1.1.1	192.168.2.4	0x8135	No error (0)	bcp.crwdcntrl.net		52.207.168.130	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:45.058398008 CET	1.1.1.1	192.168.2.4	0x8135	No error (0)	bcp.crwdcntrl.net		34.224.142.24	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:45.058398008 CET	1.1.1.1	192.168.2.4	0x8135	No error (0)	bcp.crwdcntrl.net		34.232.211.121	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:45.058398008 CET	1.1.1.1	192.168.2.4	0x8135	No error (0)	bcp.crwdcntrl.net		44.205.216.19	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:45.058398008 CET	1.1.1.1	192.168.2.4	0x8135	No error (0)	bcp.crwdcntrl.net		44.219.90.173	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:45.058398008 CET	1.1.1.1	192.168.2.4	0x8135	No error (0)	bcp.crwdcntrl.net		54.234.166.1	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:45.058398008 CET	1.1.1.1	192.168.2.4	0x8135	No error (0)	bcp.crwdcntrl.net		34.198.123.133	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:45.058398008 CET	1.1.1.1	192.168.2.4	0x8135	No error (0)	bcp.crwdcntrl.net		18.207.42.67	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:45.063075066 CET	1.1.1.1	192.168.2.4	0x734	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:45.063075066 CET	1.1.1.1	192.168.2.4	0x734	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:45.063075066 CET	1.1.1.1	192.168.2.4	0x734	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:45.063075066 CET	1.1.1.1	192.168.2.4	0x734	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:45.063256979 CET	1.1.1.1	192.168.2.4	0x1ddc	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:45.071847916 CET	1.1.1.1	192.168.2.4	0x320e	No error (0)	r.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:45.071847916 CET	1.1.1.1	192.168.2.4	0x320e	No error (0)	r.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:45.087837934 CET	1.1.1.1	192.168.2.4	0xe0ab	No error (0)	r.casalemedia.com			65	IN (0x0001)	false
Mar 29, 2024 01:41:45.201184988 CET	1.1.1.1	192.168.2.4	0xd3b8	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:45.201184988 CET	1.1.1.1	192.168.2.4	0xd3b8	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:45.202585936 CET	1.1.1.1	192.168.2.4	0x1a62	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:45.202585936 CET	1.1.1.1	192.168.2.4	0x1a62	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:45.545855045 CET	1.1.1.1	192.168.2.4	0x984	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:45.564699888 CET	1.1.1.1	192.168.2.4	0xbc3e	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:45.565087080 CET	1.1.1.1	192.168.2.4	0xeb40	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:45.588110924 CET	1.1.1.1	192.168.2.4	0x7e79	No error (0)	pmp.mxptint.net		38.98.69.175	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.255511045 CET	1.1.1.1	192.168.2.4	0xacfe	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:46.255511045 CET	1.1.1.1	192.168.2.4	0xacfe	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.222.105.150	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.255511045 CET	1.1.1.1	192.168.2.4	0xacfe	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		35.175.33.65	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.255511045 CET	1.1.1.1	192.168.2.4	0xacfe	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		100.24.217.221	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.255511045 CET	1.1.1.1	192.168.2.4	0xacfe	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.215.42.230	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.257268906 CET	1.1.1.1	192.168.2.4	0xf027	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:46.258959055 CET	1.1.1.1	192.168.2.4	0xba57	No error (0)	io.narrative.io		52.71.168.94	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.258959055 CET	1.1.1.1	192.168.2.4	0xba57	No error (0)	io.narrative.io		35.173.149.2	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.258959055 CET	1.1.1.1	192.168.2.4	0xba57	No error (0)	io.narrative.io		54.243.248.122	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.258959055 CET	1.1.1.1	192.168.2.4	0xba57	No error (0)	io.narrative.io		52.200.68.73	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.483516932 CET	1.1.1.1	192.168.2.4	0xa3bc	Server failure (2)	p.adsymptotic.com	none	none	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.484024048 CET	1.1.1.1	192.168.2.4	0x151	Server failure (2)	p.adsymptotic.com	none	none	65	IN (0x0001)	false
Mar 29, 2024 01:41:46.552181005 CET	1.1.1.1	192.168.2.4	0xcf8d	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:46.552181005 CET	1.1.1.1	192.168.2.4	0xcf8d	No error (0)	idaas6.cph.liveintent.com		34.194.241.212	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.552181005 CET	1.1.1.1	192.168.2.4	0xcf8d	No error (0)	idaas6.cph.liveintent.com		52.203.99.111	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.552181005 CET	1.1.1.1	192.168.2.4	0xcf8d	No error (0)	idaas6.cph.liveintent.com		34.194.29.142	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.554800034 CET	1.1.1.1	192.168.2.4	0xf6f7	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:46.563405991 CET	1.1.1.1	192.168.2.4	0x2796	No error (0)	r.casalemedia.com			65	IN (0x0001)	false
Mar 29, 2024 01:41:46.564578056 CET	1.1.1.1	192.168.2.4	0x3362	No error (0)	r.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.564578056 CET	1.1.1.1	192.168.2.4	0x3362	No error (0)	r.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.579983950 CET	1.1.1.1	192.168.2.4	0x14e3	Server failure (2)	p.adsymptotic.com	none	none	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.582189083 CET	1.1.1.1	192.168.2.4	0x4819	Server failure (2)	p.adsymptotic.com	none	none	65	IN (0x0001)	false
Mar 29, 2024 01:41:46.698738098 CET	1.1.1.1	192.168.2.4	0x912e	Server failure (2)	p.adsymptotic.com	none	none	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.867153883 CET	1.1.1.1	192.168.2.4	0x116b	No error (0)	help.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:46.867153883 CET	1.1.1.1	192.168.2.4	0x116b	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.867153883 CET	1.1.1.1	192.168.2.4	0x116b	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:46.870897055 CET	1.1.1.1	192.168.2.4	0x978f	No error (0)	help.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:47.129920959 CET	1.1.1.1	192.168.2.4	0xfc4a	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.129920959 CET	1.1.1.1	192.168.2.4	0xfc4a	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.129920959 CET	1.1.1.1	192.168.2.4	0xfc4a	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.129920959 CET	1.1.1.1	192.168.2.4	0xfc4a	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.252943993 CET	1.1.1.1	192.168.2.4	0x264a	No error (0)	sync.crwdcntrl.net		34.198.123.133	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.252943993 CET	1.1.1.1	192.168.2.4	0x264a	No error (0)	sync.crwdcntrl.net		18.214.22.186	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.252943993 CET	1.1.1.1	192.168.2.4	0x264a	No error (0)	sync.crwdcntrl.net		34.224.142.24	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.252943993 CET	1.1.1.1	192.168.2.4	0x264a	No error (0)	sync.crwdcntrl.net		18.207.42.67	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.252943993 CET	1.1.1.1	192.168.2.4	0x264a	No error (0)	sync.crwdcntrl.net		34.232.211.121	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.252943993 CET	1.1.1.1	192.168.2.4	0x264a	No error (0)	sync.crwdcntrl.net		52.207.168.130	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.252943993 CET	1.1.1.1	192.168.2.4	0x264a	No error (0)	sync.crwdcntrl.net		54.234.166.1	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.252943993 CET	1.1.1.1	192.168.2.4	0x264a	No error (0)	sync.crwdcntrl.net		107.23.193.229	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.368113995 CET	1.1.1.1	192.168.2.4	0xe536	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:47.368113995 CET	1.1.1.1	192.168.2.4	0xe536	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:47.368441105 CET	1.1.1.1	192.168.2.4	0x2bd9	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:47.368441105 CET	1.1.1.1	192.168.2.4	0x2bd9	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:47.370596886 CET	1.1.1.1	192.168.2.4	0xa50f	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:47.370596886 CET	1.1.1.1	192.168.2.4	0xa50f	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.222.105.150	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.370596886 CET	1.1.1.1	192.168.2.4	0xa50f	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		35.175.33.65	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.370596886 CET	1.1.1.1	192.168.2.4	0xa50f	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.215.42.230	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.370596886 CET	1.1.1.1	192.168.2.4	0xa50f	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		100.24.217.221	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.371191978 CET	1.1.1.1	192.168.2.4	0xbf4e	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:47.800378084 CET	1.1.1.1	192.168.2.4	0x56e0	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Mar 29, 2024 01:41:47.801105022 CET	1.1.1.1	192.168.2.4	0x1f76	No error (0)	googleads.g.doubleclick.net		172.253.63.154	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:47.801105022 CET	1.1.1.1	192.168.2.4	0x1f76	No error (0)	googleads.g.doubleclick.net		172.253.63.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:48.496611118 CET	1.1.1.1	192.168.2.4	0xfa38	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:48.496611118 CET	1.1.1.1	192.168.2.4	0xfa38	No error (0)	idaas-ext.cph.liveintent.com		3.214.19.47	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:48.496611118 CET	1.1.1.1	192.168.2.4	0xfa38	No error (0)	idaas-ext.cph.liveintent.com		3.234.11.34	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:48.496611118 CET	1.1.1.1	192.168.2.4	0xfa38	No error (0)	idaas-ext.cph.liveintent.com		44.217.2.137	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:48.496611118 CET	1.1.1.1	192.168.2.4	0xfa38	No error (0)	idaas-ext.cph.liveintent.com		54.236.234.62	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:48.496611118 CET	1.1.1.1	192.168.2.4	0xfa38	No error (0)	idaas-ext.cph.liveintent.com		18.213.207.20	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:48.496611118 CET	1.1.1.1	192.168.2.4	0xfa38	No error (0)	idaas-ext.cph.liveintent.com		54.204.111.143	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:48.496611118 CET	1.1.1.1	192.168.2.4	0xfa38	No error (0)	idaas-ext.cph.liveintent.com		35.172.238.109	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:48.496611118 CET	1.1.1.1	192.168.2.4	0xfa38	No error (0)	idaas-ext.cph.liveintent.com		107.22.223.168	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:48.498074055 CET	1.1.1.1	192.168.2.4	0x1e3d	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:49.037621021 CET	1.1.1.1	192.168.2.4	0x65c9	No error (0)	s.aolcdn.com	cs629.wpc.lambdacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:49.037621021 CET	1.1.1.1	192.168.2.4	0x65c9	No error (0)	cs629.wpc.lambdacdn.net		192.229.211.36	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.038455009 CET	1.1.1.1	192.168.2.4	0x6e1d	No error (0)	s.aolcdn.com	cs629.wpc.lambdacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:49.040055990 CET	1.1.1.1	192.168.2.4	0xd6d6	No error (0)	dispatcher.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:49.040055990 CET	1.1.1.1	192.168.2.4	0xd6d6	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.040055990 CET	1.1.1.1	192.168.2.4	0xd6d6	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.051810980 CET	1.1.1.1	192.168.2.4	0xeae5	No error (0)	dbrd449anfbv4.cloudfront.net		18.164.131.113	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.051810980 CET	1.1.1.1	192.168.2.4	0xeae5	No error (0)	dbrd449anfbv4.cloudfront.net		18.164.131.94	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.051810980 CET	1.1.1.1	192.168.2.4	0xeae5	No error (0)	dbrd449anfbv4.cloudfront.net		18.164.131.146	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.051810980 CET	1.1.1.1	192.168.2.4	0xeae5	No error (0)	dbrd449anfbv4.cloudfront.net		18.164.131.175	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.068468094 CET	1.1.1.1	192.168.2.4	0x1bc6	No error (0)	dispatcher.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:49.202856064 CET	1.1.1.1	192.168.2.4	0x567d	No error (0)	match.prod.bidr.io		54.174.153.22	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.202856064 CET	1.1.1.1	192.168.2.4	0x567d	No error (0)	match.prod.bidr.io		52.7.132.209	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.202856064 CET	1.1.1.1	192.168.2.4	0x567d	No error (0)	match.prod.bidr.io		52.70.229.134	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.202856064 CET	1.1.1.1	192.168.2.4	0x567d	No error (0)	match.prod.bidr.io		54.159.124.221	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.202856064 CET	1.1.1.1	192.168.2.4	0x567d	No error (0)	match.prod.bidr.io		54.156.57.108	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.202856064 CET	1.1.1.1	192.168.2.4	0x567d	No error (0)	match.prod.bidr.io		54.156.236.4	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.202856064 CET	1.1.1.1	192.168.2.4	0x567d	No error (0)	match.prod.bidr.io		52.6.120.149	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.202856064 CET	1.1.1.1	192.168.2.4	0x567d	No error (0)	match.prod.bidr.io		52.70.43.113	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.722654104 CET	1.1.1.1	192.168.2.4	0x1463	No error (0)	s.aolcdn.com	cs629.wpc.lambdacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:49.722654104 CET	1.1.1.1	192.168.2.4	0x1463	No error (0)	cs629.wpc.lambdacdn.net		192.229.211.36	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.724104881 CET	1.1.1.1	192.168.2.4	0xdb6c	No error (0)	s.aolcdn.com	cs629.wpc.lambdacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:49.973159075 CET	1.1.1.1	192.168.2.4	0x7411	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 29, 2024 01:41:49.973172903 CET	1.1.1.1	192.168.2.4	0xcf10	No error (0)	www.google.com		172.253.63.104	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.973172903 CET	1.1.1.1	192.168.2.4	0xcf10	No error (0)	www.google.com		172.253.63.103	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.973172903 CET	1.1.1.1	192.168.2.4	0xcf10	No error (0)	www.google.com		172.253.63.106	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.973172903 CET	1.1.1.1	192.168.2.4	0xcf10	No error (0)	www.google.com		172.253.63.99	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.973172903 CET	1.1.1.1	192.168.2.4	0xcf10	No error (0)	www.google.com		172.253.63.147	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:49.973172903 CET	1.1.1.1	192.168.2.4	0xcf10	No error (0)	www.google.com		172.253.63.105	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:50.317862034 CET	1.1.1.1	192.168.2.4	0x7d93	No error (0)	ad.doubleclick.net		142.251.16.149	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:50.317862034 CET	1.1.1.1	192.168.2.4	0x7d93	No error (0)	ad.doubleclick.net		142.251.16.148	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:50.317994118 CET	1.1.1.1	192.168.2.4	0x7be8	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 29, 2024 01:41:50.433687925 CET	1.1.1.1	192.168.2.4	0x22ab	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:50.433687925 CET	1.1.1.1	192.168.2.4	0x22ab	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:50.433687925 CET	1.1.1.1	192.168.2.4	0x22ab	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:50.434427023 CET	1.1.1.1	192.168.2.4	0x77dc	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:50.558041096 CET	1.1.1.1	192.168.2.4	0xaf9a	No error (0)	help.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:50.812125921 CET	1.1.1.1	192.168.2.4	0xe5ed	No error (0)	help.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:50.812125921 CET	1.1.1.1	192.168.2.4	0xe5ed	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:50.812125921 CET	1.1.1.1	192.168.2.4	0xe5ed	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.025353909 CET	1.1.1.1	192.168.2.4	0x89fe	No error (0)	help.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:51.025353909 CET	1.1.1.1	192.168.2.4	0x89fe	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.025353909 CET	1.1.1.1	192.168.2.4	0x89fe	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.058629990 CET	1.1.1.1	192.168.2.4	0x579	No error (0)	oath-us.api.shopinsync.com	prod-us-oath-lb-api-1578944270.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:51.058677912 CET	1.1.1.1	192.168.2.4	0x1b9e	No error (0)	oath-us.api.shopinsync.com	prod-us-oath-lb-api-1578944270.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:51.058677912 CET	1.1.1.1	192.168.2.4	0x1b9e	No error (0)	prod-us-oath-lb-api-1578944270.us-east-1.elb.amazonaws.com		50.17.145.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.058677912 CET	1.1.1.1	192.168.2.4	0x1b9e	No error (0)	prod-us-oath-lb-api-1578944270.us-east-1.elb.amazonaws.com		34.193.185.41	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.406725883 CET	1.1.1.1	192.168.2.4	0xb16c	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:51.406725883 CET	1.1.1.1	192.168.2.4	0xb16c	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:51.406725883 CET	1.1.1.1	192.168.2.4	0xb16c	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.406725883 CET	1.1.1.1	192.168.2.4	0xb16c	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.406725883 CET	1.1.1.1	192.168.2.4	0xb16c	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.406725883 CET	1.1.1.1	192.168.2.4	0xb16c	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.406725883 CET	1.1.1.1	192.168.2.4	0xb16c	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.406725883 CET	1.1.1.1	192.168.2.4	0xb16c	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.406725883 CET	1.1.1.1	192.168.2.4	0xb16c	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.406725883 CET	1.1.1.1	192.168.2.4	0xb16c	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.406725883 CET	1.1.1.1	192.168.2.4	0xb16c	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.406725883 CET	1.1.1.1	192.168.2.4	0xb16c	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.406725883 CET	1.1.1.1	192.168.2.4	0xb16c	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.406725883 CET	1.1.1.1	192.168.2.4	0xb16c	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.474539995 CET	1.1.1.1	192.168.2.4	0x1a6b	No error (0)	help.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:51.643845081 CET	1.1.1.1	192.168.2.4	0x5f93	No error (0)	help.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:51.643845081 CET	1.1.1.1	192.168.2.4	0x5f93	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.643845081 CET	1.1.1.1	192.168.2.4	0x5f93	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.688304901 CET	1.1.1.1	192.168.2.4	0xb3a9	No error (0)	help.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:51.688304901 CET	1.1.1.1	192.168.2.4	0xb3a9	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:51.688304901 CET	1.1.1.1	192.168.2.4	0xb3a9	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:52.066909075 CET	1.1.1.1	192.168.2.4	0x436d	No error (0)	oath-us.api.shopinsync.com	prod-us-oath-lb-api-1578944270.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:52.066909075 CET	1.1.1.1	192.168.2.4	0x436d	No error (0)	prod-us-oath-lb-api-1578944270.us-east-1.elb.amazonaws.com		50.17.145.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:52.066909075 CET	1.1.1.1	192.168.2.4	0x436d	No error (0)	prod-us-oath-lb-api-1578944270.us-east-1.elb.amazonaws.com		34.193.185.41	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:52.072334051 CET	1.1.1.1	192.168.2.4	0x17b5	No error (0)	oath-us.api.shopinsync.com	prod-us-oath-lb-api-1578944270.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:52.325916052 CET	1.1.1.1	192.168.2.4	0x4ee5	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:52.325916052 CET	1.1.1.1	192.168.2.4	0x4ee5	No error (0)	cdn.w55c.net		52.7.252.24	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:52.325916052 CET	1.1.1.1	192.168.2.4	0x4ee5	No error (0)	cdn.w55c.net		52.73.176.61	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:52.325916052 CET	1.1.1.1	192.168.2.4	0x4ee5	No error (0)	cdn.w55c.net		52.6.81.217	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:52.325916052 CET	1.1.1.1	192.168.2.4	0x4ee5	No error (0)	cdn.w55c.net		52.54.57.187	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:52.325916052 CET	1.1.1.1	192.168.2.4	0x4ee5	No error (0)	cdn.w55c.net		54.175.248.252	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:52.325916052 CET	1.1.1.1	192.168.2.4	0x4ee5	No error (0)	cdn.w55c.net		54.156.21.247	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:52.325916052 CET	1.1.1.1	192.168.2.4	0x4ee5	No error (0)	cdn.w55c.net		52.86.126.204	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:52.325916052 CET	1.1.1.1	192.168.2.4	0x4ee5	No error (0)	cdn.w55c.net		54.167.117.6	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:52.326181889 CET	1.1.1.1	192.168.2.4	0x5298	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:52.599034071 CET	1.1.1.1	192.168.2.4	0xda40	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:52.599447012 CET	1.1.1.1	192.168.2.4	0x9dd2	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:52.599447012 CET	1.1.1.1	192.168.2.4	0x9dd2	No error (0)	cdn.w55c.net		54.156.21.247	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:52.599447012 CET	1.1.1.1	192.168.2.4	0x9dd2	No error (0)	cdn.w55c.net		52.54.57.187	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:52.599447012 CET	1.1.1.1	192.168.2.4	0x9dd2	No error (0)	cdn.w55c.net		54.175.248.252	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:52.599447012 CET	1.1.1.1	192.168.2.4	0x9dd2	No error (0)	cdn.w55c.net		52.86.126.204	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:52.599447012 CET	1.1.1.1	192.168.2.4	0x9dd2	No error (0)	cdn.w55c.net		52.73.176.61	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:52.599447012 CET	1.1.1.1	192.168.2.4	0x9dd2	No error (0)	cdn.w55c.net		54.166.48.10	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:52.599447012 CET	1.1.1.1	192.168.2.4	0x9dd2	No error (0)	cdn.w55c.net		52.6.81.217	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:52.599447012 CET	1.1.1.1	192.168.2.4	0x9dd2	No error (0)	cdn.w55c.net		54.167.117.6	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:54.033096075 CET	1.1.1.1	192.168.2.4	0xdc06	No error (0)	d2c0xhqyhmtkod.cloudfront.net		18.160.37.10	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:54.033096075 CET	1.1.1.1	192.168.2.4	0xdc06	No error (0)	d2c0xhqyhmtkod.cloudfront.net		18.160.37.210	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:54.033096075 CET	1.1.1.1	192.168.2.4	0xdc06	No error (0)	d2c0xhqyhmtkod.cloudfront.net		18.160.37.27	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:54.033096075 CET	1.1.1.1	192.168.2.4	0xdc06	No error (0)	d2c0xhqyhmtkod.cloudfront.net		18.160.37.56	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:54.706279993 CET	1.1.1.1	192.168.2.4	0x3fa3	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:54.858231068 CET	1.1.1.1	192.168.2.4	0x18a1	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:54.928803921 CET	1.1.1.1	192.168.2.4	0xc2c6	No error (0)	d2c0xhqyhmtkod.cloudfront.net		54.230.244.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:54.928803921 CET	1.1.1.1	192.168.2.4	0xc2c6	No error (0)	d2c0xhqyhmtkod.cloudfront.net		54.230.244.175	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:54.928803921 CET	1.1.1.1	192.168.2.4	0xc2c6	No error (0)	d2c0xhqyhmtkod.cloudfront.net		54.230.244.30	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:54.928803921 CET	1.1.1.1	192.168.2.4	0xc2c6	No error (0)	d2c0xhqyhmtkod.cloudfront.net		54.230.244.14	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:55.392657042 CET	1.1.1.1	192.168.2.4	0x1352	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:55.392657042 CET	1.1.1.1	192.168.2.4	0x1352	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:55.392657042 CET	1.1.1.1	192.168.2.4	0x1352	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:55.393532038 CET	1.1.1.1	192.168.2.4	0x891f	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:55.393532038 CET	1.1.1.1	192.168.2.4	0x891f	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:55.510806084 CET	1.1.1.1	192.168.2.4	0x2319	No error (0)	www.google.com		172.253.62.99	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:55.510806084 CET	1.1.1.1	192.168.2.4	0x2319	No error (0)	www.google.com		172.253.62.105	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:55.510806084 CET	1.1.1.1	192.168.2.4	0x2319	No error (0)	www.google.com		172.253.62.103	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:55.510806084 CET	1.1.1.1	192.168.2.4	0x2319	No error (0)	www.google.com		172.253.62.104	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:55.510806084 CET	1.1.1.1	192.168.2.4	0x2319	No error (0)	www.google.com		172.253.62.147	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:55.510806084 CET	1.1.1.1	192.168.2.4	0x2319	No error (0)	www.google.com		172.253.62.106	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:55.512032986 CET	1.1.1.1	192.168.2.4	0xbaf	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 29, 2024 01:41:55.978332043 CET	1.1.1.1	192.168.2.4	0x80d1	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:55.978332043 CET	1.1.1.1	192.168.2.4	0x80d1	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:55.979332924 CET	1.1.1.1	192.168.2.4	0x609	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:55.979332924 CET	1.1.1.1	192.168.2.4	0x609	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:41:55.979332924 CET	1.1.1.1	192.168.2.4	0x609	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:56.647519112 CET	1.1.1.1	192.168.2.4	0x97cc	No error (0)	sync.ipredictive.com		54.167.230.135	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:56.647519112 CET	1.1.1.1	192.168.2.4	0x97cc	No error (0)	sync.ipredictive.com		54.157.68.100	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:56.647519112 CET	1.1.1.1	192.168.2.4	0x97cc	No error (0)	sync.ipredictive.com		52.70.178.63	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:56.647519112 CET	1.1.1.1	192.168.2.4	0x97cc	No error (0)	sync.ipredictive.com		54.166.87.8	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:56.647519112 CET	1.1.1.1	192.168.2.4	0x97cc	No error (0)	sync.ipredictive.com		52.71.188.136	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:56.647519112 CET	1.1.1.1	192.168.2.4	0x97cc	No error (0)	sync.ipredictive.com		52.3.141.88	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:56.647519112 CET	1.1.1.1	192.168.2.4	0x97cc	No error (0)	sync.ipredictive.com		52.6.135.22	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:56.647519112 CET	1.1.1.1	192.168.2.4	0x97cc	No error (0)	sync.ipredictive.com		52.86.217.207	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:41:59.610377073 CET	1.1.1.1	192.168.2.4	0x9905	Server failure (2)	p.adsymptotic.com	none	none	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:03.891490936 CET	1.1.1.1	192.168.2.4	0x1532	No error (0)	finance.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:03.891490936 CET	1.1.1.1	192.168.2.4	0x1532	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:03.891490936 CET	1.1.1.1	192.168.2.4	0x1532	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:03.891701937 CET	1.1.1.1	192.168.2.4	0x4d49	No error (0)	finance.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:06.303520918 CET	1.1.1.1	192.168.2.4	0x5785	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:06.303541899 CET	1.1.1.1	192.168.2.4	0xaa29	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:06.303541899 CET	1.1.1.1	192.168.2.4	0xaa29	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:06.303541899 CET	1.1.1.1	192.168.2.4	0xaa29	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:06.303541899 CET	1.1.1.1	192.168.2.4	0xaa29	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:06.303541899 CET	1.1.1.1	192.168.2.4	0xaa29	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:10.911263943 CET	1.1.1.1	192.168.2.4	0x4e5d	No error (0)	l.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:10.911263943 CET	1.1.1.1	192.168.2.4	0x4e5d	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:10.911263943 CET	1.1.1.1	192.168.2.4	0x4e5d	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:10.911310911 CET	1.1.1.1	192.168.2.4	0x676c	No error (0)	query1.finance.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:10.912130117 CET	1.1.1.1	192.168.2.4	0xae2a	No error (0)	query1.finance.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:10.912130117 CET	1.1.1.1	192.168.2.4	0xae2a	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:10.912130117 CET	1.1.1.1	192.168.2.4	0xae2a	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:10.913541079 CET	1.1.1.1	192.168.2.4	0x239	No error (0)	query2.finance.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:10.913541079 CET	1.1.1.1	192.168.2.4	0x239	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:10.913541079 CET	1.1.1.1	192.168.2.4	0x239	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:10.914503098 CET	1.1.1.1	192.168.2.4	0x9907	No error (0)	query2.finance.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:11.113224983 CET	1.1.1.1	192.168.2.4	0xbd09	No error (0)	l.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:12.357114077 CET	1.1.1.1	192.168.2.4	0x797b	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:12.357114077 CET	1.1.1.1	192.168.2.4	0x797b	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:12.357114077 CET	1.1.1.1	192.168.2.4	0x797b	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:12.357650995 CET	1.1.1.1	192.168.2.4	0xa737	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:13.676853895 CET	1.1.1.1	192.168.2.4	0xe48	No error (0)	c2shb-oao.ssp.yahoo.com	web-oao.ssp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:13.676853895 CET	1.1.1.1	192.168.2.4	0xe48	No error (0)	web-oao.ssp.yahoo.com	web-oao.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:13.676853895 CET	1.1.1.1	192.168.2.4	0xe48	No error (0)	web-oao.one-mobile-prod.aws.oath.cloud	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:13.677526951 CET	1.1.1.1	192.168.2.4	0xa8b	No error (0)	c2shb-oao.ssp.yahoo.com	web-oao.ssp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:13.677526951 CET	1.1.1.1	192.168.2.4	0xa8b	No error (0)	web-oao.ssp.yahoo.com	web-oao.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:13.677526951 CET	1.1.1.1	192.168.2.4	0xa8b	No error (0)	web-oao.one-mobile-prod.aws.oath.cloud	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:13.677526951 CET	1.1.1.1	192.168.2.4	0xa8b	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		34.236.83.94	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:13.677526951 CET	1.1.1.1	192.168.2.4	0xa8b	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		3.92.156.8	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:13.677526951 CET	1.1.1.1	192.168.2.4	0xa8b	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		3.230.217.116	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:13.677526951 CET	1.1.1.1	192.168.2.4	0xa8b	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		52.4.33.45	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:13.679975033 CET	1.1.1.1	192.168.2.4	0x3884	No error (0)	query1.finance.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:13.688111067 CET	1.1.1.1	192.168.2.4	0x3da9	No error (0)	query1.finance.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:13.688111067 CET	1.1.1.1	192.168.2.4	0x3da9	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:13.688111067 CET	1.1.1.1	192.168.2.4	0x3da9	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:14.605113983 CET	1.1.1.1	192.168.2.4	0xcc84	No error (0)	streamer.finance.yahoo.com	streamer.finance-aws-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:14.605113983 CET	1.1.1.1	192.168.2.4	0xcc84	No error (0)	streamer.finance-aws-prod.aws.oath.cloud	streamer-us-east-1.finance-aws-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:14.605113983 CET	1.1.1.1	192.168.2.4	0xcc84	No error (0)	streamer-us-east-1.finance-aws-prod.aws.oath.cloud	prod-alb-streamer-1804719662.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:14.605178118 CET	1.1.1.1	192.168.2.4	0xb64f	No error (0)	streamer.finance.yahoo.com	streamer.finance-aws-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:14.605178118 CET	1.1.1.1	192.168.2.4	0xb64f	No error (0)	streamer.finance-aws-prod.aws.oath.cloud	streamer-us-west-2.finance-aws-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:14.605178118 CET	1.1.1.1	192.168.2.4	0xb64f	No error (0)	streamer-us-west-2.finance-aws-prod.aws.oath.cloud	prod-alb-streamer-436505840.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:14.605178118 CET	1.1.1.1	192.168.2.4	0xb64f	No error (0)	prod-alb-streamer-436505840.us-west-2.elb.amazonaws.com		44.238.214.105	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:14.605178118 CET	1.1.1.1	192.168.2.4	0xb64f	No error (0)	prod-alb-streamer-436505840.us-west-2.elb.amazonaws.com		54.68.162.119	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:14.605178118 CET	1.1.1.1	192.168.2.4	0xb64f	No error (0)	prod-alb-streamer-436505840.us-west-2.elb.amazonaws.com		44.241.37.67	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:20.571963072 CET	1.1.1.1	192.168.2.4	0xc1ab	Server failure (2)	p.adsymptotic.com	none	none	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:21.007972002 CET	1.1.1.1	192.168.2.4	0xf863	No error (0)	video-api.yql.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:21.008130074 CET	1.1.1.1	192.168.2.4	0x4edb	No error (0)	video-api.yql.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:21.008130074 CET	1.1.1.1	192.168.2.4	0x4edb	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:21.008130074 CET	1.1.1.1	192.168.2.4	0x4edb	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:21.009663105 CET	1.1.1.1	192.168.2.4	0xc24b	No error (0)	bats.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:21.009663105 CET	1.1.1.1	192.168.2.4	0xc24b	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:21.009663105 CET	1.1.1.1	192.168.2.4	0xc24b	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:21.010711908 CET	1.1.1.1	192.168.2.4	0x1c1	No error (0)	bats.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:22.098608971 CET	1.1.1.1	192.168.2.4	0xde21	No error (0)	ping.chartbeat.net		44.212.89.82	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:22.098608971 CET	1.1.1.1	192.168.2.4	0xde21	No error (0)	ping.chartbeat.net		3.231.253.219	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:22.098608971 CET	1.1.1.1	192.168.2.4	0xde21	No error (0)	ping.chartbeat.net		44.206.13.80	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:22.098608971 CET	1.1.1.1	192.168.2.4	0xde21	No error (0)	ping.chartbeat.net		44.199.44.99	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:22.098608971 CET	1.1.1.1	192.168.2.4	0xde21	No error (0)	ping.chartbeat.net		23.21.14.125	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:22.098608971 CET	1.1.1.1	192.168.2.4	0xde21	No error (0)	ping.chartbeat.net		3.223.133.191	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:22.098608971 CET	1.1.1.1	192.168.2.4	0xde21	No error (0)	ping.chartbeat.net		44.210.7.17	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:22.098608971 CET	1.1.1.1	192.168.2.4	0xde21	No error (0)	ping.chartbeat.net		174.129.218.53	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:22.772705078 CET	1.1.1.1	192.168.2.4	0xe630	No error (0)	pagead-googlehosted.l.google.com		172.253.115.132	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:24.262011051 CET	1.1.1.1	192.168.2.4	0xb41c	No error (0)	players.brightcove.net	players.brightcove.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:24.262578964 CET	1.1.1.1	192.168.2.4	0xb618	No error (0)	players.brightcove.net	players.brightcove.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:24.519958973 CET	1.1.1.1	192.168.2.4	0x2f7c	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 29, 2024 01:42:24.520241976 CET	1.1.1.1	192.168.2.4	0x1017	No error (0)	ad.doubleclick.net		142.251.167.148	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:24.520241976 CET	1.1.1.1	192.168.2.4	0x1017	No error (0)	ad.doubleclick.net		142.251.167.149	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:26.022135019 CET	1.1.1.1	192.168.2.4	0x9cbc	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Mar 29, 2024 01:42:26.026232004 CET	1.1.1.1	192.168.2.4	0xeb6b	No error (0)	googleads.g.doubleclick.net		142.251.163.154	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:26.026232004 CET	1.1.1.1	192.168.2.4	0xeb6b	No error (0)	googleads.g.doubleclick.net		142.251.163.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:26.245994091 CET	1.1.1.1	192.168.2.4	0x3030	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:26.245994091 CET	1.1.1.1	192.168.2.4	0x3030	No error (0)	geo-atsv2.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:26.246258020 CET	1.1.1.1	192.168.2.4	0x8cc2	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:26.275425911 CET	1.1.1.1	192.168.2.4	0x578a	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:26.275425911 CET	1.1.1.1	192.168.2.4	0x578a	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:26.275425911 CET	1.1.1.1	192.168.2.4	0x578a	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:26.275496006 CET	1.1.1.1	192.168.2.4	0x85c9	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:27.401741982 CET	1.1.1.1	192.168.2.4	0xdbe0	No error (0)	a1653.casalemedia.com		192.40.36.177	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:27.870573044 CET	1.1.1.1	192.168.2.4	0x43b0	No error (0)	search.yahoo.com	ds-global3.l7.search.ystg1.b.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:27.870573044 CET	1.1.1.1	192.168.2.4	0x43b0	No error (0)	ds-global3.l7.search.ystg1.b.yahoo.com		66.218.84.137	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:27.871129990 CET	1.1.1.1	192.168.2.4	0x87a4	No error (0)	search.yahoo.com	ds-global3.l7.search.ystg1.b.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:30.897347927 CET	1.1.1.1	192.168.2.4	0xa8bd	No error (0)	hb.yahoo.net		23.43.243.145	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:30.897347927 CET	1.1.1.1	192.168.2.4	0xa8bd	No error (0)	hb.yahoo.net		23.43.243.170	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:30.897347927 CET	1.1.1.1	192.168.2.4	0xa8bd	No error (0)	hb.yahoo.net		23.43.243.147	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:31.055624008 CET	1.1.1.1	192.168.2.4	0x61ca	No error (0)	sports.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:31.055624008 CET	1.1.1.1	192.168.2.4	0x61ca	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:31.055624008 CET	1.1.1.1	192.168.2.4	0x61ca	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:31.056134939 CET	1.1.1.1	192.168.2.4	0x3d68	No error (0)	sports.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:31.132643938 CET	1.1.1.1	192.168.2.4	0x1b0b	No error (0)	ad.doubleclick.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:31.132643938 CET	1.1.1.1	192.168.2.4	0x1b0b	No error (0)	ad.doubleclick.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:31.132919073 CET	1.1.1.1	192.168.2.4	0x3c04	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 29, 2024 01:42:31.248931885 CET	1.1.1.1	192.168.2.4	0xe905	No error (0)	jac.yahoosandbox.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:31.248931885 CET	1.1.1.1	192.168.2.4	0xe905	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:31.248931885 CET	1.1.1.1	192.168.2.4	0xe905	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:31.252175093 CET	1.1.1.1	192.168.2.4	0x7b57	No error (0)	jac.yahoosandbox.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:31.766474009 CET	1.1.1.1	192.168.2.4	0xa30f	No error (0)	www.yahoo.com	me-ycpi-cf-www.g06.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:31.766474009 CET	1.1.1.1	192.168.2.4	0xa30f	No error (0)	me-ycpi-cf-www.g06.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:31.766474009 CET	1.1.1.1	192.168.2.4	0xa30f	No error (0)	me-ycpi-cf-www.g06.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:31.767152071 CET	1.1.1.1	192.168.2.4	0x4f4a	No error (0)	www.yahoo.com	me-ycpi-cf-www.g06.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.227544069 CET	1.1.1.1	192.168.2.4	0xa65	Name error (3)	y.analytics.yahoo.com	none	none	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.229033947 CET	1.1.1.1	192.168.2.4	0x954f	Name error (3)	y.analytics.yahoo.com	none	none	65	IN (0x0001)	false
Mar 29, 2024 01:42:32.230148077 CET	1.1.1.1	192.168.2.4	0x8da0	No error (0)	b.scorecardresearch.com		18.238.49.124	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.230148077 CET	1.1.1.1	192.168.2.4	0x8da0	No error (0)	b.scorecardresearch.com		18.238.49.74	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.230148077 CET	1.1.1.1	192.168.2.4	0x8da0	No error (0)	b.scorecardresearch.com		18.238.49.99	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.230148077 CET	1.1.1.1	192.168.2.4	0x8da0	No error (0)	b.scorecardresearch.com		18.238.49.52	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.330416918 CET	1.1.1.1	192.168.2.4	0x5c6e	Name error (3)	y.analytics.yahoo.com	none	none	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.331942081 CET	1.1.1.1	192.168.2.4	0xbf5e	No error (0)	yep.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.332118988 CET	1.1.1.1	192.168.2.4	0xf2	No error (0)	yep.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.332118988 CET	1.1.1.1	192.168.2.4	0xf2	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.332118988 CET	1.1.1.1	192.168.2.4	0xf2	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.486370087 CET	1.1.1.1	192.168.2.4	0xf3a	No error (0)	c2shb-oao.ssp.yahoo.com	web-oao.ssp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.486370087 CET	1.1.1.1	192.168.2.4	0xf3a	No error (0)	web-oao.ssp.yahoo.com	web-oao.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.486370087 CET	1.1.1.1	192.168.2.4	0xf3a	No error (0)	web-oao.one-mobile-prod.aws.oath.cloud	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.486797094 CET	1.1.1.1	192.168.2.4	0x6225	No error (0)	c2shb-oao.ssp.yahoo.com	web-oao.ssp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.486797094 CET	1.1.1.1	192.168.2.4	0x6225	No error (0)	web-oao.ssp.yahoo.com	web-oao.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.486797094 CET	1.1.1.1	192.168.2.4	0x6225	No error (0)	web-oao.one-mobile-prod.aws.oath.cloud	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.486797094 CET	1.1.1.1	192.168.2.4	0x6225	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		52.4.33.45	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.486797094 CET	1.1.1.1	192.168.2.4	0x6225	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		3.230.217.116	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.486797094 CET	1.1.1.1	192.168.2.4	0x6225	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		34.236.83.94	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.486797094 CET	1.1.1.1	192.168.2.4	0x6225	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		3.92.156.8	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.717494965 CET	1.1.1.1	192.168.2.4	0x526a	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.717494965 CET	1.1.1.1	192.168.2.4	0x526a	No error (0)	securepubads46.g.doubleclick.net		172.253.115.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.717494965 CET	1.1.1.1	192.168.2.4	0x526a	No error (0)	securepubads46.g.doubleclick.net		172.253.115.156	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.717539072 CET	1.1.1.1	192.168.2.4	0xd8df	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.717694044 CET	1.1.1.1	192.168.2.4	0xe3a0	No error (0)	pagead-googlehosted.l.google.com		172.253.115.132	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.750950098 CET	1.1.1.1	192.168.2.4	0xf00a	No error (0)	finance.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.774081945 CET	1.1.1.1	192.168.2.4	0x74f3	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.774081945 CET	1.1.1.1	192.168.2.4	0x74f3	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.774081945 CET	1.1.1.1	192.168.2.4	0x74f3	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.774142027 CET	1.1.1.1	192.168.2.4	0xe0d8	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.774142027 CET	1.1.1.1	192.168.2.4	0xe0d8	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.774142027 CET	1.1.1.1	192.168.2.4	0xe0d8	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.774142027 CET	1.1.1.1	192.168.2.4	0xe0d8	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.774142027 CET	1.1.1.1	192.168.2.4	0xe0d8	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.843030930 CET	1.1.1.1	192.168.2.4	0x9038	No error (0)	ping.chartbeat.net		54.225.229.4	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.843030930 CET	1.1.1.1	192.168.2.4	0x9038	No error (0)	ping.chartbeat.net		34.198.33.251	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.843030930 CET	1.1.1.1	192.168.2.4	0x9038	No error (0)	ping.chartbeat.net		52.204.0.196	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.843030930 CET	1.1.1.1	192.168.2.4	0x9038	No error (0)	ping.chartbeat.net		18.213.67.51	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.843030930 CET	1.1.1.1	192.168.2.4	0x9038	No error (0)	ping.chartbeat.net		3.231.253.219	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.843030930 CET	1.1.1.1	192.168.2.4	0x9038	No error (0)	ping.chartbeat.net		3.212.148.0	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.843030930 CET	1.1.1.1	192.168.2.4	0x9038	No error (0)	ping.chartbeat.net		44.206.107.206	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.843030930 CET	1.1.1.1	192.168.2.4	0x9038	No error (0)	ping.chartbeat.net		23.21.14.125	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.845017910 CET	1.1.1.1	192.168.2.4	0x7b1c	No error (0)	video-api.yql.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.845031023 CET	1.1.1.1	192.168.2.4	0x93e6	No error (0)	video-api.yql.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.845031023 CET	1.1.1.1	192.168.2.4	0x93e6	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.845031023 CET	1.1.1.1	192.168.2.4	0x93e6	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.850653887 CET	1.1.1.1	192.168.2.4	0x7693	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.850817919 CET	1.1.1.1	192.168.2.4	0xc984	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.850817919 CET	1.1.1.1	192.168.2.4	0xc984	No error (0)	idx.cph.liveintent.com		34.198.209.31	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.850817919 CET	1.1.1.1	192.168.2.4	0xc984	No error (0)	idx.cph.liveintent.com		34.230.170.191	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.850817919 CET	1.1.1.1	192.168.2.4	0xc984	No error (0)	idx.cph.liveintent.com		44.216.212.178	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.850817919 CET	1.1.1.1	192.168.2.4	0xc984	No error (0)	idx.cph.liveintent.com		54.88.135.165	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.850817919 CET	1.1.1.1	192.168.2.4	0xc984	No error (0)	idx.cph.liveintent.com		54.173.8.60	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.850817919 CET	1.1.1.1	192.168.2.4	0xc984	No error (0)	idx.cph.liveintent.com		34.238.17.47	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.850817919 CET	1.1.1.1	192.168.2.4	0xc984	No error (0)	idx.cph.liveintent.com		3.222.7.28	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.850817919 CET	1.1.1.1	192.168.2.4	0xc984	No error (0)	idx.cph.liveintent.com		3.226.25.25	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.866430044 CET	1.1.1.1	192.168.2.4	0x990b	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:32.866430044 CET	1.1.1.1	192.168.2.4	0x990b	No error (0)	livepixel-production.bln.liveintent.com		52.23.99.235	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.866430044 CET	1.1.1.1	192.168.2.4	0x990b	No error (0)	livepixel-production.bln.liveintent.com		52.206.142.242	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.866430044 CET	1.1.1.1	192.168.2.4	0x990b	No error (0)	livepixel-production.bln.liveintent.com		18.235.133.160	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.866430044 CET	1.1.1.1	192.168.2.4	0x990b	No error (0)	livepixel-production.bln.liveintent.com		54.205.102.34	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.866430044 CET	1.1.1.1	192.168.2.4	0x990b	No error (0)	livepixel-production.bln.liveintent.com		18.209.40.243	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.866430044 CET	1.1.1.1	192.168.2.4	0x990b	No error (0)	livepixel-production.bln.liveintent.com		44.197.69.112	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.866430044 CET	1.1.1.1	192.168.2.4	0x990b	No error (0)	livepixel-production.bln.liveintent.com		44.218.251.145	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.866430044 CET	1.1.1.1	192.168.2.4	0x990b	No error (0)	livepixel-production.bln.liveintent.com		34.198.112.224	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:32.866671085 CET	1.1.1.1	192.168.2.4	0xe311	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:33.019733906 CET	1.1.1.1	192.168.2.4	0xd0c6	No error (0)	finance.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:33.019733906 CET	1.1.1.1	192.168.2.4	0xd0c6	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:33.019733906 CET	1.1.1.1	192.168.2.4	0xd0c6	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:33.119776011 CET	1.1.1.1	192.168.2.4	0xd5c8	No error (0)	a1653.casalemedia.com		192.40.36.177	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:33.249505997 CET	1.1.1.1	192.168.2.4	0x3553	No error (0)	hb.yahoo.net		23.43.243.145	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:33.249505997 CET	1.1.1.1	192.168.2.4	0x3553	No error (0)	hb.yahoo.net		23.43.243.170	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:33.249505997 CET	1.1.1.1	192.168.2.4	0x3553	No error (0)	hb.yahoo.net		23.43.243.147	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:33.777009964 CET	1.1.1.1	192.168.2.4	0xcc64	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:33.777009964 CET	1.1.1.1	192.168.2.4	0xcc64	No error (0)	livepixel-production.bln.liveintent.com		54.205.102.34	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:33.777009964 CET	1.1.1.1	192.168.2.4	0xcc64	No error (0)	livepixel-production.bln.liveintent.com		100.26.85.214	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:33.777009964 CET	1.1.1.1	192.168.2.4	0xcc64	No error (0)	livepixel-production.bln.liveintent.com		52.206.142.242	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:33.777009964 CET	1.1.1.1	192.168.2.4	0xcc64	No error (0)	livepixel-production.bln.liveintent.com		34.198.16.32	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:33.777009964 CET	1.1.1.1	192.168.2.4	0xcc64	No error (0)	livepixel-production.bln.liveintent.com		54.84.177.16	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:33.777009964 CET	1.1.1.1	192.168.2.4	0xcc64	No error (0)	livepixel-production.bln.liveintent.com		54.225.222.132	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:33.777009964 CET	1.1.1.1	192.168.2.4	0xcc64	No error (0)	livepixel-production.bln.liveintent.com		34.198.112.224	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:33.777009964 CET	1.1.1.1	192.168.2.4	0xcc64	No error (0)	livepixel-production.bln.liveintent.com		52.23.99.235	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:33.778537989 CET	1.1.1.1	192.168.2.4	0xcbf1	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:35.003679037 CET	1.1.1.1	192.168.2.4	0xf546	No error (0)	cm.g.doubleclick.net		172.253.63.154	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:35.003679037 CET	1.1.1.1	192.168.2.4	0xf546	No error (0)	cm.g.doubleclick.net		172.253.63.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:35.461545944 CET	1.1.1.1	192.168.2.4	0xfb73	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:35.462112904 CET	1.1.1.1	192.168.2.4	0x4062	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:35.462112904 CET	1.1.1.1	192.168.2.4	0x4062	No error (0)	securepubads46.g.doubleclick.net		142.251.163.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:35.462112904 CET	1.1.1.1	192.168.2.4	0x4062	No error (0)	securepubads46.g.doubleclick.net		142.251.163.154	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:35.634923935 CET	1.1.1.1	192.168.2.4	0xce80	No error (0)	cdn.ampproject.org	cdn-content.ampproject.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:35.634923935 CET	1.1.1.1	192.168.2.4	0xce80	No error (0)	cdn-content.ampproject.org		142.251.163.132	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:35.635159016 CET	1.1.1.1	192.168.2.4	0xb740	No error (0)	cdn.ampproject.org	cdn-content.ampproject.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:36.345552921 CET	1.1.1.1	192.168.2.4	0x75f0	No error (0)	dsp.adkernel.com		174.137.133.49	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:36.346386909 CET	1.1.1.1	192.168.2.4	0xe1a8	No error (0)	mweb.ck.inmobi.com	dsp-cookie.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:36.349406004 CET	1.1.1.1	192.168.2.4	0xb6fa	No error (0)	mweb.ck.inmobi.com	dsp-cookie.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:37.402020931 CET	1.1.1.1	192.168.2.4	0x28d4	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:37.402020931 CET	1.1.1.1	192.168.2.4	0x28d4	No error (0)	vap.lijit.com	nava.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:37.402020931 CET	1.1.1.1	192.168.2.4	0x28d4	No error (0)	nava.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:37.402036905 CET	1.1.1.1	192.168.2.4	0x969a	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:37.402036905 CET	1.1.1.1	192.168.2.4	0x969a	No error (0)	vap.lijit.com	nava.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:37.402036905 CET	1.1.1.1	192.168.2.4	0x969a	No error (0)	nava.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:37.402036905 CET	1.1.1.1	192.168.2.4	0x969a	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.236.72.150	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:37.402036905 CET	1.1.1.1	192.168.2.4	0x969a	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.228.91.243	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:37.402036905 CET	1.1.1.1	192.168.2.4	0x969a	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.193.200.46	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:37.402036905 CET	1.1.1.1	192.168.2.4	0x969a	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		18.208.93.149	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:37.402036905 CET	1.1.1.1	192.168.2.4	0x969a	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.198.145.64	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:37.402036905 CET	1.1.1.1	192.168.2.4	0x969a	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.234.169.62	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:37.402036905 CET	1.1.1.1	192.168.2.4	0x969a	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.228.176.14	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:37.402036905 CET	1.1.1.1	192.168.2.4	0x969a	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.199.203.241	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:38.979182959 CET	1.1.1.1	192.168.2.4	0x1166	No error (0)	ad.doubleclick.net		142.251.167.149	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:38.979182959 CET	1.1.1.1	192.168.2.4	0x1166	No error (0)	ad.doubleclick.net		142.251.167.148	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:38.979463100 CET	1.1.1.1	192.168.2.4	0xeaea	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 29, 2024 01:42:39.183284998 CET	1.1.1.1	192.168.2.4	0x5290	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:39.184833050 CET	1.1.1.1	192.168.2.4	0x5459	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:39.309757948 CET	1.1.1.1	192.168.2.4	0xf8e	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:39.309757948 CET	1.1.1.1	192.168.2.4	0xf8e	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-west-2.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:39.309757948 CET	1.1.1.1	192.168.2.4	0xf8e	No error (0)	prod.ups-ats.us-west-2.aolp-ds-prd.aws.oath.cloud	ats-eks.us-west-2.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:39.309757948 CET	1.1.1.1	192.168.2.4	0xf8e	No error (0)	ats-eks.us-west-2.dcs-online-targeting-prd.aws.oath.cloud		34.214.251.32	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.309757948 CET	1.1.1.1	192.168.2.4	0xf8e	No error (0)	ats-eks.us-west-2.dcs-online-targeting-prd.aws.oath.cloud		35.84.163.233	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.310451031 CET	1.1.1.1	192.168.2.4	0x4ffc	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:39.310451031 CET	1.1.1.1	192.168.2.4	0x4ffc	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:39.310451031 CET	1.1.1.1	192.168.2.4	0x4ffc	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:39.383030891 CET	1.1.1.1	192.168.2.4	0xbbef	No error (0)	s0.2mdn.net		142.251.163.149	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.383030891 CET	1.1.1.1	192.168.2.4	0xbbef	No error (0)	s0.2mdn.net		142.251.163.148	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.567616940 CET	1.1.1.1	192.168.2.4	0xfe92	No error (0)	cm.g.doubleclick.net		172.253.62.154	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.567616940 CET	1.1.1.1	192.168.2.4	0xfe92	No error (0)	cm.g.doubleclick.net		172.253.62.157	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.588159084 CET	1.1.1.1	192.168.2.4	0x5f83	No error (0)	query2.finance.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:39.588159084 CET	1.1.1.1	192.168.2.4	0x5f83	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.588159084 CET	1.1.1.1	192.168.2.4	0x5f83	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.588201046 CET	1.1.1.1	192.168.2.4	0xe3c6	No error (0)	query2.finance.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:39.592386007 CET	1.1.1.1	192.168.2.4	0x2780	No error (0)	sb.scorecardresearch.com		18.173.219.113	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.592386007 CET	1.1.1.1	192.168.2.4	0x2780	No error (0)	sb.scorecardresearch.com		18.173.219.111	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.592386007 CET	1.1.1.1	192.168.2.4	0x2780	No error (0)	sb.scorecardresearch.com		18.173.219.84	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.592386007 CET	1.1.1.1	192.168.2.4	0x2780	No error (0)	sb.scorecardresearch.com		18.173.219.40	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.646992922 CET	1.1.1.1	192.168.2.4	0x67f9	No error (0)	display.bidder.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:39.648160934 CET	1.1.1.1	192.168.2.4	0x812d	No error (0)	display.bidder.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:39.648160934 CET	1.1.1.1	192.168.2.4	0x812d	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.648160934 CET	1.1.1.1	192.168.2.4	0x812d	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.648160934 CET	1.1.1.1	192.168.2.4	0x812d	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.648160934 CET	1.1.1.1	192.168.2.4	0x812d	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.786045074 CET	1.1.1.1	192.168.2.4	0x49a3	No error (0)	onetag-sys.com		51.222.239.230	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.786045074 CET	1.1.1.1	192.168.2.4	0x49a3	No error (0)	onetag-sys.com		51.222.39.187	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.786045074 CET	1.1.1.1	192.168.2.4	0x49a3	No error (0)	onetag-sys.com		51.222.39.186	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.786045074 CET	1.1.1.1	192.168.2.4	0x49a3	No error (0)	onetag-sys.com		51.222.39.185	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.786045074 CET	1.1.1.1	192.168.2.4	0x49a3	No error (0)	onetag-sys.com		51.222.39.184	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:39.786045074 CET	1.1.1.1	192.168.2.4	0x49a3	No error (0)	onetag-sys.com		51.222.239.232	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:41.340111971 CET	1.1.1.1	192.168.2.4	0xd0b7	No error (0)	display.bidder.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:41.340111971 CET	1.1.1.1	192.168.2.4	0xd0b7	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:41.340111971 CET	1.1.1.1	192.168.2.4	0xd0b7	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:41.340111971 CET	1.1.1.1	192.168.2.4	0xd0b7	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:41.340111971 CET	1.1.1.1	192.168.2.4	0xd0b7	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:41.343676090 CET	1.1.1.1	192.168.2.4	0x8ec8	No error (0)	display.bidder.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:41.354944944 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	lg1.hb.yahoo.net		23.43.243.168	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:41.354944944 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	lg1.hb.yahoo.net		23.43.243.170	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:41.354944944 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	lg1.hb.yahoo.net		23.43.243.161	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:41.354944944 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	lg1.hb.yahoo.net		23.43.243.169	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:41.354944944 CET	1.1.1.1	192.168.2.4	0x783f	No error (0)	lg1.hb.yahoo.net		23.43.243.145	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:41.561537981 CET	1.1.1.1	192.168.2.4	0x3fa0	No error (0)	www.yahoo.com	me-ycpi-cf-www.g06.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:41.561537981 CET	1.1.1.1	192.168.2.4	0x3fa0	No error (0)	me-ycpi-cf-www.g06.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:41.561537981 CET	1.1.1.1	192.168.2.4	0x3fa0	No error (0)	me-ycpi-cf-www.g06.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:41.563704967 CET	1.1.1.1	192.168.2.4	0x1096	No error (0)	www.yahoo.com	me-ycpi-cf-www.g06.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:41.697844982 CET	1.1.1.1	192.168.2.4	0x5a6e	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:41.698154926 CET	1.1.1.1	192.168.2.4	0x62b4	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:41.698154926 CET	1.1.1.1	192.168.2.4	0x62b4	No error (0)	securepubads46.g.doubleclick.net		142.251.16.156	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:41.698154926 CET	1.1.1.1	192.168.2.4	0x62b4	No error (0)	securepubads46.g.doubleclick.net		142.251.16.157	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:43.651808023 CET	1.1.1.1	192.168.2.4	0xccc2	No error (0)	cdn.doubleverify.com	cdn.doubleverify.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:43.651976109 CET	1.1.1.1	192.168.2.4	0x89da	No error (0)	cdn.doubleverify.com	cdn.doubleverify.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:43.656169891 CET	1.1.1.1	192.168.2.4	0x5de7	No error (0)	c.evidon.com	newwildcard.evidon.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:43.663286924 CET	1.1.1.1	192.168.2.4	0xa58a	No error (0)	c.evidon.com	newwildcard.evidon.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:44.144006014 CET	1.1.1.1	192.168.2.4	0xddc	No error (0)	ad.doubleclick.net		142.250.31.149	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:44.144006014 CET	1.1.1.1	192.168.2.4	0xddc	No error (0)	ad.doubleclick.net		142.250.31.148	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:44.144330978 CET	1.1.1.1	192.168.2.4	0x2e11	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 29, 2024 01:42:44.575478077 CET	1.1.1.1	192.168.2.4	0x50a6	No error (0)	ncp-gw-sports.media.yahoo.com	ncp-gw-sports.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:44.575491905 CET	1.1.1.1	192.168.2.4	0xdf9c	No error (0)	ncp-gw-sports.media.yahoo.com	ncp-gw-sports.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:44.575491905 CET	1.1.1.1	192.168.2.4	0xdf9c	No error (0)	ncp-gw-sports.g03.yahoodns.net		74.6.231.18	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:44.759727001 CET	1.1.1.1	192.168.2.4	0x310e	No error (0)	l.evidon.com	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:44.759727001 CET	1.1.1.1	192.168.2.4	0x310e	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		3.228.195.183	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:44.759727001 CET	1.1.1.1	192.168.2.4	0x310e	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		52.2.227.200	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:44.759727001 CET	1.1.1.1	192.168.2.4	0x310e	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		3.208.252.17	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:44.759727001 CET	1.1.1.1	192.168.2.4	0x310e	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		34.231.239.183	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:44.759727001 CET	1.1.1.1	192.168.2.4	0x310e	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		34.232.189.111	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:44.759727001 CET	1.1.1.1	192.168.2.4	0x310e	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		54.89.171.38	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:44.760693073 CET	1.1.1.1	192.168.2.4	0x917a	No error (0)	l.evidon.com	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:44.762351036 CET	1.1.1.1	192.168.2.4	0xa755	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:44.762351036 CET	1.1.1.1	192.168.2.4	0xa755	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:44.762398005 CET	1.1.1.1	192.168.2.4	0x2805	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:44.762398005 CET	1.1.1.1	192.168.2.4	0x2805	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:44.762398005 CET	1.1.1.1	192.168.2.4	0x2805	No error (0)	global.px.quantserve.com		192.184.68.166	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:44.762398005 CET	1.1.1.1	192.168.2.4	0x2805	No error (0)	global.px.quantserve.com		192.184.68.134	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:44.762398005 CET	1.1.1.1	192.168.2.4	0x2805	No error (0)	global.px.quantserve.com		192.184.68.215	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:44.762398005 CET	1.1.1.1	192.168.2.4	0x2805	No error (0)	global.px.quantserve.com		192.184.68.228	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:44.762398005 CET	1.1.1.1	192.168.2.4	0x2805	No error (0)	global.px.quantserve.com		192.184.68.254	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:44.883555889 CET	1.1.1.1	192.168.2.4	0x3d1d	No error (0)	rtb0.doubleverify.com	bs-geo.dvgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:44.883555889 CET	1.1.1.1	192.168.2.4	0x3d1d	No error (0)	rtbc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:44.883555889 CET	1.1.1.1	192.168.2.4	0x3d1d	No error (0)	tps-ue1.doubleverify.com		34.117.228.201	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:44.885046959 CET	1.1.1.1	192.168.2.4	0x782e	No error (0)	rtb0.doubleverify.com	bs-geo.dvgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:44.885046959 CET	1.1.1.1	192.168.2.4	0x782e	No error (0)	rtbc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:45.183078051 CET	1.1.1.1	192.168.2.4	0x9e76	No error (0)	sync.srv.stackadapt.com		54.157.225.250	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.183078051 CET	1.1.1.1	192.168.2.4	0x9e76	No error (0)	sync.srv.stackadapt.com		54.156.138.144	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.183078051 CET	1.1.1.1	192.168.2.4	0x9e76	No error (0)	sync.srv.stackadapt.com		54.198.227.184	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.183078051 CET	1.1.1.1	192.168.2.4	0x9e76	No error (0)	sync.srv.stackadapt.com		54.167.157.124	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.183078051 CET	1.1.1.1	192.168.2.4	0x9e76	No error (0)	sync.srv.stackadapt.com		54.166.8.47	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.183078051 CET	1.1.1.1	192.168.2.4	0x9e76	No error (0)	sync.srv.stackadapt.com		54.172.158.143	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.183078051 CET	1.1.1.1	192.168.2.4	0x9e76	No error (0)	sync.srv.stackadapt.com		54.204.238.69	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.183078051 CET	1.1.1.1	192.168.2.4	0x9e76	No error (0)	sync.srv.stackadapt.com		54.152.60.86	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.388524055 CET	1.1.1.1	192.168.2.4	0x2542	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:45.388961077 CET	1.1.1.1	192.168.2.4	0xd115	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:45.388961077 CET	1.1.1.1	192.168.2.4	0xd115	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.391412020 CET	1.1.1.1	192.168.2.4	0x59a7	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.391412020 CET	1.1.1.1	192.168.2.4	0x59a7	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.394129992 CET	1.1.1.1	192.168.2.4	0x3193	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:45.394129992 CET	1.1.1.1	192.168.2.4	0x3193	No error (0)	image6v2.pubmnet.com	pugm-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:45.394129992 CET	1.1.1.1	192.168.2.4	0x3193	No error (0)	pugm-nje1.pubmnet.com		207.65.37.181	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.394151926 CET	1.1.1.1	192.168.2.4	0x2620	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:45.394151926 CET	1.1.1.1	192.168.2.4	0x2620	No error (0)	image6v2.pubmnet.com	pugm-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:45.395484924 CET	1.1.1.1	192.168.2.4	0x67b1	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:45.395484924 CET	1.1.1.1	192.168.2.4	0x67b1	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:45.396951914 CET	1.1.1.1	192.168.2.4	0x9bfc	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:45.396951914 CET	1.1.1.1	192.168.2.4	0x9bfc	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:45.396951914 CET	1.1.1.1	192.168.2.4	0x9bfc	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.113	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.396951914 CET	1.1.1.1	192.168.2.4	0x9bfc	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.87	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.396951914 CET	1.1.1.1	192.168.2.4	0x9bfc	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.102	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.396951914 CET	1.1.1.1	192.168.2.4	0x9bfc	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.48	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.401606083 CET	1.1.1.1	192.168.2.4	0xd21e	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 29, 2024 01:42:45.402247906 CET	1.1.1.1	192.168.2.4	0x4ca7	No error (0)	ad.doubleclick.net		142.251.167.148	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:45.402247906 CET	1.1.1.1	192.168.2.4	0x4ca7	No error (0)	ad.doubleclick.net		142.251.167.149	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:46.147021055 CET	1.1.1.1	192.168.2.4	0xce14	No error (0)	tps.doubleverify.com	tps-geo.dvgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:46.147021055 CET	1.1.1.1	192.168.2.4	0xce14	No error (0)	tpsc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:46.147021055 CET	1.1.1.1	192.168.2.4	0xce14	No error (0)	tps-ue1.doubleverify.com		34.117.228.201	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:46.148488998 CET	1.1.1.1	192.168.2.4	0x33	No error (0)	tps.doubleverify.com	tps-geo.dvgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:46.148488998 CET	1.1.1.1	192.168.2.4	0x33	No error (0)	tpsc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:46.908200979 CET	1.1.1.1	192.168.2.4	0xb5db	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:46.908507109 CET	1.1.1.1	192.168.2.4	0x8516	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:46.960946083 CET	1.1.1.1	192.168.2.4	0xd9e2	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:46.960946083 CET	1.1.1.1	192.168.2.4	0xd9e2	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:46.960946083 CET	1.1.1.1	192.168.2.4	0xd9e2	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.102	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:46.960946083 CET	1.1.1.1	192.168.2.4	0xd9e2	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.87	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:46.960946083 CET	1.1.1.1	192.168.2.4	0xd9e2	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.113	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:46.960946083 CET	1.1.1.1	192.168.2.4	0xd9e2	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.48	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:46.963104963 CET	1.1.1.1	192.168.2.4	0x965b	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:46.963104963 CET	1.1.1.1	192.168.2.4	0x965b	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 01:42:47.930821896 CET	1.1.1.1	192.168.2.4	0x77ca	No error (0)	jelly.mdhv.io		216.239.32.21	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:47.930821896 CET	1.1.1.1	192.168.2.4	0x77ca	No error (0)	jelly.mdhv.io		216.239.36.21	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:47.930821896 CET	1.1.1.1	192.168.2.4	0x77ca	No error (0)	jelly.mdhv.io		216.239.38.21	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:47.930821896 CET	1.1.1.1	192.168.2.4	0x77ca	No error (0)	jelly.mdhv.io		216.239.34.21	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:48.165833950 CET	1.1.1.1	192.168.2.4	0x14da	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Mar 29, 2024 01:42:48.166060925 CET	1.1.1.1	192.168.2.4	0xdb72	No error (0)	googleads.g.doubleclick.net		172.253.115.155	A (IP address)	IN (0x0001)	false
Mar 29, 2024 01:42:48.166060925 CET	1.1.1.1	192.168.2.4	0xdb72	No error (0)	googleads.g.doubleclick.net		172.253.115.156	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	172.66.47.32	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:11 UTC	657	OUT	GET / HTTP/1.1 Host: depl.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:11 UTC	765	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:11 GMT Content-Type: text/html; charset=utf-8 Content-Length: 29191 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "3ca2c89ff0be743b8e55dbebd97da4b6" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pfq%2BAIaFOS5WZCrpxk4NA63vsPDSv%2BqvG6CE%2BX7Yus%2Bd1jLYTX4vSOrebYgdShb%2B7F%2FCBUAZu%2BdsVRSoEEuz68Gim6JQ5PXuKcXXXZo%2BzvIIwuUNEhrKr4W5AKb%2Ff70prg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86bbd015cffb0801-IAD alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:11 UTC	604	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 69 64 3d 22 53 74 65 6e 63 69 6c 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 67 72 69 64 20 6c 69 67 68 74 2d 74 68 65 6d 65 20 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 Data Ascii: <!DOCTYPE html><html id="Stencil" class="no-js grid light-theme "> <head> <meta charset="utf-8"> <meta name="viewport" content="initial-scale=1, maximum-scale=1, user-scalable=0, shrink-to-fit=no"/> <meta name="format-detecti
2024-03-29 00:41:11 UTC	1369	IN	Data Raw: 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 79 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 75 63 73 2e 71 75 65 72 79 2e 79 61 68 6f 6f 2e 63 6f 6d 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 67 65 6f 2e 71 75 65 72 79 2e 79 61 68 6f 6f 2e 63 6f 6d 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 67 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 Data Ascii: rel="dns-prefetch" href="//y.analytics.yahoo.com"> <link rel="dns-prefetch" href="//ucs.query.yahoo.com"> <link rel="dns-prefetch" href="//geo.query.yahoo.com"> <link rel="dns-prefetch" href="//geo.yahoo.com"> <link rel="i
2024-03-29 00:41:11 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 6f 6f 74 2e 69 73 47 6f 6f 64 4a 53 20 3d 20 69 73 47 6f 6f 64 4a 53 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 28 74 68 69 73 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 28 66 75 6e 63 74 69 6f 6e 20 28 72 6f 6f 74 29 20 7b 0a 2f 2a 20 2d 2d 20 44 61 74 61 20 2d 2d 20 2a 2f 0a 72 6f 6f 74 2e 59 55 49 5f 63 6f 6e 66 69 67 20 3d 20 7b 22 63 6f 6d 62 6f 42 61 73 65 22 3a 22 68 74 74 70 73 3a 5c 75 30 30 32 46 5c 75 30 30 32 46 73 2e 79 69 6d 67 2e 63 6f 6d 5c 75 30 30 32 46 7a 7a 5c 75 30 30 32 46 63 6f 6d 62 6f 3f 22 2c 22 63 6f 6d 62 69 6e 65 22 3a 74 72 75 65 2c 22 72 6f 6f 74 22 3a 22 79 75 69 2d 73 3a 33 2e 31 38 2e 30 5c 75 30 30 32 46 22 7d 3b 0a 72 6f 6f 74 2e 43 4f 4d 45 54 5f 55 52 4c Data Ascii: root.isGoodJS = isGoodJS; }(this)); (function (root) {/* -- Data -- */root.YUI_config = {"comboBase":"https:\u002F\u002Fs.yimg.com\u002Fzz\u002Fcombo?","combine":true,"root":"yui-s:3.18.0\u002F"};root.COMET_URL
2024-03-29 00:41:11 UTC	1369	IN	Data Raw: 30 30 30 31 39 26 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6c 6f 67 69 6e 2e 79 61 68 6f 6f 2e 63 6f 6d 25 32 46 61 63 63 6f 75 6e 74 25 32 46 63 68 61 6c 6c 65 6e 67 65 25 32 46 70 61 73 73 77 6f 72 64 26 73 61 3d 67 65 6d 69 6e 69 66 65 64 25 32 35 33 44 31 25 32 35 32 30 79 2d 62 75 63 6b 65 74 25 32 35 33 44 6d 62 72 2d 70 75 73 68 2d 75 6e 74 72 75 73 74 65 64 2d 61 72 25 32 35 32 43 6d 62 72 2d 66 69 64 6f 2d 31 66 61 2d 6c 6f 67 69 6e 25 32 35 32 43 6d 62 72 2d 72 63 73 63 6f 72 65 2d 74 68 72 65 73 68 6f 6c 64 25 32 35 32 43 6d 62 72 2d 71 72 2d 63 6f 6d 65 74 2d 73 64 6b 25 32 35 32 43 6d 62 72 2d 6c 6f 67 69 6e 2d 64 6f 6d 61 69 6e 25 32 35 32 43 6d 62 72 2d 79 61 6b 2d 75 69 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 2c 22 6b 32 52 61 Data Ascii: 00019&ref=https%3A%2F%2Flogin.yahoo.com%2Faccount%2Fchallenge%2Fpassword&sa=geminifed%253D1%2520y-bucket%253Dmbr-push-untrusted-ar%252Cmbr-fido-1fa-login%252Cmbr-rcscore-threshold%252Cmbr-qr-comet-sdk%252Cmbr-login-domain%252Cmbr-yak-ui-improvement","k2Ra
2024-03-29 00:41:11 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6f 6c 64 45 72 72 6f 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 6c 64 45 72 72 6f 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 78 2d 73 61 66 65 66 72 61 6d 65 2d 62 6f 6f 74 65 64 22 20 69 64 3d 22 73 66 5f 74 61 67 5f 31 36 33 37 37 34 30 30 30 31 32 31 32 5f 33 34 22 3e 7b 22 70 6f 73 69 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 52 Data Ascii: if (oldError) { oldError.apply(this, arguments); } return false; }; </script> <script type="text/x-safeframe-booted" id="sf_tag_1637740001212_34">{"positions":[{"id":"R
2024-03-29 00:41:11 UTC	1369	IN	Data Raw: 35 46 64 76 6f 73 70 6c 74 3d 77 69 6e 64 6f 77 73 25 35 46 31 30 3b 6b 76 61 64 74 63 25 35 46 64 76 6f 73 76 65 72 73 69 6f 6e 3d 4e 54 25 32 30 31 30 25 32 45 30 3b 6b 76 61 64 74 63 25 35 46 63 72 6d 63 63 3d 55 4e 4b 4e 4f 57 4e 3b 6b 76 61 64 74 63 25 35 46 63 72 6d 6e 63 3d 55 4e 4b 4e 4f 57 4e 3b 67 64 70 72 3d 30 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 3b 6e 6f 64 65 63 6f 64 65 3d 79 65 73 3b 61 64 63 6c 6e 74 69 64 3d 31 30 30 34 3b 73 70 61 63 65 69 64 3d 37 39 34 32 30 30 30 31 39 3b 6c 69 6e 6b 3d 68 74 74 70 73 3a 5c 2f 5c 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 5c 2f 64 64 6d 5c 2f 74 72 61 63 6b 63 6c 6b 5c 2f 4e 35 31 39 30 31 2e 33 30 32 30 32 34 35 4f 41 54 48 2e 43 4f 4d 5c 2f 42 32 36 36 32 30 34 39 35 2e 33 Data Ascii: 5Fdvosplt=windows%5F10;kvadtc%5Fdvosversion=NT%2010%2E0;kvadtc%5Fcrmcc=UNKNOWN;kvadtc%5Fcrmnc=UNKNOWN;gdpr=0;us_privacy=1YNN;nodecode=yes;adclntid=1004;spaceid=794200019;link=https:\/\/ad.doubleclick.net\/ddm\/trackclk\/N51901.3020245OATH.COM\/B26620495.3
2024-03-29 00:41:11 UTC	1369	IN	Data Raw: 61 64 76 74 3d 34 34 37 30 36 34 37 26 63 68 6e 6c 3d 2d 37 26 76 6e 64 72 3d 31 31 35 26 73 7a 3d 36 36 39 36 26 75 3d 5b 43 75 73 74 6f 6d 5f 44 61 74 61 5d 26 70 74 3d 69 5c 5c 5c 22 20 77 69 64 74 68 3d 5c 5c 5c 22 31 70 78 5c 5c 5c 22 20 68 65 69 67 68 74 3d 5c 5c 5c 22 31 70 78 5c 5c 5c 22 20 73 74 79 6c 65 3d 5c 5c 5c 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 5c 5c 5c 22 5c 2f 3e 5c 5c 6e 5c 22 29 3b 5c 6e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 5c 22 3c 69 6d 67 20 73 72 63 3d 5c 5c 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 74 61 70 65 73 74 72 79 2e 74 61 70 61 64 2e 63 6f 6d 5c 2f 74 61 70 65 73 74 72 79 5c 2f 31 3f 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 3d 39 35 30 26 74 61 5f 72 65 64 69 72 65 63 74 3d 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 Data Ascii: advt=4470647&chnl=-7&vndr=115&sz=6696&u=[Custom_Data]&pt=i\\\" width=\\\"1px\\\" height=\\\"1px\\\" style=\\\"display:none\\\"\/>\\n\");\ndocument.write(\"<img src=\\\"https:\/\/tapestry.tapad.com\/tapestry\/1?ta_partner_id=950&ta_redirect=https%253A%252F
2024-03-29 00:41:11 UTC	1369	IN	Data Raw: 64 49 64 3d 31 31 31 34 36 37 34 35 3b 42 6e 49 64 3d 31 3b 63 74 3d 31 36 35 37 37 36 31 36 32 3b 73 74 3d 38 37 32 37 3b 61 64 63 69 64 3d 31 3b 69 74 69 6d 65 3d 37 33 39 39 31 35 31 36 32 3b 72 65 71 74 79 70 65 3d 35 3b 67 75 69 64 3d 39 73 6c 6b 69 6e 31 67 70 6e 36 66 75 26 62 3d 34 26 64 3d 64 73 45 64 47 37 46 74 59 46 47 47 59 7a 39 6f 45 6a 4d 6f 26 73 3d 34 66 26 69 3d 65 6d 33 4c 67 77 5f 6c 55 58 5f 6d 56 73 79 36 45 77 54 6d 3b 3b 69 6d 70 72 65 66 3d 31 36 33 37 37 33 39 39 31 35 32 37 34 36 31 30 31 39 35 34 3b 69 6d 70 72 65 66 73 65 71 3d 36 32 34 39 34 33 34 36 39 35 39 36 35 38 35 33 38 3b 69 6d 70 72 65 66 74 73 3d 31 36 33 37 37 33 39 39 31 35 3b 61 64 63 6c 6e 74 69 64 3d 31 30 30 34 3b 73 70 61 63 65 69 64 3d 37 39 34 32 30 30 30 Data Ascii: dId=11146745;BnId=1;ct=165776162;st=8727;adcid=1;itime=739915162;reqtype=5;guid=9slkin1gpn6fu&b=4&d=dsEdG7FtYFGGYz9oEjMo&s=4f&i=em3Lgw_lUX_mVsy6EwTm;;impref=16377399152746101954;imprefseq=62494346959658538;imprefts=1637739915;adclntid=1004;spaceid=7942000
2024-03-29 00:41:11 UTC	1369	IN	Data Raw: 22 76 61 72 20 7a 4d 6f 61 74 41 6c 69 61 73 3d 79 39 36 33 38 39 36 31 34 32 5c 5c 6e 5c 22 29 3b 5c 6e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 5c 22 76 61 72 20 7a 4d 6f 61 74 57 65 62 73 69 74 65 49 44 3d 33 37 34 30 35 38 5c 5c 6e 5c 22 29 3b 5c 6e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 5c 22 76 61 72 20 7a 4d 6f 61 74 56 65 72 74 3d 5c 5c 6e 5c 22 29 3b 5c 6e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 5c 22 76 61 72 20 7a 4d 6f 61 74 42 61 6e 6e 65 72 49 6e 66 6f 3d 34 39 36 34 33 36 37 38 33 5c 5c 6e 5c 22 29 3b 5c 6e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 5c 22 76 61 72 20 52 65 66 72 65 73 68 53 6d 61 6c 6c 3d 5c 5c 6e 5c 22 29 3b 5c 6e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 5c 22 76 61 72 20 52 65 66 72 65 73 68 4c 61 72 Data Ascii: "var zMoatAlias=y963896142\\n\");\ndocument.write(\"var zMoatWebsiteID=374058\\n\");\ndocument.write(\"var zMoatVert=\\n\");\ndocument.write(\"var zMoatBannerInfo=496436783\\n\");\ndocument.write(\"var RefreshSmall=\\n\");\ndocument.write(\"var RefreshLar
2024-03-29 00:41:11 UTC	1369	IN	Data Raw: 3b 69 6d 70 72 65 66 73 65 71 3d 36 32 34 39 34 33 34 36 39 35 39 36 35 38 35 33 38 3b 69 6d 70 72 65 66 74 73 3d 31 36 33 37 37 33 39 39 31 35 3b 61 64 63 6c 6e 74 69 64 3d 31 30 30 34 3b 73 70 61 63 65 69 64 3d 37 39 34 32 30 30 30 31 39 3b 61 64 70 6f 73 69 74 69 6f 6e 3d 52 49 43 48 3b 6c 6d 73 69 64 3d 3b 72 65 76 73 68 61 72 65 3d 3b 70 76 69 64 3d 68 46 58 49 43 7a 45 77 4c 6a 47 65 56 70 4b 34 59 5a 75 5a 5f 67 63 4a 4e 7a 51 75 4f 51 41 41 41 41 41 4a 34 50 68 6a 3b 73 65 63 74 69 6f 6e 69 64 3d 3b 6b 76 73 65 63 75 72 65 25 32 44 64 61 72 6c 61 3d 34 25 32 44 31 30 25 32 44 30 25 37 43 79 73 64 25 37 43 32 3b 6b 76 73 65 63 75 72 65 3d 74 72 75 65 3b 6b 76 6d 6e 3d 79 39 36 33 38 39 36 31 34 32 3b 6b 76 79 25 32 44 62 75 63 6b 65 74 3d 6d 62 72 Data Ascii: ;imprefseq=62494346959658538;imprefts=1637739915;adclntid=1004;spaceid=794200019;adposition=RICH;lmsid=;revshare=;pvid=hFXICzEwLjGeVpK4YZuZ_gcJNzQuOQAAAAAJ4Phj;sectionid=;kvsecure%2Ddarla=4%2D10%2D0%7Cysd%7C2;kvsecure=true;kvmn=y963896142;kvy%2Dbucket=mbr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:11 UTC	584	OUT	GET /wm/mbr/58dc9fe4f6c2083f38135ec31a4db5c11ab15bc4/yahoo-main.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://depl.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:12 UTC	766	IN	HTTP/1.1 200 OK x-amz-id-2: WNQWNwqi2JQeaGUriZkgRpKJiTla7bXFm/R55MKNuGTZwBXDzc0a3+9oftpOUo9fVedoWDRRysw= x-amz-request-id: CYJZGSQV3HNA9NTJ Date: Tue, 26 Mar 2024 09:54:14 GMT Last-Modified: Tue, 26 Oct 2021 13:54:24 GMT ETag: "ea481464ba6569b3e2231a864005708d" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 489666 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 226018 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 61 68 6f 6f 20 53 61 6e 73 22 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 45 78 74 72 61 4c 69 67 68 74 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 45 78 74 72 61 4c 69 67 68 74 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 68 74 74 70 73 Data Ascii: @font-face{font-family:"Yahoo Sans";font-display:block;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot);src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot?#iefix) format("embedded-opentype"),url(https
2024-03-29 00:41:12 UTC	482	IN	Data Raw: 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 61 68 6f 6f 20 53 61 6e 73 22 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 49 74 61 6c 69 63 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 49 74 61 6c 69 63 2e 65 6f 74 Data Ascii: off) format("woff");font-weight:400;font-style:normal}@font-face{font-family:"Yahoo Sans";font-display:block;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.eot);src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.eot
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 61 68 6f 6f 20 53 61 6e 73 22 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 4d 65 64 69 75 6d 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 4d 65 64 69 75 6d 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 Data Ascii: font-style:italic}@font-face{font-family:"Yahoo Sans";font-display:block;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.eot);src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.eot?#iefix) format("embedded-opentype")
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 61 68 6f 6f 20 53 61 6e 73 22 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 45 78 74 72 61 42 6f 6c 64 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 45 78 74 72 61 Data Ascii: .woff) format("woff");font-weight:700;font-style:normal}@font-face{font-family:"Yahoo Sans";font-display:block;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.eot);src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Extra
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4e 69 63 6f 6c 61 73 20 47 61 6c 6c 61 67 68 65 72 20 61 6e 64 20 4a 6f 6e 61 74 68 61 6e 20 4e 65 61 6c 20 2a 2f 0a 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 31 2e 31 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 0a 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c Data Ascii: License \| git.io/normalize Copyright (c) Nicolas Gallagher and Jonathan Neal //! normalize.css v1.1.3 \| MIT License \| git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 75 62 7b 62 6f 74 74 6f 6d 3a 2d 2e 32 35 65 6d 7d 64 6c 2c 6d 65 6e 75 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 3a 31 65 6d 20 30 7d 64 64 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 34 30 70 78 7d 6d 65 6e 75 2c 6f 6c 2c 75 6c 7b 70 61 64 64 69 6e 67 3a 30 20 30 20 30 20 34 30 70 78 7d 6e 61 76 20 75 6c 2c 6e 61 76 20 6f 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6c 69 73 74 2d 73 74 79 6c 65 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 69 6d 67 7b 62 6f 72 64 65 72 3a 30 3b 2d 6d 73 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 6d 6f 64 65 3a 62 69 63 75 62 69 63 7d 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 30 7d 66 6f 72 6d 7b 6d 61 72 67 69 6e 3a 30 7d 66 69 65 Data Ascii: ub{bottom:-.25em}dl,menu,ol,ul{margin:1em 0}dd{margin:0 0 0 40px}menu,ol,ul{padding:0 0 0 40px}nav ul,nav ol{list-style:none;list-style-image:none}img{border:0;-ms-interpolation-mode:bicubic}svg:not(:root){overflow:hidden}figure{margin:0}form{margin:0}fie
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 2a 77 6f 72 64 2d 73 70 61 63 69 6e 67 3a 2d 2e 34 33 65 6d 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 6f 70 74 69 6d 69 7a 65 73 70 65 65 64 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 46 72 65 65 53 61 6e 73 2c 41 72 69 6d 6f 2c 22 44 72 6f 69 64 20 53 61 6e 73 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 7d 2e 6f 70 65 72 61 2d 6f 6e 6c 79 20 3a 2d 6f 2d 70 72 65 66 6f 63 75 73 2c 2e 70 75 72 65 2d 67 7b 77 6f 72 64 2d 73 70 61 63 69 6e 67 3a 2d 2e 34 33 65 6d 7d 2e 70 75 72 65 2d 75 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 2a Data Ascii: pacing:normal;word-spacing:-.43em;text-rendering:optimizespeed;font-family:FreeSans,Arimo,"Droid Sans",Helvetica,Arial,sans-serif;display:-webkit-flex;display:-ms-flexbox}.opera-only :-o-prefocus,.pure-g{word-spacing:-.43em}.pure-u{display:inline-block;
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 64 74 68 3a 31 36 2e 36 36 36 37 25 3b 2a 77 69 64 74 68 3a 31 36 2e 36 33 35 37 25 7d 2e 70 75 72 65 2d 75 2d 31 2d 35 7b 77 69 64 74 68 3a 32 30 25 3b 2a 77 69 64 74 68 3a 31 39 2e 39 36 39 25 7d 2e 70 75 72 65 2d 75 2d 35 2d 32 34 7b 77 69 64 74 68 3a 32 30 2e 38 33 33 33 25 3b 2a 77 69 64 74 68 3a 32 30 2e 38 30 32 33 25 7d 2e 70 75 72 65 2d 75 2d 31 2d 34 2c 2e 70 75 72 65 2d 75 2d 36 2d 32 34 7b 77 69 64 74 68 3a 32 35 25 3b 2a 77 69 64 74 68 3a 32 34 2e 39 36 39 25 7d 2e 70 75 72 65 2d 75 2d 37 2d 32 34 7b 77 69 64 74 68 3a 32 39 2e 31 36 36 37 25 3b 2a 77 69 64 74 68 3a 32 39 2e 31 33 35 37 25 7d 2e 70 75 72 65 2d 75 2d 31 2d 33 2c 2e 70 75 72 65 2d 75 2d 38 2d 32 34 7b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 25 3b 2a 77 69 64 74 68 3a 33 33 2e 33 Data Ascii: dth:16.6667%;width:16.6357%}.pure-u-1-5{width:20%;width:19.969%}.pure-u-5-24{width:20.8333%;width:20.8023%}.pure-u-1-4,.pure-u-6-24{width:25%;width:24.969%}.pure-u-7-24{width:29.1667%;width:29.1357%}.pure-u-1-3,.pure-u-8-24{width:33.3333%;width:33.3
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 64 72 61 67 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 70 75 72 65 2d 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 2e 70 75 72 65 2d 62 75 74 74 6f 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a Data Ascii: ertical-align:baseline;text-align:center;cursor:pointer;-webkit-user-drag:none;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.pure-button::-moz-focus-inner{padding:0;border:0}.pure-button{font-family:inherit;font-siz
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 2d 62 75 74 74 6f 6e 2d 73 65 6c 65 63 74 65 64 2c 61 2e 70 75 72 65 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2c 61 2e 70 75 72 65 2d 62 75 74 74 6f 6e 2d 73 65 6c 65 63 74 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 38 65 37 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e Data Ascii: -button-selected,a.pure-button-primary,a.pure-button-selected{background-color:#0078e7;color:#fff}.pure-form input[type=text],.pure-form input[type=password],.pure-form input[type=email],.pure-form input[type=url],.pure-form input[type=date],.pure-form in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49737	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:11 UTC	524	OUT	GET /rq/darla/boot.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://depl.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:12 UTC	626	IN	HTTP/1.1 403 Forbidden x-amz-request-id: X9D1ZTRGS0SC8WQK x-amz-id-2: YWqjKN8EyZNf7dZJ4X30tRHsgNzyWSPIRVbc/Cw29Bmqm8WQ5OeJTxNncK02LcOFcc25l27nJow= Content-Type: application/xml Date: Fri, 29 Mar 2024 00:36:52 GMT Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Expires: Fri, 29 Mar 2024 00:41:53 GMT Age: 259 Content-Length: 243 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:12 UTC	243	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 41 63 63 65 73 73 44 65 6e 69 65 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 4d 65 73 73 61 67 65 3e 3c 52 65 71 75 65 73 74 49 64 3e 58 39 44 31 5a 54 52 47 53 30 53 43 38 57 51 4b 3c 2f 52 65 71 75 65 73 74 49 64 3e 3c 48 6f 73 74 49 64 3e 59 57 71 6a 4b 4e 38 45 79 5a 4e 66 37 64 5a 4a 34 58 33 30 74 52 48 73 67 4e 7a 79 57 53 50 49 52 56 62 63 2f 43 77 32 39 42 6d 71 6d 38 57 51 35 4f 65 4a 54 78 4e 6e 63 4b 30 32 4c 63 4f 46 63 63 32 35 6c 32 37 6e 4a 6f 77 3d 3c 2f 48 6f 73 74 49 64 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>X9D1ZTRGS0SC8WQK</RequestId><HostId>YWqjKN8EyZNf7dZJ4X30tRHsgNzyWSPIRVbc/Cw29Bmqm8WQ5OeJTxNncK02LcOFcc25l27nJow=</HostId></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:11 UTC	537	OUT	GET /rq/darla/4-10-0/js/g-r-min.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://depl.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:12 UTC	625	IN	HTTP/1.1 403 Forbidden x-amz-request-id: 3038ZBJNVM0N0VZ2 x-amz-id-2: m1FK1MmHF+nH/eN/bWDOMEkUJCsHXBMJ3MQUdMtpSRuU7UgkMBjC+xg/LU7zn4KMLu6qn7lrHTU= Content-Type: application/xml Date: Fri, 29 Mar 2024 00:40:47 GMT Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Expires: Fri, 29 Mar 2024 00:45:47 GMT Age: 24 Content-Length: 243 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:12 UTC	243	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 41 63 63 65 73 73 44 65 6e 69 65 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 4d 65 73 73 61 67 65 3e 3c 52 65 71 75 65 73 74 49 64 3e 33 30 33 38 5a 42 4a 4e 56 4d 30 4e 30 56 5a 32 3c 2f 52 65 71 75 65 73 74 49 64 3e 3c 48 6f 73 74 49 64 3e 6d 31 46 4b 31 4d 6d 48 46 2b 6e 48 2f 65 4e 2f 62 57 44 4f 4d 45 6b 55 4a 43 73 48 58 42 4d 4a 33 4d 51 55 64 4d 74 70 53 52 75 55 37 55 67 6b 4d 42 6a 43 2b 78 67 2f 4c 55 37 7a 6e 34 4b 4d 4c 75 36 71 6e 37 6c 72 48 54 55 3d 3c 2f 48 6f 73 74 49 64 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>3038ZBJNVM0N0VZ2</RequestId><HostId>m1FK1MmHF+nH/eN/bWDOMEkUJCsHXBMJ3MQUdMtpSRuU7UgkMBjC+xg/LU7zn4KMLu6qn7lrHTU=</HostId></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49740	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:11 UTC	625	OUT	GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://depl.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:12 UTC	824	IN	HTTP/1.1 200 OK x-amz-id-2: POEsOfgKyxBN/Dxcsk3tTIBf5tA3Pmfqb2gy6MW51pc26nHu9hxbQBpwzf7vskeyJYZKO7jzN+I= x-amz-request-id: AGA7KMQNKTT1SD0N Date: Thu, 28 Mar 2024 09:52:52 GMT Last-Modified: Wed, 27 Mar 2024 21:32:36 GMT ETag: "cd166981c96c6d0f4b5a7d798c25878e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=86400 Expires: Thu, 28 Mar 2024 23:00:00 GMT Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 1346 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 53301 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 48 08 03 00 00 00 ff 12 88 b8 00 00 00 2a 50 4c 54 45 47 70 4c 61 02 d3 61 01 d3 61 02 d3 72 19 e1 60 01 d2 60 01 d2 60 01 d2 60 01 d3 62 05 d5 61 03 d4 60 01 d2 65 09 d7 60 01 d2 05 db 6c 10 00 00 00 0e 74 52 4e 53 00 54 7b 6a 0a b3 ff e1 93 2a 3d ca 19 f3 50 61 75 3e 00 00 04 b9 49 44 41 54 78 da ed 9a eb 8e 23 29 0c 46 8b 8b 8b 8b f1 fb bf ee aa 27 d2 26 b6 31 14 b5 35 1a 2d 13 ab ff 74 82 c0 07 cc 87 0d 39 be f6 b5 af 5d 30 e7 df 16 fe 9c 1b d1 33 fb 8d 9e c0 f9 b6 f4 e7 80 fd c9 2c 6f 0f 9c 38 70 d9 1d b8 72 5e 3c 76 07 06 0e ec 76 07 6e 9c 97 e2 e6 c0 5a b2 f6 06 d6 92 b5 3b b0 e3 bc 70 ec 0d ac 25 6b 77 e0 c2 79 d3 b1 3b 70 e6 c0 7e 77 e0 48 1c b8 6d 0e ac 25 6b 77 60 e4 c0 f5 89 Data Ascii: PNGIHDRHPLTEGpLaaar````ba`e`ltRNST{j=Pau>IDATx#)F'&15-t9]03,o8pr^<vvnZ;p%kwy;p~wHm%kw`
2024-03-29 00:41:12 UTC	46	IN	Data Raw: 5b fa cb 24 cb 0d 2a ff fd cf 24 d8 9f 37 e6 ec df 7f f5 f8 da d7 fe 87 f6 0f 42 2a 9e da f5 7e d6 49 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: [$$7B~IIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49738	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:11 UTC	625	OUT	GET /rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://depl.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:12 UTC	824	IN	HTTP/1.1 200 OK x-amz-id-2: MRg6mzZ4D0j56ulV7ahoE+1L0u6OIZ8UwXro70SVqNLRi7t3qL58t3XOKJekye/A/HrIP3w8y+A= x-amz-request-id: PPSTKMPBGJCTQ4ME Date: Thu, 28 Mar 2024 12:08:36 GMT Last-Modified: Wed, 27 Mar 2024 21:32:36 GMT ETag: "dd31f56b9e4dff40eb87447c3dc55b84" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=86400 Expires: Thu, 28 Mar 2024 23:00:00 GMT Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 1391 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 45157 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 48 08 03 00 00 00 ff 12 88 b8 00 00 00 33 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff cf d1 8a 61 00 00 00 10 74 52 4e 53 00 85 18 aa e0 f6 3d 09 b9 54 cc 2a 76 ed 98 68 e1 23 f6 e8 00 00 04 db 49 44 41 54 78 5e ed 9a db 92 db 20 0c 86 39 4a 9c f1 fb 3f 6d a7 d9 0b af 90 65 4c 9a 69 67 e8 fe 77 d9 38 86 4f 08 49 88 55 0f f4 a3 1f fd 28 96 53 fd df 01 98 52 ca df 99 49 38 4e b9 7f 07 5c 0e a2 b6 3d b0 a3 c0 79 77 60 a0 bc 49 ed 0e 1c 28 70 dc 1d d8 50 de 8a bb 03 6b 0a ac d5 de c0 3c 64 ed 0e 1c 29 6f 50 7b 03 f3 90 b5 3b 70 a6 bc 4e ed 0d cc 43 d6 ee c0 58 29 b0 d9 1a Data Ascii: PNGIHDRH3PLTEGpLatRNS=T*vh#IDATx^ 9J?meLigw8OIU(SRI8N\=yw`I(pPk<d)oP{;pNCX)
2024-03-29 00:41:12 UTC	91	IN	Data Raw: 15 17 82 6e 56 93 57 ac d4 d3 a0 b6 57 a3 15 f9 f6 c2 4a 03 fb e6 e2 ff a6 b4 b7 78 c8 da 5e c0 ce 66 9b cb 6e 1d b2 e6 f7 e2 db 4b ff 6f 21 8b 5d a9 6f ae f8 bf 85 ac 40 4f 57 db 0b f5 77 c1 8e 88 fb eb 47 bf 00 33 aa 7a 26 16 d7 c0 61 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: nVWWJx^fnKo!]o@OWwG3z&aIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:12 UTC	527	OUT	GET /ss/rapid-3.53.30.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://depl.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:12 UTC	835	IN	HTTP/1.1 200 OK x-amz-id-2: RYewNgq+aQJUyoAW96cnPCnlCWR3NnI96E+rfsYw6bZPcIYPXGBY4oi6Q3iOul8A8JmfnUG9SSw= x-amz-request-id: WNCD37PY9EQ958AK Date: Thu, 21 Mar 2024 19:50:46 GMT Last-Modified: Tue, 29 Jun 2021 01:45:07 GMT ETag: "665798d28ecf9be7cbc434e75267920d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, immutable x-amz-version-id: .Bcg25AHAdRCkTvv5tMdNmGVEjznZ_m3 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 50266 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 622227 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 72 65 28 6c 29 7b 76 61 72 20 63 3d 7b 41 31 53 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 61 31 73 22 7d 2c 42 3a 7b 6c 6f 67 3a 21 31 7d 2c 42 58 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 62 78 22 7d 2c 57 56 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 77 76 22 7d 2c 54 54 3a 7b 6c 6f 67 3a 21 31 7d 2c 44 3a 7b 6c 6f 67 3a 21 31 7d 2c 5f 67 61 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 67 61 22 7d 2c 79 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 79 78 22 7d 2c 72 78 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 72 78 22 7d 2c 55 4e 41 55 54 48 49 44 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 61 6f 6c 5f 75 6e 61 75 74 68 22 7d 2c 5f 75 74 64 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a Data Ascii: !function(){function re(l){var c={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 52 61 70 69 64 20 57 61 73 20 50 72 65 76 65 6e 74 65 64 20 46 72 6f 6d 20 41 63 63 65 73 73 69 6e 67 20 43 6f 6f 6b 69 65 73 3a 22 2c 65 29 7d 2d 31 21 3d 3d 74 3f 28 75 5b 6e 5d 3d 69 2c 6e 3d 63 5b 6e 5d 2c 6c 26 26 6e 26 26 6e 2e 6c 6f 67 26 26 6c 2e 73 65 74 28 6e 2e 6b 65 79 2c 69 29 29 3a 30 3c 6f 2b 72 26 26 28 6f 2d 2d 2c 73 28 29 29 7d 65 2e 66 70 63 26 26 22 2e 79 61 68 6f 6f 2e 63 6f 6d 22 21 3d 3d 61 28 6f 29 26 26 73 28 29 7d 3b 76 61 72 20 65 3d 6e 75 6c 6c 3b 74 72 79 7b 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 52 61 70 69 64 20 57 61 73 20 50 72 65 76 65 6e 74 65 64 20 46 72 6f 6d 20 41 63 63 65 73 73 69 6e 67 Data Ascii: ){console.warn("Rapid Was Prevented From Accessing Cookies:",e)}-1!==t?(u[n]=i,n=c[n],l&&n&&n.log&&l.set(n.key,i)):0<o+r&&(o--,s())}e.fpc&&".yahoo.com"!==a(o)&&s()};var e=null;try{e=document.cookie}catch(e){console.warn("Rapid Was Prevented From Accessing
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 69 74 5f 61 64 5f 74 72 61 63 6b 69 6e 67 3a 65 5b 38 5d 2c 74 72 61 63 6b 69 6e 67 5f 61 75 74 68 5f 73 74 61 74 75 73 3a 65 5b 39 5d 7d 7d 72 65 74 75 72 6e 7b 7d 7d 28 28 6e 65 77 20 72 65 29 2e 67 65 74 43 6f 6f 6b 69 65 42 79 4e 61 6d 65 28 22 57 56 22 29 29 2e 74 72 61 63 6b 69 6e 67 5f 61 75 74 68 5f 73 74 61 74 75 73 7c 7c 2d 31 29 7d 2c 59 41 48 4f 4f 2e 69 31 33 6e 2e 45 76 65 6e 74 54 79 70 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 72 69 63 68 76 69 65 77 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 79 71 6c 69 64 3d 65 2c 74 68 69 73 2e 65 76 65 6e 74 4e 61 6d 65 3d 74 2c 74 68 69 73 2e 73 70 61 63 65 69 64 50 72 65 66 69 78 3d 6e 7d 74 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 67 65 74 59 51 4c 49 Data Ascii: it_ad_tracking:e[8],tracking_auth_status:e[9]}}return{}}((new re).getCookieByName("WV")).tracking_auth_status\|\|-1)},YAHOO.i13n.EventTypes=function(){var e="richview";function t(e,t,n){this.yqlid=e,this.eventName=t,this.spaceidPrefix=n}t.prototype={getYQLI
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 5d 3d 74 2c 74 68 69 73 2e 63 6f 75 6e 74 2b 2b 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 5b 65 5d 7d 2c 67 65 74 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 7d 2c 61 62 73 6f 72 62 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 77 2e 69 73 4f 62 6a 28 65 29 29 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 29 77 2e 68 61 73 4f 77 6e 28 65 2c 74 29 26 26 74 68 69 73 2e 73 65 74 28 74 2c 65 5b 74 5d 29 7d 2c 61 62 73 6f 72 62 5f 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 26 26 77 2e 69 73 4f 62 6a 28 65 29 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 74 26 26 21 74 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 6e 29 7c 7c 77 Data Ascii: ]=t,this.count++)},get:function(e){return this.map[e]},getAll:function(){return this.map},absorb:function(e){if(e&&w.isObj(e))for(var t in e)w.hasOwn(e,t)&&this.set(t,e[t])},absorb_filter:function(e,t){if(e&&w.isObj(e))for(var n in e)t&&!t.call(null,n)\|\|w
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 65 6e 74 2e 64 6f 6d 61 69 6e 2e 73 70 6c 69 74 28 22 2e 22 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 22 2e 22 29 7c 7c 28 6f 3d 22 33 70 2d 22 2b 6f 2c 72 3d 22 33 70 2d 22 2b 72 29 3b 72 3d 7b 6f 76 65 72 72 69 64 65 3a 69 2c 76 65 72 73 69 6f 6e 3a 61 65 2c 63 6f 6d 62 6f 4e 61 6d 65 3a 73 65 2c 6b 65 79 73 3a 6c 2c 72 65 66 65 72 72 65 72 3a 65 2e 72 65 66 65 72 72 65 72 2c 67 65 74 52 65 66 65 72 72 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 2e 6e 6f 72 6d 28 77 2e 63 6c 72 65 66 28 28 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 72 65 66 65 72 72 65 72 3f 74 68 69 73 3a 64 6f 63 75 6d 65 6e 74 29 2e 72 65 66 65 72 72 65 72 29 29 7d 2c 73 70 61 63 65 69 64 3a 77 2e 6e 6f 72 6d 28 69 2e 73 70 61 63 65 69 64 7c 7c 59 41 48 Data Ascii: ent.domain.split(".").slice(-2).join(".")\|\|(o="3p-"+o,r="3p-"+r);r={override:i,version:ae,comboName:se,keys:l,referrer:e.referrer,getReferrer:function(){return w.norm(w.clref((void 0!==this.referrer?this:document).referrer))},spaceid:w.norm(i.spaceid\|\|YAH
2024-03-29 00:41:12 UTC	1004	IN	Data Raw: 72 61 70 69 64 5f 70 22 2c 61 6e 63 5f 76 39 79 5f 61 74 74 72 3a 22 64 61 74 61 2d 76 39 79 22 2c 64 65 62 3a 21 30 3d 3d 3d 65 2e 64 65 62 75 67 2c 6c 64 62 67 3a 30 3c 65 2e 6c 64 62 67 7c 7c 30 3c 6e 2e 69 6e 64 65 78 4f 66 28 22 79 68 6c 64 65 62 75 67 3d 31 22 29 2c 61 64 64 6d 6f 64 5f 74 69 6d 65 6f 75 74 3a 65 2e 61 64 64 6d 6f 64 75 6c 65 73 5f 74 69 6d 65 6f 75 74 7c 7c 33 30 30 2c 75 6c 74 5f 74 6f 6b 65 6e 5f 63 61 70 74 75 72 65 3a 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 75 6c 74 5f 74 6f 6b 65 6e 5f 63 61 70 74 75 72 65 26 26 65 2e 75 6c 74 5f 74 6f 6b 65 6e 5f 63 61 70 74 75 72 65 2c 74 72 61 63 6b 5f 74 79 70 65 3a 65 2e 74 72 61 63 6b 5f 74 79 70 65 7c 7c 22 64 61 74 61 2d 74 72 61 63 6b 74 79 70 65 22 2c 64 77 65 6c Data Ascii: rapid_p",anc_v9y_attr:"data-v9y",deb:!0===e.debug,ldbg:0<e.ldbg\|\|0<n.indexOf("yhldebug=1"),addmod_timeout:e.addmodules_timeout\|\|300,ult_token_capture:"boolean"==typeof e.ult_token_capture&&e.ult_token_capture,track_type:e.track_type\|\|"data-tracktype",dwel
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 74 6f 6d 55 49 44 7c 7c 6e 75 6c 6c 7d 3b 72 2e 61 6e 6f 6e 79 6d 69 7a 65 64 26 26 28 72 2e 67 65 6f 5f 68 6f 73 74 3d 22 67 61 6e 6f 6e 2e 79 61 68 6f 6f 2e 63 6f 6d 22 29 2c 28 72 2e 61 6e 6f 6e 79 6d 69 7a 65 64 7c 7c 72 2e 62 63 6f 6f 6b 69 65 5f 6f 76 65 72 72 69 64 65 29 26 26 28 72 2e 79 71 6c 5f 65 6e 61 62 6c 65 64 3d 21 31 29 2c 72 2e 63 75 73 74 6f 6d 55 49 44 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 28 61 3d 72 2e 63 75 73 74 6f 6d 55 49 44 29 26 26 61 2e 74 79 70 65 26 26 61 2e 69 64 3f 72 2e 63 75 73 74 6f 6d 55 49 44 3d 77 2e 61 75 67 28 7b 7d 2c 61 29 3a 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 63 75 73 74 6f 6d 55 49 44 20 6d 75 73 74 20 62 65 20 61 6e 20 4f 62 6a 65 63 74 20 77 69 74 68 20 22 69 64 22 20 61 6e 64 Data Ascii: tomUID\|\|null};r.anonymized&&(r.geo_host="ganon.yahoo.com"),(r.anonymized\|\|r.bcookie_override)&&(r.yql_enabled=!1),r.customUID&&("object"==typeof(a=r.customUID)&&a.type&&a.id?r.customUID=w.aug({},a):(console.error('customUID must be an Object with "id" and
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 65 72 79 5f 70 61 72 61 6d 65 74 65 72 73 29 7b 76 61 72 20 69 2c 6f 2c 72 3d 2f 5e 28 74 65 73 74 7c 6f 75 74 63 6d 7c 65 74 72 67 7c 75 73 65 72 67 65 6e 66 7c 65 74 61 67 7c 73 65 63 7c 73 6c 6b 7c 74 61 72 7c 74 61 72 5f 75 72 69 7c 79 68 6c 64 65 62 75 67 7c 74 73 72 63 7c 61 63 74 69 6f 6e 29 24 7c 5e 28 41 5f 7c 5f 29 2f 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 69 66 28 61 29 66 6f 72 28 76 61 72 20 73 20 69 6e 20 61 3d 28 61 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 2e 73 70 6c 69 74 28 22 26 22 29 29 21 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 73 29 7c 7c 32 3c 3d 28 6f 3d 61 5b 73 5d 2e 73 70 6c 69 74 28 22 3d 22 29 29 2e 6c 65 6e 67 74 68 26 26 28 69 3d 64 65 63 6f 64 65 55 52 49 43 6f Data Ascii: ery_parameters){var i,o,r=/^(test\|outcm\|etrg\|usergenf\|etag\|sec\|slk\|tar\|tar_uri\|yhldebug\|tsrc\|action)$\|^(A_\|_)/,a=document.location.search;if(a)for(var s in a=(a=a.substring(1)).split("&"))!a.hasOwnProperty(s)\|\|2<=(o=a[s].split("=")).length&&(i=decodeURICo
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 6f 6e 74 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 7b 7d 3b 74 26 26 4f 26 26 4f 2e 73 74 61 72 74 5f 64 77 65 6c 6c 28 29 26 26 28 69 2e 65 74 61 67 3d 22 64 77 65 6c 6c 2c 73 74 61 72 74 22 2c 69 2e 75 73 65 72 67 65 6e 66 3d 31 2c 69 2e 41 5f 70 72 65 74 73 3d 74 65 3f 74 65 2e 74 73 3a 6e 75 6c 6c 2c 69 2e 41 5f 70 72 65 6d 73 3d 74 65 3f 74 65 2e 6d 73 3a 6e 75 6c 6c 29 2c 6e 2e 65 76 65 6e 74 26 26 77 2e 61 75 67 28 69 2c 6e 2e 65 76 65 6e 74 2e 64 61 74 61 29 2c 6e 2e 70 70 26 26 77 2e 61 75 67 28 69 2c 6e 2e 70 70 29 2c 55 28 52 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 28 5b 65 5d 2c 74 2c 21 30 2c 69 2c 6e 29 7d 29 29 7d 2c 73 65 6e 64 55 4c 54 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: ontent:function(e,t,n){var i={};t&&O&&O.start_dwell()&&(i.etag="dwell,start",i.usergenf=1,i.A_prets=te?te.ts:null,i.A_prems=te?te.ms:null),n.event&&w.aug(i,n.event.data),n.pp&&w.aug(i,n.pp),U(R(function(){return S([e],t,!0,i,n)}))},sendULTEvent:function(e
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 7c 7c 36 21 3d 3d 77 2e 69 65 56 26 26 37 21 3d 3d 77 2e 69 65 56 26 26 38 21 3d 3d 77 2e 69 65 56 3f 77 2e 73 61 28 65 2c 22 73 74 79 6c 65 22 2c 74 29 3a 65 2e 73 74 79 6c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 73 73 54 65 78 74 22 2c 74 2c 30 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 29 7b 76 61 72 20 74 2c 6e 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 28 6e 3d 77 2e 69 73 49 45 26 26 77 2e 69 65 56 3c 3d 38 3f 28 74 3d 22 22 2c 77 2e 69 73 53 65 63 75 72 65 28 29 26 26 36 3d 3d 77 2e 69 65 56 26 26 28 74 3d 27 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 27 2b 41 2e 67 65 6f 5f 68 6f 73 74 2b 27 2f 62 2e 68 74 6d 6c 22 27 29 2c 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 3c 69 66 72 61 6d 65 20 22 2b 74 2b 27 20 6e 61 6d 65 Data Ascii: \|\|6!==w.ieV&&7!==w.ieV&&8!==w.ieV?w.sa(e,"style",t):e.style.setAttribute("cssText",t,0)}function C(e){var t,n=null;return(n=w.isIE&&w.ieV<=8?(t="",w.isSecure()&&6==w.ieV&&(t='src="https://'+A.geo_host+'/b.html"'),document.createElement("<iframe "+t+' name

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49745	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:12 UTC	565	OUT	GET /wm/mbr/58dc9fe4f6c2083f38135ec31a4db5c11ab15bc4/bundle.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://depl.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:12 UTC	781	IN	HTTP/1.1 200 OK x-amz-id-2: l76c8fBMPF3nAdQSi0odTIFChVevmLsAFnvIOnLgvAWPOvt9rYOK93TKznT19dAlL+78AUzNC+A= x-amz-request-id: PFPHKB5DJN0XPTBB Date: Thu, 14 Mar 2024 12:46:09 GMT Last-Modified: Tue, 26 Oct 2021 13:54:24 GMT ETag: "9d0d35eeb38380d91dbb5f4514dd867a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 183550 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1252504 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 69 2c 66 29 7b 69 66 28 21 6e 5b 69 5d 29 7b 69 66 28 21 65 5b 69 5d 29 7b 76 61 72 20 63 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 66 26 26 63 29 72 65 74 75 72 6e 20 63 28 69 2c 21 30 29 3b 69 66 28 75 29 72 65 74 75 72 6e 20 75 28 69 2c 21 30 29 3b 76 61 72 20 61 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 69 2b 22 27 22 29 3b 74 68 72 6f 77 20 61 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 61 7d 76 61 72 20 70 3d 6e 5b 69 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d Data Ascii: (function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}}
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 5d 2c 6e 5b 31 5d 2b 3d 6e 5b 32 5d 3e 3e 3e 31 36 2c 6e 5b 32 5d 26 3d 36 35 35 33 35 2c 6e 5b 31 5d 2b 3d 65 5b 31 5d 2a 74 5b 33 5d 2c 6e 5b 30 5d 2b 3d 6e 5b 31 5d 3e 3e 3e 31 36 2c 6e 5b 31 5d 26 3d 36 35 35 33 35 2c 6e 5b 31 5d 2b 3d 65 5b 32 5d 2a 74 5b 32 5d 2c 6e 5b 30 5d 2b 3d 6e 5b 31 5d 3e 3e 3e 31 36 2c 6e 5b 31 5d 26 3d 36 35 35 33 35 2c 6e 5b 31 5d 2b 3d 65 5b 33 5d 2a 74 5b 31 5d 2c 6e 5b 30 5d 2b 3d 6e 5b 31 5d 3e 3e 3e 31 36 2c 6e 5b 31 5d 26 3d 36 35 35 33 35 2c 6e 5b 30 5d 2b 3d 65 5b 30 5d 2a 74 5b 33 5d 2b 65 5b 31 5d 2a 74 5b 32 5d 2b 65 5b 32 5d 2a 74 5b 31 5d 2b 65 5b 33 5d 2a 74 5b 30 5d 2c 6e 5b 30 5d 26 3d 36 35 35 33 35 2c 5b 6e 5b 30 5d 3c 3c 31 36 7c 6e 5b 31 5d 2c 6e 5b 32 5d 3c 3c 31 36 7c 6e 5b 33 5d 5d 7d 2c 6e 3d 66 75 Data Ascii: ],n[1]+=n[2]>>>16,n[2]&=65535,n[1]+=e[1]t[3],n[0]+=n[1]>>>16,n[1]&=65535,n[1]+=e[2]t[2],n[0]+=n[1]>>>16,n[1]&=65535,n[1]+=e[3]t[1],n[0]+=n[1]>>>16,n[1]&=65535,n[0]+=e[0]t[3]+e[1]t[2]+e[2]t[1]+e[3]*t[0],n[0]&=65535,[n[0]<<16\|n[1],n[2]<<16\|n[3]]},n=fu
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 2c 67 29 2c 63 3d 6e 28 63 2c 32 37 29 2c 63 3d 65 28 63 2c 64 29 2c 63 3d 65 28 74 28 63 2c 5b 30 2c 35 5d 29 2c 5b 30 2c 31 33 39 30 32 30 38 38 30 39 5d 29 2c 66 3d 74 28 66 2c 6d 29 2c 66 3d 6e 28 66 2c 33 33 29 2c 66 3d 74 28 66 2c 68 29 2c 64 3d 72 28 64 2c 66 29 2c 64 3d 6e 28 64 2c 33 31 29 2c 64 3d 65 28 64 2c 63 29 2c 64 3d 65 28 74 28 64 2c 5b 30 2c 35 5d 29 2c 5b 30 2c 39 34 34 33 33 31 34 34 35 5d 29 3b 73 77 69 74 63 68 28 67 3d 5b 30 2c 30 5d 2c 66 3d 5b 30 2c 30 5d 2c 73 29 7b 63 61 73 65 20 31 35 3a 66 3d 72 28 66 2c 61 28 5b 30 2c 6f 2e 63 68 61 72 43 6f 64 65 41 74 28 54 2b 31 34 29 5d 2c 34 38 29 29 3b 63 61 73 65 20 31 34 3a 66 3d 72 28 66 2c 61 28 5b 30 2c 6f 2e 63 68 61 72 43 6f 64 65 41 74 28 54 2b 31 33 29 5d 2c 34 30 29 29 3b 63 Data Ascii: ,g),c=n(c,27),c=e(c,d),c=e(t(c,[0,5]),[0,1390208809]),f=t(f,m),f=n(f,33),f=t(f,h),d=r(d,f),d=n(d,31),d=e(d,c),d=e(t(d,[0,5]),[0,944331445]);switch(g=[0,0],f=[0,0],s){case 15:f=r(f,a([0,o.charCodeAt(T+14)],48));case 14:f=r(f,a([0,o.charCodeAt(T+13)],40));c
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 73 3a 5b 5d 2c 65 78 74 65 6e 64 65 64 4a 73 46 6f 6e 74 73 3a 21 31 7d 2c 73 63 72 65 65 6e 3a 7b 64 65 74 65 63 74 53 63 72 65 65 6e 4f 72 69 65 6e 74 61 74 69 6f 6e 3a 21 30 7d 2c 70 6c 75 67 69 6e 73 3a 7b 73 6f 72 74 50 6c 75 67 69 6e 73 46 6f 72 3a 5b 2f 70 61 6c 65 6d 6f 6f 6e 2f 69 5d 2c 65 78 63 6c 75 64 65 49 45 3a 21 31 7d 2c 65 78 74 72 61 43 6f 6d 70 6f 6e 65 6e 74 73 3a 5b 5d 2c 65 78 63 6c 75 64 65 73 3a 7b 65 6e 75 6d 65 72 61 74 65 44 65 76 69 63 65 73 3a 21 30 2c 70 69 78 65 6c 52 61 74 69 6f 3a 21 30 2c 64 6f 4e 6f 74 54 72 61 63 6b 3a 21 30 2c 66 6f 6e 74 73 46 6c 61 73 68 3a 21 30 7d 2c 4e 4f 54 5f 41 56 41 49 4c 41 42 4c 45 3a 22 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 22 2c 45 52 52 4f 52 3a 22 65 72 72 6f 72 22 2c 45 58 43 4c 55 44 Data Ascii: s:[],extendedJsFonts:!1},screen:{detectScreenOrientation:!0},plugins:{sortPluginsFor:[/palemoon/i],excludeIE:!1},extraComponents:[],excludes:{enumerateDevices:!0,pixelRatio:!0,doNotTrack:!0,fontsFlash:!0},NOT_AVAILABLE:"not available",ERROR:"error",EXCLUD
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 42 4c 45 29 3b 76 61 72 20 72 3d 6e 65 77 20 61 28 31 2c 34 34 31 30 30 2c 34 34 31 30 30 29 2c 69 3d 72 2e 63 72 65 61 74 65 4f 73 63 69 6c 6c 61 74 6f 72 28 29 3b 69 2e 74 79 70 65 3d 22 74 72 69 61 6e 67 6c 65 22 2c 69 2e 66 72 65 71 75 65 6e 63 79 2e 73 65 74 56 61 6c 75 65 41 74 54 69 6d 65 28 31 65 34 2c 72 2e 63 75 72 72 65 6e 74 54 69 6d 65 29 3b 76 61 72 20 6f 3d 72 2e 63 72 65 61 74 65 44 79 6e 61 6d 69 63 73 43 6f 6d 70 72 65 73 73 6f 72 28 29 3b 73 28 5b 5b 22 74 68 72 65 73 68 6f 6c 64 22 2c 2d 35 30 5d 2c 5b 22 6b 6e 65 65 22 2c 34 30 5d 2c 5b 22 72 61 74 69 6f 22 2c 31 32 5d 2c 5b 22 72 65 64 75 63 74 69 6f 6e 22 2c 2d 32 30 5d 2c 5b 22 61 74 74 61 63 6b 22 2c 30 5d 2c 5b 22 72 65 6c 65 61 73 65 22 2c 2e 32 35 5d 5d 2c 66 75 6e 63 74 69 6f Data Ascii: BLE);var r=new a(1,44100,44100),i=r.createOscillator();i.type="triangle",i.frequency.setValueAtTime(1e4,r.currentTime);var o=r.createDynamicsCompressor();s([["threshold",-50],["knee",40],["ratio",12],["reduction",-20],["attack",0],["release",.25]],functio
2024-03-29 00:41:12 UTC	1058	IN	Data Raw: 28 65 29 7b 76 61 72 20 74 3d 5b 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 77 69 64 74 68 2c 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 68 65 69 67 68 74 5d 3b 72 65 74 75 72 6e 20 65 2e 73 63 72 65 65 6e 2e 64 65 74 65 63 74 53 63 72 65 65 6e 4f 72 69 65 6e 74 61 74 69 6f 6e 26 26 74 2e 73 6f 72 74 28 29 2e 72 65 76 65 72 73 65 28 29 2c 74 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 28 42 28 74 29 29 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 61 76 61 69 6c 57 69 64 74 68 26 26 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 61 76 61 69 6c 48 65 69 67 68 74 29 7b 76 61 72 20 74 3d 5b 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 61 76 61 69 6c 48 65 69 67 68 74 2c 77 69 6e 64 6f 77 2e 73 63 72 65 Data Ascii: (e){var t=[window.screen.width,window.screen.height];return e.screen.detectScreenOrientation&&t.sort().reverse(),t},C=function(e,t){e(B(t))},B=function(e){if(window.screen.availWidth&&window.screen.availHeight){var t=[window.screen.availHeight,window.scre
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 7d 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 75 65 28 29 29 7d 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 63 65 28 29 29 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 68 65 28 29 3f 6d 65 28 29 3f 74 2e 66 6f 6e 74 73 2e 73 77 66 50 61 74 68 3f 76 6f 69 64 20 70 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 74 29 7d 2c 74 29 3a 65 28 22 6d 69 73 73 69 6e 67 20 6f 70 74 69 6f 6e 73 2e 66 6f 6e 74 73 2e 73 77 66 50 61 74 68 22 29 3a 65 28 22 66 6c 61 73 68 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 22 29 3a 65 28 22 73 77 66 20 6f 62 6a 65 63 74 20 6e 6f 74 20 6c 6f 61 64 65 64 22 29 7d 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 5b 22 6d 6f 6e 6f 73 70 61 63 65 22 2c 22 73 61 6e 73 2d Data Ascii: },G=function(e){e(ue())},U=function(e){e(ce())},V=function(e,t){return he()?me()?t.fonts.swfPath?void pe(function(t){e(t)},t):e("missing options.fonts.swfPath"):e("flash not installed"):e("swf object not loaded")},H=function(e,t){var n=["monospace","sans-
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 41 63 61 64 65 6d 79 20 45 6e 67 72 61 76 65 64 20 4c 45 54 22 2c 22 41 44 4f 42 45 20 43 41 53 4c 4f 4e 20 50 52 4f 22 2c 22 41 64 6f 62 65 20 47 61 72 61 6d 6f 6e 64 22 2c 22 41 44 4f 42 45 20 47 41 52 41 4d 4f 4e 44 20 50 52 4f 22 2c 22 41 67 65 6e 63 79 20 46 42 22 2c 22 41 68 61 72 6f 6e 69 22 2c 22 41 6c 62 65 72 74 75 73 20 45 78 74 72 61 20 42 6f 6c 64 22 2c 22 41 6c 62 65 72 74 75 73 20 4d 65 64 69 75 6d 22 2c 22 41 6c 67 65 72 69 61 6e 22 2c 22 41 6d 61 7a 6f 6e 65 20 42 54 22 2c 22 41 6d 65 72 69 63 61 6e 20 54 79 70 65 77 72 69 74 65 72 22 2c 22 41 6d 65 72 69 63 61 6e 20 54 79 70 65 77 72 69 74 65 72 20 43 6f 6e 64 65 6e 73 65 64 22 2c 22 41 6d 65 72 54 79 70 65 20 4d 64 20 42 54 22 2c 22 41 6e 64 61 6c 75 73 22 2c 22 41 6e 67 73 61 6e 61 20 Data Ascii: Academy Engraved LET","ADOBE CASLON PRO","Adobe Garamond","ADOBE GARAMOND PRO","Agency FB","Aharoni","Albertus Extra Bold","Albertus Medium","Algerian","Amazone BT","American Typewriter","American Typewriter Condensed","AmerType Md BT","Andalus","Angsana
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 61 72 6c 65 73 77 6f 72 74 68 22 2c 22 43 68 61 72 74 65 72 20 42 64 20 42 54 22 2c 22 43 68 61 72 74 65 72 20 42 54 22 2c 22 43 68 61 75 63 65 72 22 2c 22 43 68 65 6c 74 68 6d 49 54 43 20 42 6b 20 42 54 22 2c 22 43 68 69 6c 6c 65 72 22 2c 22 43 6c 61 72 65 6e 64 6f 6e 22 2c 22 43 6c 61 72 65 6e 64 6f 6e 20 43 6f 6e 64 65 6e 73 65 64 22 2c 22 43 6c 6f 69 73 74 65 72 42 6c 61 63 6b 20 42 54 22 2c 22 43 6f 63 68 69 6e 22 2c 22 43 6f 6c 6f 6e 6e 61 20 4d 54 22 2c 22 43 6f 6e 73 74 61 6e 74 69 61 22 2c 22 43 6f 6f 70 65 72 20 42 6c 61 63 6b 22 2c 22 43 6f 70 70 65 72 70 6c 61 74 65 22 2c 22 43 6f 70 70 65 72 70 6c 61 74 65 20 47 6f 74 68 69 63 22 2c 22 43 6f 70 70 65 72 70 6c 61 74 65 20 47 6f 74 68 69 63 20 42 6f 6c 64 22 2c 22 43 6f 70 70 65 72 70 6c 61 74 Data Ascii: arlesworth","Charter Bd BT","Charter BT","Chaucer","ChelthmITC Bk BT","Chiller","Clarendon","Clarendon Condensed","CloisterBlack BT","Cochin","Colonna MT","Constantia","Cooper Black","Copperplate","Copperplate Gothic","Copperplate Gothic Bold","Copperplat
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 42 6f 6c 64 22 2c 22 47 69 6c 6c 20 53 61 6e 73 20 55 6c 74 72 61 20 42 6f 6c 64 20 43 6f 6e 64 65 6e 73 65 64 22 2c 22 47 69 73 68 61 22 2c 22 47 6c 6f 75 63 65 73 74 65 72 20 4d 54 20 45 78 74 72 61 20 43 6f 6e 64 65 6e 73 65 64 22 2c 22 47 4f 54 48 41 4d 22 2c 22 47 4f 54 48 41 4d 20 42 4f 4c 44 22 2c 22 47 6f 75 64 79 20 4f 6c 64 20 53 74 79 6c 65 22 2c 22 47 6f 75 64 79 20 53 74 6f 75 74 22 2c 22 47 6f 75 64 79 48 61 6e 64 74 6f 6f 6c 65 64 20 42 54 22 2c 22 47 6f 75 64 79 4f 4c 53 74 20 42 54 22 2c 22 47 75 6a 61 72 61 74 69 20 53 61 6e 67 61 6d 20 4d 4e 22 2c 22 47 75 6c 69 6d 22 2c 22 47 75 6c 69 6d 43 68 65 22 2c 22 47 75 6e 67 73 75 68 22 2c 22 47 75 6e 67 73 75 68 43 68 65 22 2c 22 47 75 72 6d 75 6b 68 69 20 4d 4e 22 2c 22 48 61 65 74 74 65 6e Data Ascii: Bold","Gill Sans Ultra Bold Condensed","Gisha","Gloucester MT Extra Condensed","GOTHAM","GOTHAM BOLD","Goudy Old Style","Goudy Stout","GoudyHandtooled BT","GoudyOLSt BT","Gujarati Sangam MN","Gulim","GulimChe","Gungsuh","GungsuhChe","Gurmukhi MN","Haetten

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49746	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:12 UTC	391	OUT	GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:12 UTC	824	IN	HTTP/1.1 200 OK x-amz-id-2: 9c01AaACeJ5aZemwG8OfEYAqaf96li/2Fcuh33KBFBjp4plUofuwGrkoGHfm7TSulv2GFPTN7w4= x-amz-request-id: 8WANVWHNPFAHJGCJ Date: Thu, 28 Mar 2024 20:09:10 GMT Last-Modified: Wed, 27 Mar 2024 21:32:36 GMT ETag: "cd166981c96c6d0f4b5a7d798c25878e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=86400 Expires: Thu, 28 Mar 2024 23:00:00 GMT Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 1346 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 16323 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 48 08 03 00 00 00 ff 12 88 b8 00 00 00 2a 50 4c 54 45 47 70 4c 61 02 d3 61 01 d3 61 02 d3 72 19 e1 60 01 d2 60 01 d2 60 01 d2 60 01 d3 62 05 d5 61 03 d4 60 01 d2 65 09 d7 60 01 d2 05 db 6c 10 00 00 00 0e 74 52 4e 53 00 54 7b 6a 0a b3 ff e1 93 2a 3d ca 19 f3 50 61 75 3e 00 00 04 b9 49 44 41 54 78 da ed 9a eb 8e 23 29 0c 46 8b 8b 8b 8b f1 fb bf ee aa 27 d2 26 b6 31 14 b5 35 1a 2d 13 ab ff 74 82 c0 07 cc 87 0d 39 be f6 b5 af 5d 30 e7 df 16 fe 9c 1b d1 33 fb 8d 9e c0 f9 b6 f4 e7 80 fd c9 2c 6f 0f 9c 38 70 d9 1d b8 72 5e 3c 76 07 06 0e ec 76 07 6e 9c 97 e2 e6 c0 5a b2 f6 06 d6 92 b5 3b b0 e3 bc 70 ec 0d ac 25 6b 77 e0 c2 79 d3 b1 3b 70 e6 c0 7e 77 e0 48 1c b8 6d 0e ac 25 6b 77 60 e4 c0 f5 89 Data Ascii: PNGIHDRHPLTEGpLaaar````ba`e`ltRNST{j=Pau>IDATx#)F'&15-t9]03,o8pr^<vvnZ;p%kwy;p~wHm%kw`
2024-03-29 00:41:12 UTC	46	IN	Data Raw: 5b fa cb 24 cb 0d 2a ff fd cf 24 d8 9f 37 e6 ec df 7f f5 f8 da d7 fe 87 f6 0f 42 2a 9e da f5 7e d6 49 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: [$$7B~IIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49747	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:12 UTC	391	OUT	GET /rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:12 UTC	824	IN	HTTP/1.1 200 OK x-amz-id-2: AvyyhUwSYfkOnmmzyKODwEN7tlgEEX70/RwYKBUQbvsbRmgkfeoxIbhGKMlt8wcMJYmcGyMA8hc= x-amz-request-id: KTZMANZCZ1ZQJGDB Date: Thu, 28 Mar 2024 17:30:46 GMT Last-Modified: Wed, 27 Mar 2024 21:32:36 GMT ETag: "dd31f56b9e4dff40eb87447c3dc55b84" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=86400 Expires: Thu, 28 Mar 2024 23:00:00 GMT Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 1391 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 25828 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 48 08 03 00 00 00 ff 12 88 b8 00 00 00 33 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff cf d1 8a 61 00 00 00 10 74 52 4e 53 00 85 18 aa e0 f6 3d 09 b9 54 cc 2a 76 ed 98 68 e1 23 f6 e8 00 00 04 db 49 44 41 54 78 5e ed 9a db 92 db 20 0c 86 39 4a 9c f1 fb 3f 6d a7 d9 0b af 90 65 4c 9a 69 67 e8 fe 77 d9 38 86 4f 08 49 88 55 0f f4 a3 1f fd 28 96 53 fd df 01 98 52 ca df 99 49 38 4e b9 7f 07 5c 0e a2 b6 3d b0 a3 c0 79 77 60 a0 bc 49 ed 0e 1c 28 70 dc 1d d8 50 de 8a bb 03 6b 0a ac d5 de c0 3c 64 ed 0e 1c 29 6f 50 7b 03 f3 90 b5 3b 70 a6 bc 4e ed 0d cc 43 d6 ee c0 58 29 b0 d9 1a Data Ascii: PNGIHDRH3PLTEGpLatRNS=T*vh#IDATx^ 9J?meLigw8OIU(SRI8N\=yw`I(pPk<d)oP{;pNCX)
2024-03-29 00:41:12 UTC	91	IN	Data Raw: 15 17 82 6e 56 93 57 ac d4 d3 a0 b6 57 a3 15 f9 f6 c2 4a 03 fb e6 e2 ff a6 b4 b7 78 c8 da 5e c0 ce 66 9b cb 6e 1d b2 e6 f7 e2 db 4b ff 6f 21 8b 5d a9 6f ae f8 bf 85 ac 40 4f 57 db 0b f5 77 c1 8e 88 fb eb 47 bf 00 33 aa 7a 26 16 d7 c0 61 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: nVWWJx^fnKo!]o@OWwG3z&aIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:12 UTC	655	OUT	GET /wm/mbr/images/show-v0.0.1.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/wm/mbr/58dc9fe4f6c2083f38135ec31a4db5c11ab15bc4/yahoo-main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:12 UTC	772	IN	HTTP/1.1 200 OK x-amz-id-2: neGAQ0XGfb8z7C70gZsJ9fKO6xAntswKTH2CDuh/FRCYKlgK3PzXPkqAKmVW083uAjcQJL48/QE= x-amz-request-id: QRQDK63EEK8PDN2S Date: Mon, 25 Mar 2024 13:51:15 GMT Last-Modified: Tue, 16 Jul 2019 23:13:44 GMT ETag: "7023de5408ffa052a862ba84dbedea53" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 879881 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 298198 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 34 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 20 5b 0a 09 3c 21 45 4e 54 49 54 59 20 6e 73 5f 65 78 74 65 6e 64 20 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.4, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [<!ENTITY ns_extend "
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 0a 09 2e 73 74 39 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 53 56 47 49 44 5f 36 5f 29 3b 7d 0a 09 2e 73 74 31 30 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 53 56 47 49 44 5f 38 5f 29 3b 7d 0a 09 0a 09 09 2e 73 74 31 31 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 53 56 47 49 44 5f 31 30 5f 29 3b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 30 30 30 30 30 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 38 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 7d 0a 09 0a 09 09 2e 73 74 31 32 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 Data Ascii: .st9{clip-path:url(#SVGID_6_);}.st10{clip-path:url(#SVGID_8_);}.st11{clip-path:url(#SVGID_10_);fill:none;stroke:#000000;stroke-width:1.8;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}.st12{display:inline;fill:none;stroke:#
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 3a 23 30 30 30 30 30 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 34 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 7d 0a 09 2e 73 74 32 33 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 30 30 30 30 30 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 34 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 7d 0a 09 2e 73 74 32 34 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 31 37 46 46 31 39 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 2e 37 35 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 7d 0a 09 2e 73 74 32 35 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 53 56 47 49 44 5f Data Ascii: :#000000;stroke-width:4;stroke-linejoin:round;stroke-miterlimit:10;}.st23{display:inline;fill:none;stroke:#000000;stroke-width:4;stroke-miterlimit:10;}.st24{fill:none;stroke:#17FF19;stroke-width:0.75;stroke-miterlimit:10;}.st25{clip-path:url(#SVGID_
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 44 43 35 3b 7d 0a 09 2e 73 74 35 31 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 53 56 47 49 44 5f 36 38 5f 29 3b 7d 0a 09 2e 73 74 35 32 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 53 56 47 49 44 5f 37 30 5f 29 3b 66 69 6c 6c 3a 23 42 39 42 44 43 35 3b 7d 0a 09 2e 73 74 35 33 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 53 56 47 49 44 5f 37 32 5f 29 3b 7d 0a 09 2e 73 74 35 34 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 53 56 47 49 44 5f 37 34 5f 29 3b 66 69 6c 6c 3a 23 42 39 42 44 43 35 3b 7d 0a 09 2e 73 74 35 35 7b 66 69 6c 6c 3a 23 46 46 30 30 30 30 3b 7d 0a 09 0a 09 09 2e 73 74 35 36 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 30 30 30 30 30 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 Data Ascii: DC5;}.st51{clip-path:url(#SVGID_68_);}.st52{clip-path:url(#SVGID_70_);fill:#B9BDC5;}.st53{clip-path:url(#SVGID_72_);}.st54{clip-path:url(#SVGID_74_);fill:#B9BDC5;}.st55{fill:#FF0000;}.st56{display:inline;fill:none;stroke:#000000;stroke-widt
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 6b 65 2d 77 69 64 74 68 3a 31 2e 35 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 7d 0a 09 2e 73 74 37 36 7b 73 74 72 6f 6b 65 3a 23 30 30 30 30 30 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 35 34 37 37 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 7d 0a 09 0a 09 09 2e 73 74 37 37 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 30 30 36 38 33 37 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 35 3b 73 Data Ascii: ke-width:1.5;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}.st76{stroke:#000000;stroke-width:1.5477;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}.st77{display:inline;fill:none;stroke:#006837;stroke-width:1.5;s
2024-03-29 00:41:12 UTC	1068	IN	Data Raw: 7d 0a 09 2e 73 74 39 33 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 66 69 6c 6c 3a 23 38 43 43 36 33 46 3b 7d 0a 09 2e 73 74 39 34 7b 66 69 6c 6c 3a 23 42 39 42 44 43 35 3b 7d 0a 09 2e 73 74 39 35 7b 66 69 6c 6c 3a 23 34 32 32 31 30 42 3b 7d 0a 09 2e 73 74 39 36 7b 66 69 6c 6c 3a 23 46 42 42 30 33 42 3b 7d 0a 09 2e 73 74 39 37 7b 66 69 6c 6c 3a 23 36 30 33 38 31 33 3b 7d 0a 09 2e 73 74 39 38 7b 66 69 6c 6c 3a 23 46 32 45 41 33 32 3b 7d 0a 09 2e 73 74 39 39 7b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 63 6c 69 70 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 66 69 6c 6c 3a 23 32 33 31 46 32 30 3b 7d 0a 09 2e 73 74 31 30 30 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 30 30 30 30 30 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 2e Data Ascii: }.st93{display:inline;fill:#8CC63F;}.st94{fill:#B9BDC5;}.st95{fill:#42210B;}.st96{fill:#FBB03B;}.st97{fill:#603813;}.st98{fill:#F2EA32;}.st99{fill-rule:evenodd;clip-rule:evenodd;fill:#231F20;}.st100{fill:none;stroke:#000000;stroke-width:0.
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 45 35 32 32 46 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 2e 31 37 33 37 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 7d 0a 09 2e 73 74 31 31 35 7b 66 69 6c 6c 3a 23 46 42 44 36 43 32 3b 7d 0a 09 2e 73 74 31 31 36 7b 66 69 6c 6c 3a 23 46 31 39 37 37 37 3b 7d 0a 09 2e 73 74 31 31 37 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 0a 09 2e 73 74 31 31 38 7b 6f 70 61 63 69 74 79 3a 30 2e 39 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 73 77 69 74 63 68 3e 0a 09 3c 66 6f 72 65 69 67 6e 4f 62 6a 65 63 74 20 72 65 71 75 69 72 65 64 45 78 74 65 6e 73 69 6f 6e 73 3d 22 26 6e 73 5f 61 69 3b 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 3e 0a 09 09 3c 69 3a 70 67 66 52 65 66 20 20 78 6c 69 6e 6b 3a 68 72 Data Ascii: E522F;stroke-width:0.1737;stroke-miterlimit:10;}.st115{fill:#FBD6C2;}.st116{fill:#F19777;}.st117{fill:none;}.st118{opacity:0.9;}</style><switch><foreignObject requiredExtensions="&ns_ai;" x="0" y="0" width="1" height="1"><i:pgfRef xlink:hr
2024-03-29 00:41:12 UTC	1300	IN	Data Raw: 66 20 20 69 64 3d 22 61 64 6f 62 65 5f 69 6c 6c 75 73 74 72 61 74 6f 72 5f 70 67 66 22 3e 0a 09 3c 21 5b 43 44 41 54 41 5b 0a 09 65 4a 7a 73 76 65 75 53 4a 4c 65 56 4a 76 67 45 2f 67 36 78 50 32 51 6d 6a 67 31 44 6a 72 74 44 32 37 5a 6d 47 52 6d 5a 47 76 56 49 4c 52 71 70 37 74 5a 61 57 78 75 74 56 4d 79 6d 71 6c 55 58 57 72 45 6f 72 75 62 70 39 2f 76 4f 0a 41 66 77 43 65 47 52 6d 56 62 48 49 6d 6d 6b 6d 6a 4d 58 4d 41 41 49 4f 78 2b 58 67 58 4c 2f 7a 69 2f 2f 72 73 79 38 2b 76 66 72 71 31 5a 2f 76 50 6e 58 48 38 54 44 38 34 68 66 58 72 2b 2b 65 76 48 6e 31 2b 74 63 48 2b 66 54 77 0a 32 2b 66 50 76 2f 76 32 7a 57 74 2b 39 4d 76 50 50 7a 6d 59 64 42 7a 52 36 4f 71 33 30 35 65 6c 34 62 2f 63 76 66 37 32 32 61 75 58 76 7a 35 59 64 48 44 30 71 4c 7a 6c 74 33 Data Ascii: f id="adobe_illustrator_pgf"><![CDATA[eJzsveuSJLeVJvgE/g6xP2Qmjg1DjrtD27ZmGRmZGvVILRqp7tZaWxutVMymqlUXWrEorubp9/vOAfwCeGRmVbHImmkmjMXMAAIOx+XgXL/zi//rsy8+vfrq1Z/vPnXH8TD84hfXr++evHn1+tcH+fTw2+fPv/v2zWt+9MvPPzmYdBzR6Oq305el4b/cvf722auXvz5YdHD0qLzlt3
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 38 4e 65 76 71 36 66 33 72 7a 38 32 39 33 7a 56 39 2b 73 75 74 56 32 44 2f 66 33 32 66 4d 6e 4c 35 2b 38 6e 69 65 72 72 73 33 66 55 50 4d 45 43 37 6c 30 0a 79 49 5a 33 62 2f 37 30 69 42 35 78 4c 4c 37 42 64 45 67 66 32 36 56 34 73 4d 47 71 36 68 48 4c 2f 66 63 58 66 33 37 31 2f 4e 6d 33 4c 2b 61 65 31 35 39 38 68 67 56 2f 39 76 54 35 33 52 64 2f 2f 2f 62 4e 33 53 4d 6d 34 6f 75 6e 0a 50 42 32 76 44 36 66 58 33 33 33 37 6c 38 4d 66 58 37 31 36 76 6e 53 37 71 5a 70 6e 70 48 77 73 6e 37 4c 39 78 2f 47 4d 7a 2b 51 4c 4c 2f 2f 77 45 72 2f 38 5a 65 39 4a 70 55 48 37 4a 4e 42 6c 2f 63 35 48 2b 71 7a 35 4f 33 76 50 0a 51 65 58 2f 4c 73 2b 34 66 76 4c 38 2b 62 4f 76 58 7a 2f 35 35 69 2f 50 6e 75 34 39 5a 71 64 2b 66 74 36 36 37 75 32 57 43 57 2f 30 2f 4f 37 6c 56 Data Ascii: 8Nevq6f3rz8293zV9+sutV2D/f32fMnL5+8nierrs3fUPMEC7l0yIZ3b/70iB5xLL7BdEgf26V4sMGq6hHL/fcXf371/Nm3L+ae1598hgV/9vT53Rd///bN3SMm4ounPB2vD6fX3337l8MfX716vnS7qZpnpHwsn7L9x/GMz+QLL//wEr/8Ze9JpUH7JNBl/c5H+qz5O3vPQeX/Ls+4fvL8+bOvXz/55i/Pnu49Zqd+ft667u2WCW/0/O7lV
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 36 6d 70 74 6c 32 69 37 4c 46 69 4b 59 62 55 61 32 79 58 59 54 76 78 32 75 73 73 30 4e 33 4d 72 4d 7a 70 30 6b 31 6d 6d 63 44 4e 37 32 78 6e 62 7a 4e 4f 38 4c 63 75 7a 68 6d 5a 47 0a 64 44 61 75 53 73 6c 53 70 6c 4b 53 6c 46 68 4b 4b 4d 56 4c 63 61 58 59 51 63 36 65 4b 55 56 49 2f 37 7a 39 39 62 33 71 73 2b 72 50 53 63 70 56 4b 56 6e 4b 56 41 72 4f 39 6f 42 2f 59 69 6c 43 6f 48 44 6f 74 62 68 53 6c 50 52 57 0a 4d 67 38 4b 57 74 66 79 52 74 62 76 4a 4f 73 31 79 66 6f 45 57 52 41 75 77 79 6a 54 66 70 5a 70 76 70 4b 74 6d 6d 51 65 76 63 79 62 6b 5a 6d 36 6b 59 6b 35 79 55 52 4d 67 37 78 37 6b 48 66 6c 43 34 37 79 51 6d 64 35 67 53 73 5a 0a 63 70 49 52 65 68 6b 52 78 6f 48 39 63 6f 50 4a 76 44 36 64 51 4c 73 79 61 46 67 36 52 56 41 7a 44 36 70 6d 51 64 76 47 Data Ascii: 6mptl2i7LFiKYbUa2yXYTvx2uss0N3MrMzp0k1mmcDN72xnbzNO8LcuzhmZGdDauSslSplKSlFhKKMVLcaXYQc6eKUVI/7z99b3qs+rPScpVKVnKVArO9oB/YilCoHDotbhSlPRWMg8KWtfyRtbvJOs1yfoEWRAuwyjTfpZpvpKtmmQevcybkZm6kYk5yURMg7x7kHflC47yQmd5gSsZcpIRehkRxoH9coPJvD6dQLsyaFg6RVAzD6pmQdvG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49749	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:12 UTC	641	OUT	GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://depl.pages.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.yimg.com/wm/mbr/58dc9fe4f6c2083f38135ec31a4db5c11ab15bc4/yahoo-main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:13 UTC	1084	IN	HTTP/1.1 200 OK x-amz-id-2: e+fEJDJIPgVfPO0iRnkv+Qd0yR/sOzJhmbPrG2M74ZjMQjd8O8nPzYrDEhdK+yOaq+CEVuMG3nA= x-amz-request-id: XCY3FTRK6779F39B Date: Fri, 15 Mar 2024 15:36:43 GMT Last-Modified: Thu, 19 Apr 2018 19:06:41 GMT ETag: "a99b283070afc519f4816e4300c515d2" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000,public x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:51 GMT x-amz-meta-mbst-etag: "YM:1:cb5e4811-e042-455c-b2b2-f984d5f70e0200055a9e8550b736" x-amz-meta-x-ysws-mbst-vtime: 1507011771545398 Expires: Sat, 05 Sep 2026 00:00:00 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 28860 Referrer-Policy: no-referrer-when-downgrade Age: 1155870 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 70 bc 00 10 00 00 00 01 84 f0 00 00 70 59 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 82 a9 38 1c 95 54 06 60 00 89 54 08 81 0a 09 82 73 11 0c 0a 82 f4 4c 82 d0 3c 0b 87 1a 00 01 36 02 24 03 8e 30 04 20 05 8d 00 07 98 2c 0c 89 56 5b 30 6e 71 06 d5 6b e7 07 12 7a b3 aa 1e 37 ec dc 0f 56 c2 6e 62 bf db b1 a8 fc 3c 7b a5 02 6e 0c dd b0 71 30 0c 6e 4f 99 fd ff ff ff b9 49 25 0e 4b 8a b4 bd 83 63 d8 66 f3 3f c8 72 77 2b 02 8a 40 66 20 d3 a9 28 b3 ba 7b 26 4a 08 39 96 5a 31 61 8e 40 18 c2 32 5a cd 67 b3 99 ab 06 13 46 75 6c 28 a2 84 1e a6 b4 d3 41 47 87 25 ad 4d 66 d8 cb 3c 93 68 d7 29 e3 c9 c7 8b 5e 81 ed 2d b4 4c d1 f9 6c a1 0b 8e 88 8a e0 88 4f 33 d6 7d fa e2 25 9e 8b 71 c3 b9 f1 38 99 1e 18 bf e4 Data Ascii: wOF2ppY8T`TsL<6$0 ,V[0nqkz7Vnb<{nq0nOI%Kcf?rw+@f ({&J9Z1a@2ZgFul(AG%Mf<h)^-LlO3}%q8
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: c4 4a 29 d2 94 ed fd bb f9 cd 37 52 bf d1 ae 9d a4 f6 1e 97 bb 35 c2 ab b8 83 50 85 10 83 10 83 30 ce f1 d9 c3 cd 71 ed 89 ff 2d 2d 1b ec d1 fb 7f 76 bf a9 98 a8 89 8a 8a 8a 98 3b c6 66 fb 8e 45 ba c4 02 a4 3d e2 c4 1d fb 69 f4 47 72 a5 be f7 b9 6b b6 98 b2 a6 59 1a 28 20 65 28 83 11 42 d3 a9 2b f0 77 0c 15 98 86 25 b2 ec 7e 7e a3 02 e8 b4 50 2b 6c c3 8d fd c3 41 fd c8 fd 8a f3 80 8f 04 a8 55 c0 78 e4 75 bb 7b 11 cc de 5a e1 04 ab ef 75 7f 82 d3 7b 3d 80 e0 b1 63 a8 84 e0 07 6a 15 04 6a 15 cc 08 2e 24 21 3f d6 14 4a 47 1c 54 98 07 e6 d3 cd 40 90 27 c1 c0 0f 49 ed f5 83 a2 10 09 78 2a 47 f3 55 9a e1 3b 34 c0 86 e9 6f 0a 27 24 a0 1a 03 f8 5c 40 6f a9 5d ba d3 5e 2e 73 72 ee 55 92 4d fd 22 dc 58 bb fd 88 3e e8 03 bf f3 ef 56 15 7f de f5 4b ec 96 70 f7 d5 69 Data Ascii: J)7R5P0q--v;fE=iGrkY( e(B+w%~~P+lAUxu{Zu{=cjj.$!?JGT@'Ix*GU;4o'$\@o]^.srUM"X>VKpi
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 7e d4 d0 39 23 e7 8d 74 0f f4 e8 ad d1 dd 6d c4 dc 28 96 c0 f6 06 1b 66 b8 3a 79 66 29 df 16 1c 0d 59 4c c2 03 37 c8 24 9d ed 5b 21 59 34 71 67 a7 e0 15 b6 ba 99 b2 f2 f6 01 c3 53 db dd cd 72 ce ac f9 9e bd 99 c6 10 d6 52 88 29 80 1e 2d 3f 9d 24 c1 68 01 24 52 a0 22 01 ae ac 0a 53 5e 74 25 a1 f1 36 7a 72 da d4 86 67 72 f6 ab 76 64 ea ee 2c 4e db 81 3f 6a c7 ef 44 29 65 d8 dc 89 b9 6a 2c 82 ed 75 67 a5 07 81 fe 6a 83 ed 64 b8 19 0e 18 02 c4 14 2f 05 57 1e b7 b3 4d 06 19 76 57 a8 c1 7d 1b 9b 30 9b b9 b6 d1 35 aa 6b aa dd 0f b7 ea 5e db fd 88 5d fb e9 8d 0e 07 8f 04 86 03 21 44 ef d7 13 29 d6 6f ce 76 66 ce 6d 33 d4 61 ea 70 e2 4e cf af 8e 7f 15 34 28 a6 af 8a 9d 57 1c 7d f4 94 05 e8 30 5a a9 3b 41 a5 95 8e 59 b3 b8 d6 1a 7c 85 ed 62 8b ac e6 f4 69 34 72 8b Data Ascii: ~9#tm(f:yf)YL7$[!Y4qgSrR)-?$h$R"S^t%6zrgrvd,N?jD)ej,ugjd/WMvW}05k^]!D)ovfm3apN4(W}0Z;AY\|bi4r
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: b0 3e 29 ac f9 44 6a 35 58 f4 c6 11 91 a3 25 a0 8d 0f 08 c6 e5 3a de e4 38 86 14 7c 2f f8 5a 80 38 08 f1 6a 63 c7 56 b8 fe 0e 4a 8b 82 42 7b 42 54 e3 fa 5a cc 50 0b 6d 84 a6 ce 1f 9c c4 33 88 72 38 70 92 20 6c c9 84 56 a3 a9 45 61 c1 d4 0a 61 6e ae 43 2b 3c 2d 7d d7 56 39 0c 96 55 39 bd f2 45 07 72 15 29 23 57 ba 03 c6 ef 4c 09 d6 25 d5 18 9a a7 86 90 79 a8 c8 fd eb 36 19 78 7b 6d 5b 25 48 52 16 4d 5b 5e fc 12 67 f9 e6 dc 3c a5 06 98 4e 50 67 c2 dd 52 7c d6 21 e2 79 39 c2 22 11 f4 77 93 a2 33 45 61 ee 6b 15 f8 3b 23 25 b3 b8 1b 26 c4 76 c2 1b a7 d9 8e ba ce c1 d5 6a 50 d4 b0 95 8d d2 33 91 04 dd 7e 18 4f 4b e5 9c 0a c8 d6 da e2 44 dd 9c 7d e9 77 03 e6 e2 dd f2 03 73 99 c4 92 27 4b 1a 2e 18 ac c1 30 c8 02 ad da 21 ea 7f 68 c0 f0 31 a8 98 04 3f 04 bd 10 d1 Data Ascii: >)Dj5X%:8\|/Z8jcVJB{BTZPm3r8p lVEaanC+<-}V9U9Er)#WL%y6x{m[%HRM[^g<NPgR\|!y9"w3Eak;#%&vjP3~OKD}ws'K.0!h1?
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 36 bf 4b 12 06 a5 a6 77 f6 4a 4b 35 24 25 98 50 4b 77 84 c0 73 f7 b8 b2 0f 20 0a d0 86 af 5a 46 a9 9a ed 7d 3c 63 f8 87 91 ff 29 29 b4 d1 e5 fe 40 79 ef f8 d8 a7 72 76 d8 3c 2b 3f d0 47 f4 7e 2a 7e a5 75 5e f9 51 79 ae b4 e6 0c 6c a7 98 d4 90 e3 7e 04 84 e8 63 5b 10 d0 73 a4 a0 17 7f 85 22 23 c1 0b 31 6b 16 92 83 98 52 e1 2d c9 1e 5a 95 4a ea 27 ef 51 1b 94 b9 16 4a 9e 69 7a f7 01 30 ac c6 64 44 c9 56 3b db 2c d3 3a b1 b2 03 62 8f a0 96 c7 fa 75 0a 59 dc da cb 28 fa 9b ad eb aa e4 9c f0 58 1b 0c a2 9d a3 8e b5 46 c6 3d 19 96 f5 f4 87 3a 2b bc a0 e3 f4 6d 87 8c 73 1d 6b 61 cb 03 6e 4e ae 42 12 9d fc 28 6f a4 cd ba 0c 10 4b 06 6b ef b8 42 25 84 8b 77 d5 fa 25 e4 c6 29 0f 5f 3f 15 ce f9 ef 7f f7 d8 e8 2b b7 aa ed 57 06 7a 8a 4d 5a db a2 52 bd 30 bd 79 b9 94 Data Ascii: 6KwJK5$%PKws ZF}<c))@yrv<+?G~*~u^Qyl~c[s"#1kR-ZJ'QJiz0dDV;,:buY(XF=:+mskanNB(oKkB%w%)_?+WzMZR0y
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: b9 01 bb 0d ba 64 af 61 23 5a dc f0 54 ab 71 3f 9d f1 3b 12 f4 a6 2b a3 20 e7 fe 6e b3 98 d1 91 37 6f 1c 76 99 b8 3a 15 71 32 4f 23 67 bb c8 c4 68 77 42 b2 53 4e c9 75 c6 19 79 ce 39 2f 5f b7 6e 05 14 29 2a 0c c1 1b 5a 9d 72 05 7a 80 36 7d 16 68 d7 eb 26 ba cb df ce 5e 5e c4 0b 16 8f 7e 63 31 fa 1b 0d 74 d0 81 25 0e c3 29 a3 c9 64 b1 da ec 26 c7 19 87 d3 e5 f6 78 7d 97 fc 81 70 08 00 9b a1 d1 ff 74 a6 84 fc ff d5 ff 11 04 45 b9 a3 f1 ea 54 2e 53 68 8e 1f 61 7a a7 0e 02 b3 b4 80 6d c0 1e 80 6e 80 89 80 bd 78 3a da dd a0 37 54 99 06 75 54 78 86 a7 06 77 4f 47 d3 15 ff 5b 23 e8 ee 3d f4 40 8e 7c 12 0d 69 3f 91 6d 69 e2 60 d8 7d 1c 0f e8 1a 3a ef 51 a5 9c 80 a0 2e 30 ef d6 b5 4c ff 05 cc 11 b5 31 5c e3 c0 47 cf 61 b6 80 f3 ff 72 a3 8a a0 ef 30 44 c6 3e 58 3e Data Ascii: da#ZTq?;+ n7ov:q2O#ghwBSNuy9/_n)*Zrz6}h&^^~c1t%)d&x}ptET.Shazmnx:7TuTxwOG[#=@\|i?mi`}:Q.0L1\Gar0D>X>
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 0e 21 ee 77 04 94 dd 33 a2 82 36 74 7f 90 50 ac 8c 8d cf 10 8d 32 a6 a5 18 f7 26 21 3e 7c 7d 46 c1 ae 39 7a 46 2e ce 5b 7e 46 6b b4 3a bc 2b d3 26 fc 3c 82 62 d5 a3 59 be d5 b5 d8 52 73 ad 33 48 ea 25 97 6c 58 11 e4 44 f2 ea 0d 2b bb f2 11 d4 65 d7 7b 0d 2d c6 da c6 ba 78 7d e4 4e c3 af 8b 45 5b 2f 8c aa d2 18 4f aa d1 5a 7d 0d 6d 6a 73 5b 4e 85 46 b6 f3 e2 8d fd c7 60 74 87 de 44 9a 1b 08 e7 e7 fe 41 3f 7c c8 93 1e b4 26 ef 8d e4 01 8c 11 c2 dd 53 e6 b4 3a d1 c9 0e 77 ae ee 4e 75 be d3 9d a9 ab b3 1d ea 58 c7 6b ef 48 47 eb a8 13 a2 45 05 95 3a 0d fa ef a9 5e d6 b9 e6 89 93 28 53 a1 22 67 9c 35 e8 22 52 44 6a 37 c3 21 a7 34 93 36 03 a6 65 c0 f9 f0 8b 4c d4 04 44 3a 8c 0c 07 9b 9f 11 1a 20 63 2f 3e 19 af d0 50 ac 8c 55 51 d2 ea d6 9c a0 8d ac e7 17 be 31 Data Ascii: !w36tP2&!>\|}F9zF.[~Fk:+&<bYRs3H%lXD+e{-x}NE[/OZ}mjs[NF`tDA?\|&S:wNuXkHGE:^(S"g5"RDj7!46eLD: c/>PUQ1
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: a0 48 83 ef 98 dd 2c 2f 9f c3 33 da e3 aa dc 36 d9 8c 24 62 8d 19 90 94 61 b5 3a 80 f8 08 50 6e 01 b1 05 18 fc 09 60 d4 5f d0 35 12 b4 9d 01 f6 bc 1b 90 30 18 84 0c 87 2e a4 f3 63 33 c2 4c 9c 4b ee 11 c6 71 4b 30 2a d8 c1 45 26 16 44 41 74 70 e7 b9 24 d4 ca 22 69 6d 40 1a 57 ab ab 7f bd 39 ab 06 d5 89 8e 09 88 5c f9 f4 19 b4 a8 12 5e 4c 42 9a c7 b8 5a 93 a2 96 ef 85 95 f6 a5 a9 52 26 21 5b 6a 0b a5 6c 8a 66 5e 4a 57 50 8b 7d 5d e2 88 8b 4e b1 09 c4 bd 7b 16 29 41 59 52 05 0b bd 4b c3 91 12 8f 43 2a 32 89 ea 97 86 17 6f e5 05 6e d1 f9 82 47 f3 b7 94 e6 74 e5 53 e9 cb be 14 d4 f3 dc c4 9f 1f 80 be a9 35 e7 3a e9 b4 4c b7 2d ad b6 a9 69 5a c0 29 e5 2d ed b2 23 88 c7 79 d7 30 a4 a8 24 75 4d c5 10 be 6f f0 ca b7 f8 96 16 72 cb d6 85 46 35 95 d2 b6 1e 58 4d cf Data Ascii: H,/36$ba:Pn`_50.c3LKqK0E&DAtp$"im@W9\^LBZR&![jlf^JWP}]N{)AYRKC2onGtS5:L-iZ)-#y0$uMorF5XM
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: b9 a5 8e 09 43 2d 2d 57 4e 4a 18 f6 01 4c 5e c0 7c b9 22 78 32 8d b8 13 fc 42 75 af 36 dd b7 92 8e a4 9d bd 3a 3e db a0 10 0e 47 ad 0b 98 18 a9 52 21 77 e4 28 95 68 dd b6 ed 91 c9 36 86 8f 44 91 d0 8e 80 0a 99 c4 f2 52 83 40 6a 1a e5 b2 ad 8e de 85 8a f2 57 70 41 81 a3 c5 03 3f 3c 2e 29 db 5c aa 50 1e 30 97 ff da 9d a4 2d 7b c9 10 66 03 7a b1 15 04 ca 49 23 c8 30 af 53 19 30 ef 51 7a 74 f0 c8 c1 58 74 74 96 fb 88 ae 7e 24 70 f8 c0 7c 34 20 c0 ec c7 7e 5d 9a c1 5b 27 54 75 50 37 f0 ba 4d ea cf 9c e0 8d d9 ef b0 cc 33 aa dd 2e c2 76 f3 06 6d 27 2e c4 b5 d6 c9 08 89 2e 2b bb 66 60 ff a6 1b 99 49 77 18 1b 0e 27 f8 a1 8b 2f 5f 98 e9 f5 4e 78 39 25 ef 65 53 39 91 97 f2 7b c4 49 b5 5e a1 f2 19 c1 4e 70 ba 50 d8 45 87 47 2c 6b a4 4a 52 87 ad 36 6c 63 3b 9a 1a 5b Data Ascii: C--WNJL^\|"x2Bu6:>GR!w(h6DR@jWpA?<.)\P0-{fzI#0S0QztXtt~$p\|4 ~]['TuP7M3.vm'..+f`Iw'/_Nx9%eS9{I^NpPEG,kJR6lc;[
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: e2 7a c3 7c ac f1 36 2f 74 67 e5 ce 7b 1d 88 bf 4c 76 2e bd a2 b4 98 b2 21 a2 a1 4b 91 86 a7 10 5d ea ab 98 0a ac 5a 56 e2 ca 3c 30 c2 e8 9a 67 57 1f d6 a5 96 00 b0 de 88 e8 ff 68 ee 2c 91 b8 30 64 94 83 23 78 30 36 e3 dd 05 44 c1 50 e5 c3 94 cf b5 d8 38 18 78 88 8b 1f e3 61 2e 62 39 6c 7e 79 e9 34 93 8e 34 ff 98 05 7f 84 5b 06 4a a6 d9 79 8f 94 b6 70 85 e2 4c 18 7b 5f ed dd 19 3f bb 9d 8d 89 29 53 9e 4d bf cd ce 9d 19 9a 8c e4 42 06 02 86 b8 36 6a 81 4e 4d 1d 23 73 95 cf 51 7d e5 ab 8a 06 c8 8a 99 28 38 4a 6a 19 f1 54 e5 12 1d 78 96 d4 68 57 5e cc 21 8e d1 1b c9 39 ba f5 09 46 ec 60 a8 0d c3 8e a5 4c f9 d8 15 1d ed b6 23 0c c9 05 09 93 b6 e8 e3 42 d7 86 2a 32 8a 88 6c 27 c5 6b 7f ff 2e 19 ef 81 bc dd 55 5e 73 35 90 11 c3 78 42 71 f9 c5 59 26 35 e5 e5 a0 Data Ascii: z\|6/tg{Lv.!K]ZV<0gWh,0d#x06DP8xa.b9l~y44[JypL{_?)SMB6jNM#sQ}(8JjTxhW^!9F`L#B*2l'k.U^s5xBqY&5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:12 UTC	642	OUT	GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://depl.pages.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.yimg.com/wm/mbr/58dc9fe4f6c2083f38135ec31a4db5c11ab15bc4/yahoo-main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:13 UTC	1084	IN	HTTP/1.1 200 OK x-amz-id-2: F2QYQqZ6NNpYTgukqOL8lpn5FRVURCD+3B52rDKE43cy6DVRJLbXpcyvlHJMhG6QWCORk7aKDNc= x-amz-request-id: SNSZFQRKFSXDRKH8 Date: Mon, 11 Mar 2024 23:07:46 GMT Last-Modified: Thu, 19 Apr 2018 17:33:29 GMT ETag: "af9fdad7698452697b016850fff96423" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000,public x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:51 GMT x-amz-meta-mbst-etag: "YM:1:95620d49-21c2-4044-b803-58b70c8e419700055a9e854fb9f1" x-amz-meta-x-ysws-mbst-vtime: 1507011771480561 Expires: Sat, 05 Sep 2026 00:00:00 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 29040 Referrer-Policy: no-referrer-when-downgrade Age: 1474407 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 71 70 00 10 00 00 00 01 84 28 00 00 71 0e 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 82 af 30 1c 95 54 06 60 00 89 54 08 81 0a 09 82 73 11 0c 0a 82 ec 68 82 c8 4f 0b 87 1a 00 01 36 02 24 03 8e 30 04 20 05 8d 1c 07 98 2c 0c 89 5e 5b 5f 6d 71 06 dd e6 bc 5c 24 b2 f4 66 55 ca 59 19 f0 d2 55 30 dd 54 be 52 77 95 b9 99 bd 70 62 25 cc b3 7f 82 db 41 68 4a d9 a7 65 ff ff ff 7f 7a d2 18 43 cb 85 2e 01 10 b4 2a b5 6b f7 bf ff 0d 62 b6 91 15 4b ae ad 0a 4b ad 7d 51 34 2a 13 31 ca c8 2b c9 cb 86 bb c2 7e 6c e7 0c 15 fb 86 8a 33 f4 78 c6 71 64 66 3f 98 73 1c 41 e9 d7 8e a7 e2 e7 08 b5 2f 28 44 c8 50 68 c1 af 82 0d 6f b8 2d 3d 94 51 7b 6c c1 a2 6b ca d1 c7 08 ef 0f 58 4e a6 e9 42 8e 27 72 5e f5 7a 55 7c 91 Data Ascii: wOF2qp(q0T`TshO6$0 ,^[_mq\$fUYU0TRwpb%AhJezC.kbKK}Q41+~l3xqdf?sA/(DPho-=Q{lkXNB'r^zU\|
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 11 26 7c 84 01 e3 f6 24 13 20 64 1e 39 6c 96 d6 9a cb 5f 15 c9 f9 0a 09 8e f3 85 a3 49 ba 2a 55 63 0d 4a 4a 78 3e 77 fc 77 3b c2 07 24 b7 45 10 59 84 91 24 ac c1 3f ff a7 6a b2 8f 47 a0 00 9a 7f df cb d8 9d 40 c5 d6 16 b7 58 b0 fa b2 5f 55 be a0 a4 0f 9c 96 ca 28 45 2b 62 1a 53 7e cf 71 ef fa 6d 68 7d 9e b3 05 20 fb 5b 58 72 cd 0b 22 22 12 44 06 19 86 21 e4 b7 7e 65 4f aa ff cd 0c b3 b0 4b df 79 cc 9b 7f d5 a8 18 55 15 11 15 15 51 1f a2 d2 2d fb 19 3a ae ce c7 1d b5 0e 3a 7c dd 3b fa 39 e7 b6 39 83 0e 0a cc 9e 49 fe 49 e8 d9 fd e8 fa d7 e1 43 5c 38 ac 9a 06 5d c7 7e 5a 7f b8 f7 5a f9 4b d9 9a 6c 62 e9 28 ca a0 20 8c 30 9a 3c 82 0a b0 79 d0 20 fc ea eb 95 8d a0 7a ff cd fb 97 83 09 05 18 80 fb 64 2f 3d 9b 29 49 7b 7f 6c 94 64 7f dc 55 4a 7c 5f 77 55 92 69 Data Ascii: &\|$ d9l_I*UcJJx>ww;$EY$?jG@X_U(E+bS~qmh} [Xr""D!~eOKyUQ-::\|;99IIC\8]~ZZKlb( 0<y zd/=)I{ldUJ\|_wUi
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 1c 3e 5d 92 3d 47 ac 90 42 b7 a5 bc 57 c4 25 10 31 96 d2 78 24 6a 12 32 34 2b a2 09 d1 02 69 45 84 64 da 56 19 72 fe 66 c4 ad ca db 50 45 48 66 2c d8 71 e0 c4 e5 dd 50 e5 de 17 89 4e d3 35 0c 32 02 9c c5 29 d2 a3 fe 71 4e 9f fa 07 78 16 47 9f b5 4c 44 86 88 2a 32 19 a1 ea a9 04 81 0e e6 cb 37 50 b1 25 c3 86 33 6c 6b 38 76 c5 20 74 b1 0c 19 8b 8f b5 f3 ba e2 a2 61 4a 38 6b 5c 26 16 dc c2 c7 4c a1 42 67 42 4a 7d df 24 b5 4b 29 23 8e db bc c0 0c 60 62 6d 9a 1a 66 e4 b4 3a b2 e2 67 70 29 96 3e 92 cf c9 e3 f0 d9 68 21 69 23 09 23 86 48 a2 36 4e 71 9c e6 38 cb 71 8e e3 03 1b b7 49 41 38 41 39 c1 38 61 6d c2 d9 e4 26 55 4e 42 e1 31 a4 18 a1 58 a3 8e 76 2a f2 17 56 1b 70 8c 7c fe 2d f2 87 17 6f 60 15 56 89 44 f4 26 d4 97 b6 81 48 14 c5 eb 24 44 5d 04 16 b3 d1 2c Data Ascii: >]=GBW%1x$j24+iEdVrfPEHf,qPN52)qNxGLD27P%3lk8v taJ8k\&LBgBJ}$K)#`bmf:gp)>h!i##H6Nq8qIA8A98am&UNB1XvVp\|-o`VD&H$D],
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 88 a5 c8 65 ac 83 c1 74 75 82 a5 09 06 41 80 30 78 98 61 ce 66 e1 96 ad d0 55 03 3f 90 af 89 19 87 23 3f 64 21 05 35 33 59 3e ce 12 c1 32 5b 21 ff 5c d9 72 a5 47 92 a5 5f 6c c8 9a 2c 52 8b a6 93 f9 c7 15 ca 2a 74 53 c3 fb 8f 36 1c 46 18 63 4d 60 d3 58 ad a0 1b 63 3e b7 97 c3 92 90 49 6c 03 8b b1 8b 6b e2 07 82 9b bc 24 56 9b a6 dd b4 34 05 5b de 21 71 64 f1 cb bc 16 8c 76 05 21 0c 88 8c 19 89 a5 12 41 b3 b8 6a 28 15 09 e3 90 25 0c c5 a1 91 79 9c e5 14 58 6a f9 e3 2e 18 74 20 91 8f 5f e4 a7 96 2f df 42 83 d3 df 73 1c f4 a8 c7 3d 72 68 f2 25 53 b3 65 a2 93 74 e1 28 0f 26 8f cf 8e 9e b5 52 a3 69 de 65 21 ce 4d e3 91 2c 1c 63 86 7c f3 cb f8 c3 0c ae 5d c9 6a 7a 83 5b 41 6e 1f 44 98 05 2b e9 82 3c 15 ba 4a 8b 16 b6 d8 d0 9e 79 48 e3 90 fe f3 fb 32 61 2d 0e 19 Data Ascii: etuA0xafU?#?d!53Y>2[!\rG_l,R*tS6FcM`Xc>Ilk$V4[!qdv!Aj(%yXj.t _/Bs=rh%Set(&Rie!M,c\|]jz[AnD+<JyH2a-
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 59 8f 87 7f ef 16 eb ce 9b f5 cd 74 08 28 98 c8 15 b8 3b a1 0a 75 7c e8 53 f5 dc 9b 35 d0 86 6b 95 82 ea 52 a5 56 cb 23 9b 48 5d c7 d4 97 ce dd 94 35 d7 40 29 0a 0e 03 cc b2 08 5d 50 01 8f cb 5e 3b 5f 4c fd ed d8 54 2d 28 c6 9d 99 e6 46 e5 72 85 70 e1 aa ef 7b 17 72 13 ec 6f 95 e9 b7 e6 86 54 79 4f 47 62 f0 dc d2 2c 6e d5 ef bc e6 56 5d 9d fc c8 e8 1a 85 6d 36 9b 25 32 73 d2 aa ac 9c 1a b5 ba a2 9a ae fe b4 c9 43 6d b7 1a d4 17 a5 b9 4e 85 cd c0 c8 05 39 ef 6c b5 28 12 6f 10 1d 91 ac 0b 42 40 26 b7 42 62 65 55 25 67 da 80 35 ea 89 f8 40 26 82 4a 68 06 5d 92 25 53 21 43 e4 96 ba 8f 0b 05 16 ce 57 8c b4 90 da 13 11 4f 10 d5 bf 10 db 46 61 9d 11 65 ca e6 d4 06 06 aa 78 02 11 53 c0 26 c0 34 85 ee cc 49 7f 74 0b 9f 57 af 8b 22 aa 95 1c 77 a3 b0 6f 18 50 0d 67 Data Ascii: Yt(;u\|S5kRV#H]5@)]P^;_LT-(Frp{roTyOGb,nV]m6%2sCmN9l(oB@&BbeU%g5@&Jh]%S!CWOFaexS&4ItW"woPg
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 59 02 e7 fc 75 3a 56 7f 92 80 de c0 00 4f 7c 0b 71 ef 1f 8b 34 65 4c cc 0d 53 fa ff b5 f1 94 22 3c ef 8b bc 7b 6d c6 45 ad 73 67 3d 85 40 57 85 b1 df 07 ea f9 f3 4d 59 c4 33 60 b4 17 6e 66 92 51 38 40 d2 08 45 b3 50 78 8a 39 c8 2d a8 7c eb d4 32 b4 5d 87 a4 2e 0b 2a dd 69 26 4a 19 ed d3 63 70 ab 52 cc 88 1a b1 47 1c 39 69 ec 10 ba 2b 90 6b 6f c5 03 35 a7 8e 6e 05 8d eb 67 33 d9 d6 86 a5 71 79 5f 1e 55 6b 5b 13 66 80 03 23 cb f0 03 72 99 35 fb 29 d8 0b 00 6f e7 39 37 80 32 7d 74 ee 90 2e fb 45 0c 96 a9 a6 75 b0 23 b3 95 c6 01 4d ab 28 f2 26 d6 d6 72 90 19 a9 15 60 78 d3 4b 0e b3 12 1a 8d 59 31 a1 26 de fe 8b fc cd c7 ee 7e bd a2 be 4a 17 d3 8d e7 5a 3e 81 22 37 ec 51 c2 f3 b6 a2 b2 ab e9 34 c4 7c 9c 4f bb ba 12 1a a6 2e 23 89 e2 de b6 80 a5 e3 5c 5e a2 42 Data Ascii: Yu:VO\|q4eLS"<{mEsg=@WMY3`nfQ8@EPx9-\|2].*i&JcpRG9i+ko5ng3qy_Uk[f#r5)o972}t.Eu#M(&r`xKY1&~JZ>"7Q4\|O.#\^B
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 63 75 a8 be d5 1f e8 f7 a3 f3 a4 46 87 3f 96 1d 7e b9 48 64 f0 65 6a 93 33 10 cf 05 7f 19 12 53 20 d7 98 5d c1 44 36 92 7f d8 a1 f0 44 83 d0 89 dc 03 9f a9 f8 65 64 14 b4 4c ec 92 a4 cb 55 64 da f0 bd 69 4a 3a 66 92 64 19 f2 14 1b 3f 3f a5 b1 8f 1b 4d 5e 4f f1 3b 76 c5 32 b4 6f f4 d5 a2 7d bd d1 91 53 fe 3e 77 2c 44 6f 5e 56 16 2f 45 1f 36 df 3a d5 1f 7e e8 97 dd 8b 3e 39 e5 9f f1 f2 bb d1 57 d7 80 5f 74 1f fa a1 b4 f2 98 7f 3d c5 9f db 07 96 a1 3f 5f 04 08 03 34 b6 ef 42 5b aa a7 8c 1c 4e 48 61 56 51 3b 62 b3 08 18 5c 8d 82 51 67 d4 1a c5 0f 87 7a 66 5e cd 96 6e b1 fe d3 80 dc 6e a5 6d 41 eb 6e 2f b6 f7 da ef 53 ca 54 3f 35 ee 5e dd 5d dc bd b3 1b 9f 29 da 3f 5b e6 f9 f9 d7 c5 b3 b4 a3 81 60 91 d2 66 70 d5 8c 94 93 08 45 16 84 df d7 e0 68 52 8f 06 ae c8 Data Ascii: cuF?~Hdej3S ]D6DedLUdiJ:fd??M^O;v2o}S>w,Do^V/E6:~>9W_t=?_4B[NHaVQ;b\Qgzf^nnmAn/ST?5^])?[`fpEhR
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: c0 a2 0a 11 44 5c 29 86 49 a2 12 8e 39 5c 46 25 45 c8 aa f3 d2 8e 17 58 6b b9 ce 0a bd 55 46 2b 0d c2 4c d1 e8 41 b3 d5 56 11 16 b2 6c b9 31 87 35 36 6b ed b9 e6 fa 68 17 90 47 8c 5b ec 81 b8 23 e0 c3 18 cc f8 29 90 93 e0 27 24 5d 84 3a 07 71 46 e2 05 c8 b3 12 ce 43 5f 86 bd 96 1b f1 37 a4 de cc 9a 25 48 0b 33 d9 4e f1 c7 60 a7 a5 5c 95 7c 09 e6 0a dc 75 95 6a 54 a8 52 ad 96 2f a7 a4 b2 40 9e f2 a3 06 e8 ff 12 7e 57 0f f2 05 c2 ff b7 2c 5a 22 95 c9 15 4a 95 9f 8f 0e 3d d3 5b 18 73 31 ea 65 ea 67 1a 64 1a 66 47 94 c1 7f 65 33 33 d1 ff 8f e5 0b d4 c2 e3 c0 dd 5e 7f 30 1c 8d 63 d1 47 48 65 ee 7b ee 5f 97 4b c0 b5 e8 50 52 d3 b2 70 f2 09 0a a8 55 af 4e 83 26 2d 9a 85 84 45 45 c4 c4 25 a4 24 a5 65 65 14 15 94 94 4d e0 20 21 a3 9a c2 e3 c7 42 b7 88 8b 06 b8 b8 Data Ascii: D\)I9\F%EXkUF+LAVl156khG[#)'$]:qFC_7%H3N`\\|ujTR/@~W,Z"J=[s1egdfGe33^0cGHe{_KPRpUN&-EE%$eeM !B
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 25 06 a3 df 4e 67 e5 c5 e5 86 39 b1 0e 4c c1 c6 91 0c 53 69 8d 14 1e 4f 25 97 49 bb 40 13 3d 26 d1 ca 49 1e 28 d9 b3 7d 4d 8e 53 b4 75 71 71 e5 0e b6 42 b4 e3 d4 1c 03 6a 39 27 b7 e0 15 98 76 10 46 4f a2 e5 be 89 6c f4 56 3e 5e 04 2e 97 95 01 53 29 57 eb bf 9d 40 e3 6c 46 27 c3 ae 40 5e 6c d8 bb a6 8e 9c 30 51 29 d5 d9 9b e8 58 c2 a2 3f 99 51 fd e1 b3 76 5b e4 72 dc 2e 03 72 9e 1e bb e2 e9 8a 2c 4f 92 e5 8a 26 46 58 0b ee 45 eb 0c c9 61 36 f7 aa c0 c0 cd 4f ad a7 e3 80 f6 47 86 77 a8 7e 5c 2e 7d fa 3d a7 b1 86 50 2f ac 3e 38 17 c7 fd ad b5 63 6d cf 49 b9 55 7d 77 3a 02 cb 0b b8 85 3d 06 36 f6 37 d1 9d ab 7d a8 9d d1 fd 76 6d 49 25 51 c6 09 85 75 a8 46 cb 98 1b cc 56 41 eb 43 1b 49 5a cf d2 d2 f2 6e 48 47 ef a1 19 43 f4 18 b7 77 ec 59 a9 7b a4 93 98 d5 ca Data Ascii: %Ng9LSiO%I@=&I(}MSuqqBj9'vFOlV>^.S)W@lF'@^l0Q)X?Qv[r.r,O&FXEa6OGw~\.}=P/>8cmIU}w:=67}vmI%QuFVACIZnHGCwY{
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: cb 42 c5 b3 41 6c 11 ee e3 36 d4 36 48 2f f2 69 a8 2e 65 9b fc c2 b2 03 a9 c8 31 b5 7c f6 49 8a d5 2f bb 5c 69 aa 30 ea 05 36 e4 ac 13 fc 08 30 d6 ff a0 75 54 74 fd 5a 1e 26 4e 22 31 04 5a 47 8a 03 1e c3 f9 ff ff 5c a4 56 80 8b d7 09 0f d3 43 6c fb 04 a1 e6 9a c4 1e a1 bd b8 54 1a 73 e2 4e 86 38 ad 02 83 3f 2b fe 6a b5 15 c7 c9 90 bd b9 5d 12 f9 a8 0b 20 eb 85 f2 85 f8 85 bf 6f 2b 2c 9e b8 48 a1 b6 0a be eb af e4 91 be e0 9d 40 00 0b 2b 69 71 83 5f f0 7b 90 d5 6f 88 e6 4d 09 58 5c a7 ac 4d 25 f0 8e 75 56 be 06 5e 17 dd 61 e9 28 1d 4e f4 d2 88 de 3d 00 42 08 02 b4 ff 04 0a 86 5a a4 3b 42 3c c1 27 02 b0 8d 4b fc 2d 06 24 c6 9a 90 51 d1 3d 66 10 3a 06 8b d8 2b 69 c5 9f ec 28 0a 31 3e 43 68 96 f0 de 32 7b 87 73 ed ee 2d dd 9f 6a ef c9 2a 79 91 be e9 ce d5 0d Data Ascii: BAl66H/i.e1\|I/\i060uTtZ&N"1ZG\VClTsN8?+j] o+,H@+iq_{oMX\M%uV^a(N=BZ;B<'K-$Q=f:+i(1>Ch2{s-j*y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49753	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:12 UTC	640	OUT	GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://depl.pages.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.yimg.com/wm/mbr/58dc9fe4f6c2083f38135ec31a4db5c11ab15bc4/yahoo-main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:13 UTC	1083	IN	HTTP/1.1 200 OK x-amz-id-2: YIUVdonpaQsiNU9ApLzx6gtFlXibXus20/2RledZJalVr74Z4BLbmf8X4P8W9fRHMJpA1DOgOv4= x-amz-request-id: ZMNVVBTVF0G9N0CA Date: Wed, 20 Mar 2024 10:15:05 GMT Last-Modified: Thu, 19 Apr 2018 16:25:50 GMT ETag: "7c7c02dcee2bf1c2528db6092d4ad1fa" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000,public x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:52 GMT x-amz-meta-mbst-etag: "YM:1:1bb49599-26ac-442e-b6b8-f4e40f067ea500055a9e855b6ecb" x-amz-meta-x-ysws-mbst-vtime: 1507011772247755 Expires: Sat, 05 Sep 2026 00:00:00 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 29228 Referrer-Policy: no-referrer-when-downgrade Age: 743168 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 72 2c 00 10 00 00 00 01 85 34 00 00 71 c9 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 82 af 28 1c 95 54 06 60 00 89 54 08 81 12 09 82 73 11 0c 0a 82 ef 24 82 cb 34 0b 87 1a 00 01 36 02 24 03 8e 30 04 20 05 8d 08 07 98 2c 0c 89 42 5b 94 6e 71 05 e7 e6 c4 bf 57 50 a0 9e 80 91 bf 53 b7 ee 62 05 ca 6d 17 40 77 20 75 2a 95 a5 ab 60 c7 5e 04 36 0e 00 42 ff d9 b2 ff ff ff 4f 4d 2a 32 66 1a 46 da b2 0d 10 dc 55 e5 0a 31 41 cc 23 c2 a6 1b 87 72 59 c2 2a ab 07 62 91 09 84 9b d6 23 82 c8 b1 52 c7 06 61 9f e3 0d 87 d1 89 7b 2e 63 d8 fc a3 92 ad 26 5d f0 87 9b c0 93 b8 4f 3e 5e 58 71 b7 cd f4 69 8d 3b 57 c1 4c 3c f1 46 bf 0f d4 3a 3e 13 9a d8 0a d1 97 4a 5c e4 ff c4 25 db 36 d3 31 10 dc 9d e9 0c 2c 56 05 6e Data Ascii: wOF2r,4q(T`Ts$46$0 ,B[nqWPSbm@w u`^6BOM2fFU1A#rY*b#Ra{.c&]O>^Xqi;WL<F:>J\%61,Vn
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 3d f6 f7 72 75 47 99 e3 2e 40 0c 75 b1 69 d6 a4 df 5e 9f 90 39 59 19 b0 65 23 d9 12 e6 ae 85 78 fd 59 de 98 bd 74 a7 54 56 a2 7b 1d 30 25 16 47 49 69 1f 3f 68 f5 bc 10 e5 a3 a9 00 8b 6c 50 09 3b e1 a4 80 08 e0 de 71 6d 7a 22 e8 23 00 ad 16 60 3b 1a c7 5e 36 93 02 cb cf b0 08 0a ec bf 07 07 50 e0 fe 23 38 90 02 df 0b c2 fc 29 f0 03 ad 16 08 b4 5a 60 0c 71 48 40 8d 27 37 0d fd f6 1b 53 13 c1 7a 6a 03 42 3e 02 06 de ff 59 cb 63 a0 a4 22 80 f7 d7 44 3d af af 83 1c fa c3 71 b9 62 cc 1a bb c7 c8 24 9c 62 a6 35 53 ea 94 3d 1d 5d 78 7c 6a 5d 48 87 33 6e 98 de 8a 50 3e 94 3f 0b 47 79 9b 6f eb 89 f2 b9 3c 2d ba 7d bb f1 45 2a 86 94 c3 b9 13 38 b4 da 70 47 69 5c a0 57 69 b4 e7 e6 a7 05 5d 6c 79 d6 ec b6 8c da 70 22 02 99 30 46 b1 b1 f6 9c 1d b7 2f 95 16 8c 09 92 21 Data Ascii: =ruG.@ui^9Ye#xYtTV{0%GIi?hlP;qmz"#`;^6P#8)Z`qH@'7SzjB>Yc"D=qb$b5S=]x\|j]H3nP>?Gyo<-}E*8pGi\Wi]lyp"0F/!
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: da b3 e0 31 39 0e e6 72 db 58 74 ef f4 7d 19 3c 43 38 d1 e9 75 ed ed 9a 01 f4 5c 98 a6 81 88 32 5a 3c 87 7e 93 e8 b4 e1 fd 3f 4e 9b 70 5f cf bc 1e 88 31 55 1d 5a eb da b8 6a 57 ac dd 46 2f 7d fa b7 54 6e f7 20 e1 ec b4 41 14 a4 dd 4b a6 2b a2 a9 58 6a e0 d8 18 28 8b 36 d8 7b f3 e7 49 d5 85 8a 2e a3 e4 d9 35 9e b0 5d 0d 06 55 97 8a ae 56 82 ab 94 b6 0a 58 3c 30 35 52 6a 7b 3d 0c 3a 22 11 74 36 83 b6 44 07 db 86 0f 29 60 d2 a6 95 68 10 8a 85 60 46 54 2d d0 94 a2 41 3b 36 34 fb 9b 39 90 f3 f4 1c 97 d5 b8 6e ca 7d 8d 2e 34 76 43 d7 98 94 cd bd 6d 1b 09 9b 4b db 10 05 71 4f 33 86 42 52 91 76 23 d9 1c 58 c2 94 a0 44 39 ae 85 53 95 f0 3f c3 54 d1 98 cc fe b6 1c 6a cb e1 5e 39 d2 8a e3 0d 9c ea b6 22 7a 4a 58 2b 65 a7 ac 1d e7 1a 38 df 9c ca b6 d5 b4 a3 b6 53 e3 Data Ascii: 19rXt}<C8u\2Z<~?Np_1UZjWF/}Tn AK+Xj(6{I.5]UVX<05Rj{=:"t6D)`h`FT-A;649n}.4vCmKqO3BRv#XD9S?Tj^9"zJX+e8S
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: d1 a3 14 71 98 5d 64 43 ca 26 8f 81 a5 17 1e 4d 49 94 eb b9 9e 39 88 f2 55 de 0a d3 5e 61 bd 2e 5a 31 89 f8 2a a1 34 1d 0f 1b 09 05 00 5e 59 01 83 c1 9a 17 71 4e a9 88 c5 5d fe ac 0b 35 ef 46 14 3e 7b 91 75 7d ef 7f 09 0d ba bf c9 b1 de 7b 9f bd f3 a2 74 90 ee 6c 19 fd 46 d2 1d c3 1c 4c 49 9f 39 92 ba 5d 44 c3 79 f5 00 76 36 cd 46 a2 f9 51 26 e0 9b 8d b3 0f 23 5c 5c 89 73 8a 03 9b ef ab 7d 73 98 82 2d 17 e4 e6 0e df c5 b3 b5 eb ea ae bb f9 b6 d2 34 be e2 a9 bf be 39 2c f8 b7 90 35 b4 79 15 95 fd 6b ca 87 d9 9e 70 2c 28 d8 e6 0d 31 87 cc 3f 79 a7 16 57 dd 4b 24 a4 65 c6 e5 8e e5 87 74 ab e5 0c dc 43 8e 33 4d 61 e9 2b b8 0b b3 30 c1 70 21 4f 50 e7 6b 3c 18 16 d4 e7 62 85 cc 9c f5 da ed f5 07 8b dd 69 2f 81 4b 62 e7 a1 97 36 ee 69 36 c1 09 d0 1c 53 f8 dd 17 Data Ascii: q]dC&MI9U^a.Z1*4^YqN]5F>{u}{tlFLI9]Dyv6FQ&#\\s}s-49,5ykp,(1?yWK$etC3Ma+0p!OPk<bi/Kb6i6S
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: ea bc 42 f2 44 e5 ee 6d fb a1 c7 dd 6c 29 92 8f 28 3d 10 98 46 ab 77 80 67 56 59 d9 d2 10 97 55 a2 5c 76 6d 3b b8 aa 4e 3a d4 a0 7e ae 5a af 33 29 f6 f8 92 16 9f c2 ad b8 46 dc a6 df 36 1d 01 1b 81 44 d2 30 48 ec 02 0d 30 cd 7c 3e 4f e3 00 33 ce c1 d3 32 a8 48 5a 4c 9b 14 d1 5b d5 db 98 1b 80 67 cd fc c2 cb 4a 17 cb 86 8a c7 33 13 3a 7d cb a8 ac e0 fc 85 b8 2b d5 ea 16 36 57 ca bd 61 35 85 c5 24 5b b1 72 ed e4 f8 51 58 78 9e ab fe b4 bc 4a 71 25 5e e9 dd 0e d7 14 17 75 cc a7 8b f8 19 0b 7c 05 80 60 9a ff b0 db 9b 68 e2 db 55 02 ea 75 ee 77 82 60 61 fd 5a 94 d0 ab 57 74 f8 f5 24 3c 6f 85 66 48 2b 79 19 89 fa a9 b9 c4 ad f4 a6 91 58 5f 41 2e 59 01 a0 3b 4b d9 e1 a7 55 0f 98 79 1c 2e 30 31 8f 30 a2 7e ec 56 15 8b 96 95 cd ae 1d 2f e6 1c 95 cd 16 66 f9 c9 d7 Data Ascii: BDml)(=FwgVYU\vm;N:~Z3)F6D0H0\|>O32HZL[gJ3:}+6Wa5$[rQXxJq%^u\|`hUuw`aZWt$<ofH+yX_A.Y;KUy.010~V/f
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: d4 02 3f bd 95 2c 2e a7 32 64 5b c3 c9 b8 65 b3 66 39 f8 c4 27 fd 65 d1 d1 b7 08 5f 27 55 45 9b 53 c1 ec e1 8d 9c 75 d5 a0 e5 fa 28 f5 9c 20 d0 db 3c 21 19 b7 c1 15 8d 86 09 c3 98 44 f5 2b 10 31 b1 9a 44 aa af 90 41 e1 a9 ff 4b 4e 06 a8 80 75 17 ea c0 1b 2f 58 79 f9 e7 70 8f 77 8e fc 24 35 94 cc d4 bc 01 c6 ec c9 11 c2 79 5f 91 6d a9 1a f6 92 cf f3 19 d2 30 42 db 54 a5 26 f3 fe 73 26 57 a4 cb 5c 5f 8a 41 27 ef 21 29 7e 41 44 05 89 0f e0 7d ab 91 38 aa a4 b2 f7 a9 d8 2e c4 df 56 17 e7 df 28 65 a5 84 59 d1 93 ac f3 c7 55 39 7d 75 d8 9d 42 5e 89 06 d3 d9 03 66 6b d2 4f 6d c8 b6 c6 7d 12 6e 1e 37 5a 96 10 8a b5 73 76 d6 12 f6 41 3a 43 13 26 b3 7e fa 06 7b 38 30 84 f8 52 24 ca 3f 03 85 07 f4 c5 98 38 ee a8 c1 78 56 7f fa b7 97 12 27 26 7c fd 61 e2 8a 27 45 27 Data Ascii: ?,.2d[ef9'e_'UESu( <!D+1DAKNu/Xypw$5y_m0BT&s&W\_A'!)~AD}8.V(eYU9}uB^fkOm}n7ZsvA:C&~{80R$?8xV'&\|a'E'
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: e3 d6 d5 cb d0 c8 cb 3f 58 11 8f fe 0c bc f1 3a fd e7 5d 67 09 a9 e8 ce eb f8 fd b6 12 57 a1 89 57 85 b3 e5 69 e8 b1 90 bc d8 2f 5f 87 ef bf bf 3e 01 bd bf 23 20 44 80 cf 96 5d 42 6d 84 91 e3 1e 70 bc 5c 3c 3d 36 0b 80 c1 9b 44 4a 42 49 4b 12 fc 60 a8 cd 80 ab 28 f1 75 ad 1e 0f c0 b7 1a d3 c6 d2 91 3d aa c7 9f e3 df c9 7c 0a 9b d2 e7 5a e7 06 e7 46 e7 26 66 04 4d 39 9b 3f 6b 9f fd 9c 57 cc c7 a2 01 c1 80 a7 f6 82 0d 5e c4 8f 78 28 aa 00 ec 7b 1a 2c fc 84 a1 01 eb 39 8a b2 c9 71 17 8d f9 1c 19 eb cc ca d2 6c ca fe 94 a7 3b a3 79 9c af c5 c0 74 cb bc 9c 6b 06 1c 7b ae fe 29 53 26 90 36 03 87 47 0b 6b 83 14 70 bc 30 ef 95 b2 e6 e2 90 c9 24 a4 4a 74 34 fd 05 47 3f 0e 06 8f 08 18 98 73 96 c8 e4 34 a4 05 91 34 33 77 e0 b0 bc 62 cf 15 18 d3 5b ca 24 16 d2 82 28 Data Ascii: ?X:]gWWi/_># D]Bmp\<=6DJBIK`(u=\|ZF&fM9?kW^x({,9ql;ytk{)S&6Gkp0$Jt4G?s443wb[$(
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: f6 54 5a 32 6e 42 2e 3a 9c 8c 04 e9 2b a3 cb cb 50 80 1e 1f 03 7e c6 c2 a4 a2 5d 2b 50 c9 54 55 3a 03 68 22 b7 49 89 6e 5a 1c 44 3c 24 22 c4 42 28 e5 64 2a c4 4b b2 4e 82 44 c9 56 37 30 6c d3 da be 81 fe 54 04 54 fd 9f 5c d5 df b6 4c 28 12 d3 12 a9 4c 6e c0 28 7e bc 47 bd 1d ec e3 81 2d 07 ba 51 ba 53 7a 50 7a 52 fd 72 40 b7 b2 55 f7 e6 fb 58 dc 83 cf f2 31 fe 57 1c 06 87 84 86 85 47 20 fc a3 41 f2 05 96 fb d7 a7 4b c0 83 37 6f dd 9e 6d 8f bd 0e d8 ef a0 c3 0e 39 e2 98 13 8e 3b e9 94 62 45 4a 94 3a ed 8c 32 67 9d 77 4e 95 4a d5 6a 0c fc 66 f9 8a 95 43 bf db 27 6e f5 b5 df ae 02 0f 55 01 c0 0d 00 80 5b 52 c0 0b 55 48 5b 06 f8 c6 3d b8 35 75 f8 07 e9 1b 77 ab d7 a0 43 a7 5e 7d ba 74 2b 07 de ae d1 95 5e bb 33 18 36 7e df a3 bf f5 b7 1d eb 77 6e db 25 53 96 Data Ascii: TZ2nB.:+P~]+PTU:h"InZD<$"B(d*KNDV70lTT\L(Ln(~G-QSzPzRr@UX1WG AK7om9;bEJ:2gwNJjfC'nU[RUH[=5uwC^}t+^36~wn%S
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: d3 54 b7 8e be e6 0d 85 00 79 1d d0 15 dc 23 58 8f 0b 1c 70 d5 75 84 15 47 40 82 ad 62 b2 c2 bb fa 84 2c 58 b6 88 37 80 17 99 1e 43 ab 12 31 e8 36 d6 3d 5b 2b 7f e8 de 47 de 55 7e e0 02 16 4a 59 82 09 2a f3 81 ca 4c 78 d9 c5 a4 c6 dc 58 6d b7 09 1c 4b 71 54 64 c0 90 85 f4 8f 5b b7 a6 bb b3 b3 9f 1e 7c a3 df a7 42 5f 7f f1 2c 02 8a ee 46 57 44 fc d5 b5 8e 07 b7 af 6e 5e 49 9e 0c 6d 66 69 4e 60 9d 89 25 7f 0b a5 1b d2 a3 e3 a8 33 39 d8 0d c6 3e 93 3e 3f cc 46 3f bd 0a a8 a9 1c 4d af c7 98 15 f8 71 1d aa 06 a0 d0 5e df 42 0f 04 cf 14 55 37 ca 80 85 31 ba d7 87 3a 64 48 96 44 43 39 c5 67 14 d0 0c bf 67 08 10 c2 f0 de 51 a1 67 7e 7d c1 f2 46 86 cc a1 7c d8 5e 71 d8 c8 8e 36 55 91 c1 30 25 ac 52 c8 84 68 b6 cf 6c a4 bc 22 e8 f1 03 98 04 9e 38 40 2f 87 77 48 40 Data Ascii: Ty#XpuG@b,X7C16=[+GU~JY*LxXmKqTd[\|B_,FWDn^ImfiN`%39>>?F?Mq^BU71:dHDC9ggQg~}F\|^q6U0%Rhl"8@/wH@
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 59 57 87 b6 9e 0c 3a 63 50 75 95 8c c3 97 12 39 92 a1 4b fe 2a d5 65 60 15 a3 9c ea df e8 58 ea 14 19 0d 4a c6 ca ca 6a 74 6c 72 69 d9 f5 a9 6a 7d a3 54 a4 08 76 d6 1d a0 ea f3 60 ae a8 f3 93 cf 41 a7 fb 4e 82 8a c0 22 9a 8a b4 9a 51 b4 cd ba b1 f0 52 f4 3f e9 84 c7 45 9f ed 44 c4 a6 63 70 0a 25 3b 50 6e e1 5f 83 e9 05 54 96 c5 d4 60 8e bb f6 f8 e9 76 c7 9e 00 01 d3 73 e9 99 f9 df c3 0f 75 4a fb 65 fc ba 91 51 1a 89 31 84 98 dd 52 7e c0 8f 33 0a 85 90 95 f8 45 3e 82 2a 03 8d 73 10 69 f5 22 73 98 87 4c 8d c9 62 ec c7 f3 97 2c 5b 2d 15 91 45 14 76 f0 60 80 14 04 2a df 8b 6c 7d df f5 6d 48 d0 c4 06 b5 04 98 4b 34 fc 5e 33 9e 40 d3 c0 98 17 50 c7 fd 81 29 cd de 26 8f 8f 7a 47 f8 1e 59 d5 da e2 a6 54 a7 53 ee e6 f5 ac b9 f7 72 24 66 5a 92 65 71 31 ab 83 30 55 Data Ascii: YW:cPu9Ke`XJjtlrij}Tv`AN"QR?EDcp%;Pn_T`vsuJeQ1R~3E>si"sLb,[-Ev`*l}mHK4^3@P)&zGYTSr$fZeq10U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49750	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:12 UTC	638	OUT	GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://depl.pages.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.yimg.com/wm/mbr/58dc9fe4f6c2083f38135ec31a4db5c11ab15bc4/yahoo-main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:13 UTC	1083	IN	HTTP/1.1 200 OK x-amz-id-2: AslaU0/i0cRXaRMShpAG2Dd5WcPAjlJiVOSAoc1jHzqWTI/HPtbQav5zSKYDXDiPoPm+/Hb6wco= x-amz-request-id: FA9ZX8QBMS50J7WS Date: Sun, 17 Mar 2024 16:54:53 GMT Last-Modified: Thu, 19 Apr 2018 17:20:37 GMT ETag: "58b9e3ca84accc5d50ac893317cd6705" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000,public x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:52 GMT x-amz-meta-mbst-etag: "YM:1:5893a8ed-f86d-4278-b1dc-94c16c36132200055a9e85598641" x-amz-meta-x-ysws-mbst-vtime: 1507011772122689 Expires: Sat, 05 Sep 2026 00:00:00 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 28108 Referrer-Policy: no-referrer-when-downgrade Age: 978381 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d cc 00 10 00 00 00 01 86 2c 00 00 6d 6a 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 82 ac 1c 1c 95 54 06 60 00 89 54 08 81 0a 09 82 73 11 0c 0a 82 f3 68 82 ce 58 0b 87 1a 00 01 36 02 24 03 8e 30 04 20 05 8c 64 07 98 2c 0c 8a 2e 5b ec 6e 71 07 e7 e6 44 e1 51 50 b9 6d 00 50 d0 ca f9 f6 1a 0a 38 27 cd 73 3b a0 13 6d bd 93 a8 60 c7 5e 04 36 0e 10 e0 ff 63 66 ff ff ff ff b9 49 45 c6 4c 3a 4c db 6d 03 50 45 44 7f 85 d8 15 e1 48 41 51 33 92 23 e0 a1 e6 7d d4 4a f3 f0 4c 5f 3a 7c a6 5c 03 5b ba b9 14 cd d7 c0 8d ee 17 97 d6 43 81 3d 0c 77 53 32 5d 32 05 59 32 65 df 1a ae 4f 38 22 e1 48 72 9e 2b d5 23 2d 5f 17 6a 14 e8 34 a8 4d 70 77 ee b8 8e 86 7c 68 29 7b ed 62 9f fc 3c cd 65 60 bf 9f 81 2c db 49 dc Data Ascii: wOF2m,mjT`TshX6$0 d,.[nqDQPmP8's;m`^6cfIEL:LmPEDHAQ3#}JL_:\|\[C=wS2]2Y2eO8"Hr+#-_j4Mpw\|h){b<e`,I
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 83 dc 45 8a 52 05 51 b2 41 2e f8 a7 bf 6f fa d7 1a 7f 82 6d a4 01 26 fa ce bd ed 0b 78 b8 d9 8a a5 16 68 9e ef fb 63 3e 37 c1 66 db 0a a8 11 23 c3 52 62 a9 fd dd 3e df 79 be f3 d7 7f f7 a4 0f fd d1 b7 cd 22 0f 11 29 4e a7 14 09 21 94 10 82 38 0b ff db 9d 54 35 95 3e 69 98 a1 e7 be 6f b4 31 46 6b 51 22 22 a2 94 52 4a 89 58 fb f6 6a 66 e1 4a 53 9a 9b 9c 18 37 4c 64 2c 13 f2 0e 23 42 4a ff 74 34 8f ab c7 31 ff c7 1a ef 6d 2d 92 e8 c8 c8 51 ff f0 e7 fc 46 df 1a 9f 16 3b 1d 1d 2c 0d 90 40 d6 b8 03 7c 0d 15 60 6e be 83 b0 e3 4f d4 58 02 ec 6f bf a6 b6 32 c0 09 02 d0 69 08 d8 16 f2 98 4b 65 00 78 7d 89 b3 00 10 f0 7d b4 06 80 88 9f a3 b5 00 f4 3b df 94 01 c0 30 d0 69 08 02 9d 86 60 49 c1 15 42 21 1f d4 0c cc db 6e f0 57 06 78 cf 3d 80 90 8f 80 81 5f 3c 9c 35 ee Data Ascii: ERQA.om&xhc>7f#Rb>y")N!8T5>io1FkQ""RJXjfJS7Ld,#BJt41m-QF;,@\|`nOXo2iKex}};0i`IB!nWx=_<5
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 8f 81 92 42 b7 8d aa 1a 5f b1 a6 ee 5a 91 2e e5 b7 72 fe be cf 3f 50 f8 08 3e e6 77 a8 e5 7e 7d b6 f8 24 00 a9 cf 58 99 89 4f 3c de d2 12 0d ae 7d 6c 69 81 31 de 8b 2e c6 89 8c d9 d5 31 c2 2e a9 e6 1c 16 0e 6b e2 52 d1 e2 5d 51 4d 6c 80 55 7a f6 8e aa b7 80 0e 86 4d 44 bb aa 1e b0 c8 d1 76 3b 25 90 a2 a2 10 ad 20 63 36 32 b6 61 7c 02 df ad c4 fb 4c 1d a5 78 65 36 6e 07 77 a8 ef 54 63 a7 e1 0c 9c 6d 39 97 ec 7c 52 68 88 0d 44 c2 42 04 ff d7 bb 18 74 b3 ab 65 af 0e de 97 d9 df 8c 2d d3 23 ab 63 90 f3 69 fd 4b b9 ab 85 6b d1 93 55 7f 86 01 2b 6d ae 8c a7 76 35 d9 f5 fa 6a f5 1d 5f 65 42 63 26 a2 ac 3e cc a7 bd 6a b1 7a 7b 5e b4 04 8d 02 aa ad 12 c9 98 36 a6 3d 35 b7 a5 1a 1f 1d e2 73 ed 7c 54 5e d3 78 61 b8 31 58 36 1b 79 9a 2b c8 20 20 77 46 5e 0d 56 00 88 Data Ascii: B_Z.r?P>w~}$XO<}li1.1.kR]QMlUzMDv;% c62a\|Lxe6nwTcm9\|RhDBte-#ciKkU+mv5j_eBc&>jz{^6=5s\|T^xa1X6y+ wF^V
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: f7 d8 e3 05 7c ec 81 a0 b7 42 fc 07 0f 97 77 ca d4 7b 88 5e 52 f9 8f 9e 72 21 9b de 71 b8 41 54 c4 ca f1 c5 51 c1 86 da bd e3 0b 55 82 18 9d 2b ca dc e4 2b 3f ab 95 e5 78 41 d2 82 66 0a e9 fe 08 bd 18 7e 29 84 9b 17 5a d5 eb 2d c5 89 c5 ef 50 80 27 00 e0 51 e5 18 dc 48 d8 fb 4a c3 f1 1a 70 bb de ed 55 f3 b3 62 7d 2e 4b ad 24 93 dc 2f 5e f0 2f 8e 47 cc 81 39 08 40 62 d1 7c c0 95 2d 25 e3 5d 84 72 f8 50 10 6d a1 e7 11 e3 80 93 1b 54 c6 98 68 cd 44 cc 86 a6 3d 36 02 c3 fc a7 2b a2 67 d7 f2 6a 2f 67 14 77 d4 74 d2 f0 2b 11 c2 55 9e 0a 77 6b 8a f8 92 ff 63 12 f9 77 87 03 b8 b6 56 d6 5a 82 60 99 f4 94 0b 34 61 0e 06 1e c5 9d 4e e5 6e 15 77 b4 cb 29 70 ca 53 23 02 94 92 98 e8 60 36 33 b4 8b 79 a1 2d 12 f6 70 e3 07 b5 77 a6 7c f3 63 a4 6b b9 3c 23 05 06 12 38 0a Data Ascii: \|Bw{^Rr!qATQU++?xAf~)Z-P'QHJpUb}.K$/^/G9@b\|-%]rPmThD=6+gj/gwt+UwkcwVZ`4aNnw)pS#`63y-pw\|ck<#8
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 0e 88 55 a2 b5 67 99 60 57 bb 23 52 63 0e b8 45 84 ab c7 41 64 07 2d 9b 07 a7 dc 1b 48 05 a4 27 ff 1f 35 23 e9 1a 56 c6 8c fe 80 b9 70 76 97 b1 a8 dd 06 92 87 c2 61 10 19 74 42 1e ad 9a c4 12 98 8a 0c 27 f2 2d 7d 89 eb 22 fc ce a5 3d a1 2e d9 9f d4 fa a2 a8 40 1b 52 d1 32 e7 57 c8 7a ad 2b f2 0e 09 93 3e be a7 ad dc 6e fa b3 31 c3 a1 76 07 68 46 09 6c 7b a5 cf e8 52 7b 10 4d 88 36 24 6a ec c2 d0 44 bd f7 2e 15 3e 98 59 85 3f 64 5c 7a 7a f1 0d 98 f5 5b 0d 4d d4 ee b3 4f 2b f5 92 3b cd 7c 59 f8 be 30 7a 19 d1 d2 dd 21 9b f2 2b 0c 5c 4d 4a 4d 64 73 b1 2f 1a ae 27 50 f5 9e 00 10 80 83 8a 77 64 80 61 1b db c1 67 dc c3 bb fd d2 17 53 eb db 2c 22 96 9a 7f 74 f1 74 d7 c6 72 9d 7b c1 3a 81 cc 70 b0 e4 0b a7 bc 3c a4 7c e4 04 b5 29 9e de b7 21 47 0f 96 0d ed b6 86 Data Ascii: Ug`W#RcEAd-H'5#VpvatB'-}"=.@R2Wz+>n1vhFl{R{M6$jD.>Y?d\zz[MO+;\|Y0z!+\MJMds/'PwdagS,"ttr{:p<\|)!G
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 98 de 8f 01 00 f7 20 92 e3 cb ff 1e 00 fa 92 88 d0 76 76 a8 e2 f3 01 a0 50 b8 25 fd 80 71 2d 56 3b 97 87 94 3d af d6 4d ba 26 b8 2a d2 24 05 71 14 99 f5 c8 1a 08 1c e5 4d 69 57 7c cb af e9 30 b1 88 98 3b f9 5a 10 03 4e fe 62 ba 2c 34 00 30 a3 a6 75 91 f6 24 f3 ca 6e 9f d6 40 0d 2d f1 8d 66 0f c6 8b 89 68 0e d0 79 50 0c 2e 14 6f 1b 31 d6 37 dd 8a 45 d4 37 f2 45 6d 33 16 dd 98 a4 4b e5 cb e6 4e 3a b5 bd 0b 00 d9 4a f5 aa b5 9f cd ec 1d 20 c9 3c cb b3 8f 5e 60 2c b3 db 26 2c 40 ef ca e1 1d 75 10 00 cc f7 4a 7f 16 56 83 13 48 d0 bc b9 b5 c1 ee 8b 66 fe 4c 2c 39 29 8f e5 63 f9 57 fe 1f a8 d7 10 61 b4 3b fc b1 2c 26 66 c5 94 32 b5 a9 1f 5d f1 5c b6 1e a6 8e 5c 63 c6 9a 60 22 8f 23 11 cb 55 68 2d ee 90 9a 0c 8f 89 ca 3c a5 ce ea 09 a7 8a 8f 23 6a dc 57 e9 6d de Data Ascii: vvP%q-V;=M&*$qMiW\|0;ZNb,40u$n@-fhyP.o17E7Em3KN:J <^`,&,@uJVHfL,9)cWa;,&f2]\\c`"#Uh-<#jWm
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: bc 42 eb 6a 3d db 32 57 d1 be 35 9b 5a 0f 80 03 48 00 68 3b 27 09 e0 cd 99 4b e5 ce 31 2b d3 5a e6 b6 6d 68 f5 0a d0 b7 7a d0 6b e9 1a 00 fa 19 80 6e a2 df ed 04 00 3d 12 a0 6f f8 fb f9 ef 4b 00 bf fa bc de 8b 51 ec c2 4e 6c c3 3a 12 b6 14 a2 87 68 97 9f 80 0b 5a 8a 8d ea ee 07 c0 77 7c 75 5c f3 5d ec 06 08 c0 54 00 26 1c 02 2c 04 80 a3 1f 21 5b 79 00 c8 69 06 4f a7 cb c6 ec f5 ff 42 2f c0 cc cd ec d8 2e bb 2a f9 54 65 87 43 7e b7 e4 e4 15 20 a1 a0 61 60 e1 14 e1 11 10 91 90 95 94 55 d5 a8 4c 43 7c b7 f8 8c 8b 69 63 de d9 eb 2d 5a bb 83 0e 7d dd 2f 6c b4 cd 74 51 26 b2 89 95 1f ea 2e 2f fb a9 fd ee d7 79 3b 3e d7 93 fa ff bd 01 1e c8 4a b1 21 0e d8 4e 75 66 7b 4a 73 31 3c 74 b7 07 51 df b0 fc 4c 2f ea cb 9c 80 03 37 f1 6c 5c 0b 9f 91 90 99 80 a9 97 bc 52 Data Ascii: Bj=2W5ZHh;'K1+Zmhzkn=oKQNl:hZw\|u\]T&,![yiOB/.*TeC~ a`ULC\|ic-Z}/ltQ&./y;>J!Nuf{Js1<tQL/7l\R
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: c8 90 73 b2 05 72 3e bd 3b 34 a5 7b e8 07 a8 76 2c 8a be 70 94 cc d5 9a 6f 3d 77 2a a4 be e6 a0 8e 62 62 cc 7c 1a 07 45 c6 06 73 a9 a7 c5 62 a4 70 9a 7a f5 f3 93 5e 2e 00 eb fd d3 15 91 59 c6 30 2a e8 f2 ef 91 57 cb 94 60 54 45 85 44 c6 e0 92 a2 f9 6d 8a ea 8d 20 9f a9 41 31 9b c5 19 fd 8e 0b 94 46 1c a0 df 5d 54 b9 22 2f ad 85 42 5c 0a de 5a 11 a8 32 02 82 84 0d 91 fe d1 b9 b9 23 c8 da de b1 d3 81 0c e3 0e 79 4f b5 82 45 95 fd 7d bf 47 5f 63 c0 38 1b 0a 3b 9a 87 9b cd 55 3a 0a 8c 28 d6 f5 34 ee 60 92 8a 50 ca 1d e2 fb a7 a5 b7 1c 91 14 aa 4f cf ed de e5 cd 2d 30 6e 28 1a 8f c7 92 3d 48 96 6f d7 91 6b d1 55 9a c6 07 1f 4b 55 0f 99 3a 77 3a 4b 33 e3 b5 c8 c1 40 03 f5 b0 d8 d1 86 14 3c a0 4d cf 6a c7 5c 0c 07 0d ee a7 75 1e d9 88 ec 11 f3 dd 81 a7 c5 f9 fc Data Ascii: sr>;4{v,po=wbb\|Esbpz^.Y0W`TEDm A1F]T"/B\Z2#yOE}G_c8;U:(4`PO-0n(=HokUKU:w:K3@<Mj\u
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 07 d6 0e 90 8d c4 ba c6 64 be 39 c0 93 83 a7 b9 0e d3 4b 74 58 38 bb a6 c8 0f 18 13 a5 8c 60 6a 2a d4 07 76 51 2b 8e e6 52 cc d3 a1 e5 0a 85 8a 40 8a 76 8f 42 82 a3 f2 b9 97 d3 fb 4a 68 33 58 20 dd 9b f1 c6 46 77 c3 08 99 34 39 4e 37 b2 5d f2 ae 5c 2f ba ee b6 14 7c 4f 2e e9 3b dc 5b 6b f8 59 35 21 da af b8 d2 14 6a 8c 66 cf 4a 92 b1 99 c4 b9 79 86 31 ab ba ac 35 9b 70 34 37 80 f8 22 91 4b 85 93 78 3c fe 0b 69 26 84 23 0f fd fa 0d de 94 e3 c7 f9 32 e2 5b b9 ec b1 e4 d2 b7 a2 ba c7 c1 1a 2d f0 65 76 8e f7 9f 3a 55 88 1e 6e ab 63 af 44 e1 9c 1e 9d 5b 25 c0 c2 ea 36 69 1f ec 8f ba 29 33 14 d6 7e 2a 3f e5 e9 5e a7 3f fb 42 bd e8 1e b2 cb 30 1a 8f f1 90 51 40 02 42 2d 56 88 2b d0 70 16 37 9a f1 43 ca 91 b5 22 d7 88 ce 75 3b 7a 55 e4 33 63 28 c5 42 c5 9b 80 d8 Data Ascii: d9KtX8`jvQ+R@vBJh3X Fw49N7]\/\|O.;[kY5!jfJy15p47"Kx<i&#2[-ev:UncD[%6i)3~?^?B0Q@B-V+p7C"u;zU3c(B
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: f8 3f 53 50 92 fa be a2 a2 0c b5 3d 3d fa 01 46 43 c5 46 8b dc 16 54 6a 55 49 ae 99 d0 b8 b9 f2 db 7c df bd 08 a7 7c 35 2a 58 19 99 11 a3 a0 56 2d 09 ba f7 42 08 1f 6f b9 bd 29 1a f5 af 14 76 d2 92 4d 93 f2 62 3e 89 de 74 c0 ad bb b4 4f 45 07 49 b8 76 c0 27 28 a4 f8 61 5d 1a 0d ac d3 ea 08 0a 7c 23 b3 d1 82 f8 ea a8 0d d5 58 7c cd ba 6a 76 24 08 3e b0 ab d4 48 d5 b4 01 0a a0 13 ba 48 e1 58 f4 fd 5f 3a 35 6c 8f 9f e4 27 cf 74 d9 08 da d0 14 d9 90 a5 e1 6c 51 a2 a4 47 d2 98 df 5e df 78 b2 fd e4 9e 86 3d 27 da 4f d0 e7 1b f7 53 5f e4 b7 8d 6f 7e d7 2d 70 e3 35 a3 e4 ef 13 a8 74 5a 52 01 03 d7 05 1d 80 c2 96 06 c3 99 e7 86 a8 09 8c 1c 3d d2 17 ff ed 97 9e 03 52 d4 31 2c b9 b4 81 80 c4 b5 b4 3e 4b 76 3d 5d a1 ac a3 5b b2 69 7d 0e 3b 6d c0 92 5b c7 50 f4 8a 84 Data Ascii: ?SP==FCFTjUI\|\|5*XV-Bo)vMb>tOEIv'(a]\|#X\|jv$>HHX_:5l'tlQG^x='OS_o~-p5tZR=R1,>Kv=][i};m[P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49752	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:12 UTC	816	OUT	GET /sdarla/php/client.php?l=RICH{dest:tgtRICH;asz:flex}&f=794200019&ref=https%3A%2F%2Flogin.yahoo.com%2Faccount%2Fchallenge%2Fpassword&sa=geminifed%253D1%2520y-bucket%253Dmbr-push-untrusted-ar%252Cmbr-fido-1fa-login%252Cmbr-rcscore-threshold%252Cmbr-qr-comet-sdk%252Cmbr-login-domain%252Cmbr-yak-ui-improvement HTTP/1.1 Host: fc.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://depl.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:13 UTC	648	IN	HTTP/1.1 500 Cannot find server. Date: Fri, 29 Mar 2024 00:41:12 GMT Connection: close Strict-Transport-Security: max-age=31536000 Server: ATS Cache-Control: no-store Content-Type: text/html Content-Language: en Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A3=d=AQABBCgOBmYCEACwTzba3fpYd3-92oH_fwoFEgEBAQFfB2YPZtxV0iMA_eMAAA&S=AQAAAo1sjBIE_bWNaPKmY8He9-A; Expires=Sat, 29 Mar 2025 06:41:13 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Content-Length: 4652
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 59 61 68 6f 6f 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 61 6c 2d 75 69 22 3e 0a 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en-us"> <head> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <meta charset="utf-8"> <title>Yahoo</title> <meta name="viewport" content="width=device-width,initial-scale=1,minimal-ui">
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 3c 21 2d 2d 20 73 74 61 74 75 73 20 63 6f 64 65 20 3a 20 35 30 30 20 2d 2d 3e 0a 20 20 3c 21 2d 2d 20 55 6e 6b 6e 6f 77 6e 20 48 6f 73 74 20 2d 2d 3e 0a 20 20 3c 21 2d 2d 20 68 6f 73 74 20 6d 61 63 68 69 6e 65 3a 20 65 34 37 2e 79 63 70 69 2e 64 63 61 2e 79 61 68 6f 6f 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 3c 21 2d 2d 20 74 69 6d 65 73 74 61 6d 70 3a 20 31 37 31 31 36 37 32 38 37 32 2e 39 39 38 20 2d 2d 3e 0a 20 20 3c 21 2d 2d 20 75 72 6c 3a 20 68 74 74 70 73 3a 2f 2f 66 63 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 64 61 72 6c 61 2f 70 68 70 2f 63 6c 69 65 6e 74 2e 70 68 70 3f 6c 3d 52 49 43 48 25 37 42 64 65 73 74 3a 74 67 74 52 49 43 48 3b 61 73 7a 3a 66 6c Data Ascii: </script> </head> <body> ... status code : 500 --> ... Unknown Host --> ... host machine: e47.ycpi.dca.yahoo.com --> ... timestamp: 1711672872.998 --> ... url: https://fc.yahoo.com/sdarla/php/client.php?l=RICH%7Bdest:tgtRICH;asz:fl
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 6e 67 27 2c 0a 20 20 20 20 20 20 20 20 20 20 6c 6f 67 6f 41 6c 74 3a 20 27 59 61 68 6f 6f 20 4c 6f 67 6f 27 2c 0a 20 20 20 20 20 20 20 20 20 20 6c 6f 67 6f 53 74 79 6c 65 3a 20 64 65 66 61 75 6c 74 4c 6f 67 6f 53 74 79 6c 65 2c 0a 20 20 20 20 20 20 20 20 20 20 68 65 61 64 65 72 3a 20 65 6e 67 6c 69 73 68 48 65 61 64 65 72 2c 0a 20 20 20 20 20 20 20 20 20 20 6d 65 73 73 61 67 65 31 3a 20 65 6e 67 6c 69 73 68 4d 65 73 73 61 67 65 31 2c 0a 20 20 20 20 20 20 20 20 20 20 6d 65 73 73 61 67 65 32 3a 20 65 6e 67 6c 69 73 68 4d 65 73 73 61 67 65 32 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 76 61 72 20 73 69 74 65 44 65 74 61 69 6c 73 20 3d 20 73 69 74 65 44 61 74 61 4d 61 70 5b 27 64 65 66 61 75 6c 74 27 5d 3b 0a 0a 20 20 20 Data Ascii: ng', logoAlt: 'Yahoo Logo', logoStyle: defaultLogoStyle, header: englishHeader, message1: englishMessage1, message2: englishMessage2 } }; var siteDetails = siteDataMap['default'];
2024-03-29 00:41:13 UTC	752	IN	Data Raw: 20 74 69 6d 65 2c 0a 20 20 20 20 20 20 20 20 65 72 72 5f 75 72 6c 3a 20 64 6f 63 75 6d 65 6e 74 2e 55 52 4c 2c 0a 20 20 20 20 20 20 20 20 65 72 72 3a 20 27 35 30 30 27 2c 0a 20 20 20 20 20 20 20 20 74 65 73 74 3a 20 27 2d 27 2c 0a 20 20 20 20 20 20 20 20 61 74 73 5f 68 6f 73 74 3a 20 27 65 34 37 2e 79 63 70 69 2e 64 63 61 2e 79 61 68 6f 6f 2e 63 6f 6d 27 2c 0a 20 20 20 20 20 20 20 20 72 69 64 3a 20 27 2d 27 2c 0a 20 20 20 20 20 20 20 20 6d 65 73 73 61 67 65 3a 20 27 55 6e 6b 6e 6f 77 6e 20 48 6f 73 74 27 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 69 66 28 79 6e 65 74 29 20 7b 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 20 35 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 Data Ascii: time, err_url: document.URL, err: '500', test: '-', ats_host: 'e47.ycpi.dca.yahoo.com', rid: '-', message: 'Unknown Host' }; if(ynet) { document.write('<div style="height: 5px; background-c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49756	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:13 UTC	773	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=794200019&yhlCT=2&yhlBTMS=1711672872366&yhlClientVer=3.53.30&yhlRnd=6LulwV1q4QrhpuZE&yhlCompressed=0 HTTP/1.1 Host: 3p-udc.yahoo.com Connection: keep-alive Content-Length: 1735 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://depl.pages.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://depl.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:13 UTC	1735	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 72 78 25 32 32 25 33 41 25 32 32 31 65 39 78 34 38 6b 67 31 39 76 2e 33 68 6a 6e 38 65 63 70 25 32 36 76 25 33 44 31 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 33 2e 33 30 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 56 45 52 53 49 4f 4e 45 44 2d 50 52 4f 44 25 32 32 25 32 43 25 32 32 5f 62 74 25 32 32 25 33 41 25 32 32 72 61 70 69 64 25 32 32 25 32 43 25 32 32 41 5f 70 72 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 32 32 25 32 43 25 32 32 41 5f Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_rx%22%3A%221e9x48kg19v.3hjn8ecp%26v%3D1%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.53.30%22%2C%22A_cn%22%3A%22VERSIONED-PROD%22%2C%22_bt%22%3A%22rapid%22%2C%22A_pr%22%3A%22https%22%2C%22A_
2024-03-29 00:41:13 UTC	820	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://depl.pages.dev vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 0 date: Fri, 29 Mar 2024 00:41:13 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; Expires=Sat, 29 Mar 2025 06:41:13 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49757	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:13 UTC	363	OUT	GET /wm/mbr/images/show-v0.0.1.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:13 UTC	795	IN	HTTP/1.1 200 OK x-amz-id-2: aDTwBb72pEYja7FwcGyd6gNcuqO+upiyXBQjzOBMGkNLCWfsZR0UNJr19b8EuDQGgpPFPcy2IVU= x-amz-request-id: CKK5P6VQVABBF6YM Date: Mon, 18 Mar 2024 09:04:29 GMT Last-Modified: Tue, 16 Jul 2019 23:13:44 GMT ETag: "7023de5408ffa052a862ba84dbedea53" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 879881 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 920205 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 34 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 20 5b 0a 09 3c 21 45 4e 54 49 54 59 20 6e 73 5f 65 78 74 65 6e 64 20 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.4, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [<!ENTITY ns_extend "
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 0a 09 2e 73 74 39 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 53 56 47 49 44 5f 36 5f 29 3b 7d 0a 09 2e 73 74 31 30 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 53 56 47 49 44 5f 38 5f 29 3b 7d 0a 09 0a 09 09 2e 73 74 31 31 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 53 56 47 49 44 5f 31 30 5f 29 3b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 30 30 30 30 30 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 38 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 7d 0a 09 0a 09 09 2e 73 74 31 32 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 Data Ascii: .st9{clip-path:url(#SVGID_6_);}.st10{clip-path:url(#SVGID_8_);}.st11{clip-path:url(#SVGID_10_);fill:none;stroke:#000000;stroke-width:1.8;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}.st12{display:inline;fill:none;stroke:#
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 3a 23 30 30 30 30 30 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 34 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 7d 0a 09 2e 73 74 32 33 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 30 30 30 30 30 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 34 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 7d 0a 09 2e 73 74 32 34 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 31 37 46 46 31 39 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 2e 37 35 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 7d 0a 09 2e 73 74 32 35 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 53 56 47 49 44 5f Data Ascii: :#000000;stroke-width:4;stroke-linejoin:round;stroke-miterlimit:10;}.st23{display:inline;fill:none;stroke:#000000;stroke-width:4;stroke-miterlimit:10;}.st24{fill:none;stroke:#17FF19;stroke-width:0.75;stroke-miterlimit:10;}.st25{clip-path:url(#SVGID_
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 44 43 35 3b 7d 0a 09 2e 73 74 35 31 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 53 56 47 49 44 5f 36 38 5f 29 3b 7d 0a 09 2e 73 74 35 32 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 53 56 47 49 44 5f 37 30 5f 29 3b 66 69 6c 6c 3a 23 42 39 42 44 43 35 3b 7d 0a 09 2e 73 74 35 33 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 53 56 47 49 44 5f 37 32 5f 29 3b 7d 0a 09 2e 73 74 35 34 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 53 56 47 49 44 5f 37 34 5f 29 3b 66 69 6c 6c 3a 23 42 39 42 44 43 35 3b 7d 0a 09 2e 73 74 35 35 7b 66 69 6c 6c 3a 23 46 46 30 30 30 30 3b 7d 0a 09 0a 09 09 2e 73 74 35 36 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 30 30 30 30 30 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 Data Ascii: DC5;}.st51{clip-path:url(#SVGID_68_);}.st52{clip-path:url(#SVGID_70_);fill:#B9BDC5;}.st53{clip-path:url(#SVGID_72_);}.st54{clip-path:url(#SVGID_74_);fill:#B9BDC5;}.st55{fill:#FF0000;}.st56{display:inline;fill:none;stroke:#000000;stroke-widt
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 6b 65 2d 77 69 64 74 68 3a 31 2e 35 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 7d 0a 09 2e 73 74 37 36 7b 73 74 72 6f 6b 65 3a 23 30 30 30 30 30 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 35 34 37 37 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 7d 0a 09 0a 09 09 2e 73 74 37 37 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 30 30 36 38 33 37 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 35 3b 73 Data Ascii: ke-width:1.5;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}.st76{stroke:#000000;stroke-width:1.5477;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}.st77{display:inline;fill:none;stroke:#006837;stroke-width:1.5;s
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 7d 0a 09 2e 73 74 39 33 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 66 69 6c 6c 3a 23 38 43 43 36 33 46 3b 7d 0a 09 2e 73 74 39 34 7b 66 69 6c 6c 3a 23 42 39 42 44 43 35 3b 7d 0a 09 2e 73 74 39 35 7b 66 69 6c 6c 3a 23 34 32 32 31 30 42 3b 7d 0a 09 2e 73 74 39 36 7b 66 69 6c 6c 3a 23 46 42 42 30 33 42 3b 7d 0a 09 2e 73 74 39 37 7b 66 69 6c 6c 3a 23 36 30 33 38 31 33 3b 7d 0a 09 2e 73 74 39 38 7b 66 69 6c 6c 3a 23 46 32 45 41 33 32 3b 7d 0a 09 2e 73 74 39 39 7b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 63 6c 69 70 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 66 69 6c 6c 3a 23 32 33 31 46 32 30 3b 7d 0a 09 2e 73 74 31 30 30 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 30 30 30 30 30 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 2e Data Ascii: }.st93{display:inline;fill:#8CC63F;}.st94{fill:#B9BDC5;}.st95{fill:#42210B;}.st96{fill:#FBB03B;}.st97{fill:#603813;}.st98{fill:#F2EA32;}.st99{fill-rule:evenodd;clip-rule:evenodd;fill:#231F20;}.st100{fill:none;stroke:#000000;stroke-width:0.
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 3e 0a 09 09 3c 69 3a 70 67 66 52 65 66 20 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 61 64 6f 62 65 5f 69 6c 6c 75 73 74 72 61 74 6f 72 5f 70 67 66 22 3e 0a 09 09 3c 2f 69 3a 70 67 66 52 65 66 3e 0a 09 3c 2f 66 6f 72 65 69 67 6e 4f 62 6a 65 63 74 3e 0a 09 3c 67 20 69 3a 65 78 74 72 61 6e 65 6f 75 73 3d 22 73 65 6c 66 22 3e 0a 09 09 3c 67 20 69 64 3d 22 67 72 69 64 22 3e 0a 09 09 3c 2f 67 3e 0a 09 09 3c 67 20 69 64 3d 22 69 63 6f 6e 73 22 20 63 6c 61 73 73 3d 22 73 74 30 22 3e 0a 09 09 09 3c 67 20 63 6c 61 73 73 3d 22 73 74 31 22 3e 0a 09 09 09 09 3c 70 61 74 68 20 64 3d 22 4d 34 32 2c 38 63 30 2d 31 2e 31 2d 30 2e 39 2d 32 2d 32 2d 32 48 34 43 32 2e 39 2c 36 2c 32 2c 36 2e 39 2c 32 2c 38 76 32 34 63 30 2c 31 2e 31 2c 30 2e 39 2c 32 2c 32 2c 32 68 32 30 56 Data Ascii: ><i:pgfRef xlink:href="#adobe_illustrator_pgf"></i:pgfRef></foreignObject><g i:extraneous="self"><g id="grid"></g><g id="icons" class="st0"><g class="st1"><path d="M42,8c0-1.1-0.9-2-2-2H4C2.9,6,2,6.9,2,8v24c0,1.1,0.9,2,2,2h20V
2024-03-29 00:41:13 UTC	1300	IN	Data Raw: 63 76 66 37 32 32 61 75 58 76 7a 35 59 64 48 44 30 71 4c 7a 6c 74 33 2f 35 76 2f 37 79 33 61 73 58 64 38 38 4f 33 33 2f 33 0a 79 65 47 58 6e 2b 44 6a 50 7a 35 37 38 2f 77 4f 46 64 2f 2b 35 64 58 33 78 32 2f 2f 39 76 55 6e 39 57 48 34 39 76 6e 4a 47 31 53 6c 58 78 6e 7a 4b 35 4d 50 37 74 64 68 4f 6e 7a 32 65 39 59 2f 65 66 6d 33 4a 39 39 2b 2b 2b 78 2f 0a 6f 64 5a 45 4e 7a 6c 38 64 6e 72 31 33 63 75 76 6e 72 33 38 2b 76 54 71 2f 2f 76 31 34 56 4d 7a 35 73 4f 6e 4f 55 38 48 4d 33 72 38 5a 6a 69 41 2f 2f 48 73 38 37 74 76 32 32 62 54 30 56 67 2f 52 6d 65 79 7a 53 48 77 4f 2b 6c 6f 0a 6f 38 30 2b 35 4a 69 74 74 65 78 67 4f 75 62 6c 68 35 30 64 52 32 4d 73 32 70 73 77 70 70 44 51 39 66 6e 56 30 2b 39 65 33 4c 31 38 38 39 6e 72 56 30 2f 76 76 76 33 32 2b 74 58 Data Ascii: cvf722auXvz5YdHD0qLzlt3/5v/7y3asXd88O33/3yeGXn+DjPz578/wOFd/+5dX3x2//9vUn9WH49vnJG1SlXxnzK5MP7tdhOnz2e9Y/efm3J99+++x/odZENzl8dnr13cuvnr38+vTq//v14VMz5sOnOU8HM3r8ZjiA//Hs87tv22bT0Vg/RmeyzSHwO+loo80+5JittexgOublh50dR2Ms2pswppDQ9fnV0+9e3L1889nrV0/vvv32+tX
2024-03-29 00:41:14 UTC	1300	IN	Data Raw: 34 39 5a 71 64 2b 66 74 36 36 37 75 32 57 43 57 2f 30 2f 4f 37 6c 56 39 2f 4f 6a 39 45 2f 6c 36 35 35 35 50 57 7a 52 79 2f 37 34 65 61 72 5a 79 42 36 0a 46 77 37 35 76 57 32 2b 2b 50 34 4a 61 50 4c 76 6e 76 33 35 33 71 64 78 33 50 2f 78 37 4f 56 58 4f 42 5a 66 66 50 66 73 7a 64 30 79 52 36 39 65 66 45 50 32 38 50 44 46 58 35 35 38 63 79 65 48 76 62 62 38 59 75 34 77 66 49 6e 37 0a 61 6e 30 6a 66 66 72 70 50 56 63 56 72 76 2f 54 79 31 58 39 62 31 34 2f 2b 65 6f 5a 62 6b 45 77 76 4c 39 35 39 66 79 72 75 35 65 48 7a 30 6e 70 68 38 31 66 75 4d 66 54 34 66 54 56 38 47 2f 44 57 49 71 52 34 67 2b 2f 2b 50 4c 30 0a 65 76 69 48 59 64 7a 37 4d 61 74 69 56 38 56 4a 38 55 30 4a 36 7a 4c 67 6e 37 67 71 61 56 58 79 70 6c 79 74 79 6b 6e 4b 74 66 78 33 4c 75 56 47 2f 72 Data Ascii: 49Zqd+ft667u2WCW/0/O7lV9/Oj9E/l6555PWzRy/74earZyB6Fw75vW2++P4JaPLvnv353qdx3P/x7OVXOBZffPfszd0yR69efEP28PDFX558cyeHvbb8Yu4wfIn7an0jffrpPVcVrv/Ty1X9b14/+eoZbkEwvL959fyru5eHz0nph81fuMfT4fTV8G/DWIqR4g+/+PL0eviHYdz7MatiV8VJ8U0J6zLgn7gqaVXyplytyknKtfx3LuVG/r
2024-03-29 00:41:14 UTC	1300	IN	Data Raw: 44 36 64 51 4c 73 79 61 46 67 36 52 56 41 7a 44 36 70 6d 51 64 76 47 41 52 76 70 42 72 4e 38 44 61 4a 33 42 66 49 33 67 51 78 47 45 45 4d 50 6f 6d 68 42 47 6b 64 73 73 42 76 4d 0a 2f 7a 55 49 35 68 58 49 35 70 51 54 43 47 67 41 49 58 57 34 67 71 67 37 75 73 56 47 4f 47 4f 61 54 71 43 32 65 5a 6f 47 45 4e 34 49 41 75 77 6e 42 31 4a 73 63 47 33 66 59 6f 65 63 4d 59 65 6e 64 41 56 53 50 59 46 6b 78 78 52 41 0a 76 42 31 49 75 4d 46 46 66 34 75 39 63 38 62 45 6e 6b 44 67 4d 77 68 39 69 68 45 6b 33 30 63 48 34 6d 2f 69 4f 47 41 62 33 32 43 4e 72 38 4d 4a 6c 30 4d 4f 45 36 36 4a 47 41 49 75 44 49 65 4c 30 59 43 4e 75 4d 56 32 4f 32 4d 74 0a 54 72 68 55 4d 69 36 58 35 43 4f 75 47 59 2f 72 78 75 4c 53 47 62 48 76 62 37 41 72 72 6e 45 52 58 65 46 43 6d 67 62 63 54 Data Ascii: D6dQLsyaFg6RVAzD6pmQdvGARvpBrN8DaJ3BfI3gQxGEEMPomhBGkdssBvM/zUI5hXI5pQTCGgAIXW4gqg7usVGOGOaTqC2eZoGEN4IAuwnB1JscG3fYoecMYendAVSPYFkxxRAvB1IuMFFf4u9c8bEnkDgMwh9ihEk30cH4m/iOGAb32CNr8MJl0MOE66JGAIuDIeL0YCNuMV2O2MtTrhUMi6X5COuGY/rxuLSGbHvb7ArrnERXeFCmgbcT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49758	23.52.162.98	443

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:14 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-29 00:41:14 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=142081 Date: Fri, 29 Mar 2024 00:41:14 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49759	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:14 UTC	702	OUT	GET /rq/darla/4-10-0/html/r-csc.html HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://depl.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:15 UTC	626	IN	HTTP/1.1 403 Forbidden x-amz-request-id: 7DSWEWT52KB2EG6W x-amz-id-2: qgTqaCEJvmMXO3LFVlroaK00iGjAiB0r4U5dxBNquOCEpvJUTM5ZafSVtCSexTM5zMPEJhSHqAw= Content-Type: application/xml Date: Fri, 29 Mar 2024 00:36:54 GMT Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Expires: Fri, 29 Mar 2024 00:41:55 GMT Age: 262 Content-Length: 243 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:15 UTC	243	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 41 63 63 65 73 73 44 65 6e 69 65 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 4d 65 73 73 61 67 65 3e 3c 52 65 71 75 65 73 74 49 64 3e 37 44 53 57 45 57 54 35 32 4b 42 32 45 47 36 57 3c 2f 52 65 71 75 65 73 74 49 64 3e 3c 48 6f 73 74 49 64 3e 71 67 54 71 61 43 45 4a 76 6d 4d 58 4f 33 4c 46 56 6c 72 6f 61 4b 30 30 69 47 6a 41 69 42 30 72 34 55 35 64 78 42 4e 71 75 4f 43 45 70 76 4a 55 54 4d 35 5a 61 66 53 56 74 43 53 65 78 54 4d 35 7a 4d 50 45 4a 68 53 48 71 41 77 3d 3c 2f 48 6f 73 74 49 64 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>7DSWEWT52KB2EG6W</RequestId><HostId>qgTqaCEJvmMXO3LFVlroaK00iGjAiB0r4U5dxBNquOCEpvJUTM5ZafSVtCSexTM5zMPEJhSHqAw=</HostId></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49760	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:15 UTC	923	OUT	GET /sdarla/php/client.php?l=RICH{dest:tgtRICH;asz:flex}&f=794200019&ref=https%3A%2F%2Flogin.yahoo.com%2Faccount%2Fchallenge%2Fpassword&sa=geminifed%253D1%2520y-bucket%253Dmbr-push-untrusted-ar%252Cmbr-fido-1fa-login%252Cmbr-rcscore-threshold%252Cmbr-qr-comet-sdk%252Cmbr-login-domain%252Cmbr-yak-ui-improvement HTTP/1.1 Host: fc.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://depl.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4
2024-03-29 00:41:16 UTC	420	IN	HTTP/1.1 500 Cannot find server. Date: Fri, 29 Mar 2024 00:41:16 GMT Connection: close Strict-Transport-Security: max-age=31536000 Server: ATS Cache-Control: no-store Content-Type: text/html Content-Language: en Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Length: 4652
2024-03-29 00:41:16 UTC	1300	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 59 61 68 6f 6f 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 61 6c 2d 75 69 22 3e 0a 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en-us"> <head> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <meta charset="utf-8"> <title>Yahoo</title> <meta name="viewport" content="width=device-width,initial-scale=1,minimal-ui">
2024-03-29 00:41:16 UTC	1300	IN	Data Raw: 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 3c 21 2d 2d 20 73 74 61 74 75 73 20 63 6f 64 65 20 3a 20 35 30 30 20 2d 2d 3e 0a 20 20 3c 21 2d 2d 20 55 6e 6b 6e 6f 77 6e 20 48 6f 73 74 20 2d 2d 3e 0a 20 20 3c 21 2d 2d 20 68 6f 73 74 20 6d 61 63 68 69 6e 65 3a 20 65 33 38 2e 79 63 70 69 2e 64 63 61 2e 79 61 68 6f 6f 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 3c 21 2d 2d 20 74 69 6d 65 73 74 61 6d 70 3a 20 31 37 31 31 36 37 32 38 37 36 2e 31 32 36 20 2d 2d 3e 0a 20 20 3c 21 2d 2d 20 75 72 6c 3a 20 68 74 74 70 73 3a 2f 2f 66 63 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 64 61 72 6c 61 2f 70 68 70 2f 63 6c 69 65 6e 74 2e 70 68 70 3f 6c 3d 52 49 43 48 25 37 42 64 65 73 74 3a 74 67 74 52 49 43 48 3b 61 73 7a 3a 66 6c Data Ascii: </script> </head> <body> ... status code : 500 --> ... Unknown Host --> ... host machine: e38.ycpi.dca.yahoo.com --> ... timestamp: 1711672876.126 --> ... url: https://fc.yahoo.com/sdarla/php/client.php?l=RICH%7Bdest:tgtRICH;asz:fl
2024-03-29 00:41:16 UTC	1300	IN	Data Raw: 6e 67 27 2c 0a 20 20 20 20 20 20 20 20 20 20 6c 6f 67 6f 41 6c 74 3a 20 27 59 61 68 6f 6f 20 4c 6f 67 6f 27 2c 0a 20 20 20 20 20 20 20 20 20 20 6c 6f 67 6f 53 74 79 6c 65 3a 20 64 65 66 61 75 6c 74 4c 6f 67 6f 53 74 79 6c 65 2c 0a 20 20 20 20 20 20 20 20 20 20 68 65 61 64 65 72 3a 20 65 6e 67 6c 69 73 68 48 65 61 64 65 72 2c 0a 20 20 20 20 20 20 20 20 20 20 6d 65 73 73 61 67 65 31 3a 20 65 6e 67 6c 69 73 68 4d 65 73 73 61 67 65 31 2c 0a 20 20 20 20 20 20 20 20 20 20 6d 65 73 73 61 67 65 32 3a 20 65 6e 67 6c 69 73 68 4d 65 73 73 61 67 65 32 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 76 61 72 20 73 69 74 65 44 65 74 61 69 6c 73 20 3d 20 73 69 74 65 44 61 74 61 4d 61 70 5b 27 64 65 66 61 75 6c 74 27 5d 3b 0a 0a 20 20 20 Data Ascii: ng', logoAlt: 'Yahoo Logo', logoStyle: defaultLogoStyle, header: englishHeader, message1: englishMessage1, message2: englishMessage2 } }; var siteDetails = siteDataMap['default'];
2024-03-29 00:41:16 UTC	752	IN	Data Raw: 20 74 69 6d 65 2c 0a 20 20 20 20 20 20 20 20 65 72 72 5f 75 72 6c 3a 20 64 6f 63 75 6d 65 6e 74 2e 55 52 4c 2c 0a 20 20 20 20 20 20 20 20 65 72 72 3a 20 27 35 30 30 27 2c 0a 20 20 20 20 20 20 20 20 74 65 73 74 3a 20 27 2d 27 2c 0a 20 20 20 20 20 20 20 20 61 74 73 5f 68 6f 73 74 3a 20 27 65 33 38 2e 79 63 70 69 2e 64 63 61 2e 79 61 68 6f 6f 2e 63 6f 6d 27 2c 0a 20 20 20 20 20 20 20 20 72 69 64 3a 20 27 2d 27 2c 0a 20 20 20 20 20 20 20 20 6d 65 73 73 61 67 65 3a 20 27 55 6e 6b 6e 6f 77 6e 20 48 6f 73 74 27 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 69 66 28 79 6e 65 74 29 20 7b 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 20 35 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 Data Ascii: time, err_url: document.URL, err: '500', test: '-', ats_host: 'e38.ycpi.dca.yahoo.com', rid: '-', message: 'Unknown Host' }; if(ynet) { document.write('<div style="height: 5px; background-c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49762	23.52.162.98	443

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:16 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-29 00:41:16 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DMGnYgAAAACXaXykPZuVRq4aV6pCkeO8U0pDRURHRTAzMTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=142113 Date: Fri, 29 Mar 2024 00:41:16 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-29 00:41:16 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49763	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:16 UTC	610	OUT	GET /wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://depl.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:16 UTC	803	IN	HTTP/1.1 200 OK x-amz-id-2: c7dGpamMI2Qk7ieyPSTpZSDHb7q0MeaCuMV7WeJ2nhePthi6gM0MwojWPVhw+82jDw5dhy8H6Mc= x-amz-request-id: 54836FNSCYGEZR7M Date: Thu, 28 Mar 2024 14:42:13 GMT Last-Modified: Wed, 11 Sep 2019 18:01:04 GMT ETag: "b6814ae5582d7953821acbd76e977bb4" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/vnd.microsoft.icon Server: ATS Content-Length: 1406 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 35944 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:16 UTC	1300	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 08 00 68 05 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d2 01 60 00 d3 08 64 00 d3 0b 66 00 d4 0f 69 00 d5 12 6b 00 d5 16 6d 00 d6 1a 70 00 d6 1c 71 00 d7 1f 73 00 d7 20 73 00 d8 24 76 00 d9 2a 7a 00 dd 3f 87 00 de 44 8a 00 df 4d 90 00 e1 56 95 00 e2 5f 9b 00 e3 62 9d 00 e3 63 9d 00 e5 6c a3 00 e6 76 a9 00 e7 79 ab 00 e7 7c ad 00 eb 92 bb 00 ed 9c c1 00 f0 ac cb 00 f1 b2 ce 00 f1 b4 d0 00 f2 b6 d1 00 f2 b8 d2 00 f3 bf d7 00 f4 c5 da 00 f6 d0 e1 00 f7 d2 e2 00 f7 d3 e3 00 f9 de ea 00 f9 e1 ec 00 fa e8 f0 00 fb ea f1 00 fc ee f4 00 fd f6 f9 00 fd f9 fb 00 fe fa fb 00 fe fb fc 00 fe fc fd 00 fe fd fd 00 fe fe fe 00 ff ff ff 00 00 Data Ascii: h( `dfikmpqs s$v*z?DMV_bclvy\|
2024-03-29 00:41:16 UTC	106	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49765	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:17 UTC	376	OUT	GET /wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:17 UTC	803	IN	HTTP/1.1 200 OK x-amz-id-2: 9SCDYP5x1yfpEXwfNV93c6nMYfVygs/VGj8L22plbz1DZgOHr9lM2iNnPxt0AuTTLBmd4jk6EHo= x-amz-request-id: 03PJF389CVQZW7HC Date: Thu, 28 Mar 2024 16:45:56 GMT Last-Modified: Wed, 11 Sep 2019 18:01:04 GMT ETag: "b6814ae5582d7953821acbd76e977bb4" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/vnd.microsoft.icon Server: ATS Content-Length: 1406 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 28522 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:17 UTC	1300	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 08 00 68 05 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d2 01 60 00 d3 08 64 00 d3 0b 66 00 d4 0f 69 00 d5 12 6b 00 d5 16 6d 00 d6 1a 70 00 d6 1c 71 00 d7 1f 73 00 d7 20 73 00 d8 24 76 00 d9 2a 7a 00 dd 3f 87 00 de 44 8a 00 df 4d 90 00 e1 56 95 00 e2 5f 9b 00 e3 62 9d 00 e3 63 9d 00 e5 6c a3 00 e6 76 a9 00 e7 79 ab 00 e7 7c ad 00 eb 92 bb 00 ed 9c c1 00 f0 ac cb 00 f1 b2 ce 00 f1 b4 d0 00 f2 b6 d1 00 f2 b8 d2 00 f3 bf d7 00 f4 c5 da 00 f6 d0 e1 00 f7 d2 e2 00 f7 d3 e3 00 f9 de ea 00 f9 e1 ec 00 fa e8 f0 00 fb ea f1 00 fc ee f4 00 fd f6 f9 00 fd f9 fb 00 fe fa fb 00 fe fb fc 00 fe fc fd 00 fe fd fd 00 fe fe fe 00 ff ff ff 00 00 Data Ascii: h( `dfikmpqs s$v*z?DMV_bclvy\|
2024-03-29 00:41:17 UTC	106	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49767	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:24 UTC	743	OUT	GET / HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4
2024-03-29 00:41:24 UTC	1292	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-frame-options: SAMEORIGIN content-type: text/html; charset=utf-8 date: Fri, 29 Mar 2024 00:41:24 GMT x-envoy-upstream-service-time: 57 server: ATS Age: 0 Cache-Control: no-store, no-cache, max-age=0, private Expires: -1 Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.pnr.ouryahoo.com https://pnr.ouryahoo.com https://.search.aol.com https://.search.huffpost.com https://.onesearch.com https://.verizonmedia.com https://.publishing.oath.com https://.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=2vl5n89j0c3hk&partner=; Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block
2024-03-29 00:41:24 UTC	651	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 41 31 3d 64 3d 41 51 41 42 42 43 6b 4f 42 6d 59 43 45 50 75 4f 6b 42 4a 37 74 48 34 45 66 66 44 78 4a 65 2d 4c 62 68 55 46 45 67 45 42 41 51 46 66 42 32 59 50 5a 74 77 76 30 69 4d 41 5f 65 4d 41 41 41 26 53 3d 41 51 41 41 41 6f 47 69 50 52 53 53 54 37 79 47 72 33 2d 72 48 33 45 62 31 6a 34 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 32 39 20 4d 61 72 20 32 30 32 35 20 30 36 3a 34 31 3a 32 34 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 35 37 36 30 30 3b 20 44 6f 6d 61 69 6e 3d 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 3b 20 53 65 63 75 72 65 3b 20 48 74 74 70 4f Data Ascii: X-Content-Type-Options: nosniffSet-Cookie: A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; Expires=Sat, 29 Mar 2025 06:41:24 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpO
2024-03-29 00:41:24 UTC	1300	IN	Data Raw: 66 39 39 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 20 69 64 3d 61 74 6f 6d 69 63 20 63 6c 61 73 73 3d 22 6c 74 72 20 66 70 20 20 64 65 73 6b 74 6f 70 20 20 66 70 2d 6e 6f 6e 65 20 62 6b 74 64 72 6f 70 5f 68 65 69 6d 64 61 6c 6c 5f 68 6f 6d 65 70 61 67 65 5f 63 6f 6e 74 72 6f 6c 5f 62 75 63 6b 65 74 2c 4d 69 6d 69 63 50 72 6f 76 69 64 65 72 4c 69 73 74 76 32 2d 63 6f 70 79 2c 73 65 61 6d 6c 65 73 73 20 75 61 2d 63 68 72 6f 6d 65 20 75 61 2d 31 31 37 2e 30 20 69 73 4d 6f 64 65 72 6e 22 20 6c 61 6e 67 3d 65 6e 2d 55 53 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 38 33 61 61 38 31 37 39 32 64 32 31 36 35 35 64 36 34 37 63 64 65 33 62 63 65 38 35 39 33 63 64 33 62 Data Ascii: f99<!doctype html><html data-color-scheme id=atomic class="ltr fp desktop fp-none bktdrop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless ua-chrome ua-117.0 isModern" lang=en-US><head><script nonce=83aa81792d21655d647cde3bce8593cd3b
2024-03-29 00:41:24 UTC	1300	IN	Data Raw: 6e 74 3d 22 79 61 68 6f 6f 2c 20 79 61 68 6f 6f 20 68 6f 6d 65 20 70 61 67 65 2c 20 79 61 68 6f 6f 20 68 6f 6d 65 70 61 67 65 2c 20 79 61 68 6f 6f 20 73 65 61 72 63 68 2c 20 79 61 68 6f 6f 20 6d 61 69 6c 2c 20 79 61 68 6f 6f 20 6d 65 73 73 65 6e 67 65 72 2c 20 79 61 68 6f 6f 20 67 61 6d 65 73 2c 20 6e 65 77 73 2c 20 66 69 6e 61 6e 63 65 2c 20 73 70 6f 72 74 2c 20 65 6e 74 65 72 74 61 69 6e 6d 65 6e 74 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 66 62 3a 61 70 70 5f 69 64 20 63 6f 6e 74 65 6e 74 3d 34 35 38 35 38 34 32 38 38 32 35 37 32 34 31 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 6f 67 3a 69 6d 61 67 65 20 63 6f 6e 74 65 6e 74 3d 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 73 6f 63 69 61 6c 2f 69 6d Data Ascii: nt="yahoo, yahoo home page, yahoo homepage, yahoo search, yahoo mail, yahoo messenger, yahoo games, news, finance, sport, entertainment"><meta property=fb:app_id content=458584288257241><meta property=og:image content=https://s.yimg.com/cv/apiv2/social/im
2024-03-29 00:41:24 UTC	1300	IN	Data Raw: 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 72 7a 2f 6c 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 67 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 67 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 67 65 6f 2e 71 75 65 72 79 2e 79 61 68 6f 6f 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 67 65 6f 2e 71 75 65 72 79 2e 79 61 68 6f 6f 2e 63 6f 6d Data Ascii: hortcut icon" href="https://s.yimg.com/rz/l/favicon.ico"><link rel="dns-prefetch" href="//geo.yahoo.com"><link rel="preconnect" href="//geo.yahoo.com"><link rel="dns-prefetch" href="//geo.query.yahoo.com"><link rel="preconnect" href="//geo.query.yahoo.com
2024-03-29 00:41:24 UTC	100	IN	Data Raw: 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 6e 67 79 2d 66 6f 6e 74 73 2f 59 61 68 6f 6f 53 61 6e 73 2d 56 46 2d 57 65 62 2e 77 6f 66 66 32 22 20 61 73 3d 22 66 6f 6e 74 22 20 74 79 70 65 3d 22 66 6f 6e 74 2f 77 6f 66 66 32 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0d 0a Data Ascii: s://s.yimg.com/cv/apiv2/ngy-fonts/YahooSans-VF-Web.woff2" as="font" type="font/woff2" crossorigin>
2024-03-29 00:41:24 UTC	1300	IN	Data Raw: 37 66 66 39 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6e 6f 6e 63 65 3d 22 38 33 61 61 38 31 37 39 32 64 32 31 36 35 35 64 36 34 37 63 64 65 33 62 63 65 38 35 39 33 63 64 33 62 36 61 65 39 31 63 66 62 31 31 62 32 32 39 65 66 64 34 34 34 39 34 30 66 30 33 61 31 63 37 22 3e 2f 2a 20 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 61 71 2f 73 63 70 2f 63 73 73 2f 63 6f 6d 6d 6f 6e 41 74 6f 6d 69 63 2e 61 74 6f 6d 69 63 2e 6c 74 72 2e 32 34 66 62 66 30 33 35 36 37 66 34 30 37 66 32 30 39 61 65 32 39 65 61 38 37 38 32 36 39 31 64 2e 63 73 73 20 2a 2f 20 23 61 74 6f 6d 69 63 20 2e 41 69 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 41 69 5c 28 66 73 5c 29 7b 61 Data Ascii: 7ff9<style type="text/css" nonce="83aa81792d21655d647cde3bce8593cd3b6ae91cfb11b229efd444940f03a1c7">/* https://s.yimg.com/aaq/scp/css/commonAtomic.atomic.ltr.24fbf03567f407f209ae29ea8782691d.css */ #atomic .Ai$c${align-items:center}#atomic .Ai$fs${a
2024-03-29 00:41:24 UTC	1300	IN	Data Raw: 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 32 32 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 32 34 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 34 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 32 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 33 30 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 34 30 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 35 30 5c 25 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 7d 23 61 74 6f Data Ascii: portant}#atomic .Bdrs$22px${border-radius:22px}#atomic .Bdrs$24px${border-radius:24px}#atomic .Bdrs$2px${border-radius:2px}#atomic .Bdrs$30px${border-radius:30px}#atomic .Bdrs$40px${border-radius:40px}#atomic .Bdrs$50\%${border-radius:50%}#ato
2024-03-29 00:41:24 UTC	1300	IN	Data Raw: 63 6f 6c 6f 72 3a 23 30 66 31 31 32 32 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 5c 23 32 32 32 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 32 32 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 5c 23 66 35 66 38 66 61 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 35 66 38 66 61 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 5c 23 66 39 30 32 35 36 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 39 30 32 35 36 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 5c 23 66 66 66 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 2d 2d 62 6c 75 72 70 6c 65 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 6c 75 72 Data Ascii: color:#0f1122}#atomic .Bgc$\#222${background-color:#222}#atomic .Bgc$\#f5f8fa${background-color:#f5f8fa}#atomic .Bgc$\#f90256${background-color:#f90256}#atomic .Bgc$\#fff${background-color:#fff}#atomic .Bgc$--blurple${background-color:var(--blur
2024-03-29 00:41:24 UTC	1300	IN	Data Raw: 61 76 65 5c 29 5c 3a 68 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 74 63 61 76 65 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 62 61 74 74 6c 65 73 68 69 70 5c 29 2c 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 62 61 74 74 6c 65 73 68 69 70 5c 29 5c 3a 5c 3a 70 68 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 74 74 6c 65 73 68 69 70 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 62 6c 75 72 70 6c 65 5c 29 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 6c 75 72 70 6c 65 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 63 61 72 72 6f 74 2d 6a 75 69 63 65 5c 29 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 61 72 72 6f 74 2d 6a 75 69 63 65 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 64 6f 6c 70 68 69 6e 5c Data Ascii: ave\)\:h:hover{color:var(--batcave)}#atomic .C$--battleship$,#atomic .C$--battleship$\:\:ph::placeholder{color:var(--battleship)}#atomic .C$--blurple${color:var(--blurple)}#atomic .C$--carrot-juice${color:var(--carrot-juice)}#atomic .C\(--dolphin\
2024-03-29 00:41:24 UTC	1300	IN	Data Raw: 72 6d 2d 63 6f 6d 70 6c 65 74 65 5f 44 5c 28 6e 5c 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 69 67 6e 65 64 2d 6f 75 74 2d 76 69 65 77 20 2e 73 69 67 6e 65 64 2d 6f 75 74 2d 76 69 65 77 5f 44 5c 28 66 5c 29 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 46 78 5c 28 5c 24 66 6c 65 78 31 5c 29 7b 66 6c 65 78 3a 31 7d 23 61 74 6f 6d 69 63 20 2e 46 6c 78 67 5c 28 30 5c 29 7b 66 6c 65 78 2d 67 72 6f 77 3a 30 7d 23 61 74 6f 6d 69 63 20 2e 46 78 67 5c 28 31 5c 29 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 23 61 74 6f 6d 69 63 20 2e 46 6c 78 73 5c 28 30 5c 29 2c 23 61 74 6f 6d 69 63 20 2e 46 78 73 5c 28 30 5c 29 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 7d 23 61 74 6f 6d 69 63 Data Ascii: rm-complete_D$n${display:none!important}.signed-out-view .signed-out-view_D$f${display:flex!important}#atomic .Fx$\$flex1${flex:1}#atomic .Flxg$0${flex-grow:0}#atomic .Fxg$1${flex-grow:1}#atomic .Flxs$0$,#atomic .Fxs$0${flex-shrink:0}#atomic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49768	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:24 UTC	1682	OUT	POST /p?s=794200019&t=yXl0wf3gK35k3ewo,0.4182355742690542&_I=&_AO=0&_NOL=0&_R=&_P=3.53.30%05_rx%031e9x48kg19v.3hjn8ecp%26v%3D1%04_pl%031%04A_v%033.53.30%04A_cn%03VERSIONED-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03zdK09G0VypiVTnpv%04_w%03login.yahoo.com%2Faccount%2Fchallenge%2Fpassword%3Fpspid%3D159600001%26activity%3Dmail-direct%26.lang%3Den-US%26.intl%3Dus%26src%3Dym%26display%3Dlogin%04pt%03utility%04ver%03nodejs%04pg_name%03passwordChallenge%04gm_np%03yahoo%04src%03ym%04p_sec%03DEFAULT_SECTION%04p_subsec%03DEFAULT_SUBSECTION%04test%03mbr-push-untrusted-ar%2Cmbr-fido-1fa-login%2Cmbr-rcscore-threshold%2Cmbr-qr-comet-sdk%2Cmbr-login-domain%2Cmbr-yak-ui-improvement%04cause%03mail-direct%04src_id%03159600001%04pct%03signin%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031711672872%04A_prems%03363%04_E%03dwell%04_ts%031711672883%04_ms%03530%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://depl.pages.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://depl.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4
2024-03-29 00:41:24 UTC	731	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:24 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; Expires=Sat, 29 Mar 2025 06:41:24 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-29 00:41:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49770	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:24 UTC	574	OUT	GET /cv/apiv2/ngy-fonts/YahooSans-VF-Web.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.yahoo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:24 UTC	815	IN	HTTP/1.1 200 OK x-amz-id-2: p3+fWo0ho0UYCBd93Qlaq+JKUl5xFCQqz1caWm1Xpoc9/P47AitzMpjEig18a/sPc2784hJvdE8= x-amz-request-id: 2ZPKVZ4MHK32RBJX Date: Sun, 17 Mar 2024 12:16:16 GMT Last-Modified: Mon, 30 Nov 2020 20:20:29 GMT ETag: "b4df4fce99e5a3c3d1493112a0159071" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 65176 Referrer-Policy: no-referrer-when-downgrade Age: 995109 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-29 00:41:24 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 fe 98 00 11 00 00 00 02 5e d8 00 00 fe 2a 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 8c 2f 1b 83 ee 0a 1c 92 7a 3f 48 56 41 52 8c 77 06 60 3f 53 54 41 54 1c 00 88 00 2f 64 0a 81 b9 10 81 94 4f 0b 87 36 00 30 83 a1 46 01 36 02 24 03 8e 66 04 20 05 8b 7c 07 99 39 5b b3 47 92 80 b0 09 68 2c 6a 2b 6e e3 d7 6d 44 c0 67 6e a9 56 da f1 b3 17 c2 3c bc d6 63 31 3d c5 8c 9a 32 13 7f 7e b0 06 cf 8d e4 ee 76 c4 5e 8d d7 eb b3 ff ff ff ff 17 25 8b 18 5b 33 87 cd ec dd 01 00 a9 66 81 a2 66 f5 fd 3f c9 61 44 2e b9 a8 a8 b6 e8 a8 87 d1 b5 79 18 0b 54 a6 e8 3b 4f d5 73 7e dd 0f 87 b6 d5 f1 f4 86 72 7e 7b c5 bb 3f c6 f1 b0 74 89 76 85 20 ee 44 e2 4b 5f 1b e4 95 c2 74 56 f3 16 de 37 b8 4a c2 86 e3 2d 32 16 3a 46 Data Ascii: wOF2^*/z?HVARw`?STAT/dO60F6$f \|9[Gh,j+nmDgnV<c1=2~v^%[3ff?aD.yT;Os~r~{?tv DK_tV7J-2:F
2024-03-29 00:41:24 UTC	1300	IN	Data Raw: 1f 66 86 85 fb d2 e9 d3 06 b3 8b 33 38 2b db 92 8b 92 5f 4a 39 f6 eb 3f dc 4e ff da 5b 4a 55 fe 43 c9 17 65 85 59 21 0d f6 2c d6 80 ed 97 fb e5 3b d8 4e b3 22 11 49 a7 f9 33 3d 02 5b 40 4d 2c d9 1d 24 2b 5c 85 37 cf a0 53 0f d3 81 05 ae 63 f8 f7 8a 77 2d c0 38 77 06 ba 2c 4a 08 e9 e1 8b 5d 76 a5 4b ec 12 91 74 e5 0f bb 83 1c 22 12 7c bb 44 82 1c de b2 db 8e 25 76 d9 65 97 88 1c 22 22 76 05 11 f1 0f 91 c3 2e bb 24 88 c8 61 97 e4 56 10 11 09 72 88 1c 22 7e 10 f1 03 e0 ef 75 ea fb 92 02 c0 05 1e c6 4e bd 0e 23 8e 38 d6 32 49 b1 d8 10 60 95 6c 16 16 b6 90 ec 84 37 22 ab e5 0d c1 4e 61 ed a4 4e 4b d2 0a d0 dc 27 10 0d 8b bc 65 b2 c4 a7 a7 e9 ff 7f 9b fe fb 67 ef 7d 0e 0f 6a 46 68 0a 11 77 59 69 8a 34 cd 1b 8f df 4a 97 a2 49 19 fe bf e8 02 04 17 c1 a0 97 eb 6b Data Ascii: f38+_J9?N[JUCeY!,;N"I3=[@M,$+\7Scw-8w,J]vKt"\|D%ve""v.$aVr"~uN#82I`l7"NaNK'eg}jFhwYi4JIk
2024-03-29 00:41:24 UTC	1300	IN	Data Raw: bf df f5 ee bf 5b bf 0d 5f 9e e3 32 a7 22 8f c9 3e f6 f4 a4 ae 9f e0 33 27 5f 9e e3 bf b1 2c 10 26 93 ff 41 67 a1 23 7b ae 29 1c fd 17 a3 7c 39 aa eb 91 0a ce 30 8f 3d 8d 8d 7e 1c 3a 26 94 4d 3c 4d 14 4e de 68 25 75 3d 15 9e 8a 4c 2f 93 01 98 82 9e 1e 05 ed f8 2f 4b d6 1a 7d 9e df c8 15 ce 84 67 22 33 80 19 e8 d9 53 75 dc bb 13 4f 27 46 7f 62 cc f3 af 7a f8 6a 81 fc c6 5c 75 e6 0a e7 47 41 f7 65 ec 98 9d 88 03 70 a0 9d d1 bb a7 ea 24 d9 c2 bb c2 53 a1 b0 c0 68 d0 e8 0b 63 5e 8c 1f 2d 8a 74 21 bc 50 b8 50 c1 10 46 43 18 0f 3d 55 5d 52 56 92 2d bd 2b 3d 95 c2 a5 48 09 50 82 2e 8d be 2a 92 aa 48 2b ca 2a b2 95 77 95 c2 4a 05 23 18 e7 fe f9 89 f2 bb 24 4c 22 04 40 a0 e9 a8 72 39 fe 75 49 d9 92 ec d2 83 9b 68 69 f4 cb d0 71 9a b5 9f 16 09 a4 e6 a7 0a 0d c6 30 Data Ascii: [_2">3'_,&Ag#{)\|90=~:&M<MNh%u=L//K}g"3SuO'Fbzj\uGAep$Shc^-t!PPFC=U]RV-+=HP.H+wJ#$L"@r9uIhiq0
2024-03-29 00:41:24 UTC	1300	IN	Data Raw: 02 21 b1 34 4c 36 62 59 b4 32 36 16 ab 50 4a c1 08 50 2e fd 6d 41 ae c7 77 3c cf b4 9a 93 b7 4e 31 f9 eb b5 ac 60 a3 96 17 63 bd 95 ed b6 4f 6a fb 05 7a 19 0f 62 94 6b 83 d8 9a 6d d3 d6 ad 82 83 db ff 3d 8e ee 74 50 27 0f 38 aa 87 6f b4 bb c5 de a8 bb 36 8a 5d 0b 2c 3f 65 ef 6d be 7a 83 d9 e5 6f 36 fa c0 09 42 2b cd ea 09 f3 e3 22 ac 7f 7e 68 dc e0 b1 9f 28 bd 36 2c 1e 4f 6a 1e 74 77 36 ff fa 0e 88 45 bb 2e d2 89 7e 77 97 8c 62 c4 7f 07 22 7e 34 2c bf cd 89 ec bf 7f cd 25 9e 6b ad b6 98 f4 c5 2b 82 33 36 5f 9d cf 3f ee 7e e3 41 2b e2 99 1a 5c 7f 5c 12 3f ad 1d 60 c5 d6 86 43 cb 71 52 7e bb 13 21 b0 b3 d2 18 62 d7 e8 c8 e9 d9 3d 75 18 bd cf d1 f4 2e 5c 41 8e a6 23 0d 4c 50 94 a8 28 bf 14 59 dc e9 b1 5f 39 7a 23 16 e4 e8 48 09 99 b3 4c cb 72 5e 40 61 60 d4 Data Ascii: !4L6bY26PJP.mAw<N1`cOjzbkm=tP'8o6],?emzo6B+"~h(6,Ojtw6E.~wb"~4,%k+36_?~A+\\?`CqR~!b=u.\A#LP(Y_9z#HLr^@a`
2024-03-29 00:41:24 UTC	1300	IN	Data Raw: c4 29 74 7c 37 93 7e fd 14 7a 2e 2f e6 d6 f7 81 ff 47 85 65 a4 39 53 fe 27 d1 9f 69 9b 76 48 22 99 94 46 53 17 34 63 37 62 a9 d9 d5 69 4f 7b a2 b7 be 58 3f c8 16 a7 22 ed e7 18 7d 05 90 9f 3c 07 aa 4f 15 9f ba b2 7c fb ff 72 06 25 7a df 73 1e 96 0c 2e 80 de fc ed a2 8d 8c 5c 5a bf 0c 7c 0d 61 2d 9a 35 0e e9 3a 89 75 4f 88 e0 6b 01 21 fa 6b eb a1 f0 63 54 5e f4 5b 0f e7 03 0f 7c 7d ec 81 af 7f 27 57 c3 3b bb 20 3c 0a 61 42 3e ac 8c 09 f4 66 ba b3 c0 97 7c ce b7 8b 2e 80 bd d9 cd 45 a0 74 f1 a5 03 9f 33 5c 05 b3 94 2a 76 5b 81 af d3 4b ef 6a 8d e8 ae 4f e4 48 08 74 52 03 5f 5a c9 55 f5 f9 1b 14 f0 75 81 98 9a 67 97 41 02 44 79 b8 c5 56 0c 93 3e 90 45 f9 b8 a7 cc 51 85 5f ea ec 9b 92 f9 17 bc 95 e1 60 36 2d c7 c7 dd 70 b9 8a 39 6b b8 7c fe 5b fc 44 bf aa 20 Data Ascii: )t\|7~z./Ge9S'ivH"FS4c7biO{X?"}<O\|r%zs.\Z\|a-5:uOk!kcT^[\|}'W; <aB>f\|.Et3\*v[KjOHtR_ZUugADyV>EQ_`6-p9k\|[D
2024-03-29 00:41:24 UTC	1300	IN	Data Raw: ca 94 8a e9 94 f3 20 ae 0a c9 20 c8 0e 0d 79 c9 1e 26 6b db af 0b 92 0e a0 a8 83 1d ed c8 d2 45 27 24 a2 16 ce 32 9c cd 5c 66 44 2d e6 b0 13 33 d9 8f 85 3f 4e 63 44 14 7d f8 cc 70 3b 55 2c 19 a3 fd a9 5b 4e f7 8f ae 5f ad 43 2e 72 43 43 ae 73 53 01 77 b9 a5 0b 1e 73 fb 62 66 9c 1b c6 2a ea 64 82 20 af 94 f0 9e b7 ca 44 25 ef 82 de d3 87 e3 1f 35 e2 2b 56 fb db fe a5 55 96 ff 68 a7 f9 1f bb e4 1e 37 c4 00 a2 84 19 1d 77 a2 d1 50 dc de 79 c3 f1 a2 a8 49 fc b3 28 23 79 fa 0d 2b 76 19 1d b0 12 92 79 2b 17 84 25 46 ad 06 93 6d 02 45 5e bb 85 fb 70 35 fc ad 5b 7f 1f 04 c6 bc 00 07 e1 cd cb f0 19 7a e7 aa 8d e9 e6 35 75 89 d0 c4 35 ee 09 60 63 10 f7 54 29 61 a6 35 0c 19 4a 8c 15 80 f5 d5 50 c3 68 e0 9f 36 ca 37 ca fd f0 a0 19 01 a2 d7 aa 39 0a 77 1a 76 77 0b fc Data Ascii: y&kE'$2\fD-3?NcD}p;U,[N_C.rCCsSwsbf*d D%5+VUh7wPyI(#y+vy+%FmE^p5[z5u5`cT)a5JPh679wvw
2024-03-29 00:41:25 UTC	1300	IN	Data Raw: ea 4d 07 39 67 3d 8e cf 76 48 42 4b 17 15 db f7 16 59 89 67 9c 56 a7 66 da 87 ed 5b 1f 4e 55 23 20 e7 1c ee c4 1b 38 ca a6 62 7e bf 78 c9 15 cb b7 c5 c5 2e 1f b8 5d fa 78 17 50 1d c4 6e ae 67 a6 7e 6a 6d ec f7 60 77 13 40 77 ca e7 6c c7 65 ae 87 c0 bb 1d 5e f8 29 82 b9 fd 53 eb 75 2d 76 69 d9 13 ad 01 b2 73 2f b9 27 20 b6 38 d6 7d 16 22 b6 29 33 6b 9e cc 5e 58 bb db 5b 9c 80 0a 13 49 db 0d 95 de e9 b0 f6 3c b3 db 48 99 b4 58 99 f6 8e 38 f6 0c 0f e1 07 89 49 32 2c 55 75 51 49 a6 26 4b 23 6f a4 20 65 a9 62 77 cb ec 55 60 ba fb 1d 83 74 a4 27 43 80 05 d4 31 28 63 a0 c8 6c 16 d5 ed 34 3b 0d b2 db dd be ee f6 ef b2 26 36 ec ca d3 9d 94 39 ab b7 13 e7 60 b7 9b 53 37 cf ee 65 df 05 56 7b f7 68 c5 40 37 24 d5 6f 5f 82 97 78 37 0c 72 04 06 26 16 92 13 67 2e d8 d5 Data Ascii: M9g=vHBKYgVf[NU# 8b~x.]xPng~jm`w@wle^)Su-vis/' 8}")3k^X[I<HX8I2,UuQI&K#o ebwU`t'C1(cl4;&69`S7eV{h@7$o_x7r&g.
2024-03-29 00:41:25 UTC	1300	IN	Data Raw: f6 5a a6 51 16 38 5e 3f a7 d5 08 19 c7 38 6f af e9 33 21 8b 4f 1c 95 d8 8e 7b 43 fd 77 93 f5 db 29 2a 71 da b6 d8 c4 b4 83 d5 f5 2a 9d 6d e5 0c 34 df b2 2a a2 f1 dc aa 8d 6a c6 c7 64 cd 95 36 ce 72 b8 7e c5 26 1b d3 f0 ad a0 e9 46 59 12 2d d0 62 b9 14 78 0d 9a bd 09 ba 0e 2a ee 2d c5 ba e3 61 04 b5 06 dd 5a 37 6a f6 a5 a0 57 51 2b 96 1a 47 37 a6 5e 4b 19 34 9b 26 d3 72 75 fb f4 7a 1c 03 ab 7b 38 ee 74 82 4e 52 e5 e2 2a de eb 60 8c ad 61 ba 39 66 9c 78 88 52 ef b5 89 a0 5e 03 c1 1d 21 b0 7c 91 d6 d3 a1 b3 26 c3 82 15 b0 bb 0c aa 9d ba 18 9b ab cf 5b 00 e7 3c c0 29 71 50 c7 87 ea c3 7d 50 9f c0 af 06 e0 e0 2a c8 7e 87 2a 0d 59 c5 b6 d6 20 90 ce f3 f9 45 91 99 d2 cc 10 39 18 0b 5a 6b a5 71 42 28 9d 02 20 e7 1e 90 f3 d3 4b a4 5d 6b 74 0e dd 36 71 22 88 2b ae Data Ascii: ZQ8^?8o3!O{Cw)qm4jd6r~&FY-bx-aZ7jWQ+G7^K4&ruz{8tNR`a9fxR^!\|&[<)qP}P~*Y E9ZkqB( K]kt6q"+
2024-03-29 00:41:25 UTC	1300	IN	Data Raw: 3d ce e5 88 64 a4 d2 22 ad da b4 3f 69 51 72 03 5d ec e9 d9 98 23 f7 82 ef b8 68 25 23 41 ee c0 81 ea 61 04 9e 3a 9c 97 28 62 7b 47 7f e7 a5 ca cc 14 25 1b f8 48 b5 c6 c7 52 fc 89 32 cb ba d4 1e 6d 37 ea b8 4d 5a 89 45 d6 28 81 28 f2 73 7b 5d 1b ad 8e bb 15 09 b0 4a 3d ab 16 02 fa 60 1f 3f a8 26 00 03 18 81 33 ca 3c 2f e5 78 75 96 69 0a 92 71 fa b3 6d 3b 71 b6 99 f7 bf 89 d7 d9 79 b9 f2 0c e9 80 c0 10 28 0c 8e 40 4e bb 47 15 f6 f4 d9 9c ba 01 5c f5 a1 6a 3c f3 dc 8b fd 7a f9 99 62 0d e0 fb 5f 6a 6c 9a 34 b3 6c ad aa d2 08 5b 2a 2d 68 d5 a6 bd 76 60 33 05 9d ba d8 d3 53 eb d2 8b 9f 66 5c a4 6f 55 0d 6a e5 43 4b 97 59 fb 81 60 76 69 66 cb d0 5e 9b 13 e6 ca 5d 0f 8a 73 e0 93 2c 04 7b ab 03 99 81 84 52 b3 25 59 0e ad 5a 05 cb 67 5a fa 67 a6 13 48 67 23 d3 08 Data Ascii: =d"?iQr]#h%#Aa:(b{G%HR2m7MZE((s{]J=`?&3</xuiqm;qy(@NG\j<zb_jl4l[*-hv`3Sf\oUjCKY`vif^]s,{R%YZgZgHg#
2024-03-29 00:41:25 UTC	1300	IN	Data Raw: 2a 36 20 47 01 16 7c b5 a2 e0 34 c4 4a 6c 38 03 9d 34 88 33 47 d0 f3 9e 42 cf 8e 9e 73 32 9c a0 2a b9 54 d6 94 92 8d a2 4d cd 36 3a 4d 3b 90 9d 1b cb 6e 64 6f a1 52 3b 66 67 fd 1e aa 93 0e d6 34 f7 5b 10 55 bd 4d 58 58 51 00 da 7b 58 7b fa 10 68 f7 c7 7c 7b 43 75 a9 d0 e3 61 8c a6 c9 b0 29 17 f4 2d 25 be 35 84 6d e3 5c a6 13 1d fc 16 f7 89 8a ba 1c 4d 44 51 8a 59 ad db f6 db f6 9b 7e 0e 5b 41 7e d0 55 b9 b6 6a 08 88 7a 20 d0 45 c2 c3 f2 65 38 15 2e ee 00 44 42 b3 f1 46 99 4e 3e 41 c1 1c 7a c5 24 9b 76 00 fb d1 11 53 5f 6c 07 b9 b5 3d a6 5a 53 95 5c 4d e4 01 98 b6 2e 54 73 f3 a1 bb 9c 36 93 17 13 b5 04 69 e5 81 87 da db e6 b2 2f 36 e2 01 ad 50 b1 d2 82 60 19 a4 3d cf 67 3e d7 fd 04 b8 0b b8 84 0c 17 15 43 82 c8 2f 10 11 2f 11 c2 52 1d 0b 07 61 c3 a5 87 06 Data Ascii: 6 G\|4Jl843GBs2TM6:M;ndoR;fg4[UMXXQ{X{h\|{Cua)-%5m\MDQY~[A~Ujz Ee8.DBFN>Az$vS_l=ZS\M.Ts6i/6P`=g>C//Ra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49775	152.195.55.192	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:25 UTC	537	OUT	GET /version/6.4.1/cmp.js HTTP/1.1 Host: consent.cmp.oath.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:25 UTC	509	IN	HTTP/1.1 200 OK Age: 322805 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Fri, 29 Mar 2024 00:41:25 GMT Etag: "6863ce0703ce4f482389f8a7e640e4e6+gzip+ident" Expires: Sat, 29 Mar 2025 00:41:25 GMT Last-Modified: Thu, 08 Feb 2024 18:14:22 GMT Server: ECD (dcd/7D5C) Vary: Accept-Encoding x-amz-id-2: pBD9mTqgUa6QYUOs+mOtmKh5j/K5LM0QT44gRN9KyYLd9WZwxO5GHUsV3c1fMh7AIrs/SphJUns= x-amz-request-id: Y3XVAVFVSNQMK1F0 X-Cache: HIT Content-Length: 184464 Connection: close
2024-03-29 00:41:25 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 4d 50 20 36 2e 34 2e 31 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 38 20 4f 61 74 68 20 48 6f 6c 64 69 6e 67 73 2c 20 49 6e 63 2e 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 31 38 34 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 28 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 Data Ascii: /! CMP 6.4.1 Copyright 2018 Oath Holdings, Inc. /!function(){var e={4184:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof S
2024-03-29 00:41:25 UTC	1	IN	Data Raw: 3d Data Ascii: =
2024-03-29 00:41:25 UTC	16383	IN	Data Raw: 73 7d 2c 35 31 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 43 6f 6d 6d 61 6e 64 3d 76 6f 69 64 20 30 3b 74 2e 43 6f 6d 6d 61 6e 64 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 73 75 63 63 65 73 73 3d 21 30 2c 74 68 69 73 2e 63 6d 70 41 70 69 43 6f 6e 74 65 78 74 3d 65 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 68 69 73 2c 7b 63 61 6c 6c 62 61 63 6b 3a 74 2c 70 61 72 61 6d 65 74 65 72 3a 6e 7d 29 7d 65 78 65 63 75 74 65 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 73 70 6f 6e 64 28 29 7d 63 Data Ascii: s},5148:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Command=void 0;t.Command=class{constructor(e,t,n){this.success=!0,this.cmpApiContext=e,Object.assign(this,{callback:t,parameter:n})}execute(){try{return this.respond()}c
2024-03-29 00:41:25 UTC	16383	IN	Data Raw: 6e 63 6f 64 61 62 6c 65 46 69 78 65 64 42 69 74 66 69 65 6c 64 3d 76 6f 69 64 20 30 3b 63 6f 6e 73 74 20 72 3d 6e 28 33 37 39 36 29 2c 69 3d 6e 28 37 34 30 29 3b 63 6c 61 73 73 20 6f 20 65 78 74 65 6e 64 73 20 69 2e 41 62 73 74 72 61 63 74 45 6e 63 6f 64 61 62 6c 65 42 69 74 53 74 72 69 6e 67 44 61 74 61 54 79 70 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 29 2c 74 68 69 73 2e 6e 75 6d 45 6c 65 6d 65 6e 74 73 3d 65 2e 6c 65 6e 67 74 68 2c 74 68 69 73 2e 73 65 74 56 61 6c 75 65 28 65 29 7d 65 6e 63 6f 64 65 28 29 7b 72 65 74 75 72 6e 20 72 2e 46 69 78 65 64 42 69 74 66 69 65 6c 64 45 6e 63 6f 64 65 72 2e 65 6e 63 6f 64 65 28 74 68 69 73 2e 76 61 6c 75 65 2c 74 68 69 73 2e 6e 75 6d 45 6c 65 6d 65 6e 74 73 29 7d 64 65 63 6f 64 65 28 Data Ascii: ncodableFixedBitfield=void 0;const r=n(3796),i=n(740);class o extends i.AbstractEncodableBitStringDataType{constructor(e){super(),this.numElements=e.length,this.setValue(e)}encode(){return r.FixedBitfieldEncoder.encode(this.value,this.numElements)}decode(
2024-03-29 00:41:25 UTC	16383	IN	Data Raw: 45 72 72 6f 72 3d 6e 7d 2c 31 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 4c 61 7a 79 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 3d 76 6f 69 64 20 30 3b 63 6f 6e 73 74 20 72 3d 6e 28 39 39 37 33 29 3b 63 6c 61 73 73 20 69 20 65 78 74 65 6e 64 73 20 72 2e 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 65 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 4c 61 7a 79 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 22 7d 7d 74 2e 4c 61 7a 79 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 3d 69 7d 2c 34 35 30 34 3a 66 75 6e 63 74 Data Ascii: Error=n},1104:function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.LazyDecodingError=void 0;const r=n(9973);class i extends r.DecodingError{constructor(e){super(e),this.name="LazyDecodingError"}}t.LazyDecodingError=i},4504:funct
2024-03-29 00:41:25 UTC	3	IN	Data Raw: 67 28 29 Data Ascii: g()
2024-03-29 00:41:25 UTC	16383	IN	Data Raw: 2c 6e 65 77 20 6f 2e 45 6e 63 6f 64 61 62 6c 65 46 6c 65 78 69 62 6c 65 42 69 74 66 69 65 6c 64 28 28 28 29 3d 3e 64 2e 67 65 74 56 61 6c 75 65 28 29 29 2c 5b 5d 29 29 2c 73 75 70 65 72 28 74 2c 5b 5b 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 56 45 52 53 49 4f 4e 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 43 52 45 41 54 45 44 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 4c 41 53 54 5f 55 50 44 41 54 45 44 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 43 4d 50 5f 49 44 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 43 4d 50 5f 56 45 52 53 49 4f 4e 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 Data Ascii: ,new o.EncodableFlexibleBitfield((()=>d.getValue()),[])),super(t,[[p.TcfCaV1Field.VERSION.toString(),p.TcfCaV1Field.CREATED.toString(),p.TcfCaV1Field.LAST_UPDATED.toString(),p.TcfCaV1Field.CMP_ID.toString(),p.TcfCaV1Field.CMP_VERSION.toString(),p.TcfCaV1F
2024-03-29 00:41:25 UTC	16383	IN	Data Raw: 31 22 3a 72 3d 21 30 2c 6e 5b 31 5d 3d 69 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 63 2e 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 28 22 55 6e 61 62 6c 65 20 74 6f 20 64 65 63 6f 64 65 20 73 65 67 6d 65 6e 74 20 27 22 2b 74 5b 65 5d 2b 22 27 22 29 7d 7d 74 68 69 73 2e 64 65 63 6f 64 65 53 65 67 6d 65 6e 74 73 46 72 6f 6d 42 69 74 53 74 72 69 6e 67 73 28 6e 29 2c 74 68 69 73 2e 66 69 65 6c 64 73 2e 67 65 74 28 61 2e 55 73 43 74 56 31 46 69 65 6c 64 2e 47 50 43 5f 53 45 47 4d 45 4e 54 5f 49 4e 43 4c 55 44 45 44 29 2e 73 65 74 56 61 6c 75 65 28 72 29 7d 67 65 74 49 64 28 29 7b 72 65 74 75 72 6e 20 6c 2e 49 44 7d 67 65 74 4e 61 6d 65 28 29 7b 72 65 74 75 72 6e 20 6c 2e 4e 41 4d 45 7d 7d 74 2e 55 73 43 74 56 31 3d 6c 2c 6c 2e 49 Data Ascii: 1":r=!0,n[1]=i;break;default:throw new c.DecodingError("Unable to decode segment '"+t[e]+"'")}}this.decodeSegmentsFromBitStrings(n),this.fields.get(a.UsCtV1Field.GPC_SEGMENT_INCLUDED).setValue(r)}getId(){return l.ID}getName(){return l.NAME}}t.UsCtV1=l,l.I
2024-03-29 00:41:26 UTC	16383	IN	Data Raw: 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 69 66 28 65 29 7b 76 61 72 20 6e 3d 6f 2e 54 43 46 43 6f 6d 6d 61 6e 64 2e 41 44 44 5f 45 56 45 4e 54 5f 4c 49 53 54 45 4e 45 52 3b 69 66 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 75 69 6c 74 2d 49 6e 20 43 75 73 74 6f 6d 20 43 6f 6d 6d 6d 61 6e 64 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 3a 20 55 73 65 20 22 29 2e 63 6f 6e 63 61 74 28 6f 2e 54 43 46 43 6f 6d 6d 61 6e 64 2e 47 45 54 5f 54 43 5f 44 41 54 41 2c 22 20 69 6e 73 74 65 61 64 22 29 29 3b 69 66 28 6e 3d 6f 2e 54 43 46 43 6f 6d 6d 61 6e 64 2e 52 45 4d 4f 56 45 5f 45 56 45 4e 54 5f 4c 49 53 54 45 4e 45 52 2c 6e 75 6c 6c 3d Data Ascii: on(){function e(e){if(e){var n=o.TCFCommand.ADD_EVENT_LISTENER;if(null==e?void 0:e[n])throw new Error("Built-In Custom Commmand for ".concat(n," not allowed: Use ").concat(o.TCFCommand.GET_TC_DATA," instead"));if(n=o.TCFCommand.REMOVE_EVENT_LISTENER,null=
2024-03-29 00:41:26 UTC	16383	IN	Data Raw: 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 65 7d 72 28 65 2c 74 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 74 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 29 3a 28 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6e 29 7d 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 50 69 6e 67 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 6e 28 38 34 38 38 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 74 3d 65 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 74 2e 63 6d 70 4c Data Ascii: );function n(){this.constructor=e}r(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)});Object.defineProperty(t,"__esModule",{value:!0}),t.Ping=void 0;var o=n(8488),s=function(e){function t(){var t=e.call(this)\|\|this;return t.cmpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49771	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:25 UTC	520	OUT	GET /oa/consent.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:25 UTC	764	IN	HTTP/1.1 200 OK x-amz-id-2: yAFsEpsz+uhMa0iZ7hAuBLV2Z2ZOv0VSNRRfHWi9PvtEli/aWqD2+guIJXPPmY6towGIbdjfkqs= x-amz-request-id: 0ATEZC2YHWGPXHVG Date: Fri, 29 Mar 2024 00:38:05 GMT Last-Modified: Tue, 26 Mar 2024 14:53:02 GMT ETag: "6b1a02c0ae13b2b2a79400a34ad9eb01" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 94211 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 201 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:25 UTC	757	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 63 6f 6e 73 65 6e 74 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 36 38 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 6f 2c 69 2c 73 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 6e 75 6c 6c 21 3d 6e 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 6e 2e 6e 6f 64 65 54 79 70 65 29 65 2e 65 78 70 6f 72 74 73 3d 61 28 29 3b 65 6c 73 65 20 69 66 28 6e 75 6c 6c 21 3d 74 2e 61 6d 64 4f 29 69 3d 5b 5d 2c 76 6f 69 64 20 30 3d 3d 3d 28 73 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6f 3d 61 Data Ascii: /! For license information please see consent.js.LICENSE.txt /!function(){var e={6848:function(e,n,t){var o,i,s;!function(a){"use strict";if(null!=n&&"number"!=typeof n.nodeType)e.exports=a();else if(null!=t.amdO)i=[],void 0===(s="function"==typeof(o=a
2024-03-29 00:41:25 UTC	1300	IN	Data Raw: 74 28 61 2b 3d 33 2f 34 29 29 3e 32 35 35 29 74 68 72 6f 77 20 6e 65 77 20 6e 28 22 27 62 74 6f 61 27 20 66 61 69 6c 65 64 3a 20 54 68 65 20 73 74 72 69 6e 67 20 74 6f 20 62 65 20 65 6e 63 6f 64 65 64 20 63 6f 6e 74 61 69 6e 73 20 63 68 61 72 61 63 74 65 72 73 20 6f 75 74 73 69 64 65 20 6f 66 20 74 68 65 20 4c 61 74 69 6e 31 20 72 61 6e 67 65 2e 22 29 3b 6f 3d 6f 3c 3c 38 7c 69 7d 72 65 74 75 72 6e 20 63 7d 2c 61 74 6f 62 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6f 3d 53 74 72 69 6e 67 28 74 29 2e 72 65 70 6c 61 63 65 28 2f 5b 3d 5d 2b 24 2f 2c 22 22 29 3b 69 66 28 6f 2e 6c 65 6e 67 74 68 25 34 3d 3d 31 29 74 68 72 6f 77 20 6e 65 77 20 6e 28 22 27 61 74 6f 62 27 20 66 61 69 6c 65 64 3a 20 54 68 65 20 73 74 72 69 6e 67 20 74 6f 20 62 65 20 64 65 Data Ascii: t(a+=3/4))>255)throw new n("'btoa' failed: The string to be encoded contains characters outside of the Latin1 range.");o=o<<8\|i}return c},atob:function(t){var o=String(t).replace(/[=]+$/,"");if(o.length%4==1)throw new n("'atob' failed: The string to be de
2024-03-29 00:41:25 UTC	1300	IN	Data Raw: 26 28 30 2c 63 2e 73 65 74 53 65 73 73 69 6f 6e 29 28 22 56 4d 41 67 65 6e 74 41 75 74 68 22 2c 6e 2e 73 65 73 73 69 6f 6e 29 2c 74 2e 63 6c 65 61 6e 43 6f 6e 73 65 6e 74 49 66 72 61 6d 65 28 21 30 29 29 7d 29 2c 21 31 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 28 30 2c 6c 2e 64 69 73 70 61 74 63 68 54 61 73 6b 43 6f 6d 70 6c 65 74 65 64 45 76 65 6e 74 29 28 22 22 2c 21 31 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 6e 29 7b 69 66 28 6e 29 74 72 79 7b 69 66 28 33 3d 3d 3d 6e 2e 6f 75 74 63 6f 6d 65 7c 7c 34 3d 3d 3d 6e 2e 6f 75 74 63 6f 6d 65 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 6e 29 3b 65 26 26 28 28 30 2c 69 2e 6c 6f 67 44 65 63 69 73 69 6f 6e 29 28 65 2c 6e 2c 61 2e 4c 6f 67 45 76 65 6e 74 54 79 70 65 2e 65 72 72 6f Data Ascii: &(0,c.setSession)("VMAgentAuth",n.session),t.cleanConsentIframe(!0))}),!1)}catch(e){return void(0,l.dispatchTaskCompletedEvent)("",!1)}}function f(e,n){if(n)try{if(3===n.outcome\|\|4===n.outcome)return void p(n);e&&((0,i.logDecision)(e,n,a.LogEventType.erro
2024-03-29 00:41:25 UTC	1300	IN	Data Raw: 26 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 61 67 65 6e 74 49 64 22 29 26 26 6f 2e 61 67 65 6e 74 49 64 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 7d 7d 6e 2e 61 67 65 6e 74 41 75 74 68 41 63 63 65 73 73 54 6f 6b 65 6e 4b 65 79 3d 22 56 4d 5f 41 47 45 4e 54 41 55 54 48 5f 54 4f 4b 45 4e 22 2c 6e 2e 6c 6f 67 44 65 63 69 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 69 2c 73 29 7b 76 61 72 20 61 3d 6f 28 7b 7d 2c 69 29 3b 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 26 26 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 62 65 61 63 6f 6e 26 26 28 65 26 26 65 2e 6d 65 73 73 61 67 65 26 26 28 61 2e 6d 65 73 73 61 67 65 3d 65 2e 6d 65 73 73 61 67 65 29 2c 6e 2e 69 6e 6c 69 6e 65 55 72 69 26 26 28 61 2e 5f Data Ascii: &o.hasOwnProperty("agentId")&&o.agentId}catch(e){return}}n.agentAuthAccessTokenKey="VM_AGENTAUTH_TOKEN",n.logDecision=function(e,n,t,i,s){var a=o({},i);n.normalizedOptions&&n.normalizedOptions.beacon&&(e&&e.message&&(a.message=e.message),n.inlineUri&&(a._
2024-03-29 00:41:25 UTC	1300	IN	Data Raw: 30 29 2c 70 3d 74 28 35 39 31 34 29 2c 66 3d 74 28 37 38 33 37 29 2c 6d 3d 74 28 37 33 38 31 29 2c 67 3d 74 28 32 33 32 34 29 2c 68 3d 74 28 38 33 33 31 29 2c 76 3d 77 69 6e 64 6f 77 2c 43 3d 64 6f 63 75 6d 65 6e 74 3b 66 75 6e 63 74 69 6f 6e 20 45 28 65 2c 6e 2c 74 2c 73 29 7b 76 61 72 20 61 2c 72 2c 63 2c 6c 3d 6f 28 7b 7d 2c 74 29 2c 70 3d 28 6e 2e 63 6f 6f 6b 69 65 52 65 73 75 6c 74 2c 6e 2e 72 65 6d 6f 74 65 52 65 73 75 6c 74 29 2c 66 3d 6e 2e 69 6e 6c 69 6e 65 55 72 69 2c 6d 3d 6e 2e 75 6e 73 61 66 65 52 65 6a 65 63 74 65 64 55 72 69 3b 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 26 26 28 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 62 65 61 63 6f 6e 26 26 28 65 26 26 65 2e 6d 65 73 73 61 67 65 26 26 28 6c 2e 6d 65 73 73 Data Ascii: 0),p=t(5914),f=t(7837),m=t(7381),g=t(2324),h=t(8331),v=window,C=document;function E(e,n,t,s){var a,r,c,l=o({},t),p=(n.cookieResult,n.remoteResult),f=n.inlineUri,m=n.unsafeRejectedUri;n.normalizedOptions&&(n.normalizedOptions.beacon&&(e&&e.message&&(l.mess
2024-03-29 00:41:25 UTC	1300	IN	Data Raw: 6b 69 65 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 2e 59 43 54 42 61 6e 6e 65 72 2e 69 73 41 63 74 69 76 65 3d 21 31 2c 28 30 2c 66 2e 64 69 73 70 61 74 63 68 54 61 73 6b 43 6f 6d 70 6c 65 74 65 64 45 76 65 6e 74 29 28 22 22 2c 74 29 7d 29 2c 65 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 75 69 4f 70 74 69 6f 6e 73 2c 22 63 6f 6e 73 65 6e 74 6a 73 22 2c 22 5f 79 62 22 2c 21 30 29 3b 69 66 28 6f 29 7b 76 61 72 20 69 3b 6f 2e 65 78 65 63 75 74 65 49 6e 6c 69 6e 65 43 6f 6e 73 65 6e 74 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 77 69 74 63 68 28 6e 2e 6d 65 73 73 61 67 65 54 79 70 65 29 7b 63 61 73 65 20 75 2e 4d 65 73 73 61 67 65 54 79 70 65 2e 66 72 61 6d 65 52 65 61 64 79 3a 6f 2e 67 65 74 43 6f 6e 74 65 78 74 44 61 74 61 28 29 3b 62 72 Data Ascii: kies,(function(){v.YCTBanner.isActive=!1,(0,f.dispatchTaskCompletedEvent)("",t)}),e.normalizedOptions.uiOptions,"consentjs","_yb",!0);if(o){var i;o.executeInlineConsent((function(n){switch(n.messageType){case u.MessageType.frameReady:o.getContextData();br
2024-03-29 00:41:25 UTC	1300	IN	Data Raw: 29 7b 76 61 72 20 65 2c 74 3d 22 6f 76 65 72 6c 61 79 22 3b 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 69 73 53 74 69 63 6b 79 42 61 6e 6e 65 72 26 26 28 65 3d 43 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 75 69 4f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 53 65 6c 65 63 74 6f 72 29 29 2c 65 3f 28 74 3d 22 69 6e 6c 69 6e 65 22 2c 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 75 69 4f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 3d 65 29 3a 28 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 69 73 53 74 69 63 6b 79 42 61 6e 6e 65 72 3d 21 31 2c 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 75 69 4f 70 74 69 6f 6e 73 2e 63 6f 6e 74 Data Ascii: ){var e,t="overlay";n.normalizedOptions.isStickyBanner&&(e=C.querySelector(n.normalizedOptions.uiOptions.containerSelector)),e?(t="inline",n.normalizedOptions.uiOptions.container=e):(n.normalizedOptions.isStickyBanner=!1,n.normalizedOptions.uiOptions.cont
2024-03-29 00:41:25 UTC	1300	IN	Data Raw: 6e 63 74 69 6f 6e 20 76 28 65 2c 6e 2c 74 2c 6f 2c 69 2c 73 29 7b 76 61 72 20 61 3d 30 3b 69 66 28 65 29 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 6f 29 7b 76 61 72 20 69 3d 6e 75 6c 6c 2c 73 3d 31 30 37 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 2e 73 74 61 74 75 73 7d 29 28 65 29 26 26 28 73 3d 65 2e 73 74 61 74 75 73 3e 30 3f 31 31 33 3a 31 30 37 2c 69 3d 65 2e 73 74 61 74 75 73 29 2c 74 2e 72 65 6d 6f 74 65 52 65 73 75 6c 74 3d 7b 6f 75 74 63 6f 6d 65 3a 73 2c 73 74 61 74 75 73 43 6f 64 65 3a 69 2c 61 63 74 69 6f 6e 3a 30 2c 63 6f 6f 6b 69 65 73 3a 5b 5d 2c 75 6e 73 61 66 65 52 65 6a 65 63 74 65 64 43 6f 6f 6b 69 65 73 3a 5b 5d 7d 2c 28 30 2c 6c 2e 77 61 72 6e 29 28 22 43 6f 6e 73 65 6e 74 20 63 Data Ascii: nction v(e,n,t,o,i,s){var a=0;if(e)!function(e,n,t,o){var i=null,s=107;(function(e){return void 0!==e.status})(e)&&(s=e.status>0?113:107,i=e.status),t.remoteResult={outcome:s,statusCode:i,action:0,cookies:[],unsafeRejectedCookies:[]},(0,l.warn)("Consent c
2024-03-29 00:41:25 UTC	1300	IN	Data Raw: 54 61 73 6b 43 6f 6d 70 6c 65 74 65 64 45 76 65 6e 74 29 28 22 22 2c 21 31 29 3b 76 61 72 20 45 2c 79 3d 72 2e 63 6f 6f 6b 69 65 3b 76 6f 69 64 20 30 3d 3d 3d 79 26 26 28 79 3d 68 2e 63 6f 6f 6b 69 65 29 2c 70 2e 69 6e 69 74 69 61 6c 43 6f 6f 6b 69 65 73 3d 28 30 2c 6f 2e 64 65 66 61 75 6c 74 29 28 79 29 2c 45 3d 28 30 2c 69 2e 64 65 63 69 64 65 57 69 74 68 50 61 72 73 65 64 43 6f 6f 6b 69 65 73 29 28 70 2e 69 6e 69 74 69 61 6c 43 6f 6f 6b 69 65 73 29 2c 70 2e 63 6f 6f 6b 69 65 52 65 73 75 6c 74 3d 45 3b 76 61 72 20 6b 3d 28 30 2c 6d 2e 67 65 74 47 70 63 50 61 72 73 65 64 43 6f 6f 6b 69 65 73 29 28 29 2c 54 3d 28 30 2c 6d 2e 64 65 66 61 75 6c 74 29 28 7b 63 6f 6e 73 65 6e 74 43 6f 6f 6b 69 65 73 3a 6b 2c 66 65 61 74 75 72 65 3a 22 75 6e 64 65 72 61 67 65 Data Ascii: TaskCompletedEvent)("",!1);var E,y=r.cookie;void 0===y&&(y=h.cookie),p.initialCookies=(0,o.default)(y),E=(0,i.decideWithParsedCookies)(p.initialCookies),p.cookieResult=E;var k=(0,m.getGpcParsedCookies)(),T=(0,m.default)({consentCookies:k,feature:"underage
2024-03-29 00:41:25 UTC	1300	IN	Data Raw: 73 2f 66 69 74 6e 65 73 73 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 66 6f 6f 64 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 67 61 6d 65 73 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 77 65 6c 6c 6e 65 73 73 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 6c 69 66 65 73 74 79 6c 65 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 6e 65 77 73 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 73 68 6f 70 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 73 70 6f 72 74 73 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 77 65 61 74 68 65 72 2f 22 5d 2c 70 6f 70 Data Ascii: s/fitness/","https://www.aol.com/food/","https://www.aol.com/games/","https://www.aol.com/wellness/","https://www.aol.com/lifestyle/","https://www.aol.com/news/","https://www.aol.com/shop/","https://www.aol.com/sports/","https://www.aol.com/weather/"],pop

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49766	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:25 UTC	1094	OUT	GET /info/p.gif?apptype=default&beaconType=pageRenderStart&code=pageRender&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&device=desktop&intl=us&rid=2vl5n89j0c3hk&site=fp&t=1711672884338 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4
2024-03-29 00:41:25 UTC	1138	IN	HTTP/1.1 204 No Content referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-type: image/gif content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Fri, 29 Mar 2024 00:41:25 GMT x-envoy-upstream-service-time: 2 server: ATS Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=1omt5h5j0c3hl&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49776	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:25 UTC	599	OUT	GET /pv/static/ms/trendingNow.yhome-atomic.66d98e4cd448c48e1f6c4e2e2d0a34a6.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:26 UTC	789	IN	HTTP/1.1 200 OK x-amz-id-2: FzL0BkMBjxcVn2vi6jouqyV5jrbVRN2FBLBylfP1M6rbQcyyHA+trAfRbkG6SLzfIiEmmSl4Ijg= x-amz-request-id: NV9R1YT5CD7D5Z1B Date: Tue, 26 Mar 2024 21:50:49 GMT Last-Modified: Wed, 31 Jan 2024 05:15:36 GMT ETag: "4d3aad6863e45523c63427201c12f89f" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 10047 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 183038 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 23 61 74 6f 6d 69 63 20 2e 41 69 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 42 64 5c 28 6e 5c 29 2c 2e 42 64 5c 28 6e 5c 29 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 5c 24 73 72 63 68 46 75 6a 69 44 69 72 74 79 53 65 61 67 75 6c 6c 5c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 2c 23 65 30 65 34 65 39 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 74 5c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 42 64 65 6e 64 63 5c 28 5c 23 30 30 35 37 62 38 5c 29 5c 3a 5c 3a 62 3a 3a 62 65 Data Ascii: #atomic .Ai$c${align-items:center}#atomic .Bd$n$,.Bd$n${border:none}#atomic .Bdc$\$srchFujiDirtySeagull${border-color:#e0e4e9;border-color:var(--dirty-seagull,#e0e4e9)}#atomic .Bdc$t${border-color:transparent}#atomic .Bdendc$\#0057b8$\:\:b::be
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 31 31 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 32 70 78 5c 29 5c 3a 5c 3a 62 3a 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 33 30 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 38 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 62 65 6e 64 5c 28 38 70 78 5c 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 62 73 74 61 72 74 5c 28 38 70 78 5c 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c Data Ascii: {border-left-width:112px}#atomic .Bdrs$2px$\:\:b::before{border-radius:2px}#atomic .Bdrs$30px${border-radius:30px}#atomic .Bdrs$8px${border-radius:8px}#atomic .Bdrsbend$8px${border-bottom-right-radius:8px}#atomic .Bdrsbstart$8px${border-bottom-l
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 2e 63 6f 6d 2f 70 76 2f 73 74 61 74 69 63 2f 69 6d 67 2f 66 69 72 65 49 63 6f 6e 46 69 6e 61 6c 5f 5f 61 6c 70 68 61 5f 62 67 2d 32 30 32 33 31 31 30 31 30 33 33 31 2e 67 69 66 27 29 29 7d 2e 61 63 74 69 76 65 20 2e 61 63 74 69 76 65 5f 42 67 63 5c 28 5c 24 73 72 63 68 46 75 6a 69 57 68 69 74 65 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 68 69 74 65 2c 23 66 66 66 29 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 5c 23 37 65 31 66 66 66 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 37 65 31 66 66 66 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 5c 24 73 72 63 68 46 75 6a 69 57 68 Data Ascii: .com/pv/static/img/fireIconFinal__alpha_bg-202311010331.gif'))}.active .active_Bgc$\$srchFujiWhite${background-color:#fff!important;background-color:var(--white,#fff)!important}#atomic .Bgc$\#7e1fff${background-color:#7e1fff}#atomic .Bgc\(\$srchFujiWh
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 7b 63 6f 6c 6f 72 3a 23 32 33 32 61 33 31 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 74 63 61 76 65 2c 23 32 33 32 61 33 31 29 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 5c 23 66 66 66 66 66 66 5c 29 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 5c 24 73 72 63 68 46 75 6a 69 42 61 74 63 61 76 65 5c 29 7b 63 6f 6c 6f 72 3a 23 32 33 32 61 33 31 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 74 63 61 76 65 2c 23 32 33 32 61 33 31 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 5c 24 73 72 63 68 46 75 6a 69 42 61 74 74 6c 65 73 68 69 70 5c 29 7b 63 6f 6c 6f 72 3a 23 35 62 36 33 36 61 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 74 74 6c 65 73 68 69 70 2c 23 35 62 36 33 36 61 29 7d 23 Data Ascii: {color:#232a31!important;color:var(--batcave,#232a31)!important}#atomic .C$\#ffffff${color:#fff}#atomic .C$\$srchFujiBatcave${color:#232a31;color:var(--batcave,#232a31)}#atomic .C$\$srchFujiBattleship${color:#5b636a;color:var(--battleship,#5b636a)}#
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 74 6f 6d 69 63 20 2e 46 77 5c 28 35 30 30 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 36 30 30 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 37 30 30 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 62 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 30 5c 2e 36 38 37 35 72 65 6d 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 36 38 37 35 72 65 6d 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 30 5c 2e 38 37 35 72 65 6d 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 72 65 6d 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 31 32 70 78 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 Data Ascii: tomic .Fw$500${font-weight:500}#atomic .Fw$600${font-weight:600}#atomic .Fw$700${font-weight:700}#atomic .Fw$b${font-weight:700}#atomic .Fz$0\.6875rem${font-size:.6875rem}#atomic .Fz$0\.875rem${font-size:.875rem}#atomic .Fz$12px${font-size:1
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 28 31 30 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 62 5c 28 34 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 62 5c 28 35 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 62 5c 28 38 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 30 5c 29 2c 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 30 5c 29 5c 3a 66 6f 74 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 31 36 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 70 78 7d 23 Data Ascii: (10px\){margin-bottom:10px}#atomic .Mb$4px${margin-bottom:4px}#atomic .Mb$5px${margin-bottom:5px}#atomic .Mb$8px${margin-bottom:8px}#atomic .Mstart$0$,#atomic .Mstart$0$\:fot:first-of-type{margin-left:0}#atomic .Mstart$16px${margin-left:16px}#
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 36 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 78 5c 28 31 35 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 74 5c 28 37 70 78 5c 29 2c 23 61 74 6f 6d 69 63 20 2e 50 79 5c 28 37 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 37 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 79 5c 28 37 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 37 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 74 5c 28 31 31 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 31 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 74 5c 28 32 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 7d 2e 77 61 66 65 72 2d 74 61 62 73 2d 74 61 72 67 65 74 20 2e 77 61 66 65 72 2d 74 61 62 73 Data Ascii: 6px}#atomic .Px$15px${padding-left:15px;padding-right:15px}#atomic .Pt$7px$,#atomic .Py$7px${padding-top:7px}#atomic .Py$7px${padding-bottom:7px}#atomic .Pt$11px${padding-top:11px}#atomic .Pt$2px${padding-top:2px}.wafer-tabs-target .wafer-tabs
2024-03-29 00:41:26 UTC	947	IN	Data Raw: 67 6e 3a 74 6f 70 7d 23 61 74 6f 6d 69 63 20 2e 57 68 73 5c 28 6e 77 5c 29 2c 2e 45 6c 6c 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 5c 24 73 72 63 68 48 6f 6d 65 54 6e 52 6f 77 5c 29 7b 77 69 64 74 68 3a 63 61 6c 63 28 35 30 25 20 2d 20 34 70 78 29 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 31 30 30 5c 25 5c 29 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 31 31 5c 2e 32 35 70 78 5c 29 7b 77 69 64 74 68 3a 31 31 2e 32 35 70 78 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 31 31 32 70 78 5c 29 7b 77 69 64 74 68 3a 31 31 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 31 36 35 70 78 5c 29 7b 77 69 64 74 68 3a 31 36 35 70 78 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 31 36 70 78 5c 29 7b 77 69 Data Ascii: gn:top}#atomic .Whs$nw$,.Ell{white-space:nowrap}#atomic .W$\$srchHomeTnRow${width:calc(50% - 4px)}#atomic .W$100\%${width:100%}#atomic .W$11\.25px${width:11.25px}#atomic .W$112px${width:112px}#atomic .W$165px${width:165px}#atomic .W$16px${wi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49777	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:25 UTC	763	OUT	GET /uu/api/res/1.2/yzJLCRT._OcfHpmpL5upqg--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/bbc85280-ed48-11ee-aefe-2ec31e2ca7f6.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:26 UTC	1285	IN	HTTP/1.1 200 OK Content-Length: 44594 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 257301947391333314072561479413611006217,506573680972586326961225611793831006275,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="bbc85280-ed48-11ee-aefe-2ec31e2ca7f6.webp" Edge-Cache-Tag: 257301947391333314072561479413611006217,506573680972586326961225611793831006275,ae7a14591aaf8d474cdb3f92111c923e Etag: "4b14b9f987142f5d247a3649dd845e4d" Last-Modified: Thu, 28 Mar 2024 21:18:37 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=560,height=272,bytes=44594,owidth=4932,oheight=2777,obytes=1091299,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 1e75bec896c54306b6dd8e8005fb79f6 Accept-Ranges: bytes Date: Thu, 28 Mar 2024 21:43:25 GMT X-Served-By: cache-iad-kiad7000062-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711662206.871869,VS0,VE2 Age: 10681 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 1e75bec896c54306b6dd8e8005fb79f6 cld_by: cache-iad-kiad7000062-IAD cld_latency: 2 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1
2024-03-29 00:41:26 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 52 49 46 46 2a ae 00 00 57 45 42 50 56 50 38 20 1e ae 00 00 90 1a 02 9d 01 2a 30 02 10 01 3e 1d 0c 85 41 a1 05 12 4b ab 04 00 71 29 a3 65 4c 86 a8 1f 6f aa fc b9 fc 85 f9 59 e3 5e cf 7d ad f8 2f d5 df e0 bf 6f 3e 68 76 07 d8 5f f7 bc f1 fa 4f fe 67 f9 7f dd 4f f2 df ff ff ff fd bd ff 6d ff 9b fd 27 bb 9f d1 9f f6 bf ce 7e f3 fd 03 7e b0 ff b3 ff 11 fe 93 ff 0f f9 4f a4 3f f7 7d 75 7f 81 ff b7 ea 4f fa 7f f9 8f fd ff ec 3d df 7f e9 fe d0 fb d3 fe e5 ff 37 ff 3f ed 87 c8 2f f5 4f f3 7f f5 fd 7a fd 95 3d 05 ff 6c bd 5e bf f3 fe ef fc 2f 7f 62 ff 9b fb 8d ff 87 e4 4b fa 17 f9 6f fd 5f 9f ff 20 1f ff fd b6 7f 80 7f f3 d5 91 e2 7f e4 3f 25 7c d3 fc 77 e7 9f c4 ff 71 ff 29 ff 17 fb e7 b7 77 fa fd ff bd 4b fa 3f fb 5f e7 bd 44 fe 57 f7 fb f6 bf de 3f d0 ff de ff Data Ascii: RIFFWEBPVP8 0>AKq)eLoY^}/o>hv_OgOm'~~O?}uO=7?/Oz=l^/bKo_ ?%\|wq)wK?_DW?
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: ac a3 68 8f a2 5a 5a 5d c5 b5 30 d9 8d e9 6d 67 33 a1 59 7f be 38 d0 b3 b4 dc c7 a0 c6 a9 1c b3 16 c4 70 19 1c 52 21 db 3f 39 d8 e1 e8 8b 9a 1b 8a e7 53 17 85 4c 65 aa 1f 48 38 bc d8 e1 ec 0a 90 fd 2f 32 13 e5 31 7f 0b 35 51 c5 ed ea 23 06 0c a9 1c 8c c7 aa e6 97 7b 0c 3e 1f dd 80 a9 53 bd a9 4e 26 2a 23 83 a8 c5 35 27 03 5f 05 3b a0 f1 7f f7 64 ff ff ab 1f 6e f4 20 6e 62 13 85 60 8d 13 8a 55 50 9f 27 a6 1b a6 e0 02 e5 5a 0b 48 32 8d 21 ea 4f 1f 26 6d ae b5 b0 aa eb a9 1c d0 30 6c f6 1a 8e 5b 6d e9 f0 eb 1e 91 a3 37 1f 43 57 d2 0a 58 8a b4 18 14 f2 bd d4 81 cf 69 00 b0 63 b1 e0 4e 5b 7b fa 24 00 e9 8d dc 98 15 3e 84 f6 df ce de b4 18 8b e9 4f cd aa 30 19 d7 6c 75 7c 74 f8 c7 e2 25 d0 63 6a 02 52 2a 2d 1e c7 fb 9d d7 13 f9 c8 df f9 56 81 ed 59 c0 28 f8 8b Data Ascii: hZZ]0mg3Y8pR!?9SLeH8/215Q#{>SN&#5'_;dn nb`UP'ZH2!O&m0l[m7CWXicN[{$>O0lu\|t%cjR-VY(
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: d2 34 17 9f d9 d5 c4 1c 9a 7e 52 73 b2 c5 0c 3a 52 ff 67 3b 79 65 0a 24 5a d8 76 96 b1 73 68 aa fd 49 79 31 4b c2 ce bf 11 e8 0f ba cf 17 b8 eb 6d 9f ba d5 b5 65 1a 30 b0 67 bf cb ee 6a 4d 15 5f bb e9 ca 61 65 64 82 95 eb 58 d8 24 e2 6f aa 5b c7 8b 53 9a 43 86 fb d8 84 be 2e 69 92 9c 7f 8c 2f a4 b2 3f b3 ff c9 64 06 5f da 9e 30 01 ca a0 07 a6 8b 38 bd 81 26 1e 66 64 18 91 1a fe 26 59 d8 cd 2d f1 64 62 57 c5 c6 f8 8e 2e 89 6e e8 80 6c 2b fe 5e 06 af 75 b1 b9 10 54 0a 91 15 6d 80 7b 1c 78 9f 4d 55 75 03 64 5a 76 48 f5 1d 87 3d 19 27 9e 42 38 42 1f 4d 40 d8 24 12 02 7c 0e 5f 7d 7a d9 58 34 1a 34 c4 f6 38 ee 96 71 35 7b 33 4b 90 9e c1 55 9c f1 43 53 32 c5 e7 93 f2 7d 51 da 3d 41 e2 37 57 a6 bc 71 6e a6 06 e4 c5 6c 26 53 f8 3c 62 0e 14 49 97 97 15 e3 c2 4f 89 Data Ascii: 4~Rs:Rg;ye$ZvshIy1Kme0gjM_aedX$o[SC.i/?d_08&fd&Y-dbW.nl+^uTm{xMUudZvH='B8BM@$\|_}zX448q5{3KUCS2}Q=A7Wqnl&S<bIO
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 77 6c 05 82 c0 72 02 e9 69 df c4 3d c4 d3 fa 4f c9 c8 6c 7f 6f 29 b9 d2 33 d6 09 19 47 4e 80 f4 87 76 76 bd a0 0a 29 6d 2d 16 c1 2e 08 5d 71 bd e6 71 16 b6 21 3c f3 73 ac 06 7e 6c b8 f2 17 04 3f 93 6b 7c 6f 21 32 65 f9 1f 96 f8 af 2b 7f 4c e8 d9 67 9d 2b 4a 3c 80 85 2b e2 4c 46 b0 e0 89 36 65 d0 c4 5f e5 8f 7e f6 4b 80 02 11 c2 e6 9c 4c 0e 2b 01 45 98 50 1d 5b a6 c8 f3 db 8c 77 f7 f2 cc 6b 22 bd 55 47 7d 70 55 4e 84 59 c2 7a 8c d3 f2 de cd d1 55 92 29 fd b4 d5 14 12 c0 61 f4 d1 a2 73 b2 76 3f 42 75 5e 8a e1 a0 e6 c8 75 00 2b d0 b8 e6 80 ba be 1a b7 7a 4f e0 b4 4b a1 b7 4e de 88 6a 66 38 ea ba 6c c8 c3 2d 08 46 ba b0 23 05 20 d2 72 aa 55 4b ee 27 92 ef 88 18 b8 17 ff 11 b4 8c 72 85 d6 4b d4 29 0b 07 01 05 13 10 ac f6 57 e2 b4 cf 6b 76 33 a6 06 25 3a 29 be Data Ascii: wlri=Olo)3GNvv)m-.]qq!<s~l?k\|o!2e+Lg+J<+LF6e_~KL+EP[wk"UG}pUNYzU)asv?Bu^u+zOKNjf8l-F# rUK'rK)Wkv3%:)
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: e1 71 c6 a0 99 ba 83 eb b5 71 2a 5c a6 55 ae 34 41 c6 cb 85 6e 27 16 76 fe b7 08 ea 85 47 c7 45 b8 43 bc 45 b9 80 fa 74 e7 75 be 9a bd 0f 64 70 fd 9f 3a 86 33 7e c3 5e 9e 56 7b 52 ac 86 90 40 15 c0 9a d5 1f 5b 9c f0 93 d2 c2 60 c4 f7 68 b2 da 1b 7c 01 58 40 39 12 de 59 11 ea 2b cc 0f 9b 24 ff ac b5 e7 e1 0f 29 b4 f6 78 92 7f 32 38 82 f7 fd 13 b1 92 31 39 98 32 d4 16 3d 2c 8f 5a 45 d7 74 2a c2 5c 90 b5 24 37 20 bb a2 3f 9e bd 55 06 43 35 c7 d8 00 98 fd f1 cb b4 ae 52 3d 8e 34 e8 26 8d 7f 6f 52 d7 e0 86 1c 3e 8b be 70 85 dd 7b 84 71 8c 25 e7 34 1e b5 09 af da b7 69 51 b1 fb e8 52 5c 8d 5b f4 a6 07 55 22 b8 55 56 d9 f7 89 38 c2 0d 95 73 b2 98 6e 58 42 a7 20 a8 12 4f d8 7f f8 d3 7d 41 c8 aa e3 6f a0 6e 0f c1 6f 6f b4 44 0e 59 d8 5e 3f 23 dc e8 38 a8 c6 7d 5d Data Ascii: qq\U4An'vGECEtudp:3~^V{R@[`h\|X@9Y+$)x28192=,ZEt\$7 ?UC5R=4&oR>p{q%4iQR\[U"UV8snXB O}AonooDY^?#8}]
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: e8 82 19 aa b4 c7 73 9f bf f9 60 00 28 b2 a7 32 1d 3b 26 73 2a 5c e0 51 79 c1 9f 23 53 3f 8b 6a 73 20 bb 18 a0 37 e1 94 59 57 d7 ae 5e fc 27 d2 86 8f a9 38 e5 57 4b 3a ae 36 8d c8 0c 03 7d 35 24 8f 8f e9 eb 8c ff cd 2e bd 74 f0 cf d7 03 52 d7 b2 af bd 0b 60 d4 98 9f 20 75 36 9c 02 4a c3 09 b8 25 d9 86 c3 d9 6a 18 cd 9c b0 f8 ec f0 87 bb bb 69 e8 e9 b7 9c d0 ed 4c 5e 93 58 8e d9 a2 74 60 03 47 9a b8 57 76 5b 19 b7 03 6e ae a9 63 76 15 b5 a4 3c 53 e0 4e 01 02 e2 36 b6 10 bd 22 b3 2e e4 dd 1d f4 fd 9e 1a 2b a5 62 36 c9 17 a5 d0 03 dc bd 97 f0 62 43 7d 48 19 ba 10 67 61 17 5f b9 80 51 cd 3c 86 6e 17 80 df 5d fb 9f d9 35 7b 25 df df d4 11 77 d5 cb b1 dc a7 e4 3c f6 13 a2 b3 4e 02 a7 b9 1d a9 27 fe f2 77 9e 1d a5 59 bd 9b 1a 72 7a a8 84 eb 01 56 bd 4c 49 40 4a Data Ascii: s`(2;&s*\Qy#S?js 7YW^'8WK:6}5$.tR` u6J%jiL^Xt`GWv[ncv<SN6".+b6bC}Hga_Q<n]5{%w<N'wYrzVLI@J
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 7e 3e 76 de 73 bd a8 bc d7 7f b1 67 cc 75 05 74 29 ae b8 5e a3 9a ae 83 fe de 51 21 f8 71 1a 02 bc ee bc a8 52 90 71 0c d8 ad 9c 73 01 1c 77 02 ee c6 10 24 23 b4 c7 dd df cc 8c 50 4b 6c cc 97 44 c6 43 68 50 54 d5 fc 61 51 ee d6 dc e8 0f 04 0e 33 39 e6 44 47 41 bc d4 c7 31 a7 48 e9 12 5c 5d 08 ee e1 52 59 24 d9 e9 3c 5a 56 ec 68 ad 96 84 7e 1e 35 8e 67 53 83 74 c1 41 ed 2d 56 f4 88 a8 93 73 d6 70 a7 82 8d 3e 0c 58 60 6d 3b ee 62 2a 61 3f 80 21 a0 9f 65 04 27 aa 0d b9 62 cc d9 33 5b e2 ec c2 50 7a c7 61 c0 9f 02 d8 4a 9a 39 1d 0b d8 72 d4 09 1f d0 d8 1b ad a5 26 b7 93 30 a3 4b ac 53 7d c8 29 00 0b e7 6f cc 36 16 43 78 a1 51 70 c5 ee 3f 93 f4 f1 87 f7 00 90 43 a4 1a bf 44 83 7f c0 dc e5 ce ac 80 76 05 a6 d0 54 bb 22 53 4c ad 39 80 3b a7 f5 7e 06 42 72 ef 68 Data Ascii: ~>vsgut)^Q!qRqsw$#PKlDChPTaQ39DGA1H\]RY$<ZVh~5gStA-Vsp>X`m;b*a?!e'b3[PzaJ9r&0KS})o6CxQp?CDvT"SL9;~Brh
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: c6 ea 57 05 5a 77 c8 0e dc b6 cf e6 b6 1e de ef 7a d4 f9 d6 29 d2 c5 e7 81 28 18 04 00 f9 f8 b8 e9 64 cb 4d 08 df f6 4c e3 16 c4 67 b2 11 45 f9 cc 2c 32 5f 2b 85 21 61 63 42 f6 7a 64 e4 de cd 64 13 7f 88 43 55 8f 4f e3 bf f2 aa ba 20 a9 a1 f7 b0 fe 5a b9 99 63 32 50 66 86 32 63 52 38 06 6c d8 d0 e3 d2 58 48 17 b4 63 52 5e 20 24 65 d0 12 ea aa ff e2 34 09 b8 e1 fe cd b6 2d a7 b0 15 1f 17 ee 5a 30 13 fd 87 de 12 9e f9 57 ee 13 66 b8 d2 29 da 67 4d 30 e5 9b b9 91 d6 55 70 b1 ae 3a af 09 47 43 72 cf e4 c2 53 05 11 3f f7 00 b9 35 73 2d 27 2e fa e8 2e 39 85 e0 f7 d9 e9 2b 42 6e ec 3c 8f 2e 24 9c 4f 1c e1 6c d7 dc 8e cc c6 18 96 fb c7 be a1 51 86 47 9f 66 5f 46 15 60 a1 28 4f 4b 8c ca 40 fb 8b 01 21 f5 db 63 8d fa a1 5f 8a 9f df b4 65 04 05 48 8f e6 cc 8b b9 c5 Data Ascii: WZwz)(dMLgE,2_+!acBzddCUO Zc2Pf2cR8lXHcR^ $e4-Z0Wf)gM0Up:GCrS?5s-'..9+Bn<.$OlQGf_F`(OK@!c_eH
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 16 0f a5 d6 1d 22 1d 22 61 f2 ce f8 35 2a ea 0a b5 c9 43 b5 7c 1c b0 39 86 88 fc 6b 23 f5 11 a0 fc dd 31 d7 f9 3b dd 7c d5 fa 16 3a e8 31 6f b8 ee ae 93 09 77 27 25 19 10 af b5 05 e5 15 be 8c 2c 08 22 97 dc ee 8a ba e1 15 9d 56 ca a4 73 f5 dd 60 cd 08 18 12 44 0f 6c bf 68 df 16 60 c4 c9 62 a4 62 41 2e 23 62 b8 ef 23 9b 15 08 d6 73 76 d3 eb fb 21 50 72 73 48 a4 59 bd 5c da b6 e9 b3 30 0b f8 6c 4d 09 6b 13 c7 d4 a0 2e b7 6b b8 19 df 70 94 0c c8 ba db 48 c1 22 28 3e 8f fd 7a e3 2b a3 1c 3a f9 37 cb 11 eb 36 08 5c 45 e4 cb 3f f7 ff 46 6d 62 40 ad 68 ed c6 94 04 8c 21 40 d4 ea 5c 00 5b 0a 9f 41 3f b1 e3 b7 b2 e6 e1 c5 3b f5 29 72 e7 8b 27 c3 3f 75 1a 2a 12 c6 d9 6d 75 3e 25 d6 f0 26 87 47 e1 ac 62 96 4e 2e d4 11 b1 eb d8 7e 20 49 a7 25 87 75 36 a8 7c b1 94 77 Data Ascii: ""a5C\|9k#1;\|:1ow'%,"Vs`Dlh`bbA.#b#sv!PrsHY\0lMk.kpH"(>z+:76\E?Fmb@h!@\[A?;)r'?umu>%&GbN.~ I%u6\|w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49778	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:25 UTC	763	OUT	GET /uu/api/res/1.2/tXCn99NsQ3wJ0BycVro10Q--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/fbab62a0-ed4a-11ee-bdf3-f469c68a66f4.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:26 UTC	1283	IN	HTTP/1.1 200 OK Content-Length: 9944 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 217197692562078129425292227957531936545,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="fbab62a0-ed4a-11ee-bdf3-f469c68a66f4.webp" Edge-Cache-Tag: 217197692562078129425292227957531936545,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "74f0368647e498b5482e2d4b6cd5d04f" Last-Modified: Thu, 28 Mar 2024 21:34:44 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=356,height=180,bytes=9944,owidth=5875,oheight=3308,obytes=2454337,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: f521e3c8935eb667fefb440b163b201f Accept-Ranges: bytes Date: Thu, 28 Mar 2024 21:48:20 GMT X-Served-By: cache-iad-kjyo7100158-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711662501.819791,VS0,VE1 Age: 10386 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: f521e3c8935eb667fefb440b163b201f cld_by: cache-iad-kjyo7100158-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1
2024-03-29 00:41:26 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 52 49 46 46 d0 26 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 63 01 00 b3 00 00 49 43 43 50 30 02 00 00 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 cf 00 06 00 03 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: RIFF&WEBPVP8X cICCP00ADBEmntrRGB XYZ acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 6d ab a6 22 b3 3b ae d5 ac 45 3f 55 f0 9c 14 2e 5c 42 5e ed 08 e2 35 ee 16 47 6d 89 87 ef f0 1c 93 2b 29 26 f7 37 8b 02 3d a7 f6 82 22 c2 ce 9f bf 8e f3 81 01 90 d9 82 b0 f6 62 d5 6f 4f 2c 16 46 59 86 70 93 ef 4a 0c 46 48 0d 45 f0 cb 14 77 e2 a3 99 eb 2f ad 51 f4 29 56 db 78 2a 28 d6 13 55 3c f3 3b cb c8 d6 36 7a 36 e9 5a ff 3a b8 75 f6 be 4c c8 8d 45 80 0d 34 1e ee b7 ad 4f 27 85 04 9a 13 7b fa 48 f7 53 1f d6 00 c2 76 71 bf da 18 2b 37 d9 a9 bd 9c d7 42 16 b5 2a b6 1b a7 69 66 44 33 c1 11 3a 2f 9f d1 b6 7d 8d 73 65 00 07 67 e9 d7 27 e1 49 86 f4 58 eb 70 1d 15 b1 d2 ee fa cb be 9e ad 5c ae e8 71 98 30 98 31 ef aa 01 3e 0f 57 85 55 d1 1e dd d9 8a 6a 16 fb bb 41 c0 9f 60 b9 3a c2 c3 33 57 ac 20 69 2b 16 2e d2 4a 80 41 cd 48 ae 85 5c 3e b9 cb f1 7a 95 cb 71 Data Ascii: m";E?U.\B^5Gm+)&7="boO,FYpJFHEw/Q)Vx(U<;6z6Z:uLE4O'{HSvq+7BifD3:/}seg'IXp\q01>WUjA`:3W i+.JAH\>zq
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 61 52 44 ec a7 c9 9a a2 b1 e4 0d 4e 8e 3f 46 1d 3d 92 e8 b7 b4 8b 37 cd 90 bf 2d f3 6a a8 8e db 4e 4c 19 ff ed df fe d5 2e 6c 96 5c cd 2e 8d 4d 50 99 d8 89 33 e5 5f 3e 8c f6 2d 85 35 56 63 6b de 2b 60 60 30 f7 e4 22 56 09 76 0e d4 7f 1a 24 1e 49 16 12 73 0f 1c 83 81 a3 b9 b0 22 f4 9d 27 ad 5c 6f 47 6d 33 b2 f7 0a 61 6a d7 7e f2 38 77 7c bb 84 73 2a 9b 4f 2c 07 76 57 48 aa 19 d8 b6 22 e2 c9 67 47 db b8 53 57 1a 35 b3 6d 6d 24 b7 4f 5f d5 f4 18 3a 9c 5f 5a 99 01 0c ca 45 d4 46 b1 51 3b 0a 26 ef c5 62 01 3d 6d af fe 1c 4d 33 67 5e 29 8d bb 3c 5c 9b 07 5d 29 79 be 23 3e 7c e8 3c bc d3 59 00 1b 4c e0 a9 5f e8 4b d0 c0 45 3f 09 bb c3 6c 81 9d 6c ea 64 7f 4a dd d3 dc 69 2a a7 04 c9 68 78 57 d7 16 26 29 27 05 a9 d3 dc 87 cf 30 d3 f0 94 8a 6a 7e e7 70 b6 50 e9 92 Data Ascii: aRDN?F=7-jNL.l\.MP3_>-5Vck+``0"Vv$Is"'\oGm3aj~8w\|sO,vWH"gGSW5mm$O_:_ZEFQ;&b=mM3g^)<\])y#>\|<YL_KE?lldJihxW&)'0j~pP
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 5a 3b 9c 7a 01 31 b8 77 fa b8 7e 2b ff 68 8b 23 7a 1a 5b 24 c1 91 e7 10 15 e8 1e 0f c7 0e 11 a6 d1 a1 ed 57 50 71 1a b2 17 f0 e6 f1 25 07 df e0 78 82 ca cc 41 c9 98 38 7f 7c 27 9e f5 8b 67 48 c2 43 1a 51 c3 c5 ee 4c 4a 54 fa b9 4c 67 cf d4 b4 b6 be d1 9e c7 2f 5c 17 3e 3a 8b 7c 5e 73 2b c8 6b 45 49 69 ba 1b ab d3 74 0a 6b 15 50 d9 18 10 b5 10 3e a1 3f eb 1c 1e 08 29 77 34 61 09 90 00 7f 17 18 43 e6 2a f1 d4 1d 82 b9 1e 8c 22 95 b7 78 2e a9 47 e0 80 42 79 7a 6f 8d d5 16 79 85 fd 2b 90 29 eb bc 33 f4 43 ef 13 8a 0d e9 6f 02 ee 95 2a 76 59 c4 70 67 8b 3d d8 8b 79 1e 40 fd b8 25 41 85 dc 3a 3e 8a 85 e5 48 e1 b4 44 71 de 12 c5 a5 2c 61 7b bc ef ca 22 ce 45 d3 23 1b 65 13 aa dd 45 65 5a c2 74 15 c3 02 07 9b 99 08 d0 a7 b3 75 7f 23 50 5d d3 17 1f d9 a5 ea 47 04 Data Ascii: Z;z1w~+h#z[$WPq%xA8\|'gHCQLJTLg/\>:\|^s+kEIitkP>?)w4aC"x.GByzoy+)3CovYpg=y@%A:>HDq,a{"E#eEeZtu#P]G
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 06 e8 8f 2a 1c 29 04 57 db f6 61 2d e8 fa a7 d8 47 63 41 64 11 32 e7 85 39 0b e7 11 34 f9 4f b9 31 30 3f 1f 4f bb f4 a4 09 f1 ce fe f3 72 22 8f 76 c8 5f e0 14 15 9e 94 86 48 f3 e6 85 dd e1 0d e9 63 92 f9 6f 22 a6 7d ce 23 11 9e 31 f4 7b 04 dd f0 89 2f 48 e3 22 94 7e 8e e3 5a 5d 41 c8 98 ad 2a 5d 65 01 98 e8 9e 46 95 6a 2c 63 83 64 b2 36 d1 34 15 a0 cf 03 be de e8 f8 22 3d 02 6b 1f ad f7 ed fb 33 b6 60 c1 a5 f2 eb c2 f8 ef 14 fd 62 af 03 00 bf c1 33 10 fc 6f c6 ae 25 5d 69 2f 5c 1f be 4f 03 27 fb 6e 3f fc c7 c0 f5 81 98 e5 30 f4 7b 15 2f 46 2c 0f 8b f9 d1 a5 cf 93 bf 6a 31 3a 30 53 eb e0 76 28 9b c8 a3 ff 14 67 d5 bd 49 f0 5f c2 4b 68 6e 1e 4b fb eb 7f 8d 3d ab 0a 86 b7 21 a1 17 7d 36 de 5f 42 75 92 23 fe 68 ad 8b e2 c0 8a 51 c3 90 b3 5c 9c 8b e6 37 33 82 Data Ascii: )Wa-GcAd294O10?Or"v_Hco"}#1{/H"~Z]A]eFj,cd64"=k3`b3o%]i/\O'n?0{/F,j1:0Sv(gI_KhnK=!}6_Bu#hQ\73
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 61 79 59 65 36 e2 2b 1f 31 b4 75 44 78 78 97 4d 6b 4e 17 32 7e 95 66 0e b2 50 78 7d 9b fe 7d ad 63 53 72 66 0d 00 a1 15 38 f6 28 6f c3 c3 f8 67 e8 16 ee 8b b9 da 34 9d 95 64 66 93 f7 7c 14 55 ce 00 1d ba 9a e4 d5 d1 3b 28 10 d1 4b 4c 62 93 a0 db 40 58 81 63 f8 b8 f0 51 d4 31 e0 2d b5 23 d1 e2 8e 87 07 4a 8c 24 09 64 9f 98 54 89 d9 db 15 d4 4c 67 0c 71 80 c8 8e 30 e1 b7 c2 2a 9b 70 04 bb e0 b8 ea 88 a4 70 0d 5d 98 60 4a ce 5a 9d 59 b9 d1 5e 5b b7 7e f5 cc 1c f7 e1 23 a7 1e d2 2a 58 7a 6f fa da 28 34 dc 23 1f c8 05 72 c2 af 21 33 de 71 eb d3 e5 da 05 9c f6 70 79 7a 59 6d e8 f9 98 aa ac 69 36 12 96 35 4e 07 19 3c 66 0f f3 93 fb 70 98 d8 4a 9d 70 9e ff 48 0e e2 53 95 c8 b8 20 64 b5 5c 66 76 d0 99 29 80 4f 5a a9 66 97 ea 79 bb 32 c7 78 b8 90 ce 4d bb 9a 85 a2 Data Ascii: ayYe6+1uDxxMkN2~fPx}}cSrf8(og4df\|U;(KLb@XcQ1-#J$dTLgq0pp]`JZY^[~#Xzo(4#r!3qpyzYmi65N<fpJpHS d\fv)OZfy2xM
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 1b 96 35 66 43 07 d0 b6 cb 84 94 74 f5 6e 19 f5 f0 af 5a d2 1d 04 cd 5b fc 32 47 b7 32 a7 66 8f f9 43 ec e6 46 0a fd aa 22 a8 a3 06 d5 f5 d7 da b1 27 c5 0e 3f c7 0a 26 9a da a2 e2 49 21 e9 a1 82 bc 78 7d ae 23 34 83 31 0c 01 57 c1 7b f7 32 47 e0 81 33 35 6b 67 32 b3 ad 8e 25 eb 21 ef d0 13 1f 69 59 e2 d1 75 f9 7d 31 d3 b5 be d5 c0 2d af 79 30 20 46 01 25 17 f1 f1 ae c5 81 33 8f 3b ff 55 aa 32 25 68 e5 c9 e7 58 8f 52 d4 0c 05 d9 dc 46 30 92 63 10 ab 9b 1c e7 69 07 48 ba 98 35 00 e5 36 6d 7d 7a dc 9c 79 1a f2 95 d7 21 19 36 bf 34 1b 4e 35 de 86 aa 99 fc 94 da 71 23 29 9a b2 68 66 f0 82 c0 9e 64 5b a8 87 a7 ce 85 f2 27 d1 ee 74 54 12 1b f1 09 9f c8 89 b1 12 78 85 26 ee 29 07 fe a6 db 9c db 71 ff 81 aa 1b 87 36 60 44 b3 d7 83 73 02 bb 89 60 2a c7 54 a0 c8 1d Data Ascii: 5fCtnZ[2G2fCF"'?&I!x}#41W{2G35kg2%!iYu}1-y0 F%3;U2%hXRF0ciH56m}zy!64N5q#)hfd['tTx&)q6`Ds`*T
2024-03-29 00:41:26 UTC	844	IN	Data Raw: 28 cf e9 42 99 48 36 14 43 47 14 bf 0a 56 fd 35 a4 10 aa cb 1c ca fc 95 7c c5 50 88 4d bc 38 93 c1 c0 25 00 fe 4c 49 37 fa 0b a3 e8 c5 31 2b fe 89 90 25 a6 21 97 ad 7b f5 d6 98 8d 9c 1c 18 ca c3 95 01 cb 00 48 4a af 9b 28 0d 00 89 b6 77 77 db 6f 3c 38 eb 54 81 cd 62 b4 d7 94 c1 bc de 35 19 b1 27 94 4a 96 f9 63 9a 6f d1 7a 03 a0 45 e4 18 27 ac a2 6f 53 d8 e5 db 7f 1e 8b 05 ee 5e 76 88 88 be 3d 14 c3 ca 53 4a f0 b9 e7 4b a2 f5 8c 56 65 a4 08 c9 89 01 5a 84 4e bd 38 c6 e5 72 c2 31 a0 03 1f f8 33 9b d0 bc a0 ef 12 3d 00 71 64 32 2c c2 ae 71 17 b8 51 8b 27 1a 04 63 22 9c a8 9b f6 d4 47 2e 92 c4 15 00 a5 98 7f 46 42 82 84 a3 5e 93 54 9a f4 ca a5 db ac 7e 7c 76 89 eb 57 b9 1b a2 08 03 63 10 02 38 4d 51 ca 93 f8 96 5b c7 be e5 00 bb 86 3d ff c5 e5 17 e3 13 f5 17 Data Ascii: (BH6CGV5\|PM8%LI71+%!{HJ(wwo<8Tb5'JcozE'oS^v=SJKVeZN8r13=qd2,qQ'c"G.FB^T~\|vWc8MQ[=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49779	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:26 UTC	763	OUT	GET /uu/api/res/1.2/0zC5NXzRCqBOHX.B5QV02Q--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/6cfa7630-ed0f-11ee-bcd5-e9299db72d6c.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:26 UTC	1271	IN	HTTP/1.1 200 OK Content-Length: 6184 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 476109948304187328152412711835384141309,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="6cfa7630-ed0f-11ee-bcd5-e9299db72d6c.webp" Edge-Cache-Tag: 476109948304187328152412711835384141309,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "e38a51cad346f9c073c288cb0fb7a91b" Last-Modified: Thu, 28 Mar 2024 14:28:23 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=356,height=180,bytes=6184,owidth=3332,oheight=1876,obytes=1068000,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 418962f964b083ba848ee77c5f24f159 Accept-Ranges: bytes Date: Thu, 28 Mar 2024 14:31:51 GMT X-Served-By: cache-iad-kjyo7100120-IAD X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1711636311.122403,VS0,VE691 Age: 36575 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
2024-03-29 00:41:26 UTC	91	IN	Data Raw: 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 52 49 46 46 20 18 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 63 01 00 b3 00 00 49 43 43 50 24 02 00 00 00 00 02 24 61 70 70 6c 04 00 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 df 00 0a 00 0e 00 0d 00 08 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 61 70 70 6c e5 bb 0e 98 67 bd 46 cd 4b be 44 6e bd 1b 75 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 65 63 70 72 74 00 00 01 64 00 00 00 23 77 74 70 74 00 00 01 88 00 00 00 14 72 58 59 5a 00 00 01 9c 00 00 00 14 67 58 59 5a 00 00 01 b0 00 00 00 14 62 58 59 5a 00 00 01 c4 00 00 00 14 72 54 52 43 00 00 01 d8 00 00 00 20 63 Data Ascii: RIFF WEBPVP8X cICCP$$applmntrRGB XYZ 9acspAPPLAPPL-applgFKDnudescecprtd#wtptrXYZgXYZbXYZrTRC c
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: b0 50 90 f9 75 5a b3 71 b8 5f b1 23 e5 2c a7 a4 3d e3 b1 05 a9 1b 20 16 af ac 4c 1f 13 e6 49 8f 0e ff d6 c2 fc 9a 8a 9c 40 a0 b6 02 9a c1 19 16 d4 71 b6 20 3c 41 ca 12 9a e0 89 86 d0 c4 4f 4b 2f 84 d0 19 bb 54 a8 83 56 79 d1 ee d2 01 ff 4d 9c 99 e1 63 1f d9 7c da fc 12 d2 c2 97 bd 0f 6b b3 a3 d4 08 10 06 aa 2f 91 6f 18 32 ab ae 1a 96 2e 7c 8c 71 3c 53 59 19 90 a9 fe ef d3 ee 49 63 58 7a 23 ba 24 d2 81 ae 2c fc dc bd 24 06 7f 1d f9 83 6c 22 83 af e4 f8 97 a5 92 ed 8d 41 4a 0e 19 9a 00 9c f7 8a d0 93 b1 9d fb 3b 1a da a5 20 e3 aa 19 9d ce e0 bc 67 39 77 0e 68 53 cf a3 a8 01 b1 0b ae 0a b2 5c f3 8b de aa 48 ba 21 27 df 26 e5 17 b2 51 da 9e 6a 8a 13 e7 c4 1e fc 26 bc 15 1f 25 83 7f ff a8 71 dd 3b 06 01 0d fe d3 e1 db b5 e9 a9 d6 ba ee 15 1d 05 24 2a 19 f7 36 Data Ascii: PuZq_#,= LI@q <AOK/TVyMc\|k/o2.\|q<SYIcXz#$,$l"AJ; g9whS\H!'&Qj&%q;$*6
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 3c 97 81 cd 96 3d 40 e4 fc a4 04 04 b4 fa 8b 62 23 17 5f 0d 85 16 44 12 8d 0c 39 dd 38 4e e7 dd 74 0c f2 1d 85 21 99 10 0b 8c 8d 62 69 81 32 66 b4 b9 24 7d ec 63 13 fb 7c 02 0b a5 89 e3 b5 44 29 74 c5 be ef 84 9d 38 32 c5 b8 e9 64 29 91 15 64 b1 98 ef 94 be 36 48 18 c4 05 52 06 72 19 51 e8 97 d2 79 76 e1 5f 62 ea cb 32 1b 8e 4f 58 99 a8 44 5e 36 dc 40 b6 21 48 a7 ab bc ca 88 c9 54 19 27 00 88 e7 c9 03 a5 66 11 13 22 dd 5e 4c 65 68 7b 16 ef 02 8b 77 14 a4 1e 97 0a de e7 3d 79 f3 6f a6 d6 10 74 d9 d9 18 63 c2 12 95 d6 25 b7 14 e0 17 e0 6f 80 0f d7 1e 68 a5 5b 99 c3 67 51 bc 26 9e 18 ca 15 02 39 bc 79 10 5b f4 cd d5 da 14 ac 57 c7 6f 42 a0 b9 1d 10 a0 50 c3 cf fb 12 3d 10 53 32 cf d8 8f 10 fa 9e 24 49 b6 37 2c e2 f1 f9 01 40 aa 6a 34 f2 4d c1 e6 63 13 76 00 Data Ascii: <=@b#_D98Nt!bi2f$}c\|D)t82d)d6HRrQyv_b2OXD^6@!HT'f"^Leh{w=yotc%oh[gQ&9y[WoBP=S2$I7,@j4Mcv
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 94 08 df 97 d2 ce e8 40 90 2c fb a7 af ae ad 3e b3 e4 2d 38 88 c3 02 2b 24 80 44 1b 71 b7 ad 79 3a 4d 0d ba 2e 4c 7b 30 9b 09 1f 85 4a 23 cf b4 b0 f8 cd ab 88 3d 0c 6f fe 97 90 f7 7b 1f d7 98 b0 26 e2 15 fa 21 0f 9a e6 13 33 7c 0c 4e 02 e6 0c 3d 22 e4 42 96 f7 c5 ed 91 6e b6 13 7d 2b dc 00 c2 06 6b 24 69 6f 8e 56 69 54 6e a8 15 1b f3 11 f9 a2 48 0e 87 54 dd 1f 01 81 ed 58 56 0f 7c cc 0c 40 05 c0 5c 2b c7 f7 35 3d 99 45 52 4c d2 9d 39 f9 71 15 13 fb 6d 3c 9e 07 15 05 70 77 c6 96 93 e4 f6 26 9d f4 35 f3 86 89 e6 3c f0 58 ae d9 13 1e 3f 29 cd d8 a0 88 b0 77 18 3b 37 20 c3 29 66 76 77 39 07 16 99 a3 4c b8 21 09 af a8 bb e7 87 fb 54 79 f8 73 9b 1a bb 87 7f da 72 d4 d3 e1 b5 d2 7e 63 2f 72 e2 fc 3f 46 31 9d fa a3 85 3c 58 9b 14 2f 80 84 e6 bb 84 8f c1 49 52 fe Data Ascii: @,>-8+$Dqy:M.L{0J#=o{&!3\|N="Bn}+k$ioViTnHTXV\|@\+5=ERL9qm<pw&5<X?)w;7 )fvw9L!Tysr~c/r?F1<X/IR
2024-03-29 00:41:26 UTC	984	IN	Data Raw: 1b 10 17 c9 99 f6 9e 7f 8e bc 2f 29 d4 87 e0 f2 e1 3f eb 48 f5 3e 8a db e2 1e d7 7e cd 50 54 f0 cb cc 7c 19 b8 f3 e8 6c b0 01 17 82 03 2b 87 47 ab dc 62 61 57 f8 6c 9e 5b bb c9 7f 12 9a 82 89 18 99 9b 78 62 04 5a 4b ad fb 48 ff 51 5d d3 f0 9e 05 98 69 97 d4 76 1c 0e 46 8c c3 de 2d 27 45 68 53 1b 7a 15 b4 92 63 c6 25 be 4a a7 1b 64 b9 77 e1 1b 7a 27 6a 89 44 02 06 41 a2 1a 76 77 a2 54 07 4f 8f 7a 33 cd 8c d5 eb 01 08 50 72 7f 08 cd 80 52 f5 6b c7 c3 0f 72 1d 82 b9 b2 55 8b b5 5d 24 0c a9 de 1b 9e e1 53 22 23 83 c7 17 b6 06 c8 08 74 ba ff 91 34 75 3f 0f c1 46 28 94 2a fb 60 46 c4 8a f4 71 c8 c2 76 d9 da 41 26 8d 12 6b c9 c8 35 99 b2 d9 a0 3c 46 5e 4b 86 f2 f5 14 d0 7d 99 fc d7 3d ae 56 51 6d f5 43 2f 6d 79 62 f8 7f 9f e9 cb 93 41 da 72 c7 46 d4 c2 2d 43 31 Data Ascii: /)?H>~PT\|l+GbaWl[xbZKHQ]ivF-'EhSzc%Jdwz'jDAvwTOz3PrRkrU]$S"#t4u?F(*`FqvA&k5<F^K}=VQmC/mybArF-C1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49780	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:26 UTC	763	OUT	GET /uu/api/res/1.2/6LV1xKkHvH8HX5CXwFuudA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/bb6d35a0-ed05-11ee-a7db-56d6ebe93ed1.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:26 UTC	1197	IN	HTTP/1.1 200 OK Content-Length: 6256 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 221570947635363708689269832439671066939,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="bb6d35a0-ed05-11ee-a7db-56d6ebe93ed1.webp" Edge-Cache-Tag: 221570947635363708689269832439671066939,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "15720613809f18854bface3ed2935fbf" Expiration: expiry-date="Wed, 25 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 28 Mar 2024 13:28:20 GMT Server: ATS Surrogate-Reporting: width=356,height=180,bytes=6256,owidth=1800,oheight=1014,obytes=110279,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 28 Mar 2024 13:30:48 GMT X-Served-By: cache-lga21922-LGA X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1711632649.849731,VS0,VE81 Age: 40238 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-03-29 00:41:26 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 52 49 46 46 68 18 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 63 01 00 b3 00 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFhWEBPVP8X cICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 16 7d f9 30 1c b1 60 ac b7 f9 f2 e4 38 fb 9d 9d 10 4e d4 61 5d 47 ff 95 c1 d1 3d 43 fa a4 ff da 0f 78 7a 55 43 22 d7 4c 69 61 65 50 04 36 fc 04 eb 28 79 ef 0b e0 44 8e 0f 2b ab 3c 23 f7 f9 b9 07 02 3b 6e 20 37 3c 98 43 ce f7 94 e2 7d d0 5d 17 5a 59 01 6a 37 bf d6 d3 5a d7 42 53 b0 a3 8a 0e 70 e3 1e 45 36 b3 3d 32 0d 3f f2 66 20 25 33 a7 e7 23 26 08 c3 c3 cc 3f 1e cc cd 58 83 a1 c7 f4 c1 19 c3 72 b0 0c e0 82 d2 11 f0 b6 22 f9 21 1f 2c 55 79 de e7 79 00 0c 3b bc 68 dc af 6e c3 37 71 d4 be e7 f1 7e 74 95 b6 06 bb c6 e5 de 3d c1 58 6f 1d 64 84 ea cf 6f e7 1f e2 a0 6a 82 1a a2 5b 2a c3 05 ba 1a 34 77 c8 ca d2 f5 72 ad e7 8b 6c e6 0b 3c 18 b6 23 00 00 fe b0 43 ac fe 8a 89 ff fd 25 29 f8 94 a7 e9 48 fd eb 3f f9 af 31 46 c4 c3 3f 2d 23 46 2a cc 05 84 be 60 b0 6a Data Ascii: }0`8Na]G=CxzUC"LiaeP6(yD+<#;n 7<C}]ZYj7ZBSpE6=2?f %3#&?Xr"!,Uyy;hn7q~t=Xodoj[4wrl<#C%)H?1F?-#F`j
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 51 32 b1 6c be 78 61 73 1c af 85 93 43 f7 60 e0 db b2 da 71 05 b9 55 df 19 d9 2b a8 28 36 69 df cc 1f 03 ec 66 f1 4e 5d 45 8c e5 5d 96 da 69 4a 7f 90 2f 2e 58 4a 97 7c 9b df 7e 2b 16 9c 96 1c c5 c0 15 83 04 31 e1 e4 66 ac 28 00 28 e7 5d d7 b6 bb 2b 81 f7 f2 8f 28 70 ab 46 80 52 7c ab 80 d0 2a fc 80 ce 76 6c 31 f9 84 8c 4c 47 29 72 b7 5f 16 b7 78 e1 80 2a ac 36 10 f0 4e 15 0a 57 cb 21 b4 74 91 f2 84 2b 3c e3 ad d2 1d b3 8d 3e 72 4d c8 17 d9 de 3e 87 30 4f 10 c3 f1 86 df 7a cb 66 1f 1f a9 d7 73 8d 13 86 27 85 95 f6 79 67 b5 10 78 f5 d9 50 46 95 ae c0 ba 38 67 9a b0 2d 7a bc 50 5d a8 5f de 47 04 bf 87 68 e5 0f bf 95 93 11 b3 63 2e 7f ec 83 65 0d c5 4f 1c ea 43 60 77 5b 97 3d f1 3f dd 07 97 ed 03 62 d4 97 79 2b da 53 33 df 7d f0 21 24 15 7d 6f 31 7e c7 1e 23 Data Ascii: Q2lxasC`qU+(6ifN]E]iJ/.XJ\|~+1f((]+(pFR\|vl1LG)r_x6NW!t+<>rM>0Ozfs'ygxPF8g-zP]_Ghc.eOC`w[=?by+S3}!$}o1~#
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 9a 35 0b 66 90 ab 12 23 33 b0 5e d4 7e 78 51 b5 96 9c ec 5a 87 01 f7 1f a4 06 0d 7b 51 8d 3b 70 1e 59 ec f1 5d 6f 47 e8 4b e2 d9 f2 d8 e4 9e e6 06 46 9f 63 88 61 19 17 1d 61 b6 72 14 fc 2c 0a bd 88 1c 4a c3 85 15 27 17 cf 34 8b 38 a7 55 c2 b7 25 7f 66 2a 21 05 99 31 5c 01 f7 48 b2 fd aa 36 46 d4 5b 76 b7 02 44 1e a2 cc e4 42 cf a4 a9 4b de c1 78 5f 67 6f 76 4d 66 7b 6f 7d 43 2d bc ac e6 26 8a bd 55 03 83 df ab 55 41 51 0a 2d 03 de 0d 7c 92 03 c5 75 6d 5c cc 6e 5d 2a a2 4b 40 ba cd de fc 14 16 82 8b b2 1d ef d6 22 94 9e e9 e6 24 a4 f4 57 37 6f ce a8 2d ec fa 4c 82 88 52 52 b3 40 b6 c4 91 ff 9e 75 cd 8d d1 2d c6 da 62 0b b5 64 26 82 ed ff 9c 52 a3 d2 cc 3c 6e 18 75 aa 7d f6 da 0c 5e 59 46 85 20 91 49 ff e3 28 3c c7 7b 4c f7 9f aa 06 1d 4b f9 02 d6 e5 5e 6e Data Ascii: 5f#3^~xQZ{Q;pY]oGKFcaar,J'48U%f!1\H6F[vDBKx_govMf{o}C-&UUAQ-\|um\n]K@"$W7o-LRR@u-bd&R<nu}^YF I(<{LK^n
2024-03-29 00:41:26 UTC	1056	IN	Data Raw: ca c9 82 b5 d9 e3 ba 90 d0 35 be 18 29 6b 04 41 84 5d 2a c5 30 0a 9c e5 ec 1b 13 a6 9c f1 bf f9 b1 d9 6a 68 2a d3 47 40 3b fd ca 45 86 46 92 0a cf 46 40 0a 2a 64 be ee 89 aa 85 98 b2 73 a6 3b 24 fd 42 24 96 b3 c6 85 40 c4 54 ec 6d 87 65 10 21 53 12 f5 20 1a cd f8 34 cf 7c d8 f0 f2 5a 14 96 a1 8c 7c c8 a7 b4 c2 3c 3b f3 9a 86 83 2b ba 81 bc b7 4b 1b 08 bc 57 11 2e a4 ec ff 4d 4b 70 5b 8f b1 5f ef de c1 f7 58 6c 2b 86 a4 64 f4 5c d1 69 95 91 dd 1d 0e 89 1c 28 80 6c a4 67 5c d0 13 83 d2 82 c0 fc fc f6 3c e8 80 41 da 10 6e 45 61 cb 4f f5 bc 5e 01 69 94 b3 d5 77 df 75 ab 17 8b 0c 39 4a 94 05 2a cb f8 2f 04 19 a1 b3 c0 38 03 55 d0 03 48 1a dc 36 8f e8 22 36 ab 99 ec ea d3 32 11 11 93 e4 82 15 ff 73 e7 97 f1 62 70 d7 04 b2 58 05 cd 5c d8 4a d9 39 4f f6 6e 49 1f Data Ascii: 5)kA]0jhG@;EFF@ds;$B$@Tme!S 4\|Z\|<;+KW.MKp[_Xl+d\i(lg\<AnEaO^iwu9J/8UH6"62sbpX\J9OnI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49781	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:26 UTC	1092	OUT	GET /info/p.gif?apptype=default&beaconType=pageRenderEnd&code=pageRender&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&device=desktop&intl=us&rid=2vl5n89j0c3hk&site=fp&t=1711672884342 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4
2024-03-29 00:41:26 UTC	1138	IN	HTTP/1.1 204 No Content referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-type: image/gif content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Fri, 29 Mar 2024 00:41:26 GMT x-envoy-upstream-service-time: 1 server: ATS Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=5vrur9lj0c3hm&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49782	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:26 UTC	847	OUT	GET /ybar/cerebro_min.js HTTP/1.1 Host: edge-mcdn.secure.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4
2024-03-29 00:41:26 UTC	803	IN	HTTP/1.1 200 OK x-amz-id-2: rISccO8FryKe8vBHcOUdPB1xsG4LzlKzpd8GgXs05fNhsWiQNTMRQVmUcP0BxQbX3YyfAAAzAB60f9oQ+K273Q== x-amz-request-id: D9Z6XMDZ6M6Q5W2V Date: Thu, 28 Mar 2024 11:58:57 GMT Last-Modified: Thu, 05 May 2022 20:34:05 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 5636 Referrer-Policy: no-referrer-when-downgrade Etag: "0ccb51bc1dd6980920da39e008a599e0" Age: 45750 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 76 61 72 20 57 4f 52 4b 5f 53 45 52 56 45 52 3d 22 68 74 74 70 73 3a 2f 2f 65 64 67 65 2d 6d 63 64 6e 2e 73 65 63 75 72 65 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 79 62 61 72 2f 65 78 70 2e 6a 73 6f 6e 22 2c 54 49 4d 45 4f 55 54 3d 32 65 33 2c 43 65 72 65 62 72 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 75 70 6c 6f 61 64 54 79 70 65 3d 22 69 6e 64 69 76 69 64 75 61 6c 22 2c 74 68 69 73 2e 65 78 70 43 6f 75 6e 74 3d 30 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 3d 7b 7d 2c 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 3d 30 7d 72 65 74 75 72 6e 20 65 2e 72 75 6e 45 78 70 65 72 69 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 6e 65 77 20 65 29 2e 5f 66 65 74 63 68 57 6f 72 6b 28 29 7d 2c 65 2e 73 65 6e 64 42 65 61 63 6f Data Ascii: var WORK_SERVER="https://edge-mcdn.secure.yahoo.com/ybar/exp.json",TIMEOUT=2e3,Cerebro=function(){function e(){this.uploadType="individual",this.expCount=0,this.pending={},this.complete=0}return e.runExperiment=function(){(new e)._fetchWork()},e.sendBeaco
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 69 73 20 30 22 29 3b 65 6c 73 65 7b 69 66 28 6e 3e 3d 65 2e 65 78 70 4c 69 73 74 2e 6c 65 6e 67 74 68 29 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 6d 61 72 6b 65 64 20 61 6c 6c 20 65 78 70 65 72 69 6d 65 6e 74 73 20 74 6f 20 72 75 6e 20 61 73 20 65 78 70 43 6f 75 6e 74 20 3e 3d 20 65 78 70 4c 69 73 74 20 6c 65 6e 67 74 68 22 29 2c 72 3d 65 2e 65 78 70 4c 69 73 74 3b 65 6c 73 65 20 69 66 28 22 72 61 6e 64 6f 6d 22 3d 3d 3d 74 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 6d 61 72 6b 65 64 20 22 2b 6e 2b 22 20 72 61 6e 64 6f 6d 20 65 78 70 65 72 69 6d 65 6e 74 73 20 74 6f 20 72 75 6e 22 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 3b 69 2b 2b 29 7b 76 61 72 20 73 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 65 2e 65 78 Data Ascii: is 0");else{if(n>=e.expList.length)console.log("marked all experiments to run as expCount >= expList length"),r=e.expList;else if("random"===t){console.log("marked "+n+" random experiments to run");for(var i=0;i<n;i++){var s=Math.floor(Math.random()*(e.ex
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 65 61 63 6f 6e 73 22 29 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 6e 64 42 65 61 63 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6d 3d 74 68 69 73 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 74 61 72 74 54 69 6d 65 3d 30 2c 74 68 69 73 2e 65 6e 64 54 69 6d 65 3d 30 2c 74 68 69 73 2e 73 6f 75 72 63 65 3d 22 64 65 66 61 75 6c 74 22 7d 2c 74 3d 30 2c 6f 3d 65 3b 74 3c 6f 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 6f 5b 74 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 72 2c 69 2c 73 2c 6f 2c 61 2c 75 2c 63 29 7b 76 61 72 20 6c 2c 70 2c 64 2c 66 2c 68 3b 30 3c 61 2e 6c 65 6e 67 74 68 7c 7c 30 3c 6f 2e 6c 65 6e 67 74 68 3f 28 70 3d 6e 65 77 20 6e 2c 64 3d 21 31 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 Data Ascii: eacons")}},e.prototype._sendBeacons=function(e){for(var m=this,n=function(){this.startTime=0,this.endTime=0,this.source="default"},t=0,o=e;t<o.length;t++){var r=o[t];!function(r,i,s,o,a,u,c){var l,p,d,f,h;0<a.length\|\|0<o.length?(p=new n,d=!1,new Promise(f
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 29 2c 66 7c 7c 65 28 29 7d 2c 68 2e 73 74 61 72 74 54 69 6d 65 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 6f 2e 73 72 63 3d 72 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 70 65 72 66 6f 72 6d 61 6e 63 65 22 69 6e 20 77 69 6e 64 6f 77 26 26 22 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 22 69 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7b 68 2e 65 6e 64 54 69 6d 65 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 68 2e 73 6f 75 72 63 65 3d 22 69 6d 61 67 65 22 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 4e 61 6d 65 28 72 29 3b 6d 2e 65 78 70 43 6f 75 6e 74 3d 31 3c 65 2e 6c 65 6e 67 74 68 3f 6d 2e 65 78 70 43 6f 75 6e Data Ascii: clearTimeout(t),f\|\|e()},h.startTime=Date.now(),o.src=r}).then(function(){if("performance"in window&&"getEntriesByType"in window.performance){h.endTime=Date.now(),h.source="image";var e=window.performance.getEntriesByName(r);m.expCount=1<e.length?m.expCoun
2024-03-29 00:41:26 UTC	436	IN	Data Raw: 22 2c 6c 3d 5b 5d 2c 69 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2b 3d 65 2e 72 65 70 6c 61 63 65 28 22 3c 42 45 41 43 4f 4e 3e 22 2c 6e 29 2c 6c 2e 70 75 73 68 28 65 2e 72 65 70 6c 61 63 65 28 22 3c 42 45 41 43 4f 4e 3e 22 2c 6e 29 29 7d 29 2c 22 67 72 6f 75 70 22 3d 3d 74 68 69 73 2e 75 70 6c 6f 61 64 54 79 70 65 3f 28 63 20 69 6e 20 74 68 69 73 2e 70 65 6e 64 69 6e 67 7c 7c 28 74 68 69 73 2e 70 65 6e 64 69 6e 67 5b 63 5d 3d 5b 5d 29 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 5b 63 5d 2e 70 75 73 68 28 5b 75 2c 6c 5d 29 2c 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 2b 2b 2c 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 3d 3d 74 68 69 73 2e 65 78 70 43 6f 75 6e 74 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 70 65 6e 64 69 6e 67 29 Data Ascii: ",l=[],i.forEach(function(e){c+=e.replace("<BEACON>",n),l.push(e.replace("<BEACON>",n))}),"group"==this.uploadType?(c in this.pending\|\|(this.pending[c]=[]),this.pending[c].push([u,l]),this.complete++,this.complete==this.expCount&&Object.keys(this.pending)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49783	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:26 UTC	611	OUT	GET /pv/static/ms/trendingNow-flameIcon.yhome-variable.a2368adb8251677d29ac1399a6f34c43.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:26 UTC	800	IN	HTTP/1.1 200 OK x-amz-id-2: TFRIq4pOVh4Fn+erXgbMIi6v5IdciL2lCOKeof2kPqtDT0MjI8RvUfeTHV2NP1/m9YbutAsea03gO00bbu6Isg== x-amz-request-id: NRJZNQMQ6ZVD14TJ Date: Tue, 26 Mar 2024 22:34:10 GMT Last-Modified: Tue, 28 Mar 2023 10:17:50 GMT ETag: "da05f5d596c887a6a5221011fa70d158" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 1610 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 180437 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 3a 72 6f 6f 74 2c 68 74 6d 6c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 64 61 72 6b 5d 20 5b 64 61 74 61 2d 6d 61 69 6e 74 61 69 6e 2d 63 6f 6c 6f 72 5d 2c 68 74 6d 6c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 2d 65 6e 61 62 6c 65 64 5d 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 73 72 63 68 2d 74 6e 2d 66 6c 61 6d 65 2d 63 6f 6c 6f 72 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 2d 36 33 2e 39 34 64 65 67 2c 20 23 31 44 32 32 32 38 20 30 25 2c 20 23 31 44 32 32 32 38 20 31 36 2e 31 25 2c 20 23 42 32 33 39 30 39 20 31 36 2e 31 25 2c 20 23 42 32 33 39 30 39 20 33 32 2e 32 25 2c 20 23 46 46 35 32 30 44 20 33 32 2e 32 25 2c 20 23 46 46 35 32 30 44 20 34 38 2e 32 25 2c 20 23 31 44 32 32 32 Data Ascii: :root,html[data-color-scheme=dark] [data-maintain-color],html[data-color-theme-enabled][data-color-scheme=light]{--srch-tn-flame-color:linear-gradient(-63.94deg, #1D2228 0%, #1D2228 16.1%, #B23909 16.1%, #B23909 32.2%, #FF520D 32.2%, #FF520D 48.2%, #1D222
2024-03-29 00:41:26 UTC	310	IN	Data Raw: 39 20 33 32 2e 32 25 2c 20 23 46 46 35 32 30 44 20 33 32 2e 32 25 2c 20 23 46 46 35 32 30 44 20 34 38 2e 32 25 2c 20 23 31 44 32 32 32 38 20 34 38 2e 32 25 2c 20 23 31 44 32 32 32 38 20 36 37 2e 38 25 2c 20 23 42 32 33 39 30 39 20 36 37 2e 38 25 2c 20 23 42 32 33 39 30 39 20 38 33 2e 39 25 2c 20 23 46 46 35 32 30 44 20 38 33 2e 39 25 29 3b 2d 2d 73 72 63 68 2d 74 6e 2d 66 6c 61 6d 65 2d 69 63 6f 6e 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 70 76 2f 73 74 61 74 69 63 2f 69 6d 67 2f 69 63 6f 6e 2d 66 6c 61 6d 65 2d 6c 69 67 68 74 2d 32 30 32 33 30 33 30 31 30 33 35 32 2e 67 69 66 27 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 72 63 68 54 6e 54 65 78 74 41 6e 69 6d 74 69 6f 6e 7b 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 Data Ascii: 9 32.2%, #FF520D 32.2%, #FF520D 48.2%, #1D2228 48.2%, #1D2228 67.8%, #B23909 67.8%, #B23909 83.9%, #FF520D 83.9%);--srch-tn-flame-icon:url('https://s.yimg.com/pv/static/img/icon-flame-light-202303010352.gif')}}@keyframes srchTnTextAnimtion{0%{background-p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49784	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:26 UTC	740	OUT	GET /uu/api/res/1.2/aKMXvSoVtv7RskBHCCkbOw--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/644d1fd159a0d4d95b364a1ff409b0d5.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:26 UTC	1288	IN	HTTP/1.1 200 OK Content-Length: 12472 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 442462528586941774434289730395252732012,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="644d1fd159a0d4d95b364a1ff409b0d5.webp" Edge-Cache-Tag: 442462528586941774434289730395252732012,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "3f67ce8c697ba06a6ba84e4861da27d3" Expiration: expiry-date="Wed, 25 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 28 Mar 2024 14:54:33 GMT Server: ATS Surrogate-Reporting: width=356,height=180,bytes=12472,owidth=5296,oheight=2979,obytes=9843806,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 28 Mar 2024 15:04:30 GMT X-Served-By: cache-iad-kiad7000073-IAD X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1711638271.539289,VS0,VE44 Age: 34616 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_by: cache-iad-kiad7000073-IAD cld_latency: 44 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1
2024-03-29 00:41:26 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 52 49 46 46 b0 30 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 63 01 00 b3 00 00 49 43 43 50 30 02 00 00 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: RIFF0WEBPVP8X cICCP00ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: f3 1d e9 c5 79 00 e1 58 e3 7e 84 f5 e2 ad 4f 83 be c6 4f ac 68 fe 2a ac 44 02 b3 ae be fc 16 76 5c 86 67 88 2b 63 04 67 67 ff cb e3 1a 44 8e 91 4c de 8c d5 3b 8e 89 ce 3a 45 6b 5c 88 bb 9f 78 aa 92 1b 3c e9 03 a3 b9 7b 18 cb 1b ef b0 39 a2 99 73 99 17 d0 a1 f5 9a a8 96 01 ff 50 a2 e9 93 48 0c c6 5d 65 29 cf 54 7b 26 72 ab 21 58 04 b6 87 31 22 01 cf 6e fe ea 47 50 d9 ef 18 18 5a f6 3b e5 fd 34 d9 69 68 c1 e8 4c a7 90 65 d7 59 e2 27 a9 85 07 c8 81 56 7a 18 8a 2e 9d 99 8d 77 a5 00 a1 ce d2 2a 44 81 e3 0a eb e1 e8 cc dc e4 63 07 b7 cc 68 1a 6b 43 70 db 11 ae 34 8e b7 e1 b9 ae aa c8 59 99 5c 7b 18 45 34 9a c6 35 bb 69 5c 04 ae b3 d1 4f 3a bb 0d cf 8f cf 59 7c b1 2d 6f ac 3b 1b 88 20 23 c9 ef 75 71 b8 63 f6 e6 95 24 75 09 f8 a0 a5 26 50 41 e0 64 91 91 54 c5 1a Data Ascii: yX~OOhDv\g+cggDL;:Ek\x<{9sPH]e)T{&r!X1"nGPZ;4ihLeY'Vz.wDchkCp4Y\{E45i\O:Y\|-o; #uqc$u&PAdT
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: aa e8 e3 5f d1 a4 78 87 e2 75 50 cd 32 a0 8a c4 44 42 21 18 a6 52 1c e7 3e c1 af 2b 3b 7d ef 98 60 de 96 bf eb d0 36 e2 4b b9 31 a3 b1 10 b2 ef 8b f7 64 d4 f3 87 cf 22 36 b9 23 ee 25 47 9b 6b 94 0a f6 32 c7 c1 5a ba 88 aa e7 88 e8 fd a8 d4 20 7e 5a 36 b5 d2 27 7d 55 fa cb 11 7b c7 87 4f 1b b1 e2 eb e9 ca 54 3f 75 de 0c 0c 81 09 ae b3 e4 4d 79 cb 95 07 09 1a 65 0e 72 24 e2 7a 24 14 fa c4 77 a5 03 cc d3 46 d4 fa d2 1b 46 66 bd 13 cf d0 df 41 56 76 22 2f 34 a3 53 4e a6 a4 9c a3 ad b2 72 f4 9f bb 2a 3b d5 cf 80 e7 18 de 09 b3 7e b6 31 6c ec bc fd fc 18 28 c8 1c 72 f2 85 83 89 ed 84 e4 21 21 80 83 bc 11 6c 90 c8 fe 7e 69 7b 17 6d 8a 59 9c 62 e0 53 46 27 e7 f4 4e 7f e9 3b 9e 11 fc f2 10 d1 cb e6 6f 52 db cc 35 d4 2f e0 44 e4 14 e7 e8 bb 46 34 d1 58 fc 13 51 f2 Data Ascii: _xuP2DB!R>+;}`6K1d"6#%Gk2Z ~Z6'}U{OT?uMyer$z$wFFfAVv"/4SNr*;~1l(r!!l~i{mYbSF'N;oR5/DF4XQ
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: d3 36 63 5f fb 35 75 2f e7 51 9d d5 1d be 81 40 76 d5 84 3e 06 c7 3e 94 79 6d 27 60 5f 0e 01 ef ae f8 48 2c a5 be 91 4b 40 f9 3f 46 a9 a0 8e f5 32 5c dd 3a 68 b7 76 9d 5d 4e d7 fe 99 9c 94 f8 d8 6a f9 30 ff 7e 09 34 90 18 7c b3 9b 4f cc f1 84 dd e9 1f db e0 e5 36 3b 05 16 69 0c f4 01 be ec 84 72 be 46 fb 48 65 f0 7e 7a 6c 13 d2 13 67 6c b4 58 10 c9 f4 d3 dd c3 f7 95 d2 48 88 eb d8 19 4d 58 7a 7f df 60 0e 7e ce 61 05 ea 58 c4 70 38 38 24 05 90 8f 06 b7 ea da fb f1 65 5d 6e af 28 9b 58 bb 60 d0 56 cf bc 29 bb 80 e1 95 1d 74 11 b6 98 21 e5 5d 51 ae ad d3 cf 0e 10 c1 eb fd 75 f7 e6 af 46 64 1e 24 72 97 68 0e 7b 01 e5 44 9c 0c f1 c4 e4 fc 2d c3 d2 af a3 db a0 22 cc b1 d1 d6 2e 4d 16 f1 a7 75 8a 3d 04 5e c5 93 2c e6 35 a0 5d 94 89 df 95 40 79 05 28 10 22 ee d3 Data Ascii: 6c_5u/Q@v>>ym'`_H,K@?F2\:hv]Nj0~4\|O6;irFHe~zlglXHMXz`~aXp88$e]n(X`V)t!]QuFd$rh{D-".Mu=^,5]@y("
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 29 60 85 ba 75 89 ca 9d 1d bf 68 09 6b df 78 e0 8b 3e 1f 6f d8 5d eb 4d 74 14 d5 bc 71 91 0d f8 77 4d a0 6f 10 6b df 39 12 4c 17 b0 7d 96 25 54 81 8f bf 31 8b 4f e2 b6 8a 97 39 cd e6 2f 03 0d 4b 50 a9 37 3b fa 17 b3 36 0b 83 75 8e df ae a5 5e 42 2b e0 e6 0c e9 3d 9e a0 98 00 a8 c5 20 5b 63 a8 d9 a2 96 29 f1 80 e7 97 c8 02 df 1f 7d 6c ac 11 56 8b 5c 82 13 e5 e5 8f 68 09 3a 99 7b 18 ae 26 0e 42 c1 63 47 83 8b 4b 2b 4a df 7d 49 4b 23 bd 0a 70 29 0d 60 76 3d 74 f2 f0 e7 c1 07 dd 82 e3 ab 62 14 70 a6 e8 64 8b 22 36 39 c3 05 b8 fc b5 02 c0 64 d1 63 e5 21 95 91 62 d3 23 d7 3a a7 ca 92 ae 7a ed 4e 7a 57 f7 ac ed c3 63 a1 e9 0d 26 24 65 cb bc 47 83 b8 2f a3 8a 16 f1 d5 75 69 b4 ec b0 ab 4d fe 87 6d 6e 32 a4 06 14 81 90 0d 5b 38 9b b2 1d 7c aa 95 52 45 5c 82 56 89 Data Ascii: )`uhkx>o]MtqwMok9L}%T1O9/KP7;6u^B+= [c)}lV\h:{&BcGK+J}IK#p)`v=tbpd"69dc!b#:zNzWc&$eG/uiMmn2[8\|RE\V
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 3c d4 60 43 ac 8f e1 0e c2 08 39 2d 81 8c cc 88 c7 9e fc 6b 71 f1 6a 00 2b 32 e7 89 05 5c d8 33 e9 2b 2e 09 15 e4 01 f8 71 5a 8b 75 06 ea 8a 38 f4 dd 06 39 b8 1c 9b b8 fc 02 9f 08 54 df 25 e7 9f 7f 41 57 61 0e a4 7b 67 0e 94 2a 63 21 0a 9b c1 91 d2 ed 61 e3 ae 3f 4b c4 a0 6d c9 5b c4 ba e3 95 b6 8f 9e 1b 5f 0a 73 6c aa 39 5e 35 fa 36 e1 98 fc 11 da e7 75 79 3c 53 2d 31 a8 70 cc 3b 3a 33 38 bd 33 88 d4 4f 38 c1 33 df aa 1b f5 70 8f d8 95 46 78 de 53 72 8b 71 00 d3 97 df 85 eb 83 a8 eb c8 f9 56 45 11 61 50 59 97 cf 45 f7 d3 0b 58 6f ed 60 fa 94 43 a1 92 be d8 b5 b9 77 38 a4 60 a3 10 30 ac d4 7e 1f a5 e2 2e 92 17 02 a8 2b 8b d3 8d 58 23 01 67 86 7c 71 b4 86 ee ef e6 e9 31 0d 24 d3 64 df 43 c0 0f b1 46 a6 e8 96 27 0f b6 47 58 d2 1a 69 ce 0a b6 30 60 f6 ac 94 Data Ascii: <`C9-kqj+2\3+.qZu89T%AWa{g*c!a?Km[_sl9^56uy<S-1p;:383O83pFxSrqVEaPYEXo`Cw8`0~.+X#g\|q1$dCF'GXi0`
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: f8 fb 24 dc d9 8a 88 d9 92 c9 ae 46 e8 a5 1e 86 05 b5 88 c7 f8 15 b3 b7 41 ab cf 9b 5f 26 ee 5a b6 73 f3 53 d5 74 6b 57 e1 fc 53 d2 42 c6 04 f1 57 20 2c f7 7a 08 2d 59 6a ee 34 74 8b 93 09 85 f1 2e 1c b9 91 7a 4e 61 aa 76 e2 5f 2c 4f 6d 28 72 87 26 9f 70 a6 2c b3 98 d7 36 71 ea 04 dc ef 2c 72 aa a5 49 05 36 6b 8d eb fa d1 3e 94 95 8d 7d 05 ab 56 8f 33 a6 f5 a1 c3 be d2 4f d7 34 10 17 8f 9a 9d 59 c7 54 80 c6 5e 53 7c 52 6d 44 73 28 0f 82 b0 d1 b9 0f e1 3d 2d de 94 6b 9d 0c 9e 9f fd 1e 37 3d 3d 63 18 a0 91 cd 97 b9 ad 8a 4a aa e3 0d dc 93 ea 0a 04 24 d7 bc ee 3e 59 2a 9d a8 53 ec c0 35 8d 71 67 c1 7f 64 ba 29 15 bd 1b 23 06 6c 4a 0d 3d 68 c2 cf e2 f4 58 5b ef c7 5d d6 19 3a e2 80 b2 7e 0b e4 9a 86 00 66 9f 88 52 f1 87 9d 38 56 1b 83 c6 52 8d b0 c2 4f 51 12 Data Ascii: $FA_&ZsStkWSBW ,z-Yj4t.zNav_,Om(r&p,6q,rI6k>}V3O4YT^S\|RmDs(=-k7==cJ$>Y*S5qgd)#lJ=hX[]:~fR8VROQ
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: de 7a d7 7f 30 8a 85 51 31 1f de 09 12 24 45 96 d7 2d 24 fb dd ec 49 41 37 02 6d bd fa 54 50 f2 19 d0 f4 dc dc f4 6e ad 4c 86 10 0d d0 ca 33 01 c5 8b dc 63 b1 76 eb 47 04 9b c5 10 eb 80 ec 7a 32 11 57 78 1c ae 65 04 de 63 2f 9c d9 41 9f db 2a 90 53 e9 4b 77 a8 b8 2e ff 0e ce 04 04 b0 4b ce 79 9a 57 49 9d 88 b3 f6 3c 4a c3 39 68 d8 12 c5 a7 ad c8 d3 7f 3c f2 2d b3 26 95 7d 02 9b 8d 81 f4 4a 90 93 3a ed 90 9c be 54 61 60 79 61 fc b6 41 d2 6c 94 c8 4d f3 e6 21 b4 c2 c8 84 17 0d 76 92 b9 bf 14 4d 78 4e 06 c0 00 48 d5 1e 37 5a 38 3b a8 97 42 34 13 fb 60 6f d1 ff 2a 7f 3f 33 d2 df 74 ef 8b 17 6f df 4f 0a d8 91 e0 6f eb 1a 3e ac a4 35 a5 8a ac e5 40 62 ab ce 82 32 d1 30 e9 e3 d7 16 6b e8 39 32 e9 9b be 8d 6e d0 a2 84 85 9b 49 9f d8 06 19 c3 05 d3 dd 19 51 aa 8a Data Ascii: z0Q1$E-$IA7mTPnL3cvGz2Wxec/ASKw.KyWI<J9h<-&}J:Ta`yaAlM!vMxNH7Z8;B4`o?3toOo>5@b20k92nIQ
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 38 08 12 81 94 99 b0 34 ac 76 b3 96 3a 91 8b e3 4a a2 fd e0 b9 5c 1d f1 77 ad 90 43 c3 0f 95 ca c8 19 04 c3 cf d1 68 e8 93 d9 30 bc 6d 83 41 82 af 17 cb aa 66 62 c2 ef b5 40 3a 05 3f d5 92 da a1 f6 ac b8 6e e4 84 14 4c 06 60 16 fe e1 c5 cb d5 5c 8c bc 29 4c 90 86 f2 b3 d9 6f 5c b4 3a d2 8e 22 20 ff 94 8e 7f 3a 8b 4d b9 56 ca c3 72 82 3c 19 8b 2b 92 f6 22 a8 5a b7 27 f0 ed 2e 0e 4b b2 a8 ff 3f 31 a6 20 50 0e 7e e0 54 59 8d 29 4b 37 68 22 9a b5 02 c0 a0 8d bb 51 65 24 3d e7 07 05 24 e3 b5 a5 d1 a3 87 56 4b 1b 1d c7 f0 d3 f7 9b 20 c6 f2 a0 cf 5a 0a 66 04 27 a2 86 67 17 3a 35 84 bd c6 87 5b 66 3a af 8d e2 7f 2b 3a ae fb cf 56 e0 46 54 b9 86 26 17 fb bf b8 a6 48 97 67 0a 29 47 02 7b 11 76 61 63 18 60 b9 62 a2 24 0b 5c 4e a7 cf fd 7c 58 27 9a 7b 30 01 f3 3f 5b Data Ascii: 84v:J\wCh0mAfb@:?nL`\)Lo\:" :MVr<+"Z'.K?1 P~TY)K7h"Qe$=$VK Zf'g:5[f:+:VFT&Hg)G{vac`b$\N\|X'{0?[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49785	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:26 UTC	746	OUT	GET /uu/api/res/1.2/tWcwFX8HQlVWon2w5cWwwg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/nbc_news_122/ec4ca8639c46e06de9e43dd9c84991cf.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:26 UTC	1274	IN	HTTP/1.1 200 OK Content-Length: 13432 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 180441425768035156770260874800692557522,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="ec4ca8639c46e06de9e43dd9c84991cf.webp" Edge-Cache-Tag: 180441425768035156770260874800692557522,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "400604c45eff6a0377a76e61ea570ebf" Last-Modified: Wed, 27 Mar 2024 21:52:15 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=356,height=180,bytes=13432,owidth=1500,oheight=1000,obytes=370178,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: f67887647881f5f4dac3d0a8c7b376e8 Accept-Ranges: bytes Date: Thu, 28 Mar 2024 23:18:48 GMT X-Served-By: cache-iad-kjyo7100050-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711667928.277940,VS0,VE1 Age: 4958 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block
2024-03-29 00:41:26 UTC	58	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: X-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 52 49 46 46 70 34 00 00 57 45 42 50 56 50 38 20 64 34 00 00 70 ae 00 9d 01 2a 64 01 b4 00 3e 79 34 93 47 24 a3 21 a1 ac fa 1b 48 90 0f 09 63 06 f8 e8 05 fb 62 05 42 6d bf 5d 2a cf ec 67 77 a6 6f bf 4f a1 f2 8a f8 1e fc 7e 91 7f b3 7a 40 74 74 f3 39 e7 1d f9 01 ef 33 fb 37 a8 07 f3 af f4 be b7 fe a9 7e 85 3e 5e 3e ce 1f de bf f2 7a 53 f5 f3 65 b7 f0 6f ca cf c3 ff 7a ff 2b ea 43 96 fe cc f5 17 ef 5f fa 7e b5 ff a8 ef 9f e4 bf fb fe a1 1f 9a 7f 44 ff 6f e9 31 f7 9d ae bb b7 fa df 40 bf 72 3e ef ff 7f fc a7 ab d7 e2 f9 a1 f6 7b d8 0b f5 eb d2 6f fa 9e 15 df 7e ff 8d fb 71 f0 03 fd 5b fc 87 a2 ee 77 be c0 f6 09 f2 eb ff ff ee 87 f7 a3 ff ff bb c7 ee 3a 02 75 22 cd 41 3c be c4 b6 be 8c 1c c1 ed 30 7e 76 5b 51 6e a5 0b 8a 9c 3d 6a f1 e8 50 64 3a ec a9 57 79 9f Data Ascii: RIFFp4WEBPVP8 d4pd>y4G$!HcbBm]gwoO~z@tt937~>^>zSeoz+C_~Do1@r>{o~q[w:u"A<0~v[Qn=jPd:Wy
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: fe 18 eb cd 1f 5e 6a 2a 19 8f fd 09 19 5f 91 b7 8c d8 cf 6d d0 5a 27 ce d4 29 08 5b d0 23 59 dc 76 e5 fd db e5 0b 52 c6 bd 7e 8b c9 20 b6 5c 12 2f a4 19 e8 f7 10 90 8f 46 0b db 7b ac da 71 5c 4a 99 73 ee ee 80 f5 5b 07 2f 94 ed ad 77 78 84 69 09 ff e2 f5 64 d8 a0 9b 8a 98 dd a1 12 4b e7 34 7f c0 cc f0 1a ea a7 f6 e4 15 e6 38 48 d3 21 c6 cc 64 78 08 63 ac 2d 4c df f9 80 00 fe eb cd ff 39 66 7e d4 ba 9e 1b 13 4e 7a f7 20 07 b3 88 d1 d1 9a 8f 59 8a 00 ee 28 a2 8f 63 d1 6d e6 a6 1b 5e fb 80 89 25 cc 19 1e 93 95 77 f5 90 89 21 6c 34 e8 89 d2 1b 7d 50 e7 b5 1a 4a e4 17 3d fa 72 a8 0b e0 70 fa b1 31 5d c0 6a 91 8c 0c 62 04 c3 b9 91 ad 52 63 25 df 89 dc c9 20 09 ea 52 df b1 b3 c1 b1 03 2b 21 c4 17 8d d0 5d 39 ba 52 55 a1 15 7b f2 5e 5c b3 17 e1 7b c0 63 a5 19 5e Data Ascii: ^j*_mZ')[#YvR~ \/F{q\Js[/wxidK48H!dxc-L9f~Nz Y(cm^%w!l4}PJ=rp1]jbRc% R+!]9RU{^\{c^
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: c5 3e 83 7a 2f 9e 19 33 b4 33 d1 9e f7 21 ed 3f e2 a6 6e 29 d2 b5 9a 7e bc c4 31 ad 3b c0 91 b2 b9 ca 2b 64 da 89 2e 0c 3e 79 e3 ef 85 83 b5 b7 82 29 31 31 26 bb 38 bf 68 dc 47 4c 22 af cb 70 cf 4d ea 08 59 fd cf 47 08 fd cd 3f c1 19 fb 79 e6 27 05 15 e3 b4 63 16 91 8a b7 a1 15 57 21 d5 03 a0 13 54 d3 53 35 fb 48 4a ce e3 7e 05 5f 72 40 09 a8 4f e1 4f 01 97 8a ce 24 5b 30 f9 73 1e 4b 11 21 e6 63 78 b8 b3 aa 5f dd ab d7 e5 64 d3 7a c1 35 9d 6b 94 54 ce 2d c4 5b 28 0f b5 88 fc 95 e7 42 2d 55 d2 c1 c2 aa 80 c3 2f f3 c1 db e1 2b b7 e6 a1 79 a8 5e da 7f 6a d9 a0 58 f9 e1 60 e0 b6 c5 14 5e e3 7d 42 c2 db f5 df dc 9e 8d 60 a7 c3 b2 af e4 18 08 0c f4 ef 51 6b b6 12 fd 78 72 57 ed 88 2c 5b 7f 4f 07 6b 03 0f d3 9b 32 c1 e9 34 50 f5 41 e6 94 0b 5f 05 e0 e3 84 ad 98 Data Ascii: >z/33!?n)~1;+d.>y)11&8hGL"pMYG?y'cW!TS5HJ~_r@OO$[0sK!cx_dz5kT-[(B-U/+y^jX`^}B`QkxrW,[Ok24PA_
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 95 c4 16 30 8e 76 13 b3 65 86 bc 9c 83 83 61 fc 4c 92 fe 12 83 30 bf 5e c2 2a 0f ea 8f 5f 23 1e bc 4b e1 06 30 50 a9 89 53 aa 38 b8 0d 87 35 ae ce 6b 79 70 7f d9 9c fb 32 5e 05 52 bf f6 db de 67 be 31 fa f5 d1 ad dd 97 d6 bc d4 8e 92 5e f2 71 6b 0a 5d e5 14 e5 30 84 d8 f6 9c 73 e2 5d f2 55 13 d7 36 3d c1 7b 47 77 44 6f 25 e4 d2 d4 5a c6 23 a7 37 ce bf b7 03 3c a3 89 dc 9e 22 ac a1 27 b9 e5 e3 44 de 1e ee 70 d0 cc 66 29 63 82 0b fa ff 87 b6 b5 ca c6 65 bd fb af df 65 c3 f1 6b 64 14 a5 9a 75 8f 5a ff d3 11 33 06 72 f1 79 21 36 1c 8d dd 1e 69 eb ca 9f f5 ff aa 8f 11 30 55 2d 69 20 d9 11 eb a6 06 31 c4 d3 ac d4 9f 94 f2 7b 34 3b b9 d5 4f 78 1d 68 76 1e 69 d0 9f 8b 30 e6 80 3e 30 3c b5 4d 73 c4 0a 39 cb 97 e6 a9 1b 03 99 77 4f 85 78 36 58 f8 92 da 2d 6c a7 29 Data Ascii: 0veaL0^*_#K0PS85kyp2^Rg1^qk]0s]U6={GwDo%Z#7<"'Dpf)ceekduZ3ry!6i0U-i 1{4;Oxhvi0>0<Ms9wOx6X-l)
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: c3 28 6d 52 5c a6 bf 7e f5 f7 97 10 b1 54 e4 f6 a7 61 b3 83 7a 68 99 11 df 4b 5d 19 71 eb b0 92 d7 de e5 72 65 66 58 01 13 fc 24 76 f0 1e 96 15 22 73 38 d6 5d 35 50 3d 38 d4 b9 e6 36 4a 8e 4a 87 bf b0 96 bb 60 82 95 00 54 07 20 47 35 ea 6b 98 49 87 86 22 30 fe 91 0b 5b fd 82 83 ee d8 fd bf 70 bc 28 24 f7 36 bf 60 72 d2 0f fd b0 a7 f1 91 35 fb 73 4f 77 e0 73 4c 30 c8 6e 0d d0 4d 2d d1 13 a8 60 c1 a5 46 05 4a e5 2b c0 14 77 62 73 fe f0 7e 24 ab 4a 0b 8c fc 22 3a bc 3e 28 25 05 6b 2b c5 2e 00 ea 7f ef e7 da a6 ec cd 2a 31 4e 9d a4 ee 36 50 9c f3 7f a0 d6 b8 71 fb d3 95 99 e0 1e cf 2c 73 8f e8 21 bf 2f 83 8e 8d 46 94 7a 71 c9 4e 6a e6 b1 9f bc f2 1e d9 1f 5d 45 3a 47 21 3b 08 ac 11 15 c4 1b c5 38 12 b7 e4 2a 21 43 8c 0d 85 d9 79 c4 43 4b 57 8b 62 a6 d9 5a 4f Data Ascii: (mR\~TazhK]qrefX$v"s8]5P=86JJ`T G5kI"0[p($6`r5sOwsL0nM-`FJ+wbs~$J":>(%k+.1N6Pq,s!/FzqNj]E:G!;8!CyCKWbZO
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 7a da 08 80 73 07 7e 7f 92 85 2b b2 6a a2 ad c0 e7 d4 64 8a fc 79 02 a2 04 a6 b7 99 9d 14 cd ab 4a 48 9d 5e 2e d8 f5 21 e7 d1 b2 22 1f be 40 ad 4b 7e ca 02 67 22 fb 09 47 3b ac 22 9a 3d 85 f6 4b da cf 27 d9 18 91 fb 54 9d c4 a6 dd 32 60 05 20 4c ea 54 18 a2 9e 20 41 36 65 16 04 bb 17 0c 6e 20 ed 52 2a 63 59 61 a2 6a 5b 88 6e 1f c7 b6 a2 56 4b 75 d8 0b b7 3f 7d af ba de 34 35 ca 13 43 eb 74 c7 8c 77 96 bf 5a f3 44 97 c3 fd 14 2d 1b 37 32 de e0 c3 c9 97 c7 ad f8 dd 34 fe 97 91 06 d2 cc bb c1 9f 5d 8c b1 ae db cf 80 1e 46 b4 c1 8c 55 a1 6c 80 64 7d ce 4a e6 38 e0 88 91 65 ae 5e 32 9f b2 ea 19 1f 40 d8 ba 2b 29 6d d3 b8 db 4d 75 d3 7a 1b ea ae 77 fb f5 b4 9c 48 b0 93 3b 57 1c 33 f3 9f 60 fa 23 ad 5b f2 09 e3 38 9e db 78 c3 f0 97 4b f1 94 bc fd c0 2d 2d 2e c2 Data Ascii: zs~+jdyJH^.!"@K~g"G;"=K'T2` LT A6en R*cYaj[nVKu?}45CtwZD-724]FUld}J8e^2@+)mMuzwH;W3`#[8xK--.
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: db 07 39 3e fa 61 30 81 6f f2 2c f3 1f d9 cc 44 47 e7 52 43 0e 8e 7c eb a9 5c a6 05 fb 40 9e ec e6 ee 97 04 aa 43 e9 86 8d 32 bd 6e fe 30 7d b7 bc 7f 9e 72 30 bc 6b 66 27 b4 5e c9 f9 81 c6 54 bf 6c 84 fa 31 09 fa 14 4b 60 40 94 99 44 e4 3e 73 78 c3 96 b3 d9 7c 74 90 54 38 02 ae f7 64 f2 38 8a 59 3b 5c 50 a9 95 9b 5f d5 65 0d 27 bd d6 58 42 20 10 23 08 aa 8b 75 62 d8 cb 59 4e d5 a8 ff 7a 0b ea c5 91 07 0d a9 17 de 02 6a 00 bc d3 f8 7e 32 70 02 1c 81 e4 fa ea 01 86 fb 22 19 64 05 f9 4e c8 f3 af 03 01 2d 04 5c 86 19 ee c4 c1 42 48 a6 79 2d 85 95 bc 95 9e 62 f0 09 e0 59 5d 52 98 e8 fc cb 73 23 76 83 3e 98 c2 d4 49 85 d1 7c d2 14 92 7c 18 df f8 ec bb d8 62 53 b6 d2 68 64 1a 8a 40 f5 7a bb 8b 5c 8c 15 3c 50 de 6f 80 01 13 e7 5b 85 29 23 48 f5 3d 79 6c b9 54 77 Data Ascii: 9>a0o,DGRC\|\@C2n0}r0kf'^Tl1K`@D>sx\|tT8d8Y;\P_e'XB #ubYNzj~2p"dN-\BHy-bY]Rs#v>I\|\|bShd@z\<Po[)#H=ylTw
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: ec 79 ac 2b 35 25 b0 a8 3d d1 65 b1 1d c9 29 90 35 33 6e 66 68 39 c8 85 52 b0 f4 88 64 78 ed a1 47 82 32 f8 1b b6 f7 aa 6b 2f 0c 2c ef 78 71 09 c4 cd e9 9e b2 75 03 a2 c9 8e fa 2e c0 5c a8 7a 86 a4 dc 8a a0 2d bd d7 f3 3b 16 61 af 0d 21 fb 58 12 0d 22 86 d6 df 89 32 08 90 d8 c1 68 54 28 b2 7e 33 42 3e db 3e 40 30 68 a1 66 a9 cb 67 2c 6d ae 2d 32 26 e0 5d c6 ae d5 2d 04 f1 65 f8 28 52 5f 14 d0 91 9d 64 60 da d8 24 e1 0e 80 06 72 f8 4f a9 9b 65 5c 3e d6 ad ef 62 92 6a cd 2d 76 d8 c4 fc c9 27 fd 58 6c a4 a3 8f 31 fb 6c a0 be c3 ee da 83 b0 75 94 41 f8 9d 49 3f e8 66 96 94 c7 5c 42 1a dc ec 40 9e 5e 3e 5f de e4 25 cf a6 95 be 00 a1 f9 44 d2 61 f7 52 01 a7 9f 52 58 e9 74 33 ea b8 0f 13 6e 68 1d a9 f6 f6 ea 7b 94 c9 e4 0e 41 21 40 1c c7 8f 78 62 de ac 53 84 61 Data Ascii: y+5%=e)53nfh9RdxG2k/,xqu.\z-;a!X"2hT(~3B>>@0hfg,m-2&]-e(R_d`$rOe\>bj-v'Xl1luAI?f\B@^>_%DaRRXt3nh{A!@xbSa
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: af b3 49 00 46 34 9d 78 35 5a c0 49 fb 31 38 57 3c 73 03 10 c4 0c 7e b6 ee 26 69 ab 11 39 a7 eb 6a b5 8d 9e 50 50 e1 de 19 c9 94 43 74 b9 b4 9e 8e 55 69 b3 06 41 18 a2 33 f6 bb 27 59 aa 98 2f c5 fc ff 04 cb 1e 2e 7e 48 86 36 c0 0f ab 96 08 fd a3 7f c2 25 b6 6e a4 ea e0 5b b0 7d 7c e3 c4 1c a9 6e f2 01 e4 a6 33 dd 17 97 55 bc 89 9d 19 4c 99 22 39 d7 78 2f 1d c5 1d cb 98 4b f0 27 dd d3 88 0d bc d3 b7 8e 35 55 bd 97 de df c9 32 20 0c 38 66 89 33 4c da 06 f3 9b 34 89 70 24 a7 c0 6b 05 be 77 8a 96 c8 a3 56 d5 83 e5 cc fa 4e f7 25 a6 a9 d7 9e 68 ed 8b 5f 02 4c 7b 4a 13 97 e5 4b 2c aa e8 24 bb b0 95 b7 7e 07 b6 c3 08 e7 72 7c ce bf 87 c5 11 02 4e 3c 93 ba 23 76 ce bc 0f bb 1e 90 b9 e8 95 64 5e 1a 48 04 23 43 9f fc 73 7d 34 39 90 1f 29 ab 9e c6 b9 8a 4f f7 33 00 Data Ascii: IF4x5ZI18W<s~&i9jPPCtUiA3'Y/.~H6%n[}\|n3UL"9x/K'5U2 8f3L4p$kwVN%h_L{JK,$~r\|N<#vd^H#Cs}49)O3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49786	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:26 UTC	763	OUT	GET /uu/api/res/1.2/83XTQMluFLe.mjd0Wi63yg--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/16757f70-ed5b-11ee-adfd-f9a7606cf807.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:26 UTC	1290	IN	HTTP/1.1 200 OK Content-Length: 55132 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 299474684652507520213133815389274278598,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="16757f70-ed5b-11ee-adfd-f9a7606cf807.webp" Edge-Cache-Tag: 299474684652507520213133815389274278598,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Etag: "0046a161620feec961636c3a43dd5bb2" Last-Modified: Thu, 28 Mar 2024 23:30:00 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=700,height=420,bytes=55132,owidth=6004,oheight=4003,obytes=5188795,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 8fe954ad88140a7ff129c499130a5beb Accept-Ranges: bytes Date: Thu, 28 Mar 2024 23:30:15 GMT X-Served-By: cache-iad-kjyo7100103-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711668614.010681,VS0,VE1427 Age: 4274 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 8fe954ad88140a7ff129c499130a5beb cld_by: cache-iad-kjyo7100103-IAD cld_latency: 1427 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1
2024-03-29 00:41:26 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 52 49 46 46 54 d7 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 bb 02 00 a3 01 00 49 43 43 50 30 02 00 00 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: RIFFTWEBPVP8X ICCP00ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 59 ad d5 fd 31 d8 24 e3 2d c3 8a 61 74 19 19 fc 22 d7 c0 b9 59 30 b5 e6 a1 7e 49 07 89 b6 3d 25 c7 b9 59 1f 38 71 ec 53 82 5a 0f 42 5e e2 ae 2a 9e d8 4f b8 20 15 6b 58 a9 e8 50 6f 12 55 a4 f0 4b aa 7e 40 1b 39 07 6b 43 1c 84 f5 4e 10 93 31 08 1c b2 4e a3 65 04 ab 24 68 98 ec 79 ab a6 7c 6c ef a7 0b 8e 5c 46 d0 30 b4 40 65 a6 42 d4 67 40 3e 34 b9 95 ef 8b d3 bc 3f 7e 68 64 cf 9e 73 b5 b2 82 a9 a8 03 62 b4 5e 1f 59 a6 83 36 ce ea e2 1d a9 65 1a 42 83 b2 d3 40 e7 1d 85 4c 77 bb 10 c3 c5 45 9a 8c 61 d1 e4 ef 47 05 89 f4 e0 0b 7c db 44 b2 1a 27 0d ac 68 46 1d 03 95 af 13 1a 41 03 85 f2 89 5d 45 ed b4 0a 74 b5 5f f8 60 15 a1 bb d4 f6 ad 07 4c 08 69 0b d5 f2 9e 32 49 ad f8 b7 b3 e0 ec 83 89 a3 2e ce 72 a4 9c 9c 61 b1 ac 77 f9 40 4c e3 06 fe 1a 8a 5c 7e 83 98 73 Data Ascii: Y1$-at"Y0~I=%Y8qSZB^*O kXPoUK~@9kCN1Ne$hy\|l\F0@eBg@>4?~hdsb^Y6eB@LwEaG\|D'hFA]Et_`Li2I.raw@L\~s
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: e9 8c 23 ec 07 f1 ae c9 55 bb ca cb b9 80 d7 48 47 4c d7 5c 2c 5b ce ac 45 b9 9e c2 0e 48 b1 0f e9 14 61 66 0d 94 2f 5f cc b5 a5 cd 1c a3 86 ac d4 be b2 9f e0 96 b3 7e cc 1f bd 25 5d b4 6f b1 8f 40 7c 31 fb 13 d7 73 e5 3f bd ac fe 38 f6 db 09 e4 fe 0d 20 57 cf b9 92 12 ca af 12 f7 a8 74 77 5a 2e 40 ee 60 32 ac 50 6d f0 d2 1f 4c 2e c4 3e e4 b5 93 a4 dc be aa be 62 e7 2c 07 d2 52 0a c7 3f 03 74 a3 50 9c dd b3 4c 50 39 90 eb af eb 14 75 d1 01 f9 00 23 dd e3 ac e4 29 9d 72 05 8b 1b 5c fd 12 aa 8a 72 1c 27 f3 3b 0b 8c f9 59 df 1d 09 8d 5b 53 1a 62 64 04 72 89 f7 f7 eb 8b 3e 08 e5 71 ea 5f a8 56 44 32 b6 ea 99 20 ce 40 19 46 80 84 83 15 4a cd c0 1b 73 03 8d 86 92 19 8c f2 4b 00 2a 8d d5 44 f6 a1 5b 86 1a 69 d9 74 fc 72 65 ad 52 12 61 b4 e6 ad 96 24 31 24 10 43 Data Ascii: #UHGL\,[EHaf/_~%]o@\|1s?8 WtwZ.@`2PmL.>b,R?tPLP9u#)r\r';Y[Sbdr>q_VD2 @FJsK*D[itreRa$1$C
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 58 24 ef 6a 8c 53 4d d9 64 68 60 b4 34 e5 b3 98 69 92 2e 94 45 6b da 63 c5 16 05 70 76 2e 14 5c b9 2c f3 d3 37 48 b9 55 c6 78 4e bc 09 17 80 24 12 66 77 91 87 67 8b 8b a8 35 03 89 c6 85 17 ad 2e e7 cd 76 bf 4d 47 90 e0 fd b4 8d c6 f3 97 99 e0 d5 dc 73 11 d1 7c 2c 5f dd 6b 9f aa 73 ca f3 e1 5e 52 e5 ff eb a3 a3 18 d6 01 60 3d b5 b0 4d b5 c9 d1 9c 37 50 aa 31 d3 27 2c 01 db 3f f3 47 1c d5 da a9 0e a3 df 01 80 56 a0 41 1b 25 ad e3 ef c1 6a 91 5b 97 7d 7e 80 14 4b 25 3b ba f5 ad 2b db a8 5a 1b 38 0f a2 9c 58 e8 73 fa 23 73 02 80 25 04 7d bf b7 2b bb 18 df 13 38 c9 15 ed 03 7d 79 37 6d e5 54 0d 79 b8 79 07 ad d7 65 8a d0 66 d7 84 f9 91 44 91 b2 49 3b 3e ba 58 c5 92 58 0b 6b 4c 67 90 a9 f5 6b 63 aa 46 b9 27 fc 5c ee 1c 09 97 db aa 1e 87 9b 24 dc 01 e8 fc 45 90 Data Ascii: X$jSMdh`4i.Ekcpv.\,7HUxN$fwg5.vMGs\|,_ks^R`=M7P1',?GVA%j[}~K%;+Z8Xs#s%}+8}y7mTyyefDI;>XXkLgkcF'\$E
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 66 4e 73 ac 76 c3 54 3f 85 a6 b1 5e 7d 63 91 e2 4e 1e c1 ed 49 c2 21 e8 5f 40 f0 a2 0a 6d ca 14 3d 9d 21 1f f3 79 dc a0 11 d9 86 51 a1 95 fa 8e 52 0d 8c 70 18 a8 6d f6 a4 19 b5 1e 42 6d 76 49 4f 0b 77 a5 34 e5 fe a1 9a 7c 42 51 b0 52 22 82 e9 62 1a 2e b3 df 0e d3 28 d7 2e 4e 54 ee 14 d7 98 f7 79 66 aa e8 49 67 a2 2b 06 2c c7 e5 2c 11 dd 6f 9d 73 de 0e 9f e3 36 83 45 12 b7 a6 9d d9 9a d6 71 7a 2f ab b5 88 42 04 ac 3b 34 e1 7f 3f 21 1d 5b 82 09 22 c3 b4 58 36 be 4c 7d 81 eb 77 20 e3 65 9c f2 56 c5 54 a1 f5 39 01 c0 35 c9 4c 59 ea 3f 35 4a b4 03 72 01 23 86 42 f0 fa a6 90 56 9e fc d5 01 77 e1 08 b0 46 60 7b 10 1c ef 60 87 98 6d 74 9a 75 c9 11 d0 2c 91 54 fc af 7b 9f 5e e9 02 20 cd aa cc 08 5c 24 bd df ea 38 15 aa bc d6 8d da 5a da 7e d5 9e 13 c2 28 6e ed 57 Data Ascii: fNsvT?^}cNI!_@m=!yQRpmBmvIOw4\|BQR"b.(.NTyfIg+,,os6Eqz/B;4?!["X6L}w eVT95LY?5Jr#BVwF`{`mtu,T{^ \$8Z~(nW
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 96 3f 36 ae 0a c3 86 86 e0 a5 f4 a1 7a a4 36 9d 3f bd 64 f2 fa 18 8c ae 23 26 f8 f4 88 5a 34 19 3e 3e 94 e4 b7 46 d0 94 8d a6 3e 77 2f 3c 76 f0 be 00 75 d8 17 bf 69 8b 77 ed 44 ed 6d 56 99 49 3f 89 da c3 fb b5 f3 44 f6 85 39 53 67 d0 5e 90 2f ea 8d c5 73 61 26 2c ea 37 10 a7 5a df b9 be 19 2b 35 3f 79 2d fe 65 2d 2e c4 2f a1 67 7a 37 9c bf 21 d6 ad d9 21 fc db 6e fa 00 b2 ef 84 37 71 dd 1e 22 0d 67 48 af 83 f5 be aa 94 3c 56 39 15 31 9d c2 96 a2 d1 4d ea 46 c6 08 10 aa 85 d1 9c 36 2e 5c 77 ee da 69 d7 88 33 32 d0 e0 c3 18 18 5c c1 30 e2 a1 4d fd b7 3b 77 02 d5 5d 94 2e 00 b0 59 1c d1 bf 64 5e ae 67 f9 56 ae 01 0c 9a b2 6c 97 26 6b f0 aa 52 59 16 98 e1 56 47 2a b8 42 8a e7 26 1f 1e a6 2a ec a7 76 89 0b 6b 14 a9 ed 01 7d 54 28 e2 24 dd ee 13 b3 ae 50 d9 3c Data Ascii: ?6z6?d#&Z4>>F>w/<vuiwDmVI?D9Sg^/sa&,7Z+5?y-e-./gz7!!n7q"gH<V91MF6.\wi32\0M;w].Yd^gVl&kRYVGB&vk}T($P<
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 17 81 36 c7 e4 f6 b8 c8 35 06 93 4d f6 c5 56 87 50 fd d5 2c f7 86 30 55 f8 0c ed 1a df dc bc dd 19 b4 c5 fd 00 be f1 a2 bf 52 60 7e f4 1c da 1b 62 9e 40 28 6b fe 4c 2c 63 89 ff e7 f1 f4 ca e4 bb 08 06 3e ba 3b ed ca d0 00 a8 c8 f4 ed fa 03 e7 00 a3 85 8a 8e 29 3c 34 f0 87 c1 d2 33 1b ef bc a6 88 f3 8d 53 7d 0c a6 c9 d8 fe 37 2e 56 65 21 eb 6f ad d5 5a ac f5 45 6f dc ed f6 0d 8c 10 20 6d fa 9d ab 61 62 d5 9c f9 b9 06 74 3a cc 9b cc 36 a7 58 ec 68 8f 14 46 16 78 92 af f3 73 49 19 94 c6 24 df 24 09 33 99 40 10 e2 05 15 f8 68 bd 2f 6d 1c 90 59 15 25 0e 47 4a 14 9f 67 3f b6 43 d5 f6 95 cc 5b 10 3b 4f e5 a2 38 ef b0 9b 3e d7 28 9f 4b fe 9b ab a5 27 4c af 23 6f dc 0a ef 8a 7b 9a e0 f6 4c 84 5b 45 d8 ad 1b 0b a0 5c 29 c9 34 91 a6 80 38 7c 9f 83 ef c5 98 dc 04 68 Data Ascii: 65MVP,0UR`~b@(kL,c>;)<43S}7.Ve!oZEo mabt:6XhFxsI$$3@h/mY%GJg?C[;O8>(K'L#o{L[E\)48\|h
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: fa 59 e4 9a 93 65 b6 71 c5 20 9b a1 83 f3 47 39 4a 88 bb ce ac 32 22 72 2b 6c b1 ed dc 66 4b 6f 31 e6 e8 a8 e0 d2 da ff b7 86 db a7 8f fe 28 bb 19 3d 0e 97 a1 c0 3e 79 ca fa 7f 3c 7d d5 14 01 8e ba cc 1d 3a 3d 17 22 be 7a ce cf 42 d7 1d 6e f7 46 25 ff fc 3e 04 5d 37 fd d5 65 db 7e 4b 76 a6 e6 3d 04 f6 a3 e9 74 b8 db 63 75 30 b7 a9 47 c1 fb 06 dd ce a3 90 1d ca 9d 18 81 f1 fd 96 75 be a2 ed da 81 f0 71 05 7a 79 e9 4f d0 be ec f7 f2 bb 50 11 e2 00 e9 fc 8f 21 44 bf 0f 1a 7f 73 c4 e5 6b a5 a8 24 4c f5 e9 d8 3e 84 45 20 0f 13 5f 00 10 e0 f2 50 10 44 a8 4f 0a b4 93 1c 22 13 1b b4 1a b4 e6 2a 97 a3 9d 04 41 de a9 6e 3b 01 5f 27 fe 48 fa 48 ba 29 58 30 e3 b9 aa c5 ab f4 1b 77 fb e3 de c5 a3 fc 23 02 e9 cf 5f 4f b5 af 6d 0b 27 e1 19 b1 d0 87 07 7e ce 0d fc 15 32 Data Ascii: Yeq G9J2"r+lfKo1(=>y<}:="zBnF%>]7e~Kv=tcu0GuqzyOP!Dsk$L>E _PDO"*An;_'HH)X0w#_Om'~2
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 75 8e bd de 1b 17 74 f3 05 af 69 bd 92 b7 ae 81 93 cc ca e5 70 83 bc 5f 09 80 48 c8 33 cc 62 17 9c 79 1a 26 3c 60 78 34 43 78 6c c6 e9 7a ce 86 85 b5 4e f8 65 4c 74 e7 56 54 73 50 70 c5 7a 3d 26 e5 f2 5d 25 e8 6d 82 11 8e 24 41 4f 41 ef b2 76 1b e4 ab f2 e7 41 1e 11 8c f1 a8 32 81 fe af 65 1c a7 8e 35 ef ac a9 69 ac 1f 23 a4 a2 50 89 cc 50 ea 56 12 57 8d 79 ef 67 a1 fb a8 de ee fd 06 6a 41 e9 f4 35 85 5e 60 cb 27 f2 11 40 29 8c f6 10 99 39 d8 fd 39 47 99 d4 bd 2e 04 75 cc 72 d1 a0 81 9b ae 31 33 1c c1 7a a5 e4 14 da 36 55 23 11 28 50 6f 93 04 cf cd de 0e ad ca c2 f7 ea 24 c8 ae 9d 8f 6d f0 0d 78 c8 c1 c6 92 b5 9a ac 3f 98 28 ee 01 72 72 16 18 6c 79 ec ad 90 b0 6a 32 0f 8a b6 9b 31 bb 8a 94 7f f5 7d 4d cb 42 fe d4 36 bd 64 5d 78 b3 af 2d 86 d1 aa 7e 60 8e Data Ascii: utip_H3by&<`x4CxlzNeLtVTsPpz=&]%m$AOAvA2e5i#PPVWygjA5^`'@)99G.ur13z6U#(Po$mx?(rrlyj21}MB6d]x-~`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49787	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:26 UTC	763	OUT	GET /uu/api/res/1.2/.dZjwniw6OupEJN8hP1Dng--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/1fe5be50-ed54-11ee-bfee-5aba1490b416.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:26 UTC	1290	IN	HTTP/1.1 200 OK Content-Length: 42512 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 443913271807000044816960781046936028986,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="1fe5be50-ed54-11ee-bfee-5aba1490b416.webp" Edge-Cache-Tag: 443913271807000044816960781046936028986,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Etag: "ef0db41b665ee2f45ec37b26f48ad267" Last-Modified: Thu, 28 Mar 2024 22:40:09 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=700,height=420,bytes=42512,owidth=5392,oheight=3592,obytes=3163985,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 3bd8ea9fcd39074e0f5b9c1e3e42dddc Accept-Ranges: bytes Date: Thu, 28 Mar 2024 22:40:29 GMT X-Served-By: cache-iad-kiad7000070-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711665628.874763,VS0,VE1337 Age: 7260 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 3bd8ea9fcd39074e0f5b9c1e3e42dddc cld_by: cache-iad-kiad7000070-IAD cld_latency: 1337 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1
2024-03-29 00:41:26 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 52 49 46 46 08 a6 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 bb 02 00 a3 01 00 49 43 43 50 48 0c 00 00 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: RIFFWEBPVP8X ICCPHHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 01 e1 01 e9 01 f2 01 fa 02 03 02 0c 02 14 02 1d 02 26 02 2f 02 38 02 41 02 4b 02 54 02 5d 02 67 02 71 02 7a 02 84 02 8e 02 98 02 a2 02 ac 02 b6 02 c1 02 cb 02 d5 02 e0 02 eb 02 f5 03 00 03 0b 03 16 03 21 03 2d 03 38 03 43 03 4f 03 5a 03 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 Data Ascii: &/8AKT]gqz!-8COZfr~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 78 cc 79 2a 79 89 79 e7 7a 46 7a a5 7b 04 7b 63 7b c2 7c 21 7c 81 7c e1 7d 41 7d a1 7e 01 7e 62 7e c2 7f 23 7f 84 7f e5 80 47 80 a8 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 33 89 99 89 fe 8a 64 8a ca 8b 30 8b 96 8b fc 8c 63 8c ca 8d 31 8d 98 8d ff 8e 66 8e ce 8f 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac Data Ascii: xy*yyzFz{{c{\|!\|\|}A}~~b~#Gk0WGr;i3d0c1f6n?zM _4uL$hBd@iG&vV8nR7u\
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: d9 df 39 cb b2 88 f4 48 83 38 d9 d6 49 68 c7 2b a3 4f ef e1 06 63 f5 82 ce 65 e6 24 ed 01 d4 9b e0 8b b3 36 fb 7a 60 74 d5 36 68 52 94 55 91 8f ec da 29 c4 17 dc c4 d9 b4 82 03 a7 26 78 54 57 71 53 9f c4 c9 cf 24 c0 9d 83 0a 6d 3d 54 aa dd a9 68 98 fa d7 3e fb 41 5d 1a 9d 39 72 ef ac 3f 2c 5d c3 c5 84 9c bd 99 11 93 26 f0 ad 32 a4 1b 70 9d c7 05 7f ad 7c 1e fa cb 56 6a 86 43 5f e5 5f 55 51 65 ba 63 96 6e 77 28 7e cb 9f 6c da 86 90 f4 7e 15 71 9f 59 53 57 00 30 df 87 25 e4 3e e9 8f a2 f5 25 84 a0 52 ad 1c b0 73 37 43 ae 08 e6 90 f6 e5 fe 61 aa 86 2e 72 75 9a 5c 73 d7 2c 7d 44 c2 99 29 e9 06 44 53 35 ce 52 08 90 f5 1a 19 22 e4 e3 16 48 06 4b 84 ab 26 f9 41 c5 06 7e 7f 43 60 ad c2 d3 6a 05 05 9f e7 00 cb 25 a7 8e ea de b1 99 a4 55 60 cb d2 9d f3 36 4f 0c 2a Data Ascii: 9H8Ih+Oce$6z`t6hRU)&xTWqS$m=Th>A]9r?,]&2p\|VjC__UQecnw(~l~qYSW0%>%Rs7Ca.ru\s,}D)DS5R"HK&A~C`j%U`6O*
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: d6 bd 8e de 8b 5b de e2 f6 97 6b 8d 6f 94 e7 f4 99 b2 d5 da 9d b1 dd 0b ba 2c a9 4f 54 dd d5 9d eb 9e 43 ac f1 36 de 81 1d 2f c1 6e 97 65 0c 61 14 30 f7 fe 71 76 04 32 7a da 38 6a dd 18 eb 30 c2 97 6b 4a 61 73 84 49 d2 46 05 a6 39 04 6c 42 0d 7e 04 97 19 ac dd 3c 51 e5 2a 38 d4 0b 96 08 66 e3 b1 3f de 21 b6 f5 00 0c 92 03 98 53 64 38 f3 38 89 2d 89 b9 aa 8a 63 c8 7c 60 2b 14 8e 89 cb 3e 9b d1 b6 d2 c0 be ab 37 95 fe e2 d9 d3 b6 ed a1 b1 c2 c4 62 b3 c2 8c 0a 5a b5 9e 0d 55 de 88 78 f8 37 82 8a c5 0f 30 90 13 45 a2 d2 48 75 b6 91 b8 3b 32 d8 af 7e ab 4c 04 80 91 b2 cc a8 58 82 25 5e 5e 02 11 f1 03 e3 c0 f9 89 ed db 58 3c b6 a4 25 7a 4d 11 8f 30 4c 34 d5 26 59 17 02 0d f3 0d 0b 08 43 31 49 06 56 23 b7 82 7b 3d 78 80 f7 cd c0 44 cc d5 1e 72 cf 84 c7 05 7e 70 Data Ascii: [ko,OTC6/nea0qv2z8j0kJasIF9lB~<Q*8f?!Sd88-c\|`+>7bZUx70EHu;2~LX%^^X<%zM0L4&YC1IV#{=xDr~p
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 35 2a 6c eb d4 51 d7 63 78 30 fb 73 a7 ad db 98 15 59 0c c3 9e 9f 53 1f fe 92 92 1e 9e 63 83 5a 48 74 20 87 f6 0e b7 3e d4 81 8d ee 4d bb 50 b7 fb b5 1c 73 29 8f d4 b1 92 59 31 98 72 06 72 58 18 8c 18 8c 8a 94 db 61 f0 58 34 83 ce 7a b3 db 31 11 e7 a6 7d e3 21 aa 63 9e fa 92 9f 55 f4 dc 0d 59 93 23 41 1a c2 ea 81 fd 85 74 58 6a f7 00 3a 98 ae e7 37 2e 71 04 77 a1 ba 9c 98 01 31 32 37 ce b1 d5 78 2c 8a 0b fc 2a 4b 18 f4 88 c8 19 2c 7f 16 36 f2 35 e1 4a a8 21 89 12 8d f5 b9 97 0a 7c 4e ac 37 a8 b6 be a0 f9 9e f5 28 80 36 d2 1c 0a 58 4d a0 b9 5b 1a 6d 32 01 39 36 48 b6 d2 21 c7 ec 3c a2 95 f2 f3 48 43 7e e6 95 48 6a d1 3e e7 bc a9 29 85 c7 8b 81 31 b1 ac 79 ec e1 ce 14 d5 20 12 a0 16 69 84 54 06 7b e9 72 ce d7 5a a6 cb 9d 98 90 f3 c4 31 ff 86 36 ab 65 25 0b Data Ascii: 5lQcx0sYScZHt >MPs)Y1rrXaX4z1}!cUY#AtXj:7.qw127x,K,65J!\|N7(6XM[m296H!<HC~Hj>)1y iT{rZ16e%
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 6f 5b 9c 26 c3 d4 6c d5 1c 28 79 56 ff 69 63 b6 d1 55 ca 57 55 be fb 25 e6 a2 86 90 08 39 73 72 d6 f5 17 d3 75 0d a0 76 1c 4b b4 7c 2a 0b 8d 33 bd f1 36 64 aa 56 44 b1 89 89 02 fe f9 a3 f7 88 43 ce 80 62 1a 4d 43 32 0f 1a 88 4f b0 9f 13 82 7f 0d 98 c0 48 23 09 3b 8e d5 93 d6 fa 46 f1 c4 0a e4 37 55 bb b9 89 5d 6c d2 0d 81 1d f0 ba 43 73 bf d5 83 a6 2f 8c ad 08 47 9a 0a f1 6c d8 76 83 d3 1e fb f2 33 c3 f0 84 b1 77 84 8b 45 e5 22 fc b2 df d5 d7 28 7a ca 1d cc bb a0 74 d4 7b 5e 04 c4 16 a1 eb 7a e5 de dc 2c 6a 01 72 20 39 45 35 30 8d 4f 3b c3 8a 12 3f 14 c5 10 a9 c2 82 94 d0 4c fe f5 f1 16 69 6a a1 7f 31 57 dc b4 2a 69 d8 36 7e 66 2b 3a 5c d6 95 5f d4 d1 50 14 10 1d 72 ab 7b 51 14 61 3b 6b 48 4d 99 52 52 6c 4a e0 3a 93 fc 63 d5 ed 0d 23 ab a7 24 79 a0 1c 7a Data Ascii: o[&l(yVicUWU%9sruvK\|36dVDCbMC2OH#;F7U]lCs/Glv3wE"(zt{^z,jr 9E50O;?Lij1Wi6~f+:\_Pr{Qa;kHMRRlJ:c#$yz
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 25 91 3d 8d ab 85 f2 6a aa ba be 0d c6 dc 1c c0 db 94 f8 ff f1 32 93 b1 c9 7c 53 01 2e 71 68 b9 04 0b 44 58 2a dc e0 0e 4f c3 a8 13 f8 62 8b 64 dc b8 d2 f6 17 3d a0 01 dc 5e 55 ce fb 60 ee a5 6d 91 97 0b 08 35 46 ae ef f3 47 96 e8 6d 1e e8 bd 95 4f d6 31 9a a8 1c ef 25 62 7b f6 e7 fb ac 2e 45 13 ca 01 ca 57 61 06 17 b0 12 a0 84 78 e4 70 0f 55 33 07 a2 30 78 db e1 4f ac 89 3c 20 5b a2 e7 e9 5c cf ab 95 e2 1d f4 9e 25 70 50 7c 64 3d 23 13 57 0f d9 55 ff 32 9c c0 13 2f d3 7b 7f 2a 9a cf 4f 0f a7 ce 56 63 2c a8 11 12 27 2d 0f 1b 0e a3 d1 78 39 6e 09 bd 4a 43 75 3b fd d8 4e 69 a9 14 8a 12 40 10 85 f1 49 5f 7b d7 3c 4c bd 25 a9 95 1d 8a f0 46 c0 b9 98 19 18 f2 eb 06 88 d9 83 b8 ab 97 19 df ca 23 d7 19 17 cd e4 03 82 b6 f8 ec 48 07 e6 9e 1e 4c b3 60 58 31 c8 be Data Ascii: %=j2\|S.qhDXObd=^U`m5FGmO1%b{.EWaxpU30xO< [\%pP\|d=#WU2/{OVc,'-x9nJCu;Ni@I_{<L%F#HL`X1
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 71 82 04 92 b5 ed c8 22 ee f5 29 e5 3f 42 2d 9a af aa 9d 2f 39 8f 5b c8 4a b3 41 47 ed 63 06 b1 ec a1 4c 4a 91 90 31 6e 90 46 b1 2c 95 24 6c 83 a1 65 f1 0e 92 df cc 82 41 2a 77 17 51 87 7c 34 3c 23 02 05 30 15 88 83 ab b1 8a 62 84 fa 67 a2 75 b7 f0 35 3a 57 b7 1e 75 5a da 55 8c 6b f9 05 57 10 5d 80 65 4e e3 de 1c 96 9d d8 bb f2 1a c3 ce 8e 89 06 07 64 ab 85 e9 3e 02 37 3d a2 33 9a f7 9d a8 fe bc 98 b5 5d d1 92 4f 0f 0b 52 dc fc 91 8f 74 57 fa ac c9 33 90 57 c5 d5 36 aa 26 6f 61 45 f4 f9 98 50 9c 94 5c 6c 9c e9 4c ed 2c 77 6c 72 57 5d c1 b3 f8 26 7b 38 64 15 ac 66 ce 6a ce 3d 3f d7 c5 0a f9 a5 bc e0 71 e3 44 83 80 81 94 62 7d 8b 11 a0 b6 3d dd a2 b5 42 fe a6 4c cb 55 87 87 ba fa ad be b9 93 1e bd 25 68 cc 8b ea b9 e5 4a db f4 02 21 b3 9a 95 6b ee 0e 49 62 Data Ascii: q")?B-/9[JAGcLJ1nF,$leA*wQ\|4<#0bgu5:WuZUkW]eNd>7=3]ORtW3W6&oaEP\lL,wlrW]&{8dfj=?qDb}=BLU%hJ!kIb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49789	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:26 UTC	763	OUT	GET /uu/api/res/1.2/QmRSNXBrC7HxHZxQKfNaLQ--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/03d4b380-ed4d-11ee-bdfd-93ccd8c91a7d.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:26 UTC	1288	IN	HTTP/1.1 200 OK Content-Length: 40628 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 249617341784440560564412466750049420383,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="03d4b380-ed4d-11ee-bdfd-93ccd8c91a7d.webp" Edge-Cache-Tag: 249617341784440560564412466750049420383,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Etag: "dc9bc38351e5f90861fb70680106e906" Last-Modified: Thu, 28 Mar 2024 21:50:52 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=700,height=420,bytes=40628,owidth=2982,oheight=1680,obytes=303100,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: a932119668774c1d9b5d2b9c0e2e7386 Accept-Ranges: bytes Date: Thu, 28 Mar 2024 21:50:51 GMT X-Served-By: cache-iad-kjyo7100032-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711662651.948308,VS0,VE761 Age: 10236 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: a932119668774c1d9b5d2b9c0e2e7386 cld_by: cache-iad-kjyo7100032-IAD cld_latency: 761 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1
2024-03-29 00:41:26 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 52 49 46 46 ac 9e 00 00 57 45 42 50 56 50 38 20 a0 9e 00 00 d0 93 02 9d 01 2a bc 02 a4 01 3e 1d 0e 86 42 21 08 88 8c a2 5a 10 00 e2 59 db 90 d1 a6 ad 0e 9d 64 47 93 f3 5d a7 79 00 90 08 50 e5 c6 a0 fe 61 fc ff cc 5f c9 5f 97 ce 6b f1 3b eb 5f 90 fd b1 ed a3 a9 0f 72 ff bb f5 33 ef 67 d5 1f f6 7e e8 3e 6e ff e6 fd ab f7 ad fd 4b f7 93 dc 53 f5 c7 fe 87 f9 ff c9 ff ac be a1 ff e2 ff ea f5 3f fb 61 ff 77 fc df bc 5f fe 5f db ef 7d df db 7f e3 fe d5 7f c6 f9 05 fe b3 fe 53 ff 57 b6 87 ac 47 fa 5f fd 1e c4 df b5 df fb fd a5 3f f9 7e f0 7c 44 7f 6b ff 9b fb 97 f0 2b fb 47 ff cf d8 03 ff ff b7 87 3f 7f 94 ff f4 ef 71 fe 77 fc 9f 10 ff 32 fb 37 f5 9f e1 3f 76 39 d6 76 a7 99 3f cd 3f 15 ff 13 fc 97 ef 2f c7 6f f2 7f 67 7c cb fa 01 ff 17 a8 77 e6 1f d5 3f dd 7f 7b Data Ascii: RIFFWEBPVP8 *>B!ZYdG]yPa__k;_r3g~>nKS?aw__}SWG_?~\|Dk+G?qw27?v9v??/og\|w?{
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 78 52 42 67 66 86 6e a6 fd c3 d1 e3 4f 7f 94 fb f2 94 af 91 5a 13 2c 38 a3 f4 5a 31 e0 08 51 dd 5b 02 a4 e3 73 8f 86 6b f4 7b 40 67 7a 06 66 15 f8 b6 8d e9 38 56 77 54 39 ff c0 0d 3b 34 6b 49 60 d7 3f f5 14 a2 35 a1 4f b5 26 21 48 c7 34 81 d3 0d 7b 3c ee 10 8d 78 fd bc b6 19 0c 62 13 42 d3 c4 cc ae 20 3f b3 dd c4 d1 20 1a 79 15 bb 25 07 7c 12 02 3d f2 50 19 3c a1 16 af b3 99 6e 7f 56 24 7a 22 42 49 01 5d ff b6 12 00 8b f6 54 0f b9 10 86 8d 56 cb b9 e7 3c ab 0e b0 4a 22 6c e0 6a c8 50 0c 60 04 d5 7e 77 d9 a5 c0 6b b7 b9 fa 05 3c a9 d6 b4 86 42 a7 69 e8 ca 0d fc 6c 76 94 a1 9c 99 02 9c 13 61 60 ea 8a 93 65 3c ce 2f 82 66 76 17 1c ee a3 9d 10 53 a6 6c 9b a8 3e e1 4b 64 67 c6 8f 65 bd ee e8 95 7d 4b 32 8c 19 bb 7b 0a 96 ae 75 bb 97 54 97 d3 42 07 d9 d8 8e 1b Data Ascii: xRBgfnOZ,8Z1Q[sk{@gzf8VwT9;4kI`?5O&!H4{<xbB ? y%\|=P<nV$z"BI]TV<J"ljP`~wk<Bilva`e</fvSl>Kdge}K2{uTB
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: b0 bb 29 b2 31 a0 a6 f0 5c 4c f8 0e 02 31 22 f2 e7 b5 ee 70 91 6f 83 bc 5b 45 e5 bb e0 64 5c 0c 2c dc 26 52 c7 a5 55 2f 39 be 7f 45 d2 1c f9 62 a5 24 70 1e f9 33 49 7c 0e 46 e4 bc a9 73 1f 28 35 3a 91 be 40 5a 08 9a c8 c8 7b 42 e4 2b e0 02 bd 37 8a 9c 3c 83 4c dc c5 09 8f 45 c4 38 e1 a8 b9 39 21 9e fd 48 ea ae d8 c5 5b 05 95 45 aa 4b 29 0d 5b c8 bc 45 29 44 b9 29 43 e9 fb eb a0 78 c9 31 e6 6f 8b ce 31 dd 6b 77 85 b3 05 3e 2f e8 19 5e fa 5c f8 7f ee 1a 7d e3 d1 04 8f 78 b5 3d b5 e8 f1 41 81 dd e0 e3 bb c3 66 65 88 4c 6e d5 fe d5 fe 32 9d 2e e0 ca eb ca c8 0d 7c 95 ae e9 0f 8f ed 7e c2 17 d8 d3 88 03 ab 93 35 d7 ad 13 db 18 f1 4c 6a 81 30 7e 64 eb 3c f7 40 d0 d5 06 cc 81 1c 5e c4 c4 aa 75 42 e9 c7 e0 47 8b af 9a ee 72 54 ac 21 0c 48 f0 89 48 24 ce 27 c4 f3 Data Ascii: )1\L1"po[Ed\,&RU/9Eb$p3I\|Fs(5:@Z{B+7<LE89!H[EK)[E)D)Cx1o1kw>/^\}x=AfeLn2.\|~5Lj0~d<@^uBGrT!HH$'
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 4f a7 27 5b ce c4 89 3b b8 67 5c ce 90 1b 33 c9 d5 16 57 d1 9e 01 a4 86 3c 17 38 cc c9 e6 15 d3 25 6c 7d a6 75 bd db 05 e7 3a 9a ad dd f2 50 be 31 3b b5 68 f7 7e 0d 47 c4 0a d6 c6 13 da 66 fe f0 15 2e 2c 9b 13 6d 69 61 94 ae ae 1a f7 c5 ba 3e 60 b4 82 52 9e 48 23 c6 9c 9e 41 f5 16 7d b1 cd 1e 0f af db 02 c0 19 f1 1f 3c bb fc f4 e6 59 9d 90 02 4e 89 1d dc bb 58 b1 5e 81 28 ac 97 05 9c bf 2b ea 6f 68 bf 05 59 20 8b 9c 23 9e 3f a0 48 9c 4d 25 dd e6 b2 56 f2 28 7b 7f 48 34 5f 92 cc 94 04 43 5a 8a 9a 8e 7a f3 a7 70 42 0c 75 0d f8 c0 9a 69 ef 68 2d 26 d4 8b 0e f7 d6 bc 62 88 74 6c dc 7e 7b d5 c8 72 30 22 47 9a 94 42 2d c6 68 8e 83 bd 39 37 db f6 0a b3 84 bc f0 0a 5f fd 55 7c 12 47 40 df f2 72 8c d4 5e 22 fe da 60 9f e0 80 ec 44 6a c5 96 81 40 7e a1 e4 df 39 d3 Data Ascii: O'[;g\3W<8%l}u:P1;h~Gf.,mia>`RH#A}<YNX^(+ohY #?HM%V({H4_CZzpBuih-&btl~{r0"GB-h97_U\|G@r^"`Dj@~9
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 6d 53 75 05 82 91 17 b5 99 b1 f1 49 5f bb f4 42 aa f5 ba 83 09 5c be 40 f3 ab 75 b8 48 ea 33 0e 1b c1 7f f3 45 ad 8d 54 8c ed d7 61 c8 05 59 94 aa 62 bc 67 ea c8 23 21 22 0b 1e 85 0e 21 f9 97 60 8d 2f b2 bf 77 71 aa 8b 73 eb aa 63 5c 48 96 3c 74 48 b8 7c 20 e5 cb e0 03 ba b3 86 7e e6 c3 5f 38 88 c9 32 30 e3 44 b5 17 00 00 fe ff ab 59 e4 96 1c df 79 6b c6 70 49 3f ff ee 8f 2f c3 3c 7d 1c 7f 32 e5 ff fc df 95 ff 32 d4 9f e8 46 9f e6 ea e4 27 e3 b6 75 b3 ae 46 20 89 56 bf db 01 ca 23 02 51 73 c0 73 a5 21 27 87 71 f2 86 81 b2 40 75 53 63 91 ff e2 f0 e7 f6 40 90 7c 91 1b d2 fc 55 9f 64 4e 47 fb c9 e9 e7 d5 41 b5 a8 90 88 37 9e 31 5e 76 81 67 39 72 68 48 7e 7b 30 10 f1 aa af 85 91 b9 bf f4 31 4f 4d be f6 f3 25 84 32 24 22 b2 6c 98 99 5c 3b 08 23 31 ee e6 ed 2f Data Ascii: mSuI_B\@uH3ETaYbg#!"!`/wqsc\H<tH\| ~_820DYykpI?/<}22F'uF V#Qss!'q@uSc@\|UdNGA71^vg9rhH~{01OM%2$"l\;#1/
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 76 5d fe c6 ab 42 d7 30 05 98 d1 6f 0d 8a b8 8a 67 b7 6d 11 a3 ae 1f 9f 66 2e be c6 b5 d3 b9 5b 58 c0 a2 7e 41 6e 60 a0 7d 5f 6e ce 3f 60 38 ad 97 2a f4 18 02 80 b5 57 27 16 18 b1 1a ac 89 1c 16 87 36 88 6b f0 78 f3 5e f2 2c 5e f0 53 ce 6f 13 cd 60 29 ad db 32 d1 4e 45 40 b2 5f a5 9e f5 13 3d 46 0c 9c f0 e8 dc c0 00 16 ef 75 6e 9e e6 81 22 02 1e e1 c2 61 89 e5 d1 86 e3 33 02 98 b4 a2 20 fa bf 44 48 7a 23 79 7a db 2c 07 14 4a cc 26 74 02 a8 01 7c b2 45 3a 9e cc d4 95 e4 6c e2 79 0b 7c b4 79 03 de 89 38 c8 a0 60 ab 3e dd 71 82 0d 2c 7e 04 c8 4a 1c 01 f2 70 3a 02 1a 4a 88 0f c8 4d 53 02 1e 72 ab 9c 5d b4 dc 5c b1 e6 fc 6d 28 3b 27 ee 49 86 94 53 00 aa e8 31 76 5c 08 35 5b 07 98 8d d0 1a ca 7a 06 dd 3f 93 35 e7 c9 16 11 3e b7 a3 1f f3 c6 df f1 45 da 3f b4 d2 Data Ascii: v]B0ogmf.[X~An`}_n?`8*W'6kx^,^So`)2NE@_=Fun"a3 DHz#yz,J&t\|E:ly\|y8`>q,~Jp:JMSr]\m(;'IS1v\5[z?5>E?
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: cb fa 34 88 fe 04 1d e2 dd b9 16 fa c8 70 3d e5 eb ee 0e 72 e3 ec 17 d3 ad 22 65 e6 ea dc c1 d6 ee 5a 0d 4c 02 e5 ef c0 85 bc 34 a9 1e 2d 02 83 45 e7 48 53 b3 ab e2 83 cc 8f ca c1 70 93 18 73 43 0f 1f 6e e8 82 92 db 39 b2 9b 4d c5 62 16 2a a7 19 8c df ca 7a 37 16 c8 77 dd 8e 4e 14 64 72 f0 50 22 01 c7 ec 0d 4d 84 3f b0 c0 0e 84 1b e4 04 70 49 4d 77 08 31 ed 41 24 e2 f2 75 43 d5 eb df 93 e2 73 3a 0e 8a 06 94 f7 ea 56 88 a5 c4 82 c9 c9 36 4b ca aa d0 32 91 e3 19 46 9f 7d bb fe 65 cf f3 3b 12 8b 6e c6 a7 f8 ad 7c 2e 2e 9c 28 03 f2 32 0e 51 fa 7d e2 f7 99 82 8b 20 b6 42 b2 3e 67 f9 55 e8 15 5c 7a dd 56 5e 95 d6 2d be c3 af 3c 74 d5 ec e1 c6 b5 bd 3d fb 14 5d e0 2a 67 f6 25 b2 bb 1c d2 42 9e b5 b8 80 9e 42 ef 80 b7 b8 e4 36 10 6e a6 24 18 ea f7 98 14 7c 69 47 Data Ascii: 4p=r"eZL4-EHSpsCn9Mbz7wNdrP"M?pIMw1A$uCs:V6K2F}e;n\|..(2Q} B>gU\zV^-<t=]g%BB6n$\|iG
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: 8a 52 0b 5a b6 b8 e1 04 e5 de 9e 2b 8a e0 58 49 9b 9b 51 8f d0 70 7e 8f 8b a0 ca 6a 20 a0 b1 8a c6 a6 90 2e fc f2 a5 30 5e ca 0f db 2b 61 75 14 20 64 81 9d 15 8f 8f 7c 9d 1d 0e bd b2 1e 7a 6d 7c 61 72 92 f3 49 92 fc 4b 30 39 b9 50 15 fb b7 4f 1c 43 7b e4 9c d9 1c 33 2f 75 04 c4 aa 63 5d e5 c6 5d e7 93 db 34 8e 87 45 d0 d9 ed 1f bc d8 38 5a 6a 95 47 78 27 1d 69 ac 2b d7 a5 34 51 54 64 0e 37 81 f2 21 a6 ad f5 e7 c0 9f 5a 02 50 30 31 3b 80 4b ce d1 a3 27 d0 7d eb a2 8c 6a 7f 67 56 0c 86 1f 70 10 5e 0e b7 4f 97 86 3a fb ea 31 77 4b 29 94 ab 7f bb a0 24 96 1b 92 e3 84 00 4d f5 d6 c6 f9 dd 5e aa 36 33 29 73 53 a2 fe 4f f3 c7 3b 0f bf e6 43 fa f0 b0 2a 48 b8 f6 8f 3d a2 27 67 cd eb 9d b5 05 6a 3c e5 eb 9d 6c c1 42 37 89 ba a2 df b0 55 33 cc 86 24 cf c9 9f 6c 23 Data Ascii: RZ+XIQp~j .0^+au d\|zm\|arIK09POC{3/uc]]4E8ZjGx'i+4QTd7!ZP01;K'}jgVp^O:1wK)$M^63)sSO;C*H='gj<lB7U3$l#
2024-03-29 00:41:26 UTC	1300	IN	Data Raw: b7 a4 d9 e7 7a 43 d1 2d 76 74 6b 8d 2a 1a 83 7f 11 4e 5c 82 65 91 73 d7 34 04 92 b6 d4 4d cb ac 54 b4 d5 e7 dd a2 24 40 a5 0d 62 b1 34 6c 0b bf c1 de 62 ff bf 2c 82 65 9a 71 0a c5 a7 c9 3a 71 e7 d4 98 1a 98 62 09 fa 33 4c 46 ee 24 e8 b2 e4 fb 4d 3c 51 94 30 54 b9 a8 b2 28 ca 76 e3 a5 59 b3 e9 ca 52 b2 1a 6e ec 93 49 b2 e9 4d df 25 31 e9 17 06 ff b0 71 76 b1 40 89 ab 01 44 4d fe 84 96 49 e0 08 b5 d4 ff 90 ac f3 e3 7a 68 77 e7 1d d6 6e c8 1e 21 49 2d ba f9 40 17 ff d9 d8 50 59 54 3b 33 95 da 92 60 8c dd 79 09 a7 6f 56 f4 a1 2e 04 97 99 ca 6c ff 17 63 3c 70 8c 36 d7 4c 44 3d 95 da a4 ae c2 c6 03 8d 0e 60 b5 ba 2b 18 73 ab 2e 46 6f 24 dc c4 f5 ac c5 3f 1a 73 f2 f8 6c 37 67 4a 2c cf ab ec 2a 8a 32 ae 55 68 ce e4 c0 4c f5 1b 93 46 b8 ba 9e 1e 4d 86 e5 52 9a 15 Data Ascii: zC-vtkN\es4MT$@b4lb,eq:qb3LF$M<Q0T(vYRnIM%1qv@DMIzhwn!I-@PYT;3`yoV.lc<p6LD=`+s.Fo$?sl7gJ,2UhLFMR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49791	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:26 UTC	763	OUT	GET /uu/api/res/1.2/WpktrU2qWbIUypW2ykNmfA--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/361d4cf0-ed5f-11ee-b63e-945d160be8bf.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:27 UTC	1290	IN	HTTP/1.1 200 OK Content-Length: 52434 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 222625658006135444901691020609430819544,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="361d4cf0-ed5f-11ee-b63e-945d160be8bf.webp" Edge-Cache-Tag: 222625658006135444901691020609430819544,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Etag: "663bbf55473aa38691bf5b4a6bde972c" Last-Modified: Thu, 28 Mar 2024 23:59:52 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=700,height=420,bytes=52434,owidth=5417,oheight=3611,obytes=7000176,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 1510887e51f0ef9c47de4a48f831925d Accept-Ranges: bytes Date: Thu, 28 Mar 2024 23:59:52 GMT X-Served-By: cache-iad-kjyo7100042-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711670391.961220,VS0,VE1358 Age: 2497 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 1510887e51f0ef9c47de4a48f831925d cld_by: cache-iad-kjyo7100042-IAD cld_latency: 1358 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1
2024-03-29 00:41:27 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 52 49 46 46 ca cc 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 bb 02 00 a3 01 00 49 43 43 50 30 02 00 00 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: RIFFWEBPVP8X ICCP00ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: e9 42 6d 9b 7f 87 7e eb 9a 30 6a d6 e1 9d 48 97 89 6a af 65 0e 6b 5a 9b 20 2c e2 03 1c b1 c7 84 20 50 26 b8 09 20 30 6b 5f 6a 0a 6c 3f c8 bc 84 5a 74 49 de ec 67 2b b9 27 8d b9 88 9b 78 a6 19 37 cb 40 77 36 fe f8 1c 4a 7e 31 8a 06 c9 40 90 5b 7e 9a 1d c9 fa 7b b4 fb 17 27 61 7d 8e 86 2d c9 ec f2 20 ca 17 c7 32 7b e3 59 ec cb 16 dc 17 02 57 5b a6 81 69 ae 23 91 1c af 51 ea 87 11 24 14 5e 24 50 11 95 43 ed 95 8c df c4 6f 55 26 73 db 28 d6 86 16 8a 4d e0 5f 90 00 50 88 bb 53 41 28 3a ce a8 a5 4a 6b 2c 2e 21 72 c5 0e b8 0a 1b 63 53 e8 ac c4 7d 81 36 b7 52 e6 ed 39 49 7e 96 51 23 77 f4 9a 16 30 85 8d 39 5b 71 7f 05 89 c8 14 7c cf 85 b1 f5 22 01 1a 04 b4 69 41 f9 8a d5 37 00 10 14 03 94 0d 01 9d cf e4 99 a5 a8 a7 b9 44 7e da 40 bb 4e 52 6f dd 3f d1 a0 76 07 48 Data Ascii: Bm~0jHjekZ , P& 0k_jl?ZtIg+'x7@w6J~1@[~{'a}- 2{YW[i#Q$^$PCoU&s(M_PSA(:Jk,.!rcS}6R9I~Q#w09[q\|"iA7D~@NRo?vH
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 72 8d 80 b8 ed 9b 09 37 ff 8b d4 48 ec ed e0 b1 ea 67 21 e3 82 6e a7 47 d2 9a f0 5c d7 07 5a 04 15 88 8c 07 c9 ba 94 11 fe f6 b5 26 7d 32 41 3e d3 92 19 6f 10 50 35 bf 63 57 b9 68 3b 48 83 37 b4 15 f1 e1 94 0b 6e f0 bb 3c 16 12 f8 e0 cd 01 51 46 7c e9 21 d5 3e 6f e6 0d 5f 55 f5 30 fd 1e b9 4f 32 38 a9 d1 43 57 75 7e 4d 63 95 38 a6 fe cf 39 7d c1 f2 c5 4c 3f 0d 7a bc 94 50 53 fb 4b 27 44 e7 bf 7e 86 47 80 15 0c 2b c0 df eb 9f be 34 8d ca 9b 06 2f bb eb 24 d7 77 b4 3c a9 49 9d d7 15 94 d4 6d 63 1d 30 d5 8f c7 f2 94 55 b3 24 63 de 05 e3 b2 31 68 0e e6 37 98 e3 50 4d 11 39 3e 77 1b 28 54 11 0a b5 1d 5f 2a 88 3c c8 55 35 ed 1a 6e 7b d2 21 2a ab 8c af b9 28 51 17 56 00 e3 af e1 f5 f2 dc f3 0e 72 a1 80 94 12 08 9e 06 61 69 87 a3 98 62 87 9f 96 5b 89 32 70 c9 06 Data Ascii: r7Hg!nG\Z&}2A>oP5cWh;H7n<QF\|!>o_U0O28CWu~Mc89}L?zPSK'D~G+4/$w<Imc0U$c1h7PM9>w(T_<U5n{!(QVraib[2p
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 3f c8 39 9a b2 3f 58 72 e9 ae bb 08 f4 ee e3 7c 1b 05 f8 5f 2e 2e 36 ce 5d 97 e1 ab 3c d7 be 72 9f d6 be be 65 fc 19 3e 52 a1 7b 2b 72 2b a1 e6 c8 48 b8 37 87 8a ce 92 d6 ab 5d 8b c0 12 0e 15 a7 8f c0 78 9c 59 0d b1 75 84 16 52 fb b2 71 db 5d 85 97 de 87 be 10 7e 09 da 6c 58 4e 17 88 4e 83 44 3a 35 06 ae 4c e5 91 ec 87 ee 8f cd 53 c1 de eb cc 74 ec 0c d5 1c f3 2e 36 d2 e5 39 6f f7 6a e8 a9 4a 4e 19 f1 fc 14 cd d0 d4 09 76 21 b4 eb f5 c5 52 d6 08 5f a7 67 76 82 1c 89 90 16 b6 b8 39 d1 a8 9c 96 df 22 d6 39 c6 c2 20 bc a1 90 ac 1d e3 22 76 04 1b ca 4d 18 5e 85 db 35 5b 26 a1 17 06 d7 70 ee 7d 2d 99 92 ce ec 0a 48 55 09 5c fb 20 bd f9 0e cf 12 9c fb df 2e 07 39 ba 15 0b de ef d6 5a 58 33 ce 96 0b bc 39 72 a0 1d e0 af 0e 81 0e cb f9 c8 ff 23 ac c8 87 e5 d8 b9 Data Ascii: ?9?Xr\|_..6]<re>R{+r+H7]xYuRq]~lXNND:5LSt.69ojJNv!R_gv9"9 "vM^5[&p}-HU\ .9ZX39r#
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 4e 9b 2c bd 2d 73 9d 3b 71 53 26 31 a1 e6 13 1b 5a ff e8 3f 2f a5 36 e9 d1 4f 5a 81 61 67 fc 6c a4 1f 80 26 32 cd 2c d9 51 74 e2 d0 e9 d2 6d b0 1d 56 32 a1 78 5f ef a8 df c9 45 4b f4 f5 00 1f 5c 8c 43 ed ed 61 d1 ad e4 b9 fa 6e c1 5b de 12 bd 69 e6 8d 38 71 5c 92 f0 0e 02 aa 08 25 2a 6b 84 bb 0e c5 b9 80 b8 1e 3d c3 c2 6c 9d dd 75 49 5f 90 be da c3 7d 8b b1 e5 bb 44 2c 4e 60 70 37 33 f7 2c 5c 1b e0 64 22 c5 e0 fd 7c 48 83 2b fc bc dd 37 31 d8 02 ec 9b 9a 50 18 c9 72 7a 24 f7 37 81 a7 3f da 52 38 7f ea 8b a7 7c fa 29 f1 71 66 91 ce 36 57 eb ca 54 fc ba eb fc df 37 36 2f 60 e4 4e 5c e1 95 13 1b 17 6d d9 69 d2 bd fc 5d c7 ec 1b bf c4 a9 e2 a3 31 7d e6 2b b7 87 b1 80 7d 00 2d 59 30 f2 bd f7 a1 aa 47 9d f6 57 6f f0 6d 6b ef 5f f6 97 47 e2 76 62 c0 29 75 60 ad Data Ascii: N,-s;qS&1Z?/6OZagl&2,QtmV2x_EK\Can[i8q\%*k=luI_}D,N`p73,\d"\|H+71Prz$7?R8\|)qf6WT76/`N\mi]1}+}-Y0GWomk_Gvb)u`
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 3c f7 88 db c9 fc fb e3 cb 38 50 9f f8 a3 15 14 34 70 b7 61 62 79 fa 42 7c 6f 69 2d 9c b9 10 3e 76 6e a9 c7 5c 63 2e d8 ae e3 0e 90 3e 89 a1 fe fa 03 1e bf 8a 47 20 b7 56 aa 04 bb bb 90 71 52 a2 64 f7 9b 56 c1 17 90 5e 84 2a 7f df 5e 70 16 e7 7f 0d eb 31 f5 55 0b 86 f4 36 cf b2 c5 fe 1b 3c c2 51 c5 a7 28 f5 7d dd 66 2c 9d cb 09 50 ad f9 fd 3a 55 5f d0 4b 41 61 5c ef 29 1c 62 41 d8 b0 4a e4 76 e0 cc e7 33 14 0d d7 94 45 5c 7a b8 a4 3f 87 a5 b9 d3 47 31 37 91 be 10 67 0f fc 0f f9 77 67 c0 5c 4c f6 ac 25 86 0b 27 41 ce 64 5c 2c b3 64 b6 b5 9b 26 26 a5 72 bb 39 bd 44 6b ef 3d 2a 80 84 fe 0c 90 35 1d 1a 4c 20 2b 1b 77 e4 92 c1 ee c2 97 3a 9e ea eb b0 24 c8 13 6b e0 22 9d ba 40 3e 49 57 cf ed 8d 1a 83 a9 ad 72 5f 41 be 51 c0 19 86 6c f5 d0 b5 51 62 fd c2 cb 81 Data Ascii: <8P4pabyB\|oi->vn\c.>G VqRdV^^p1U6<Q(}f,P:U_KAa\)bAJv3E\z?G17gwg\L%'Ad\,d&&r9Dk=5L +w:$k"@>IWr_AQlQb
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 42 a4 8b aa f9 97 85 48 27 7b 7a 27 b9 b7 56 89 8a 72 fd cf 9f df b1 9b e7 05 9f dc fb c4 da cb 96 d2 d2 3b d1 4c 85 bb 00 a6 66 51 cf d8 84 cf 1d 55 d9 e3 35 d5 1a 28 98 28 4c da 40 1b 5a 4c 9f 84 db 29 0e be c7 c7 6f 4d f3 5d bc 31 a2 c9 32 8a 4c e5 8e d8 43 50 3b 43 33 1f 9a b6 08 b0 56 53 22 5a c2 a9 8f bf 78 68 7a 26 c1 e7 41 af ee 66 1b ee ce 3d 50 ff 30 61 e0 be af 8e 45 20 07 9f fb 06 b2 2e ae de 8e aa cb b3 c7 02 77 9e 87 c0 e1 6e b0 e7 18 7c 68 0d 4e 19 59 1a 84 07 af cc 41 26 6a 0c 66 72 b7 b3 c3 ed 09 1c aa df a7 08 75 3f 5a c2 d6 95 60 b8 de ba fa 8d 52 1b c8 1e 8f 07 42 e6 64 e7 11 35 6d 59 2e 38 87 ae 43 4a ed 76 cf 25 9e f7 c6 f6 07 fe 5e d1 85 d6 52 d9 16 28 8c 36 2e ff 07 d3 95 95 2f 94 7b e4 cb e9 a8 73 52 fe 53 fd 61 5b 0f cd a0 57 34 Data Ascii: BH'{z'Vr;LfQU5((L@ZL)oM]12LCP;C3VS"Zxhz&Af=P0aE .wn\|hNYA&jfru?Z`RBd5mY.8CJv%^R(6./{sRSa[W4
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 5b 92 27 42 e4 74 c7 d0 d4 70 4b f5 41 42 e3 44 df 6a 8b dc 98 7d 95 26 08 8b 43 0e 86 c0 53 fd b0 b4 72 5b 5f bf 49 a5 43 f4 4e bd bc 48 02 14 3a 2d 38 bc 9c f7 76 0e 5b 8d 48 66 b0 f3 cf 78 51 69 ae b0 c4 d9 9e 5c c4 8a 53 d5 f8 52 23 a7 5e ab 2b 3a b6 3e 1f bb d9 c4 4f c7 c3 ab 5d 2a 99 7b eb 4d 7c ee 09 48 ac b4 10 10 29 58 5d 0b 52 ad 9a 9c 7d a1 8c d4 d3 3d e0 7f 88 cb e3 72 c8 51 af 11 b4 d7 34 d0 e6 9c 94 09 86 f1 19 0d 28 04 f5 45 53 1c bf 27 0f 5b 13 bc 31 bc 3d 8d 01 ad 4c e8 f8 90 f6 9c 9d c4 af b3 4b ad 12 c0 55 6f 98 d7 04 55 cc 98 27 49 25 64 de 3d f2 49 17 e1 28 d1 66 b4 d2 a9 bc 87 ee 5a ff 16 f2 39 67 0a 79 9a 5e 84 03 ad e3 e2 91 fb dc 7e e8 35 8c fe 68 f5 b2 ef 9b 22 0a 1d 6d 14 f3 db b3 b7 91 a9 31 ce 2f 88 38 68 13 f1 c9 df 7f d7 69 Data Ascii: ['BtpKABDj}&CSr[_ICNH:-8v[HfxQi\SR#^+:>O]*{M\|H)X]R}=rQ4(ES'[1=LKUoU'I%d=I(fZ9gy^~5h"m1/8hi
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: a1 b0 3d c4 b4 37 a3 6c 96 b2 e7 74 8e f8 15 b5 80 e2 d5 d8 b0 2c 2a 1c 25 ca 51 cb 80 ce 65 df 3b e4 75 27 a1 42 17 a5 33 c9 73 a4 bd 34 7b 1d cb b2 5d b3 c8 c0 c5 37 85 d4 b5 89 30 2e 3b c9 6d bc e5 3a 26 2b ff 7b 85 31 28 56 de 14 d2 70 71 45 0e 63 cb 02 d4 bc b8 44 92 14 c1 3e c8 be 1f a4 b8 45 c9 09 04 ca 66 b2 31 c9 d4 bd 04 36 85 5e 80 87 1c 46 49 a0 0d 5e 9b 54 66 02 aa 91 03 75 bb d9 4f b3 78 5c e5 fd 78 0e 23 ca 96 10 f6 95 bd 03 93 00 37 08 38 70 19 69 ba 64 b6 a2 d7 8e 08 a3 12 42 bf 29 ab 18 a0 a4 fc a7 99 65 1b 22 2d 14 0d bf f3 ab 06 63 d2 c1 fb c3 93 a5 d0 d2 32 65 14 a1 96 9c 24 40 c8 43 c5 3c 27 34 c0 8d 4a 9c a9 d3 f0 56 cb ce 42 2e 4b e1 e4 de de db c2 83 c5 a3 f0 35 09 0f 89 c6 c1 fb 80 1a c5 e0 b9 6d 46 99 73 9a e1 e7 01 2f 0f 48 a2 Data Ascii: =7lt,*%Qe;u'B3s4{]70.;m:&+{1(VpqEcD>Ef16^FI^TfuOx\x#78pidB)e"-c2e$@C<'4JVB.K5mFs/H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49788	34.227.4.2	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:26 UTC	901	OUT	GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1 Host: guce.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4
2024-03-29 00:41:26 UTC	470	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, User-Agent, X-Forwarded-For, X-Oath-Gcrumb Server: guce Date: Fri, 29 Mar 2024 00:41:26 GMT Connection: close Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Type: application/json Content-Length: 140 Access-Control-Allow-Methods: HEAD, GET, OPTIONS
2024-03-29 00:41:26 UTC	140	IN	Data Raw: 7b 22 69 64 65 6e 74 69 66 69 65 72 22 3a 22 31 61 72 6b 62 74 74 6a 30 63 33 68 39 22 2c 22 69 64 65 6e 74 69 66 69 65 72 54 79 70 65 22 3a 22 62 69 64 22 2c 22 74 6f 73 52 65 63 6f 72 64 73 22 3a 7b 22 6e 6f 6e 45 75 22 3a 7b 22 63 6f 6e 73 65 6e 74 45 76 65 6e 74 73 22 3a 7b 22 69 61 62 43 43 50 41 22 3a 22 31 59 4e 4e 22 2c 22 67 70 70 22 3a 22 44 42 41 41 22 2c 22 67 70 70 53 69 64 22 3a 22 2d 31 22 7d 7d 7d 7d Data Ascii: {"identifier":"1arkbttj0c3h9","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49792	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:26 UTC	588	OUT	GET /aaq/fp/js/tdv2-wafer-utils.customErrorHandler.bcda778b736c3a054af62f437b536e78.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:27 UTC	884	IN	HTTP/1.1 200 OK x-amz-id-2: 1Bin4Ph+aRPI3tSXbYaMmNZRLYjMLvhvTpVP7alUs94H4BOowMtaGJGxBfXbpBvFm7IUTJk1R3pFEt1AGfP+TI7Qz80vdpZGpG9crvIJyYA= x-amz-request-id: FK73NMS91M5V7ZDH Date: Thu, 28 Mar 2024 15:16:58 GMT Last-Modified: Wed, 22 Nov 2023 02:30:41 GMT ETag: "bcda778b736c3a054af62f437b536e78" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 4nvcVa.IxmhX7xaj3DD1aoyDc2oHnofW Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 4249 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 33870 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 65 29 7b 72 65 74 75 72 6e 20 5f 74 79 70 65 6f 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 5f 74 79 70 65 Data Ascii: "use strict";function _typeof(e){return _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},_type
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 77 2e 77 61 66 65 72 2c 73 3d 21 28 21 77 69 6e 64 6f 77 2e 77 61 66 65 72 7c 7c 21 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 72 65 61 64 79 29 2c 67 3d 22 22 2e 63 6f 6e 63 61 74 28 22 2f 5f 74 64 5f 61 70 69 2f 62 65 61 63 6f 6e 22 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 3f 22 29 2e 63 6f 6e 63 61 74 28 69 29 2e 63 6f 6e 63 61 74 28 75 28 29 2c 22 26 73 69 74 65 3d 22 29 2e 63 6f 6e 63 61 74 28 66 2e 73 69 74 65 2c 22 26 63 6f 6e 6e 65 63 74 69 6f 6e 3d 22 29 2e 63 6f 6e 63 61 74 28 65 73 63 61 70 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 77 28 29 29 29 2c 22 26 68 61 73 57 66 3d 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 26 68 61 73 57 66 52 3d 22 29 2e 63 6f 6e 63 61 74 28 73 29 3b 76 28 67 29 2c 72 2e 5f 5f 74 65 73 74 45 72 72 6f 72 26 26 Data Ascii: w.wafer,s=!(!window.wafer\|\|!window.wafer.ready),g="".concat("/_td_api/beacon","/").concat(e,"?").concat(i).concat(u(),"&site=").concat(f.site,"&connection=").concat(escape(JSON.stringify(w())),"&hasWf=").concat(c,"&hasWfR=").concat(s);v(g),r.__testError&&
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 28 64 3e 33 29 26 26 28 21 72 2e 6e 61 76 69 67 61 74 6f 72 7c 7c 21 31 21 3d 3d 72 2e 6e 61 76 69 67 61 74 6f 72 2e 6f 6e 4c 69 6e 65 29 26 26 65 29 7b 76 61 72 20 6e 3d 65 2e 6d 65 74 61 2c 74 3d 65 2e 6e 61 6d 65 2c 6f 3d 65 2e 73 74 61 63 6b 2c 61 3d 6f 26 26 6f 2e 6d 65 73 73 61 67 65 7c 7c 6f 7c 7c 22 22 2c 69 3d 22 2f 22 2e 63 6f 6e 63 61 74 28 66 2e 62 65 61 63 6f 6e 50 61 74 68 2c 22 3f 65 72 72 3d 22 29 2e 63 6f 6e 63 61 74 28 74 2c 22 26 62 65 61 63 6f 6e 54 79 70 65 3d 77 61 66 65 72 5f 65 72 72 26 69 6e 66 6f 3d 22 29 2e 63 6f 6e 63 61 74 28 65 73 63 61 70 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 29 2c 22 26 73 74 61 63 6b 3d 22 29 2e 63 6f 6e 63 61 74 28 61 2c 22 26 Data Ascii: },m=function(e){if(!(d>3)&&(!r.navigator\|\|!1!==r.navigator.onLine)&&e){var n=e.meta,t=e.name,o=e.stack,a=o&&o.message\|\|o\|\|"",i="/".concat(f.beaconPath,"?err=").concat(t,"&beaconType=wafer_err&info=").concat(escape(JSON.stringify(n)),"&stack=").concat(a,"&
2024-03-29 00:41:27 UTC	349	IN	Data Raw: 63 65 73 43 72 65 61 74 6f 72 3b 72 2e 59 41 48 4f 4f 2e 75 74 69 6c 73 2e 74 72 61 63 65 73 3d 6e 2e 63 72 65 61 74 65 54 72 61 63 65 73 49 6e 73 74 61 6e 63 65 28 7b 74 72 61 63 65 73 3a 7b 67 6c 6f 62 61 6c 41 74 74 72 69 62 75 74 65 73 3a 7b 61 75 74 68 65 64 3a 4f 2e 61 75 74 68 65 64 7c 7c 22 30 22 2c 62 75 63 6b 65 74 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 41 29 26 26 41 2e 6a 6f 69 6e 28 22 2c 22 29 7c 7c 41 2c 63 6f 6e 6e 65 63 74 3a 22 22 2e 63 6f 6e 63 61 74 28 65 73 63 61 70 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 77 28 29 29 29 29 2e 63 6f 6e 63 61 74 28 75 28 29 29 2c 64 65 76 69 63 65 3a 4f 2e 64 65 76 69 63 65 2c 65 6e 76 3a 4f 2e 65 6e 76 7c 7c 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 6c 61 6e 67 3a 4f 2e 6c 61 6e 67 2c 72 Data Ascii: cesCreator;r.YAHOO.utils.traces=n.createTracesInstance({traces:{globalAttributes:{authed:O.authed\|\|"0",bucket:Array.isArray(A)&&A.join(",")\|\|A,connect:"".concat(escape(JSON.stringify(w()))).concat(u()),device:O.device,env:O.env\|\|"production",lang:O.lang,r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49793	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:26 UTC	563	OUT	GET /aaq/scp/js/fpDesktop.907c8bf6c67491b309a489c75f65f939.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:27 UTC	854	IN	HTTP/1.1 200 OK x-amz-id-2: GdOhoXhblIQDuX3Od+mLNDLjjqWMEa1GMdLQVf20o56Rqo9122VNEjmDSA1FOXmuwFzqdgBmnUM= x-amz-request-id: MRSKNHZSX9105BF2 Date: Tue, 26 Mar 2024 16:18:49 GMT Last-Modified: Fri, 12 Jan 2024 19:44:04 GMT ETag: "907c8bf6c67491b309a489c75f65f939" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: kqQNNuDBa1XU2.LreescnfUlTiwBZj0u Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 17849 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 202959 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 74 3d 65 2e 62 61 73 65 7c 7c 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 6f 29 7b 69 66 28 65 29 72 65 74 75 72 6e 20 6f 3d 6f 7c 7c 7b 7d 2c 65 2e 75 74 69 6c 73 2e 65 6c 65 6d 65 6e 74 49 6e 56 69 65 77 28 6e 2c 6f 2c 74 2e 76 69 65 77 70 6f 72 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 2c 6e 2c 6f 2c 69 29 7b 72 65 74 75 72 6e 7b 63 6c 65 61 6e 3a 74 2c 64 65 73 74 3a 6e 2c 68 3a 69 2c 6d 65 74 61 53 69 7a 65 3a 21 30 2c 70 6f 73 3a 65 2c 73 75 70 70 6f 72 74 73 3a 21 31 2c 77 3a 6f 7d 7d 76 61 72 20 69 3d 7b 63 6f 6e 74 65 78 74 3a 7b 62 75 63 6b 65 74 3a 22 22 2c 62 75 63 6b 65 74 49 64 3a 22 22 2c 64 65 76 Data Ascii: !function(){"use strict";var e=window.wafer,t=e.base\|\|{};function n(n,o){if(e)return o=o\|\|{},e.utils.elementInView(n,o,t.viewport)}function o(e,t,n,o,i){return{clean:t,dest:n,h:i,metaSize:!0,pos:e,supports:!1,w:o}}var i={context:{bucket:"",bucketId:"",dev
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 74 69 6f 6e 2e 68 72 65 66 2c 73 61 3a 6c 2c 73 65 63 75 72 65 3a 74 2e 73 65 63 75 72 65 2c 73 70 3a 74 2e 73 70 2c 73 73 6c 3a 74 2e 73 73 6c 2c 75 6c 74 3a 74 2e 75 6c 74 7d 3b 70 2e 61 64 64 28 63 29 2c 70 2e 65 76 65 6e 74 28 77 29 7d 7d 28 61 29 7d 29 29 2c 28 72 3d 63 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 41 2b 28 6e 75 6c 6c 3d 3d 73 3f 76 6f 69 64 20 30 3a 73 2e 70 6f 73 29 29 29 7c 7c 66 2e 65 6e 61 62 6c 65 47 41 4d 41 64 73 29 7b 65 3d 7b 6f 66 66 73 65 74 58 3a 30 2c 6f 66 66 73 65 74 59 3a 70 61 72 73 65 49 6e 74 28 74 2e 6f 66 66 73 65 74 2c 31 30 29 7c 7c 31 30 30 7d 2c 68 2e 6f 6e 28 62 2c 50 29 2c 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 65 77 65 72 4f 70 65 6e 65 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: tion.href,sa:l,secure:t.secure,sp:t.sp,ssl:t.ssl,ult:t.ult};p.add(c),p.event(w)}}(a)})),(r=c.getElementById(A+(null==s?void 0:s.pos)))\|\|f.enableGAMAds){e={offsetX:0,offsetY:parseInt(t.offset,10)\|\|100},h.on(b,P),d.addEventListener("viewerOpened",(function(
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 52 42 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 48 74 2d 70 6c 2d 4c 52 45 43 22 29 29 26 26 28 69 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 48 74 2d 70 6c 2d 4c 44 52 42 22 29 2c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 48 74 2d 70 6c 2d 4c 52 45 43 22 29 29 7d 69 66 28 74 2e 4d 4f 4e 32 26 26 74 2e 4c 52 45 43 33 26 26 74 2e 4c 52 45 43 34 29 7b 76 61 72 20 61 3d 74 2e 4d 4f 4e 32 2e 76 61 6c 69 64 41 64 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 64 61 2d 4c 52 45 43 33 22 29 2c 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 64 61 2d 4c 52 45 43 34 22 29 3b 61 3f 28 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 Data Ascii: RB")\|\|i.classList.contains("Ht-pl-LREC"))&&(i.classList.remove("Ht-pl-LDRB"),i.classList.remove("Ht-pl-LREC"))}if(t.MON2&&t.LREC3&&t.LREC4){var a=t.MON2.validAd,r=document.getElementById("sda-LREC3"),s=document.getElementById("sda-LREC4");a?(r.classList.a
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 6e 20 49 28 29 7b 76 61 72 20 65 3b 69 66 28 64 2e 70 61 67 65 6c 6f 61 64 4e 6f 6e 43 6f 6c 6c 61 70 73 65 64 41 64 73 29 7b 66 6f 72 28 76 61 72 20 6f 2c 69 3d 5b 5d 2c 61 3d 64 2e 70 61 67 65 6c 6f 61 64 4e 6f 6e 43 6f 6c 6c 61 70 73 65 64 41 64 73 2c 72 3d 30 2c 73 3d 5b 22 4c 52 45 43 22 2c 22 4d 41 53 54 22 2c 22 4c 44 52 42 22 2c 22 55 42 41 4c 44 52 42 22 2c 22 55 42 41 4c 52 45 43 22 2c 22 55 42 41 4c 52 45 43 32 22 2c 22 55 42 41 4c 52 45 43 33 22 5d 3b 72 3c 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 66 3d 73 5b 72 5d 2c 75 3d 66 3b 69 66 28 61 2e 69 6e 64 65 78 4f 66 28 66 29 3e 3d 30 29 7b 66 2e 69 6e 63 6c 75 64 65 73 28 22 55 42 41 22 29 26 26 28 75 3d 66 2e 73 70 6c 69 74 28 22 55 42 41 22 29 5b 31 5d 29 3b 76 61 72 20 76 3d 63 Data Ascii: n I(){var e;if(d.pageloadNonCollapsedAds){for(var o,i=[],a=d.pageloadNonCollapsedAds,r=0,s=["LREC","MAST","LDRB","UBALDRB","UBALREC","UBALREC2","UBALREC3"];r<s.length;r++){var f=s[r],u=f;if(a.indexOf(f)>=0){f.includes("UBA")&&(u=f.split("UBA")[1]);var v=c
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 20 6e 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 4f 29 3b 69 66 28 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 29 7b 6c 2e 72 65 70 6c 61 63 65 57 69 74 68 28 6e 5b 30 5d 29 3b 76 61 72 20 6f 3d 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 4f 29 3b 6f 26 26 6f 2e 6c 65 6e 67 74 68 3e 30 26 26 28 6c 3d 6f 5b 30 5d 2c 64 2e 77 61 66 65 72 2e 62 61 73 65 2e 73 79 6e 63 28 6c 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 29 7d 7d 7d 29 29 7d 7d 28 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 2c 69 2c 61 3d 76 2e 63 6f 6e 74 65 78 74 2c 72 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 2e 62 75 63 6b 65 74 29 3f 61 2e 62 75 63 6b 65 74 2e 6a 6f 69 6e 28 22 2c 22 29 Data Ascii: n=e.getElementsByClassName(O);if(n&&n.length>0){l.replaceWith(n[0]);var o=c.getElementsByClassName(O);o&&o.length>0&&(l=o[0],d.wafer.base.sync(l.parentElement))}}}))}}()}}}function k(e,t,n){var o,i,a=v.context,r=Array.isArray(a.bucket)?a.bucket.join(",")
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 75 74 69 6c 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 66 69 72 65 42 65 61 63 6f 6e 29 26 26 64 2e 77 61 66 65 72 2e 75 74 69 6c 73 2e 66 69 72 65 42 65 61 63 6f 6e 28 6f 29 7d 70 3f 44 28 29 3a 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 64 61 72 6c 61 52 65 61 64 79 4f 6e 41 73 79 6e 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 44 28 29 7d 29 29 7d 3b 76 61 72 20 73 2c 6c 2c 64 3d 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 74 72 61 6e 73 66 6f 72 6d 44 61 72 6c 61 43 6f 6e 66 54 6f Data Ascii: er)\|\|void 0===t?void 0:t.utils)\|\|void 0===n?void 0:n.fireBeacon)&&d.wafer.utils.fireBeacon(o)}p?D():d.addEventListener("darlaReadyOnAsync",(function(){D()}))};var s,l,d=(function(e,t){Object.defineProperty(t,"__esModule",{value:!0}),t.transformDarlaConfTo
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 6c 65 78 2e 77 2e 6d 69 6e 26 26 28 6f 2e 66 6c 65 78 69 62 6c 65 2e 77 69 64 74 68 2e 6d 69 6e 3d 70 61 72 73 65 49 6e 74 28 53 74 72 69 6e 67 28 65 2e 66 6c 65 78 2e 77 2e 6d 69 6e 29 2c 31 30 29 29 2c 65 2e 66 6c 65 78 2e 77 2e 6d 61 78 26 26 28 6f 2e 66 6c 65 78 69 62 6c 65 2e 77 69 64 74 68 2e 6d 61 78 3d 70 61 72 73 65 49 6e 74 28 53 74 72 69 6e 67 28 65 2e 66 6c 65 78 2e 77 2e 6d 61 78 29 2c 31 30 29 29 29 2c 65 2e 66 6c 65 78 2e 68 3f 28 6f 2e 66 6c 65 78 69 62 6c 65 2e 68 65 69 67 68 74 3d 7b 65 6e 61 62 6c 65 64 3a 21 30 7d 2c 65 2e 66 6c 65 78 2e 68 2e 6d 69 6e 26 26 28 6f 2e 66 6c 65 78 69 62 6c 65 2e 68 65 69 67 68 74 2e 6d 69 6e 3d 70 61 72 73 65 49 6e 74 28 53 74 72 69 6e 67 28 65 2e 66 6c 65 78 2e 68 2e 6d 69 6e 29 2c 31 30 29 29 2c 65 2e Data Ascii: lex.w.min&&(o.flexible.width.min=parseInt(String(e.flex.w.min),10)),e.flex.w.max&&(o.flexible.width.max=parseInt(String(e.flex.w.max),10))),e.flex.h?(o.flexible.height={enabled:!0},e.flex.h.min&&(o.flexible.height.min=parseInt(String(e.flex.h.min),10)),e.
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 3d 69 26 26 6f 2b 31 3c 65 2e 6c 65 6e 67 74 68 3b 29 6f 2b 2b 2c 69 3d 65 2e 63 68 61 72 41 74 28 6f 29 2c 74 3d 21 30 3b 74 26 26 6f 2d 2d 7d 7d 2c 72 3d 6e 3d 3e 7b 69 66 28 6f 2b 31 3c 65 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 69 3d 65 2e 63 68 61 72 41 74 28 6f 2b 31 29 2c 6f 2b 2b 3b 69 21 3d 3d 6e 26 26 6f 2b 31 3c 65 2e 6c 65 6e 67 74 68 3b 29 74 2b 3d 69 2c 69 3d 65 2e 63 68 61 72 41 74 28 6f 2b 31 29 2c 6f 2b 2b 3b 69 21 3d 3d 6e 26 26 28 74 2b 3d 69 29 7d 7d 3b 66 6f 72 28 6f 3d 30 3b 6f 3c 65 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 3d 65 2e 63 68 61 72 41 74 28 6f 29 2c 22 3d 22 3d 3d 3d 69 3f 28 74 26 26 28 6e 2e 70 75 73 68 28 74 29 2c 74 3d 22 22 29 2c 61 28 29 29 3a 27 22 27 3d 3d 3d 69 3f 28 74 26 26 28 6e 2e 70 75 73 68 28 74 29 2c 74 3d Data Ascii: =i&&o+1<e.length;)o++,i=e.charAt(o),t=!0;t&&o--}},r=n=>{if(o+1<e.length){for(i=e.charAt(o+1),o++;i!==n&&o+1<e.length;)t+=i,i=e.charAt(o+1),o++;i!==n&&(t+=i)}};for(o=0;o<e.length;o++)i=e.charAt(o),"="===i?(t&&(n.push(t),t=""),a()):'"'===i?(t&&(n.push(t),t=
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 2c 74 2e 74 72 61 6e 73 66 6f 72 6d 44 61 72 6c 61 50 6f 73 69 74 69 6f 6e 43 6f 6e 66 54 6f 4a 61 63 29 28 6e 29 3b 6f 26 26 28 6f 2e 63 6c 69 65 6e 74 2e 6d 65 74 61 26 26 6f 2e 63 6c 69 65 6e 74 2e 6d 65 74 61 2e 68 6f 73 74 55 52 4c 7c 7c 21 67 7c 7c 28 6f 2e 63 6c 69 65 6e 74 2e 6d 65 74 61 7c 7c 28 6f 2e 63 6c 69 65 6e 74 2e 6d 65 74 61 3d 7b 68 6f 73 74 55 52 4c 3a 22 22 7d 29 2c 6f 2e 63 6c 69 65 6e 74 2e 6d 65 74 61 2e 68 6f 73 74 55 52 4c 3d 67 29 2c 28 30 2c 74 2e 75 70 64 61 74 65 52 6f 74 61 74 69 6f 6e 43 6f 6e 66 46 72 6f 6d 41 75 74 6f 45 76 65 6e 74 29 28 75 2c 65 2c 6f 2e 63 6c 69 65 6e 74 29 2c 63 2e 73 65 72 76 69 63 65 2e 70 6f 73 69 74 69 6f 6e 73 5b 65 5d 3d 6f 2e 73 65 72 76 69 63 65 2c 63 2e 63 6c 69 65 6e 74 2e 70 6f 73 69 74 69 Data Ascii: ,t.transformDarlaPositionConfToJac)(n);o&&(o.client.meta&&o.client.meta.hostURL\|\|!g\|\|(o.client.meta\|\|(o.client.meta={hostURL:""}),o.client.meta.hostURL=g),(0,t.updateRotationConfFromAutoEvent)(u,e,o.client),c.service.positions[e]=o.service,c.client.positi
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 64 61 2d 63 6f 6e 74 61 69 6e 65 72 22 29 29 26 26 28 76 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 48 74 2d 70 6c 2d 4c 44 52 42 22 29 7c 7c 76 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 48 74 2d 70 6c 2d 4c 52 45 43 22 29 29 26 26 76 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 48 74 2d 70 6c 2d 4c 44 52 42 22 2c 22 48 74 2d 70 6c 2d 4c 52 45 43 22 29 7d 76 61 72 20 6d 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 61 2e 72 65 73 70 6f 6e 73 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 70 6f 73 69 74 69 6f 6e 73 3b 69 66 28 6d 26 26 6d 2e 4d 4f 4e 32 26 26 6d 2e 4c 52 45 43 33 26 26 6d 2e 4c 52 45 43 34 29 7b 76 61 72 20 70 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 6d 2e 4d 4f 4e 32 2e 63 6f 6e 74 Data Ascii: da-container"))&&(v.classList.contains("Ht-pl-LDRB")\|\|v.classList.contains("Ht-pl-LREC"))&&v.classList.remove("Ht-pl-LDRB","Ht-pl-LREC")}var m=null===(o=a.response)\|\|void 0===o?void 0:o.positions;if(m&&m.MON2&&m.LREC3&&m.LREC4){var p=null===(i=m.MON2.cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49795	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:27 UTC	1317	OUT	GET /_td_api/beacon/performance?ybar-init_0=0.8000000000174623&ybar-mod-sidenav_0=4.899999999994179&ybar-mod-logo_0=0.7999999999883585&ybar-mod-searchbox_0=3.2999999999883585&ybar-mod-assistjs_0=10.89999999999418&ybar-mod-adaptivenav_0=1.2999999999883585&ybar-account-init_0=3.099999999976717&ybar-mail-init_0=3.900000000023283&ybar-mod-navigation_0=47.59999999997672&ybar-mod-notification_0=1.3999999999941792&src=ybar&_rdn=886377&site=homepage HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4
2024-03-29 00:41:27 UTC	1138	IN	HTTP/1.1 204 No Content referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-type: image/gif content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Fri, 29 Mar 2024 00:41:27 GMT x-envoy-upstream-service-time: 1 server: ATS Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=5tnts21j0c3hn&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49796	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:27 UTC	530	OUT	GET /ss/analytics-3.53.39.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:27 UTC	889	IN	HTTP/1.1 200 OK x-amz-id-2: qJoyFsV8lNSynRt03Xi4Aw/y16nNWP89SEOO1nRNIj+mGv/0elAtid5/GVwOYS5rDfcGKu+lziQnAxRGo7NJu5JnMHtcXn8bT0Jt/QAIqFI= x-amz-request-id: Y9NN7DAX85C4N32A Date: Thu, 28 Mar 2024 13:58:24 GMT Last-Modified: Thu, 20 Oct 2022 22:18:00 GMT ETag: "3ad90205296656e070371a83d5201160" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, immutable x-amz-version-id: MeLgz6suCoZjRxYG3dMtqJTPvAFhzHMX Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 51141 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 38584 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 65 28 6c 29 7b 76 61 72 20 63 3d 7b 41 31 53 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 61 31 73 22 7d 2c 42 3a 7b 6c 6f 67 3a 21 31 7d 2c 42 58 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 62 78 22 7d 2c 57 56 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 77 76 22 7d 2c 54 54 3a 7b 6c 6f 67 3a 21 31 7d 2c 44 3a 7b 6c 6f 67 3a 21 31 7d 2c 5f 67 61 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 67 61 22 7d 2c 79 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 79 78 22 7d 2c 72 78 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 72 78 22 7d 2c 55 4e 41 55 54 48 49 44 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 61 6f 6c 5f 75 6e 61 75 74 68 22 7d 2c 5f 75 74 64 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a Data Ascii: !function(){function le(l){var c={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 52 61 70 69 64 20 57 61 73 20 50 72 65 76 65 6e 74 65 64 20 46 72 6f 6d 20 41 63 63 65 73 73 69 6e 67 20 43 6f 6f 6b 69 65 73 3a 22 2c 65 29 7d 2d 31 21 3d 3d 74 3f 28 75 5b 6e 5d 3d 69 2c 6e 3d 63 5b 6e 5d 2c 6c 26 26 6e 26 26 6e 2e 6c 6f 67 26 26 6c 2e 73 65 74 28 6e 2e 6b 65 79 2c 69 29 29 3a 30 3c 6f 2b 72 26 26 28 6f 2d 2d 2c 73 28 29 29 7d 65 2e 66 70 63 26 26 22 2e 79 61 68 6f 6f 2e 63 6f 6d 22 21 3d 3d 61 28 6f 29 26 26 73 28 29 7d 3b 76 61 72 20 65 3d 6e 75 6c 6c 3b 74 72 79 7b 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 52 61 70 69 64 20 57 61 73 20 50 72 65 76 65 6e 74 65 64 20 46 72 6f 6d 20 41 63 63 65 73 73 69 6e 67 Data Ascii: ){console.warn("Rapid Was Prevented From Accessing Cookies:",e)}-1!==t?(u[n]=i,n=c[n],l&&n&&n.log&&l.set(n.key,i)):0<o+r&&(o--,s())}e.fpc&&".yahoo.com"!==a(o)&&s()};var e=null;try{e=document.cookie}catch(e){console.warn("Rapid Was Prevented From Accessing
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 69 74 5f 61 64 5f 74 72 61 63 6b 69 6e 67 3a 65 5b 38 5d 2c 74 72 61 63 6b 69 6e 67 5f 61 75 74 68 5f 73 74 61 74 75 73 3a 65 5b 39 5d 7d 7d 72 65 74 75 72 6e 7b 7d 7d 28 28 6e 65 77 20 6c 65 29 2e 67 65 74 43 6f 6f 6b 69 65 42 79 4e 61 6d 65 28 22 57 56 22 29 29 2e 74 72 61 63 6b 69 6e 67 5f 61 75 74 68 5f 73 74 61 74 75 73 7c 7c 2d 31 29 7d 2c 59 41 48 4f 4f 2e 69 31 33 6e 2e 45 76 65 6e 74 54 79 70 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 72 69 63 68 76 69 65 77 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 79 71 6c 69 64 3d 65 2c 74 68 69 73 2e 65 76 65 6e 74 4e 61 6d 65 3d 74 2c 74 68 69 73 2e 73 70 61 63 65 69 64 50 72 65 66 69 78 3d 6e 7d 74 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 67 65 74 59 51 4c 49 Data Ascii: it_ad_tracking:e[8],tracking_auth_status:e[9]}}return{}}((new le).getCookieByName("WV")).tracking_auth_status\|\|-1)},YAHOO.i13n.EventTypes=function(){var e="richview";function t(e,t,n){this.yqlid=e,this.eventName=t,this.spaceidPrefix=n}t.prototype={getYQLI
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 5d 3d 74 2c 74 68 69 73 2e 63 6f 75 6e 74 2b 2b 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 5b 65 5d 7d 2c 67 65 74 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 7d 2c 61 62 73 6f 72 62 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 79 2e 69 73 4f 62 6a 28 65 29 29 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 29 79 2e 68 61 73 4f 77 6e 28 65 2c 74 29 26 26 74 68 69 73 2e 73 65 74 28 74 2c 65 5b 74 5d 29 7d 2c 61 62 73 6f 72 62 5f 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 26 26 79 2e 69 73 4f 62 6a 28 65 29 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 74 26 26 21 74 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 6e 29 7c 7c 79 Data Ascii: ]=t,this.count++)},get:function(e){return this.map[e]},getAll:function(){return this.map},absorb:function(e){if(e&&y.isObj(e))for(var t in e)y.hasOwn(e,t)&&this.set(t,e[t])},absorb_filter:function(e,t){if(e&&y.isObj(e))for(var n in e)t&&!t.call(null,n)\|\|y
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 72 3d 22 75 64 63 2e 79 61 68 6f 6f 2e 63 6f 6d 22 3b 21 30 21 3d 3d 65 2e 66 70 63 26 26 22 79 61 68 6f 6f 2e 63 6f 6d 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 2e 73 70 6c 69 74 28 22 2e 22 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 22 2e 22 29 7c 7c 28 6f 3d 22 33 70 2d 22 2b 6f 2c 72 3d 22 33 70 2d 22 2b 72 29 3b 72 3d 7b 6f 76 65 72 72 69 64 65 3a 69 2c 76 65 72 73 69 6f 6e 3a 63 65 2c 63 6f 6d 62 6f 4e 61 6d 65 3a 75 65 2c 6b 65 79 73 3a 6c 2c 72 65 66 65 72 72 65 72 3a 65 2e 72 65 66 65 72 72 65 72 2c 67 65 74 52 65 66 65 72 72 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 2e 6e 6f 72 6d 28 79 2e 63 6c 72 65 66 28 28 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 72 65 Data Ascii: eo.yahoo.com",r="udc.yahoo.com";!0!==e.fpc&&"yahoo.com"===document.domain.split(".").slice(-2).join(".")\|\|(o="3p-"+o,r="3p-"+r);r={override:i,version:ce,comboName:ue,keys:l,referrer:e.referrer,getReferrer:function(){return y.norm(y.clref((void 0!==this.re
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 63 6b 5f 69 6e 70 75 74 3a 65 2e 74 72 61 63 6b 5f 69 6e 70 75 74 7c 7c 22 72 61 70 69 64 2d 74 72 61 63 6b 2d 69 6e 70 75 74 22 2c 63 6c 69 63 6b 5f 69 64 5f 63 6c 61 73 73 3a 65 2e 63 6c 69 63 6b 5f 69 64 5f 63 6c 61 73 73 7c 7c 22 72 61 70 69 64 2d 77 69 74 68 2d 63 6c 69 63 6b 69 64 22 2c 61 6e 63 5f 70 6f 73 5f 61 74 74 72 3a 22 64 61 74 61 2d 72 61 70 69 64 5f 70 22 2c 61 6e 63 5f 76 39 79 5f 61 74 74 72 3a 22 64 61 74 61 2d 76 39 79 22 2c 64 65 62 3a 21 30 3d 3d 3d 65 2e 64 65 62 75 67 2c 6c 64 62 67 3a 30 3c 65 2e 6c 64 62 67 7c 7c 30 3c 6e 2e 69 6e 64 65 78 4f 66 28 22 79 68 6c 64 65 62 75 67 3d 31 22 29 2c 61 64 64 6d 6f 64 5f 74 69 6d 65 6f 75 74 3a 65 2e 61 64 64 6d 6f 64 75 6c 65 73 5f 74 69 6d 65 6f 75 74 7c 7c 33 30 30 2c 75 6c 74 5f 74 6f Data Ascii: ck_input:e.track_input\|\|"rapid-track-input",click_id_class:e.click_id_class\|\|"rapid-with-clickid",anc_pos_attr:"data-rapid_p",anc_v9y_attr:"data-v9y",deb:!0===e.debug,ldbg:0<e.ldbg\|\|0<n.indexOf("yhldebug=1"),addmod_timeout:e.addmodules_timeout\|\|300,ult_to
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 55 49 44 3d 79 2e 61 75 67 28 7b 7d 2c 61 29 3a 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 63 75 73 74 6f 6d 55 49 44 20 6d 75 73 74 20 62 65 20 61 6e 20 4f 62 6a 65 63 74 20 77 69 74 68 20 22 69 64 22 20 61 6e 64 20 22 74 79 70 65 22 27 29 2c 72 2e 63 75 73 74 6f 6d 55 49 44 3d 6e 75 6c 6c 29 29 3b 76 61 72 20 61 2c 6f 3d 2b 72 2e 63 6f 6d 70 72 5f 74 69 6d 65 6f 75 74 3b 72 65 74 75 72 6e 20 79 2e 69 73 4e 75 6d 28 6f 29 3f 72 2e 63 6f 6d 70 72 5f 74 69 6d 65 6f 75 74 3d 28 6e 3d 37 30 30 2c 28 61 3d 6f 29 3c 28 6f 3d 33 30 30 29 3f 6f 3a 6e 3c 61 3f 6e 3a 61 29 3a 72 2e 63 6f 6d 70 72 5f 74 69 6d 65 6f 75 74 3d 37 30 30 2c 72 2e 6c 64 62 67 26 26 31 65 34 21 3d 72 2e 63 6c 69 63 6b 5f 74 69 6d 65 6f 75 74 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e Data Ascii: UID=y.aug({},a):(console.error('customUID must be an Object with "id" and "type"'),r.customUID=null));var a,o=+r.compr_timeout;return y.isNum(o)?r.compr_timeout=(n=700,(a=o)<(o=300)?o:n<a?n:a):r.compr_timeout=700,r.ldbg&&1e4!=r.click_timeout&&console.warn
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 28 22 26 22 29 29 21 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 73 29 7c 7c 32 3c 3d 28 6f 3d 61 5b 73 5d 2e 73 70 6c 69 74 28 22 3d 22 29 29 2e 6c 65 6e 67 74 68 26 26 28 69 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 5b 30 5d 29 2c 73 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 5b 31 5d 29 2c 6f 3d 21 72 2e 74 65 73 74 28 69 29 2c 45 28 22 51 75 65 72 79 70 61 72 61 6d 73 20 64 65 63 6f 64 65 64 3a 20 22 2b 69 2b 22 20 3a 20 22 2b 73 29 2c 45 28 22 42 6c 61 63 6b 6c 69 73 74 20 66 69 6c 74 65 72 3a 20 22 2b 6f 29 2c 6f 26 26 74 2e 73 65 74 28 69 2c 73 29 29 7d 76 61 72 20 6c 3d 28 6c 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 3a 24 Data Ascii: ("&"))!a.hasOwnProperty(s)\|\|2<=(o=a[s].split("=")).length&&(i=decodeURIComponent(o[0]),s=decodeURIComponent(o[1]),o=!r.test(i),E("Queryparams decoded: "+i+" : "+s),E("Blacklist filter: "+o),o&&t.set(i,s))}var l=(l=window.location.protocol\|\|"").replace(/:$
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 69 2c 6e 2e 70 70 29 2c 4e 28 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 28 5b 65 5d 2c 74 2c 21 30 2c 69 2c 6e 29 7d 29 29 7d 2c 73 65 6e 64 55 4c 54 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 7b 7d 2c 74 3d 48 28 22 70 22 2c 6e 65 77 20 64 28 69 3d 65 26 26 65 2e 64 61 74 61 3f 65 2e 64 61 74 61 3a 69 29 2c 74 7c 7c 30 29 3b 65 2e 74 79 70 65 26 26 28 74 2b 3d 22 26 5f 56 3d 22 2b 65 2e 74 79 70 65 2e 73 70 61 63 65 69 64 50 72 65 66 69 78 29 2c 70 28 74 2c 6e 29 7d 2c 73 65 6e 64 45 76 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 73 65 6e 64 55 4c 54 45 76 65 6e 74 28 65 2c 74 29 7d 2c 73 65 6e 64 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 29 7b 76 61 72 Data Ascii: i,n.pp),N(P(function(){return R([e],t,!0,i,n)}))},sendULTEvent:function(e,t,n){var i={},t=H("p",new d(i=e&&e.data?e.data:i),t\|\|0);e.type&&(t+="&_V="+e.type.spaceidPrefix),p(t,n)},sendEvents:function(e,t){this.sendULTEvent(e,t)},sendClick:function(i,o){var
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 74 70 73 3a 2f 2f 27 2b 44 2e 67 65 6f 5f 68 6f 73 74 2b 27 2f 62 2e 68 74 6d 6c 22 27 29 2c 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 3c 69 66 72 61 6d 65 20 22 2b 74 2b 27 20 6e 61 6d 65 3d 22 27 2b 65 2b 27 22 3e 3c 2f 69 66 72 61 6d 65 3e 27 29 29 3a 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 29 2e 6e 61 6d 65 3d 65 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 2c 69 3d 79 2e 6d 61 6b 65 28 22 66 6f 72 6d 22 29 2c 6f 3d 79 2e 6d 61 6b 65 28 22 69 6e 70 75 74 22 29 2c 72 3d 6d 28 29 2c 61 3d 6d 28 29 2c 73 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 3b 63 68 61 72 73 65 Data Ascii: tps://'+D.geo_host+'/b.html"'),document.createElement("<iframe "+t+' name="'+e+'"></iframe>')):document.createElement("iframe")).name=e,n}function T(e,t){var n=null,i=y.make("form"),o=y.make("input"),r=m(),a=m(),s="application/x-www-form-urlencoded;charse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49797	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:27 UTC	689	OUT	GET /pv/static/img/icon-flame-light-202303010352.gif HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/pv/static/ms/trendingNow.yhome-atomic.66d98e4cd448c48e1f6c4e2e2d0a34a6.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:27 UTC	863	IN	HTTP/1.1 200 OK x-amz-id-2: 5WkQmz1ylOdX72Zr7gXthKTx7o0C9hCGmo+M0T/7keumf8jq6bs0b5XqY6ZSZIG1D0hQ2fgTho+seDqvp0f+V/ahZCYTKJcI0UZZtBlmsSI= x-amz-request-id: NED64SGKTRR209JF Date: Wed, 27 Mar 2024 16:19:17 GMT Last-Modified: Wed, 01 Mar 2023 03:52:06 GMT ETag: "2fb9d43c74752389405abc1a5814b44a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public Expires: Tue, 01 Mar 2033 03:52:18 GMT Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 539840 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 116531 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 47 49 46 38 39 61 04 01 54 01 f7 01 00 ff ff ff fd fd ff fd ff ff ff f9 ff ff fa f4 ff fb ee ff fb ff ff fd fd ff fe f6 ff fe ff ff ff fa ff ff fe ff f3 ea ff f4 f5 ff fa fa ff fb fb f7 e5 e2 f8 fe ff fe e4 d1 ff e8 d1 ff f6 d8 ff fa e6 f4 55 2e f5 52 1a fb 51 10 fc 4f 0b fc d6 c2 fc e8 c5 fe 4b 0a fe 4d 08 fe 4e 0b fe 4e 13 fe 4f 0d fe 50 0c fe 51 0d fe 51 0f fe 53 16 fe 55 15 ff 4e 0d ff ef d2 ff b8 8c ff c3 a9 ff e4 c4 ff fe e8 d8 5e 3c e6 6d 43 fc 4e 12 fd 4f 0f fe 4c 22 fe 51 18 fe 53 13 fe 5b 18 ff 4d 15 ff f3 d5 c5 80 64 d3 64 3f dc a0 8d fe 70 41 bc 69 4d fe 68 2f d1 86 69 e4 cf b4 e0 bf b5 ff ad 95 fb 84 66 fe ea d3 fe fd ff fe ff fd ff e0 d0 ff f8 ee ff fb f8 ff fe fc ff ff fc fb ff fb fb ff ff ff ea e2 ff ef d9 ff f7 f6 ff fd f7 ff fd fa f7 df Data Ascii: GIF89aTU.RQOKMNNOPQQSUN^<mCNOL"QS[Mdd?pAiMh/if
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 07 ff 80 00 82 83 84 85 86 87 88 86 47 47 82 09 09 89 90 91 92 93 94 95 8d 5c 01 98 8f 96 9c 9d 9e 93 06 0f 46 5f 4d a5 a1 11 8e a9 a9 9f ac ad 91 a7 a4 a6 a8 aa aa ae b6 b7 97 a4 4b 10 0e 03 4a bf b4 8e b8 c3 ac 0b 48 04 0c 10 bc be c0 c1 c4 cf 9c 0a 48 ca bb 4b 0d 98 b9 ab d0 db af 4e 58 d4 d4 51 8c 00 ce dc e6 b5 e4 0e 5e 56 d4 12 ca d7 d2 02 02 e6 f4 83 e8 c6 ec ca ee 50 bb f0 f2 f5 f5 82 35 c8 b7 af 20 03 2c 08 87 28 3c 06 10 9a 40 30 ed 24 10 69 27 25 e1 42 24 0d 9f 05 6b 07 61 a2 c7 70 e2 e2 61 cc 38 ec 91 2a 8e 1f 3f fa 8b 47 b2 e4 b1 27 eb aa f1 4b 49 51 d4 28 2e 2d 71 bd 1c 88 b2 a0 ca 95 38 73 76 12 96 4e 5a 11 82 3d 69 1e 8c 95 50 a8 25 a2 3b f3 f5 ec e8 f3 9d ac 45 4e 2b c1 32 8a 14 25 55 a5 eb bc c1 dc 79 51 9e d9 79 4e b7 22 28 d0 75 e6 57 Data Ascii: GG\F_MKJHHKNXQ^VP5 ,(<@0$i'%B$kapa8*?G'KIQ(.-q8svNZ=iP%;EN+2%UyQyN"(uW
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 18 1b 7a d9 e8 20 4b 84 8c 20 43 62 64 60 a9 41 47 25 22 53 aa 4c c0 b2 a5 80 81 0d 7e fc 30 f9 71 a5 cd 9b 62 cc c9 34 47 a5 26 ce 9f 20 53 c8 ec 27 09 82 93 05 40 93 5a 84 30 b4 1f 2b 43 3d 95 4a 6d 08 81 1a 3f 7d 44 c7 e9 a3 39 b5 ab 4b 9f d4 7c 5c cd 5a 8a a7 d7 b3 06 3e 6e d1 d0 74 6c a1 38 a8 50 fa 7c 89 16 a8 06 b1 58 b5 ba 4d 31 f7 00 dd ba 36 ef 58 69 9b 57 6f 1c a3 48 12 a7 05 7c 73 9e 4e b7 fd 0a 47 96 c5 f5 2b e3 94 86 22 9b 22 ec 96 15 11 23 48 17 5b be 7c 71 f0 0f 53 5a 39 47 96 04 2a aa e8 d1 a4 1f da c1 5b 48 af e4 bc 92 7e 20 1e 80 a0 37 ec df b1 15 23 90 40 3b f5 ed d5 3f 7c 2c e1 ed 1b 78 70 84 05 b6 c4 a9 4d dd f6 f1 ab 71 9e 14 60 ee f7 81 f7 8a ce 63 57 ff 81 52 fd fa f5 92 af bf 83 7f 0e 5b 03 3b cd d6 cb cb c7 fa 59 8c fa fb e1 2f Data Ascii: z K Cbd`AG%"SL~0qb4G& S'@Z0+C=Jm?}D9K\|\Z>ntl8P\|XM16XiWoH\|sNG+""#H[\|qSZ9G*[H~ 7#@;?\|,xpMq`cWR[;Y/
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 04 00 21 f9 04 05 03 00 c3 00 2c 4e 00 de 00 6d 00 76 00 00 08 ff 00 01 08 1c 48 b0 a0 c1 83 08 13 22 59 c8 50 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 33 06 e0 c2 31 8a c7 2b 54 be 44 39 41 ec 81 91 04 06 52 4e 59 c9 b2 a3 c6 97 30 25 82 9c 49 e7 12 98 27 28 55 ce 6c 19 b3 a7 cf 8d 1f 09 88 11 29 72 09 a3 59 92 20 1c 18 da 6e 27 cf 9f 50 7d 12 6d 50 69 13 1b 1b 50 74 3e 75 19 b5 eb 4b 06 4b 80 58 70 33 28 de 23 04 42 81 6e f5 ca 16 63 03 28 8a 60 08 8b 21 6d c7 98 b4 6b db ea 95 59 c4 88 86 3c 26 00 f9 b9 d5 a1 03 bb 62 26 d5 3a d0 ba b7 71 ce c7 3b bd 70 03 5c cd 1a 61 60 90 82 08 49 bc b8 b3 62 c7 a0 b1 84 41 2b 81 db d8 ca 96 79 c9 fb 73 76 b4 d3 a5 a1 63 17 70 fd e3 18 8d db a8 53 b3 11 9d a5 77 13 ce b1 65 43 80 7b 5a c4 9f 70 c8 67 88 92 97 62 89 eb Data Ascii: !,NmvH"YP#JH31+TD9ARNY0%I'(Ul)rY n'P}mPiPt>uKKXp3(#Bnc(`!mkY<&b&:q;p\a`IbA+ysvcpSweC{Zpgb
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: f9 ff ce 0f ca c0 16 8d 38 a5 b0 2c 91 b6 4b ee 33 97 fd f4 5f d1 68 91 03 02 56 80 1a a3 08 da 6d d6 99 d0 40 ee 06 95 ac a8 c5 c4 f8 e9 ce 8a 72 d4 4e b2 1c 20 67 98 c0 83 56 c2 d3 a3 59 1c 1a 24 c7 26 90 20 18 ab a3 28 b5 e6 24 28 b1 52 96 12 e1 a5 27 8d a9 0f 83 99 4c c5 11 c3 0c bf f3 45 ad bc a6 53 f7 8d 82 1d 4a b1 a9 ca 76 48 46 84 16 15 73 49 19 e2 4f 83 2a 54 62 3e 55 a1 41 64 29 00 88 b0 54 fd 39 f5 aa 71 cb aa 52 73 6a 55 b0 16 6f 06 89 58 82 56 27 00 54 b3 02 12 1c d9 f4 29 4e 4d fa 55 b7 1e 4c 18 3e 78 9e 62 ba 80 0e aa 96 d5 ae 2f 6c 83 39 4c d8 05 1c f8 f5 af 80 05 21 1b 06 6b c2 29 72 6f a8 75 4d 6c 9a 2c 10 8b 5e d2 0f 0c f0 a9 a2 64 21 d8 06 88 10 09 97 82 db 6c ba e4 f3 2d 02 ba 0d b4 a2 55 ec 35 ea 59 90 42 a4 b3 03 f8 8b 23 6a 53 4b Data Ascii: 8,K3_hVm@rN gVY$& ($(R'LESJvHFsIO*Tb>UAd)T9qRsjUoXV'T)NMUL>xb/l9L!k)rouMl,^d!l-U5YB#jSK
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 0d 31 81 43 84 73 f6 29 27 1b c8 cc 73 9b 9a 78 6a 61 28 02 5e 6c 61 8a 74 7e 5e 49 e6 2a 73 1c 3a e4 9a 05 54 d1 42 33 1e 34 aa 29 2f c1 2c d3 0d 72 ca 4d 5a a3 94 fb c4 e3 22 9c 3c 6e 5a 8d 28 80 a4 30 1a 86 85 82 ff 8a 40 1d df 2c 62 6b 9c a8 3a 2a e7 3a 1a 20 3a 68 a1 14 14 d3 88 38 b8 e6 aa ab 9c f1 90 32 cf 71 b1 22 50 8c 21 2c 7a 66 ec b4 aa c2 b2 49 25 d8 35 4b 0c 37 3a fe 48 6d aa 4a f6 39 c9 23 52 1c 10 6b 0a 3a dc 3a e6 b7 e1 8a bb 03 18 e5 56 26 ea 65 bd 31 f2 26 ab ec 16 ab 2a 0b c3 14 21 c6 bc bb 31 41 4d 26 62 e2 9b 2f b8 8d 7a ea 1d a1 1c d2 11 1e 2e 16 1e ac af aa 32 38 62 5c 7f 0c ef 26 47 ba 11 1f 8b 70 b5 8e f8 9a f1 6a 1e 76 c2 a9 c1 1e a7 3c a7 37 91 b6 e3 24 77 76 d0 e1 0a 88 de 4e ac f2 a6 9c 78 e3 f2 cb 00 93 15 c4 0f 87 d9 4c f1 Data Ascii: 1Cs)'sxja(^lat~^Is:TB34)/,rMZ"<nZ(0@,bk:: :h82q"P!,zfI%5K7:HmJ9#Rk::V&e1&*!1AM&b/z.28b\&Gpjv<7$wvNxL
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: b1 8f 05 42 84 f6 d6 b8 c8 37 5e 44 73 b9 bb e4 81 10 c3 0c 19 86 b2 24 d9 c1 61 2a 2f b9 c9 5a e6 69 22 bc ca d1 2a 33 79 a0 36 3c 59 9a c3 fc c3 77 8c c6 ff cb 55 96 00 9a b3 cc e6 f9 8d 19 ce 71 ae 55 9d 0d 7a 67 3c 4b e4 41 e8 1c f2 9a f7 8c 40 70 64 f7 c4 4a fe 32 0f 46 f9 56 42 ff 70 6e 49 4e f4 9f d1 a1 35 b3 ea 75 d0 8e 96 5c 2d d8 60 0e 09 6b 48 d2 36 c2 01 8d 1b 9d e9 e4 1d a6 d3 ff fa b4 aa 41 ed 90 56 8c 22 6b 96 a6 68 a9 63 c7 86 78 10 37 d5 14 36 33 93 7d c1 6b 22 cb 7a d6 9a 6e 03 6b c6 10 bc 4b 0b 19 d8 a1 53 84 b0 3d ad 6b 82 1c 07 1e 20 8d f5 b1 91 fd b6 58 84 8c d9 cd 26 88 20 f4 30 88 f1 52 7b 7b c2 d0 83 6b b1 ad 91 1f 70 db d7 df a6 b5 2d e8 1b e3 85 a0 22 15 a3 4e 77 ec 66 71 0c cb b5 5b 21 e0 f1 b6 bc 93 cd 0f 7b df 1b 21 5d 40 87 Data Ascii: B7^Ds$a/Zi"3y6<YwUqUzg<KA@pdJ2FVBpnIN5u\-`kH6AV"khcx763}k"znkKS=k X& 0R{{kp-"Nwfq[!{!]@
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: c1 9f 7f fe cd d1 49 53 c0 44 38 08 66 22 54 68 e1 1a ab c9 62 47 4d 48 d8 c5 60 68 08 b4 b0 0c 79 14 5e 68 60 25 5c c9 d6 a1 87 1f e6 45 00 01 2a f4 03 a1 7d 25 9a 38 9d 38 fa d1 f4 04 8b 2d e2 f5 62 0a df c4 80 9a 81 35 da f8 87 38 40 e9 c8 63 8f 6c 79 e1 c5 0e 58 d1 88 8d 1a 54 56 69 a4 0b a8 54 70 dd 82 49 44 b0 00 93 3e a2 23 cd 22 7e 48 69 65 91 e5 a1 f5 de 92 60 8a b5 65 23 b6 68 c6 98 09 19 d4 39 e5 99 78 96 79 c1 23 5e ee c7 66 9b 30 ad 70 9d 39 93 f4 45 e4 9d 79 16 f9 49 1b 4a 02 da 64 18 75 3c 83 a1 99 88 26 3a 5e 66 9e 04 c1 e1 8a 5f 3a ea a6 1c 41 5e 69 a7 a5 79 ea 60 88 60 9c 7a aa 53 01 15 30 41 e2 a1 68 c6 ff 1a ca 05 8c 28 30 0f 64 5b a6 aa 6a 4b d7 d9 81 0c 7d 94 c2 21 ac ac b1 ee e0 cf 1d 2f e6 ba ab 4e fd 6c d3 4b 62 71 0d 49 ec b4 16 Data Ascii: ISD8f"ThbGMH`hy^h`%\E*}%88-b58@clyXTViTpID>#"~Hie`e#h9xy#^f0p9EyIJdu<&:^f_:A^iy``zS0Ah(0d[jK}!/NlKbqI
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 2f 66 44 9c 00 2d 2e 78 41 b8 8a 68 d4 34 bb 3e 6b 07 05 28 30 56 79 aa 77 bd 32 2c 43 1d 58 a5 dd 54 6d e0 57 df bd 2f 7e e1 c7 09 12 ce b6 21 0a 0c f0 5c 07 ec 5a 7a ec d3 7c a4 a5 2d 18 3a 2b 60 06 7f f6 02 f4 a8 87 0f 20 1c 61 db 6c c0 9e 08 74 29 6b 2d 1c d4 e7 01 41 03 4a fc 08 45 c8 30 ce 10 57 98 c4 43 c4 c4 0f 78 07 ca 86 6c 6f aa 2e 8e de 88 61 5c d6 36 d4 60 03 59 8d c8 04 f0 b0 da d3 51 58 4f 22 e6 b1 67 47 d1 83 5b 05 b9 b9 ac 44 69 5f 5f ac 64 ce e1 63 0e f3 b8 15 45 48 99 45 78 ee 98 ca 55 ae 9a b5 36 30 d9 87 fc 13 a8 e4 0c b3 71 93 04 b2 cb 79 77 ff b1 6a d6 6d 59 1c ba 90 29 26 36 cd 71 96 2e 35 38 fc 90 55 ea 78 c1 79 26 31 2d 6d 33 94 20 48 42 a5 81 86 71 33 ee aa 10 0d 74 4d c1 89 06 ef 32 4c 61 5e 84 94 e1 c8 1a fd 72 a4 e5 ca 66 8e Data Ascii: /fD-.xAh4>k(0Vyw2,CXTmW/~!\Zz\|-:+` alt)k-AJE0WCxlo.a\6`YQXO"gG[Di__dcEHExU60qywjmY)&6q.58Uxy&1-m3 HBq3tM2La^rf
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 03 ac e7 93 d8 b4 04 d4 b0 2d 1f 89 7a 79 c6 55 01 69 87 20 32 8a 4b 10 07 f0 d0 83 73 48 62 cd 60 95 57 69 89 2a 26 19 92 60 6c ff 08 71 7b e9 0d 14 57 6a a1 c1 04 6b f9 94 61 37 91 0c 76 0a fb b5 94 94 b9 2a 82 65 0e ee e0 88 3b 57 9a e0 c6 09 c7 f2 99 82 f7 28 2e 27 1b 2a 10 07 6f 96 79 a6 d9 58 fa 15 8a 5a b9 98 3d a9 98 68 79 07 e7 e0 0e cf 94 99 c9 58 8e 41 a5 0a 37 50 09 14 a0 81 74 49 15 c9 72 08 28 00 25 c1 f9 88 9b 25 95 f8 d4 14 33 40 06 75 30 5f 04 99 9c ac 69 0e cc 00 09 67 e0 3d be b8 5b d2 d0 90 0a 36 b0 61 ba 79 8f 3d c2 2a 41 50 0c f8 d3 8f c1 04 1d 93 70 44 b5 17 93 b8 49 2f 1a d0 9b ab d0 7c 90 d5 4d a7 77 61 a4 94 0d ac 90 8d af 53 9f e5 a2 25 75 70 0a 8e 80 99 fc a9 49 f5 57 27 8c 60 0a e3 75 9c b7 79 72 7e f9 32 8d 22 0b 95 70 0c 3a Data Ascii: -zyUi 2KsHb`Wi&`lq{Wjka7ve;W(.'oyXZ=hyXA7PtIr(%%3@u0_ig=[6ay=APpDI/\|MwaS%upIW'`uyr~2"p:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49799	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:27 UTC	532	OUT	GET /aaq/benji/benji-2.0.44.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:27 UTC	852	IN	HTTP/1.1 200 OK x-amz-id-2: ku8qShIZD2dCmxSygarbzGoXNak4tOFUdFauHnVsFXdEyWgecTCR+nPCpMLkXtVgRLmfJJdb+sE= x-amz-request-id: XE309J3ZVE7QJFSF Date: Thu, 28 Mar 2024 22:35:20 GMT Last-Modified: Tue, 26 Mar 2024 22:12:13 GMT ETag: "6348d664b9ca02d853d29a6f0dd70acc" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: A58RPQLyOi_r1bJuLcoBKV8zcbICKPoY Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 64330 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 7568 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 7b 62 65 6e 6a 69 3a 7b 7d 2c 67 6f 6f 67 6c 65 74 61 67 3a 7b 63 6d 64 3a 5b 5d 7d 2c 70 62 6a 73 3a 7b 71 75 65 3a 5b 5d 7d 2c 59 41 48 4f 4f 3a 7b 7d 7d 2c 74 3d 5b 22 6c 6f 63 61 6c 68 6f 73 74 22 2c 22 61 6f 6c 2e 63 6f 6d 22 2c 22 61 6f 6c 2e 63 6f 2e 75 6b 22 2c 22 61 6f 6c 2e 64 65 22 2c 22 61 75 74 6f 62 6c 6f 67 2e 63 6f 6d 22 2c 22 63 72 69 63 6b 65 74 2e 79 61 68 6f 6f 2e 73 70 6f 72 74 7a 2e 69 6f 22 2c 22 65 6e 67 61 64 67 65 74 2e 63 6f 6d 22 2c 22 79 61 68 6f 6f 2e 63 6f 6d 22 2c 22 79 61 68 6f 6f 2e 63 6f 6d 2e 68 6b 22 2c 22 79 61 68 6f 6f Data Ascii: !function(){"use strict";const e="undefined"!=typeof window?window:{benji:{},googletag:{cmd:[]},pbjs:{que:[]},YAHOO:{}},t=["localhost","aol.com","aol.co.uk","aol.de","autoblog.com","cricket.yahoo.sportz.io","engadget.com","yahoo.com","yahoo.com.hk","yahoo
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 2c 78 3d 7b 22 5b 31 34 34 30 2c 31 30 32 34 5d 22 3a 22 4c 6f 67 69 6e 22 2c 22 5b 32 2c 32 5d 22 3a 22 4c 69 67 68 74 68 6f 75 73 65 22 2c 22 5b 32 38 30 2c 35 35 5d 22 3a 22 54 72 61 64 65 4e 6f 77 22 2c 22 5b 33 2c 31 5d 22 3a 22 48 6f 72 69 7a 6f 6e 22 2c 22 5b 33 2c 32 5d 22 3a 22 53 70 6f 74 6c 69 67 68 74 22 2c 22 5b 33 34 33 2c 33 31 30 5d 22 3a 22 46 65 61 74 75 72 65 64 42 72 6f 6b 65 72 4d 77 65 62 22 2c 22 5b 37 35 38 2c 31 39 38 5d 22 3a 22 46 65 61 74 75 72 65 64 42 72 6f 6b 65 72 22 7d 2c 4f 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 61 67 2f 6a 73 2f 67 70 74 2e 6a 73 22 2c 7a 3d 22 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e Data Ascii: ,x={"[1440,1024]":"Login","[2,2]":"Lighthouse","[280,55]":"TradeNow","[3,1]":"Horizon","[3,2]":"Spotlight","[343,310]":"FeaturedBrokerMweb","[758,198]":"FeaturedBroker"},O="https://securepubads.g.doubleclick.net/tag/js/gpt.js",z="https://pagead2.googlesyn
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 52 65 61 64 79 3a 22 62 65 6e 6a 69 3a 72 65 61 64 79 22 2c 74 61 62 46 6f 63 75 73 3a 22 74 61 62 46 6f 63 75 73 22 2c 75 73 65 72 41 63 74 69 6f 6e 3a 22 75 73 65 72 41 63 74 69 6f 6e 22 7d 2c 74 65 3d 5b 66 2c 6d 2c 62 2c 79 2c 76 2c 22 70 64 22 2c 22 6c 75 22 2c 22 73 69 74 65 22 2c 22 76 65 72 22 2c 5f 2c 22 70 63 74 22 2c 22 70 74 22 2c 22 73 70 61 63 65 69 64 22 2c 22 6c 6d 73 69 64 22 2c 22 70 73 74 61 69 64 22 2c 22 6d 63 68 6e 6d 22 2c 22 64 65 76 69 63 65 22 2c 22 72 65 67 69 6f 6e 22 2c 22 75 72 6c 22 2c 22 63 6f 6c 6f 22 2c 77 2c 22 6e 63 69 64 22 2c 22 66 72 22 2c 22 66 72 74 79 70 65 22 2c 22 61 78 69 64 22 5d 2c 69 65 3d 5b 22 61 78 69 64 22 2c 22 63 6f 6c 6f 22 2c 22 64 65 76 69 63 65 22 2c 22 66 72 22 2c 22 66 72 74 79 70 65 22 2c 22 6c Data Ascii: Ready:"benji:ready",tabFocus:"tabFocus",userAction:"userAction"},te=[f,m,b,y,v,"pd","lu","site","ver",_,"pct","pt","spaceid","lmsid","pstaid","mchnm","device","region","url","colo",w,"ncid","fr","frtype","axid"],ie=["axid","colo","device","fr","frtype","l
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 61 65 7d 2e 6a 73 60 2c 6c 65 3d 21 30 2c 68 65 3d 7b 5b 73 65 2e 61 6f 6c 5d 3a 22 64 33 64 65 63 61 6a 73 70 71 6e 33 75 65 22 2c 5b 73 65 2e 61 75 74 6f 62 6c 6f 67 5d 3a 22 64 79 33 34 38 7a 6c 73 74 62 77 63 35 22 2c 5b 73 65 2e 61 75 74 6f 73 5d 3a 22 64 79 33 34 38 7a 6c 73 74 62 77 63 35 22 2c 5b 73 65 2e 65 6e 67 61 64 67 65 74 5d 3a 22 64 6e 74 33 6d 72 6e 72 77 77 6b 31 22 2c 5b 73 65 2e 65 6e 74 65 72 74 61 69 6e 6d 65 6e 74 5d 3a 22 64 32 35 68 61 72 61 7a 6a 64 66 68 77 70 22 2c 5b 73 65 2e 66 69 6e 61 6e 63 65 5d 3a 22 64 33 6c 6d 36 34 63 68 31 63 37 36 75 67 22 2c 5b 73 65 2e 66 70 5d 3a 22 64 31 63 63 77 36 36 6f 79 71 38 65 78 32 22 2c 5b 73 65 2e 66 72 6f 6e 74 70 61 67 65 5d 3a 22 64 31 63 63 77 36 36 6f 79 71 38 65 78 32 22 2c 5b 73 Data Ascii: ae}.js`,le=!0,he={[se.aol]:"d3decajspqn3ue",[se.autoblog]:"dy348zlstbwc5",[se.autos]:"dy348zlstbwc5",[se.engadget]:"dnt3mrnrwwk1",[se.entertainment]:"d25harazjdfhwp",[se.finance]:"d3lm64ch1c76ug",[se.fp]:"d1ccw66oyq8ex2",[se.frontpage]:"d1ccw66oyq8ex2",[s
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 65 3d 5b 53 2c 49 2c 43 2c 41 2c 77 5d 2c 76 65 3d 7b 5b 73 65 2e 61 74 74 5d 3a 22 79 68 70 22 2c 5b 73 65 2e 61 74 74 61 72 74 69 63 6c 65 73 5d 3a 22 79 6e 65 77 73 22 2c 5b 73 65 2e 61 75 74 6f 73 5d 3a 22 79 61 75 74 6f 73 22 2c 5b 73 65 2e 65 6e 67 61 64 67 65 74 5d 3a 22 65 6e 67 22 2c 5b 73 65 2e 65 6e 74 65 72 74 61 69 6e 6d 65 6e 74 5d 3a 22 79 65 6e 74 22 2c 5b 73 65 2e 66 69 6e 61 6e 63 65 5d 3a 22 79 66 69 6e 22 2c 5b 73 65 2e 66 70 5d 3a 22 79 68 70 22 2c 5b 73 65 2e 67 6d 61 5d 3a 22 79 6e 65 77 73 22 2c 5b 73 65 2e 6c 69 66 65 73 74 79 6c 65 5d 3a 22 79 6c 69 66 65 22 2c 5b 73 65 2e 6d 6f 6e 65 79 5d 3a 22 79 66 69 6e 22 2c 5b 73 65 2e 6d 6f 76 69 65 73 5d 3a 22 79 6d 6f 76 22 2c 5b 73 65 2e 6d 75 73 69 63 5d 3a 22 79 65 6e 74 22 2c 5b 73 Data Ascii: e=[S,I,C,A,w],ve={[se.att]:"yhp",[se.attarticles]:"ynews",[se.autos]:"yautos",[se.engadget]:"eng",[se.entertainment]:"yent",[se.finance]:"yfin",[se.fp]:"yhp",[se.gma]:"ynews",[se.lifestyle]:"ylife",[se.money]:"yfin",[se.movies]:"ymov",[se.music]:"yent",[s
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 68 74 5f 73 74 61 63 6b 3a 5b 22 4c 52 45 43 22 2c 22 4d 4f 4e 22 5d 7d 3b 66 75 6e 63 74 69 6f 6e 20 44 65 28 74 29 7b 63 6f 6e 73 74 20 69 3d 31 65 33 2a 74 2c 73 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 65 65 2e 74 61 62 46 6f 63 75 73 29 3b 6c 65 74 20 6e 3d 21 30 2c 6f 3d 6e 75 6c 6c 3b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 66 6f 63 75 73 22 2c 28 28 29 3d 3e 7b 21 6e 26 26 6f 26 26 44 61 74 65 2e 6e 6f 77 28 29 2d 6f 3e 69 26 26 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 73 29 2c 6e 3d 21 30 7d 29 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 6c 75 72 22 2c 28 28 29 3d 3e 7b 6e 3d 21 31 2c 6f 3d 44 61 74 65 2e 6e 6f 77 28 29 7d 29 29 7d 63 6f 6e 73 74 20 46 65 3d 22 64 65 66 61 75 6c 74 22 Data Ascii: ht_stack:["LREC","MON"]};function De(t){const i=1e3*t,s=new CustomEvent(ee.tabFocus);let n=!0,o=null;e.addEventListener("focus",(()=>{!n&&o&&Date.now()-o>i&&e.dispatchEvent(s),n=!0})),e.addEventListener("blur",(()=>{n=!1,o=Date.now()}))}const Fe="default"
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 31 3a 69 2e 62 6f 74 74 6f 6d 2d 31 2c 64 3d 69 2e 68 65 69 67 68 74 2a 69 2e 77 69 64 74 68 3b 69 66 28 28 63 2d 61 29 2a 28 72 2d 6f 29 2f 64 3c 2e 35 29 72 65 74 75 72 6e 21 31 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 7b 6c 65 66 74 3a 69 2c 74 6f 70 3a 73 2c 62 6f 74 74 6f 6d 3a 6e 2c 72 69 67 68 74 3a 6f 7d 3d 65 2c 72 3d 5b 5b 69 2c 73 5d 2c 5b 69 2c 6e 5d 2c 5b 6f 2c 73 5d 2c 5b 6f 2c 6e 5d 5d 3b 66 6f 72 28 63 6f 6e 73 74 5b 65 2c 69 5d 6f 66 20 72 29 7b 63 6f 6e 73 74 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 65 2c 69 29 3b 69 66 28 73 21 3d 3d 74 26 26 21 74 2e 63 6f 6e 74 61 69 6e 73 28 73 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 28 7b 62 6f 74 74 6f 6d Data Ascii: 1:i.bottom-1,d=i.heighti.width;if((c-a)(r-o)/d<.5)return!1;if(function(e,t){const{left:i,top:s,bottom:n,right:o}=e,r=[[i,s],[i,n],[o,s],[o,n]];for(const[e,i]of r){const s=document.elementFromPoint(e,i);if(s!==t&&!t.contains(s))return!0}return!1}({bottom
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 74 79 70 65 6f 66 20 73 2e 69 64 26 26 28 73 2e 69 64 2e 73 74 61 72 74 73 57 69 74 68 28 22 73 64 61 2d 22 29 7c 7c 73 2e 69 64 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 73 74 61 72 74 73 57 69 74 68 28 22 61 64 2d 22 29 7c 7c 73 2e 69 64 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 63 6c 75 64 65 73 28 22 2d 61 64 2d 22 29 7c 7c 73 2e 69 64 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 65 6e 64 73 57 69 74 68 28 22 2d 61 64 22 29 29 7c 7c 73 3f 2e 63 6c 61 73 73 4e 61 6d 65 3f 2e 73 74 61 72 74 73 57 69 74 68 28 22 61 64 2d 22 29 29 26 26 28 69 3d 73 29 2c 73 3d 73 26 26 73 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 69 7d 3b 66 75 6e 63 74 69 6f 6e 20 51 65 28 65 29 7b 63 6f 6e 73 74 20 74 3d 76 6f 69 64 20 30 3d 3d 3d 65 Data Ascii: typeof s.id&&(s.id.startsWith("sda-")\|\|s.id.toLowerCase().startsWith("ad-")\|\|s.id.toLowerCase().includes("-ad-")\|\|s.id.toLowerCase().endsWith("-ad"))\|\|s?.className?.startsWith("ad-"))&&(i=s),s=s&&s.parentElement;return i};function Qe(e){const t=void 0===e
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 65 73 28 69 29 2e 6d 61 70 28 28 65 3d 3e 65 2e 6a 6f 69 6e 28 22 3a 22 29 29 29 2e 6a 6f 69 6e 28 22 3b 22 29 2c 22 22 2c 65 2e 73 70 61 63 65 69 64 2c 22 22 2c 22 22 2c 22 22 2c 65 2e 62 75 63 6b 65 74 2c 22 22 5d 2e 6a 6f 69 6e 28 22 7c 22 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 6e 65 29 2e 69 6e 63 6c 75 64 65 73 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b 63 6f 6e 73 74 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 7b 7d 3b 66 6f 72 28 63 6f 6e 73 74 5b 69 2c 73 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 65 29 29 7b 63 6f 6e 73 74 20 65 3d 59 65 28 73 29 26 26 73 3f 2e 73 74 61 63 6b 47 72 6f 75 70 3b 65 26 26 28 74 5b 65 5d 7c Data Ascii: es(i).map((e=>e.join(":"))).join(";"),"",e.spaceid,"","","",e.bucket,""].join("\|")}function et(e){return Object.values(ne).includes(e)}function tt(e){const t=function(e){const t={};for(const[i,s]of Object.entries(e)){const e=Ye(s)&&s?.stackGroup;e&&(t[e]\|
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 6e 2c 69 64 3a 6f 2c 67 70 74 53 65 74 74 69 6e 67 3a 72 7d 3d 74 2c 7b 73 61 66 65 46 72 61 6d 65 43 6f 6e 66 69 67 3a 61 3d 7b 7d 7d 3d 72 7c 7c 7b 7d 3b 74 68 69 73 2e 5f 67 6f 6f 67 6c 65 74 61 67 2e 63 6d 64 2e 70 75 73 68 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 5f 67 6f 6f 67 6c 65 74 61 67 2e 64 65 66 69 6e 65 53 6c 6f 74 28 73 2c 6e 2c 6f 29 2e 73 65 74 53 61 66 65 46 72 61 6d 65 43 6f 6e 66 69 67 28 4b 65 28 61 29 29 2e 61 64 64 53 65 72 76 69 63 65 28 74 68 69 73 2e 5f 67 6f 6f 67 6c 65 74 61 67 2e 70 75 62 61 64 73 28 29 29 3b 69 2e 73 6c 6f 74 3d 65 7d 29 29 7d 63 6c 65 61 72 54 61 72 67 65 74 69 6e 67 28 65 29 7b 74 68 69 73 2e 5f 67 6f 6f 67 6c 65 74 61 67 2e 63 6d 64 2e 70 75 73 68 28 28 28 29 3d 3e 7b 30 21 3d 3d 74 68 Data Ascii: n,id:o,gptSetting:r}=t,{safeFrameConfig:a={}}=r\|\|{};this._googletag.cmd.push((()=>{const e=this._googletag.defineSlot(s,n,o).setSafeFrameConfig(Ke(a)).addService(this._googletag.pubads());i.slot=e}))}clearTargeting(e){this._googletag.cmd.push((()=>{0!==th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49798	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:27 UTC	1317	OUT	GET /_td_api/beacon/performance?ybar-init_0=0.8000000000174623&ybar-mod-sidenav_0=4.899999999994179&ybar-mod-logo_0=0.7999999999883585&ybar-mod-searchbox_0=3.2999999999883585&ybar-mod-assistjs_0=10.89999999999418&ybar-mod-adaptivenav_0=1.2999999999883585&ybar-account-init_0=3.099999999976717&ybar-mail-init_0=3.900000000023283&ybar-mod-navigation_0=47.59999999997672&ybar-mod-notification_0=1.3999999999941792&src=ybar&_rdn=886379&site=homepage HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4
2024-03-29 00:41:27 UTC	1138	IN	HTTP/1.1 204 No Content referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-type: image/gif content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Fri, 29 Mar 2024 00:41:27 GMT x-envoy-upstream-service-time: 1 server: ATS Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=27mmt95j0c3hn&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49800	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:27 UTC	538	OUT	GET /aaq/wf/wf-core-1.65.0-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:27 UTC	853	IN	HTTP/1.1 200 OK x-amz-id-2: pSHHFsSIp8h3ifytrKGbU8wAKdwTTtQB7ecCpopyHclOxp8gUAIf7moLvzuVstd+7kFuYOXv4+4= x-amz-request-id: ZA81G3S3B7BDEBAH Date: Thu, 28 Mar 2024 16:44:01 GMT Last-Modified: Mon, 04 Dec 2023 18:45:04 GMT ETag: "ef13714e251549821d2930d0d99d6b70" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 20SJDrjaD349v_TEBoaGm7JknCokjFV_ Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 60307 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 28647 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 77 61 66 65 72 3d 74 28 29 3a 65 2e 77 61 66 65 72 3d 74 28 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer",[],t):"object"==typeof exports?exports.wafer=t():e.wafer=t()}("undefined"!=typeof self?self:this,function(){return fun
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6e 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 41 72 72 61 79 28 65 2e 6c 65 6e 67 74 68 29 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 6e 5b 74 5d 3d 65 5b 74 5d 3b 72 65 74 75 72 6e 20 6e 7d 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 Data Ascii: le:!0,writable:!0}):e[t]=n,e}function c(e){if(Array.isArray(e)){for(var t=0,n=Array(e.length);t<e.length;t++)n[t]=e[t];return n}return Array.from(e)}function u(e){return Array.isArray(e)?e:Array.from(e)}function l(e,t){if(!(e instanceof t))throw new TypeE
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 20 45 7d 29 2c 6e 2e 64 28 6d 2c 22 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 53 75 70 70 6f 72 74 65 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 29 2c 6e 2e 64 28 6d 2c 22 69 73 54 6f 75 63 68 53 61 66 61 72 69 44 65 76 69 63 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 29 2c 6e 2e 64 28 6d 2c 22 73 6d 6f 6f 74 68 53 63 72 6f 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 29 2c 6e 2e 64 28 6d 2c 22 69 73 50 57 41 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 29 3b 76 61 72 20 79 3d 7b 7d 3b 6e 2e 64 28 79 2c 22 69 73 56 69 73 69 62 6c 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 7d 29 2c 6e 2e 64 28 79 2c 22 64 65 62 6f 75 6e 63 65 22 2c Data Ascii: E}),n.d(m,"performanceMarkSupported",function(){return T}),n.d(m,"isTouchSafariDevice",function(){return k}),n.d(m,"smoothScroll",function(){return C}),n.d(m,"isPWA",function(){return S});var y={};n.d(y,"isVisible",function(){return G}),n.d(y,"debounce",
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 72 61 6d 65 74 65 72 56 61 6c 75 65 42 79 4e 61 6d 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 65 7d 29 2c 6e 2e 64 28 79 2c 22 73 65 74 54 72 61 6e 73 69 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 65 7d 29 2c 6e 2e 64 28 79 2c 22 72 65 6d 6f 76 65 54 72 61 6e 73 69 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 65 7d 29 2c 6e 2e 64 28 79 2c 22 75 72 6c 69 66 79 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 65 7d 29 2c 6e 2e 64 28 79 2c 22 66 65 74 63 68 57 69 74 68 43 61 63 68 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 65 7d 29 2c 6e 2e 64 28 79 2c 22 72 65 6d 6f 76 65 43 6f 6f 6b 69 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: rameterValueByName",function(){return _e}),n.d(y,"setTransition",function(){return Ee}),n.d(y,"removeTransition",function(){return Te}),n.d(y,"urlify",function(){return ke}),n.d(y,"fetchWithCache",function(){return Ce}),n.d(y,"removeCookie",function(){ret
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 7d 28 29 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 72 65 74 75 72 6e 20 74 28 65 29 3b 76 61 72 20 6e 3d 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6e 6e 65 63 74 69 6f 6e 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 6d 6f 7a 43 6f 6e 6e 65 63 74 69 6f 6e 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 6b 69 74 43 6f 6e 6e 65 63 74 69 6f 6e 3b 69 66 28 6e 29 7b 76 61 72 20 72 3d 6e 2e 65 66 66 65 63 74 69 76 65 54 79 70 65 3b 69 66 28 22 73 6c 6f 77 2d 32 67 22 3d 3d 3d 72 7c 7c 22 32 67 22 3d 3d 3d 72 29 72 65 74 75 72 6e 20 65 3d 21 30 2c 74 28 21 30 29 2c 21 30 7d 69 66 28 Data Ascii: prototype}(),E=function(){var e=void 0;return new Promise(function(t){if(void 0!==e)return t(e);var n=navigator.connection\|\|navigator.mozConnection\|\|navigator.webkitConnection;if(n){var r=n.effectiveType;if("slow-2g"===r\|\|"2g"===r)return e=!0,t(!0),!0}if(
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 75 72 6e 20 65 7d 2c 41 3d 5b 22 72 69 64 22 2c 22 63 72 75 6d 62 22 2c 22 73 75 62 73 63 72 75 6d 62 22 5d 2c 78 3d 7b 6f 6d 69 74 3a 31 2c 22 73 61 6d 65 2d 6f 72 69 67 69 6e 22 3a 31 2c 69 6e 63 6c 75 64 65 3a 31 7d 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 22 22 2c 74 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 5b 3f 26 5d 22 2b 74 2b 22 3d 5b 5e 26 23 5d 2a 28 23 2e 2a 29 3f 24 22 29 2c 22 24 31 22 29 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 28 5b 3f 26 5d 29 22 2b Data Ascii: urn e},A=["rid","crumb","subscrumb"],x={omit:1,"same-origin":1,include:1},L=function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"",t=arguments[1];return e.replace(new RegExp("[?&]"+t+"=[^&#](#.)?$"),"$1").replace(new RegExp("([?&])"+
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 6d 65 64 20 6f 75 74 20 66 6f 72 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 20 22 2b 45 2b 22 20 68 61 76 69 6e 67 20 73 74 61 72 74 54 69 6d 65 20 22 2b 61 2b 22 20 61 6e 64 20 65 6e 64 54 69 6d 65 20 22 2b 65 29 29 7d 2c 45 29 3b 54 3d 6d 26 26 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 64 62 26 26 22 63 61 63 68 65 46 69 72 73 74 22 3d 3d 3d 73 3f 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 64 62 2e 67 65 74 28 6f 2c 22 66 65 74 63 68 22 2c 7b 74 69 6d 65 6f 75 74 3a 31 65 33 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 29 7b 76 61 72 20 6e 3d 65 2e 74 74 6c 2c 72 3d 65 2e 76 61 6c 75 65 2c 69 3d 65 2e 63 61 63 68 65 64 54 69 6d 65 2c 6f 3d 28 44 61 74 65 2e 6e 6f 77 28 29 2d 69 29 2f 31 65 33 3b 74 72 79 7b 5f 3d 4a 53 4f 4e 2e 70 61 Data Ascii: med out for timeout value "+E+" having startTime "+a+" and endTime "+e))},E);T=m&&window.wafer.db&&"cacheFirst"===s?window.wafer.db.get(o,"fetch",{timeout:1e3}).then(function(e){if(e){var n=e.ttl,r=e.value,i=e.cachedTime,o=(Date.now()-i)/1e3;try{_=JSON.pa
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 68 4d 65 74 61 3a 72 7d 29 7d 29 7d 69 66 28 32 30 30 3d 3d 3d 6e 29 7b 76 61 72 20 69 3d 65 2e 68 65 61 64 65 72 73 2e 67 65 74 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 29 3b 69 66 28 6d 26 26 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 64 62 26 26 75 26 26 69 26 26 69 2e 6d 61 74 63 68 28 2f 61 70 70 6c 69 63 61 74 69 6f 6e 5c 2f 6a 73 6f 6e 2f 69 29 29 7b 76 61 72 20 73 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 65 2e 63 6c 6f 6e 65 28 29 2e 74 65 78 74 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 64 62 2e 73 65 74 28 7b 74 74 6c 3a 75 2c 6b 65 79 3a 6f 2c 76 61 6c 75 65 3a 65 2c 63 61 63 68 65 64 54 69 6d 65 3a 73 7d 2c 22 66 65 74 63 68 22 2c 7b 74 69 6d 65 6f 75 74 3a 45 7d 29 2e 63 Data Ascii: hMeta:r})})}if(200===n){var i=e.headers.get("Content-Type");if(m&&window.wafer.db&&u&&i&&i.match(/application\/json/i)){var s=Date.now();e.clone().text().then(function(e){return window.wafer.db.set({ttl:u,key:o,value:e,cachedTime:s},"fetch",{timeout:E}).c
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 4e 44 5f 41 54 54 45 4d 50 54 5f 53 54 41 4c 45 22 7d 7d 29 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 28 65 29 7d 29 7d 65 6c 73 65 20 72 28 65 29 7d 29 7d 7d 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 61 73 73 65 74 73 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 7b 7d 3a 74 2c 72 3d 6e 2e 63 73 73 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 5b 5d 3a 72 3b 72 65 74 75 72 6e 20 69 3f 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 69 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 22 22 3d 3d 3d 65 2e 63 64 6e 4f 72 69 67 69 6e 26 26 28 74 3d 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 2b 74 29 2c 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 62 Data Ascii: ND_ATTEMPT_STALE"}}))}).catch(function(e){r(e)})}else r(e)})}})}).then(function(e){var t=e.assets,n=void 0===t?{}:t,r=n.css,i=void 0===r?[]:r;return i?Promise.all(i.map(function(e){var t=e.value;return""===e.cdnOrigin&&(t=location.origin+t),window.wafer.b
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 65 2e 67 65 74 28 69 29 2e 64 65 6c 65 74 65 28 6f 29 2c 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 6e 29 7d 2c 6e 29 3b 72 65 74 75 72 6e 20 65 2e 67 65 74 28 69 29 2e 73 65 74 28 6f 2c 6f 29 2c 6f 7d 29 2c 63 6c 65 61 72 41 6c 6c 54 69 6d 65 6f 75 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 65 26 26 65 2e 73 69 7a 65 29 7b 76 61 72 20 74 3d 21 30 2c 6e 3d 21 31 2c 72 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 69 2c 6f 3d 65 2e 76 61 6c 75 65 73 28 29 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 74 3d 28 69 3d 6f 2e 6e 65 78 74 28 Data Ascii: Timeout(function(){var n=Array.prototype.slice.call(arguments);e.get(i).delete(o),t.apply(this,n)},n);return e.get(i).set(o,o),o}),clearAllTimeout:function(){if(e&&e.size){var t=!0,n=!1,r=void 0;try{for(var i,o=e.values()[Symbol.iterator]();!(t=(i=o.next(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49804	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:27 UTC	530	OUT	GET /uu/api/res/1.2/6LV1xKkHvH8HX5CXwFuudA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/bb6d35a0-ed05-11ee-a7db-56d6ebe93ed1.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:27 UTC	1297	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 221570947635363708689269832439671066939,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="bb6d35a0-ed05-11ee-a7db-56d6ebe93ed1.webp" Edge-Cache-Tag: 221570947635363708689269832439671066939,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "15720613809f18854bface3ed2935fbf" Last-Modified: Thu, 28 Mar 2024 13:18:59 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=356,height=180,bytes=6256,owidth=1800,oheight=1014,obytes=110279,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 39fbeacf7d8e7dc5127f99a76832db7a Accept-Ranges: bytes Date: Thu, 28 Mar 2024 14:01:48 GMT X-Served-By: cache-iad-kjyo7100094-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711634508.175116,VS0,VE1 Age: 38379 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 39fbeacf7d8e7dc5127f99a76832db7a cld_by: cache-iad-kjyo7100094-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 18794 ATS-Carp-Promotion: 1
2024-03-29 00:41:27 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 64 2c a0 ba cb c6 17 6c 89 2e 01 d6 69 1e d2 ed 09 5b 7d 89 c7 91 be b4 6b f3 04 4b b5 7f 61 f2 81 d6 8d 7e 60 85 da bf b0 b2 83 15 36 ce cb fa 42 ed 87 0f ac 53 ef 7d 21 9d b2 63 31 5d 66 3d e8 6e d4 88 7d 62 3d e8 6e d8 92 15 d6 63 be 19 da 8e 0e b2 1e f4 2f 4d 08 24 d4 87 bd 0b d3 43 a1 e6 6a 49 d7 b5 dd 11 95 23 4e 8a c2 1f eb 21 c8 c0 9d 2c 16 10 3a c8 7b df 58 5e 91 20 75 90 f7 be b0 bd 21 18 ef ac 43 de 11 dc 3b 54 70 41 7a c4 3d e1 03 56 a2 da d8 af 58 7f 6f eb 0f da 8f e9 64 5f ac 5f b7 f5 88 bb 51 7a 42 bd 60 fd e7 d6 1b b6 17 a4 01 88 00 fc 62 17 6a 2c 31 c1 88 40 16 e9 07 9c 37 6a 49 26 83 f5 87 f7 83 ce 17 6a 2e 45 7a c4 3f 34 79 c2 ed 10 e9 36 0f 58 87 e6 8f 38 5d a2 24 93 41 8a f8 06 fd 30 f3 84 ed 47 16 31 0d 87 e9 3e b0 37 68 c4 1f 5f fe Data Ascii: d,l.i[}kKa~`6BS}!c1]f=n}b=nc/M$CjI#N!,:{X^ u!C;TpAz=VXod__QzB`bj,1@7jI&j.Ez?4y6X8]$A0G1>7h_
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: f8 47 d4 1a 36 b3 43 55 b6 55 e9 33 ce 65 64 ed 9b 4c e4 f5 ab 97 49 f5 8d 7e e5 24 2f 4b 21 7a d4 3f 33 eb 03 77 28 1b b7 c8 7e b7 7e df d6 1b ba 43 76 fb 7c 85 eb 77 ed 7d 61 77 68 8e cc 30 bd 6d 3f 99 f5 86 ee 90 fb 18 3d 6d 3e ff 00 d6 17 74 87 51 07 ae 0a f7 fe b0 bb a4 4e 28 1e b8 2b df fa c2 ee 91 2c 0b 4e 2e 57 be 61 77 48 58 14 31 71 e6 a3 e7 0c ee 90 cd 0b f5 bf f6 fe b0 3e ed 10 da fe c2 fd 6f b7 e3 bf ce 26 ae 91 3c 0a f5 bc 6f 9c 79 c3 f7 68 86 d6 1f ad ed 9f 65 c0 61 fb a4 11 0b 6f 17 0c de df d6 27 0b 88 cf 82 51 44 8c ae 27 19 d2 be 92 fe 11 7e 36 de a2 36 2d 23 9e 49 94 57 1a 7d 00 f4 bf 28 0c ad 1c 7d 8d ea 50 de 83 eb 46 86 cb 51 88 ab 56 59 ed b2 17 5c 37 ef 1f 38 7e d5 8d da 1e 43 eb d7 ff 00 d1 8f 19 7a ab c7 0c e5 bb 50 d3 5e 99 04 Data Ascii: G6CUU3edLI~$/K!z?3w(~~Cv\|w}awh0m?=m>tQN(+,N.WawHX1q>o&<oyheao'QD'~66-#IW}(}PFQVY\78~CzP^
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: c1 a4 21 db 85 23 29 f8 44 76 92 55 4a ad 7b 0f 37 75 a5 e5 21 1d d9 b9 c1 a9 53 7e c3 ba c9 79 31 4c 51 43 65 a9 97 32 4d 35 a2 88 11 d1 d9 49 a0 13 9a 97 b9 94 62 74 9a 4c e2 cb 0e a5 77 1d ac b1 dd e9 12 f5 b0 73 3a b2 4c c7 b1 32 9a 35 57 5d 61 bc 88 76 ce 04 03 70 9b 8b db eb 1e af a5 f3 47 93 8a af 4f 0c 8c 31 a0 d0 1c 60 6e 04 c4 22 23 91 d0 22 24 81 02 96 72 20 b2 f8 c4 64 b0 2c e0 30 82 4d 93 ac 01 b6 d9 38 c6 53 fd a7 43 52 33 8e fe 8d 9c df 08 75 09 32 c4 2d 2b cf c2 3a 13 41 ab bb aa 64 9c f2 82 fa 0f 05 e8 69 17 6d 65 41 8e 0a 0d 5e d6 ea f7 7c a2 1e 93 f7 09 f2 7b df f8 d8 3a 86 ae 36 a7 bc 3e 51 07 06 87 5a 3d e7 fc 6c 3e a2 ab ff 00 f0 1e f2 85 b2 48 7f 93 5f 7f c6 c5 f5 15 5f fe 9e f7 94 24 98 cf 46 ba f7 a6 c1 d4 35 6f fa 7b de 51 62 11 Data Ascii: !#)DvUJ{7u!S~y1LQCe2M5IbtLws:L25W]avpGO1`n"#"$r d,0M8SCR3u2-+:AdimeA^\|{:6>QZ=l>H__$F5o{Qb
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 50 a9 d2 53 72 a2 9d 0f d2 34 78 92 e0 e8 6d 6e f2 65 f8 d3 0e 30 e2 5c 5a 5a ed 0b fc e3 9e bd b5 c1 4f 58 b2 57 b4 3c 1e 7a c6 14 c5 49 cc ab b1 6d 4f ca 39 aa d4 f6 bc 33 e7 be ad d2 d5 9b 6c ab 93 11 48 f3 bd a2 01 bc 2c 12 0c 9f 18 58 10 43 78 d1 b7 f0 23 a6 59 e5 cb b8 97 92 12 ac a0 92 95 0b 83 13 b9 5f a1 24 16 99 58 a0 c8 74 8b 08 61 ac ef 2d 79 52 a3 f8 7b f4 8f 17 d4 78 94 b2 5c a6 b7 1b 46 1c 61 f9 69 76 e5 5f 29 5b aa d1 97 14 8b 90 01 06 c7 5f 0b 7c 09 8e 6a a3 f2 6f 59 2c 23 7f c0 f2 49 91 a4 b6 08 b3 8e d9 4a b7 77 28 c0 bd f2 75 96 2b 82 de a9 87 10 dd 92 2e 3e 31 4a 2f 82 dc bc 89 c3 b4 d7 a7 2a ea 54 da 54 fe 6b 65 cc af 63 7d a0 d1 96 0a 17 30 6c d3 64 25 f0 b5 2e 5d 2d 4c 06 3a 55 6e e3 a9 0a 53 aa e4 12 92 09 bf 80 bc 1d 57 96 31 12 Data Ascii: PSr4xmne0\ZZOXW<zImO93lH,XCx#Y_$Xta-yR{x\Faiv_)[_\|joY,#IJw(u+.>1J/*TTkec}0ld%.]-L:UnSW1
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 69 94 cb 90 8b 0d 10 81 7b ef 6d 35 03 b8 5b 61 5d 6c 47 35 f2 8e 59 e7 79 de 16 2d 0d 4b d3 a5 e4 5d e8 24 d6 56 d8 2d 81 6b ef a8 d4 f2 dc 98 d4 b4 d5 12 78 61 63 a4 c9 21 9c 51 85 4c ce 09 9e 95 66 54 17 69 a5 b9 c6 4d f5 01 27 2a c7 f2 2d 4a 3f e4 8e fb a5 75 7c df a4 df 12 32 35 4b 3d b4 4c 6c fc 23 da 92 ca c9 ce b8 ed 13 97 c6 19 c4 13 58 06 5f 18 0c 90 c0 cb e3 10 71 64 1a 04 bb 65 4f a6 fb 44 bd 24 59 b6 59 92 47 a0 78 4f 47 6d 65 a5 5b 4d 0c 5a b6 a5 8e 4f a2 3a 46 cd 2a 09 a4 6f 94 d9 64 80 86 ad 6b c5 e7 53 61 dd d7 96 c4 5f 30 e6 1c 5c ca 93 d8 b5 ad ca 31 af 6f 54 11 cc df ea 4a 09 a3 56 c3 d8 5c 20 22 e8 1f 31 1c 65 ee a6 b2 ce 0f 50 d5 32 d9 76 94 c3 fd 1a 52 90 da 74 8e 72 e6 f5 c9 9c a5 d6 a3 96 4b 35 46 b2 05 da 06 2b 77 45 2e ef 22 8d Data Ascii: i{m5[a]lG5Yy-K]$V-kxac!QLfTiM'-J?u\|25K=Ll#X_qdeOD$YYGxOGme[MZO:FodkSa_0\1oTJV\ "1eP2vRtrK5F+wE."
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 83 28 0f a2 66 5c 14 a0 a8 80 52 a0 0f 3d c6 fb 88 e1 ac af 3d 43 56 e6 11 f6 20 68 13 4a 6e 98 cb 61 40 f6 05 cf ca 0b 75 0d dc 92 b7 66 83 84 9c 46 40 16 6d 73 78 c6 b8 a7 82 c6 70 69 74 b7 5a 50 4b 49 dc ef 19 b2 78 44 e2 5a 64 69 25 e6 82 da 4f c7 48 68 47 23 ce 58 3b 5b a4 bc d9 b9 3b 72 83 a8 7d c1 39 b0 56 dd e9 b0 ec dd 3e 5d e0 95 38 94 82 ad f7 50 4f f4 51 8b 30 82 92 c2 01 99 67 28 f3 86 3e e3 ff 00 17 b0 76 2f 77 87 5c 23 e0 89 a8 34 82 50 6a f3 aa ca 99 9e cd cf 46 72 e8 77 e6 49 ee e6 75 6d 2d 6d f1 9a d3 29 dd 5d 57 4d 25 0c ff 00 f7 82 dd 52 c6 b8 f6 5f 0b 3b 2d 8a 70 a8 f5 87 d1 fa 6f 42 90 79 4e 87 89 41 21 20 ad 09 b2 af a1 07 41 a1 be f1 72 df d0 8b e4 26 72 b8 31 ce 16 48 71 0d 74 7a ff 00 11 38 c3 5d 98 a7 2e 5d 2e 89 6a 13 21 ac 88 Data Ascii: (f\R==CV hJna@ufF@msxpitZPKIxDZdi%OHhG#X;[;r}9V>]8POQ0g(>v/w\#4PjFrwIum-m)]WM%R_;-poByNA! Ar&r1Hqtz8].].j!
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: f6 b9 f6 28 f8 93 14 a1 96 54 a4 3c 63 a6 d3 f4 ec f2 75 5a 76 9a e6 f9 46 45 89 2b 6e 4d ad 4e 29 d3 6f 18 ec ed 6d d5 bc 72 ce fe c2 c1 41 24 65 f8 a2 ac 10 1d 50 70 76 52 48 b9 f0 8a 57 95 b2 f0 8e ce da 8f a5 45 b3 cc 7c 4d ac 7a 74 ef 44 54 09 df 43 19 2b 96 7c eb f1 2b 54 57 15 dd 02 8a 3b e0 f0 89 e4 ac 34 26 e4 18 b1 05 c9 01 de 8c f3 8b d1 10 ac b0 55 01 03 2f 8c 3e c1 8d 97 ec b5 8b 5d a1 63 e4 d0 a6 1f cb 21 57 c8 da c1 d9 2e 21 61 48 57 c8 05 7c 8c 79 a7 c4 6d 1b bb d3 1d c4 57 31 3a 4e 9d bb 51 af b5 9e d1 c6 d8 ad aa ed 1e 7a 94 db 0f 2b a6 ca 7a 4b 0f bb 22 f6 24 12 2e 35 3c f4 8f 98 6d 63 5e 37 3f 57 83 ba a9 f5 47 27 9e 30 ab 49 32 be 8e ae d1 6d 6a 4d fb fb 44 8f a1 11 d3 d5 7c 14 68 37 96 59 9a 97 4b 45 26 db 1b c5 57 ca 2e 64 9a 94 45 Data Ascii: (T<cuZvFE+nMN)omrA$ePpvRHWE\|MztDTC+\|+TW;4&U/>]c!W.!aHW\|ymW1:NQz+zK"$.5<mc^7?WG'0I2mjMD\|h7YKE&W.dE
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 01 61 02 da c4 00 00 e5 0f b3 2b 0c 59 e4 b3 e1 4a ea a9 ef 86 d4 b2 13 7d 23 3e bd ae 39 47 73 d2 fa b3 b5 ac 93 66 fb 82 b1 33 0f 4b 24 2d db da 29 2f a7 86 7d 13 a6 6a 51 bc a0 b2 68 d4 ea 99 ba 56 95 5d 26 25 28 6e 5c 87 bb b6 52 45 ea 81 8a 57 29 94 a9 44 a6 fd f1 ce de d9 67 38 47 25 7d a7 a9 af 06 a3 42 c5 25 f4 21 68 78 58 81 ce 39 8b 9b 04 bd 8e 1f 50 d2 70 df 05 ca 56 bc a5 b6 09 70 5e 30 2e 2c 7e c8 c0 9d 8e d7 e0 eb 4d 62 e3 db 4c 52 ec a4 57 76 61 9a b9 f7 c4 2e cd fd 88 f6 42 7a e2 d7 ed 88 9c 6c 99 3e cf f0 72 cd d7 2c 93 da 4c 59 85 96 3d 83 42 c9 fd 8a c5 5b 10 b6 94 95 07 86 91 af 69 64 df b1 b5 65 a7 b7 ec 67 f8 93 13 85 a1 41 0a bc 75 16 56 18 f2 76 3a 76 99 87 96 50 a6 aa eb 2f 13 9a 36 d5 aa 4b 07 4d 1b 25 82 1d 1c 50 92 04 04 d5 10 Data Ascii: a+YJ}#>9Gsf3K$-)/}jQhV]&%(n\REW)Dg8G%}B%!hxX9PpVp^0.,~MbLRWva.Bzl>r,LY=B[idegAuVv:vP/6KM%P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49802	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:27 UTC	538	OUT	GET /aaq/wf/wf-caas-1.36.5-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:27 UTC	853	IN	HTTP/1.1 200 OK x-amz-id-2: opNg2fN8tAOwGHr7TYZRi1Km1Er+ssgIUMB7o5e7GiYBICq/Av/HbPfhOJbqfo4iUisg2EQgBZI= x-amz-request-id: 1RD64QR8B4A8MMP3 Date: Thu, 28 Mar 2024 15:40:23 GMT Last-Modified: Wed, 27 Mar 2024 16:25:40 GMT ETag: "55cc85bad916cd86ed872d7a0026bc60" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: H.VS0y5ycBNxveUoBRq_I2jiNcFLkA8N Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 29151 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 32465 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 63 61 61 73 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 63 61 61 73 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-caas",[],t):"object"==typeof exports?exports["wafer-caas"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 Data Ascii: ype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a func
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 28 21 63 7c 7c 21 6f 29 72 65 74 75 72 6e 20 72 26 26 72 28 69 29 2c 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 3b 61 26 26 28 65 2e 64 61 74 61 2e 70 61 72 74 6e 65 72 44 61 74 61 2e 67 72 6f 75 70 4e 61 6d 65 3d 61 29 3b 76 61 72 20 6c 3d 63 2e 75 75 69 64 2c 64 3d 7b 61 73 73 65 74 73 3a 74 2c 69 74 65 6d 73 3a 5b 65 5d 7d 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 5f 5f 77 61 66 65 72 43 61 61 73 43 6f 6c 6c 65 63 74 69 6f 6e 2e 73 65 74 28 6c 2c 64 29 2c 65 7d 29 29 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 5b 5d 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 Data Ascii: (!c\|\|!o)return r&&r(i),Promise.resolve();a&&(e.data.partnerData.groupName=a);var l=c.uuid,d={assets:t,items:[e]};return window.__waferCaasCollection.set(l,d),e}))},y=function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:[],t=arguments.le
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 72 29 26 26 28 65 5b 72 5d 3d 61 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 5b 5d 2c 72 3d 21 30 2c 69 3d 21 31 2c 73 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6e 2c 6f 3d 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 72 3d 28 6e 3d 6f 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 61 2e 70 75 73 68 28 6e 2e Data Ascii: t=1;t<arguments.length;t++){var a=arguments[t];for(var r in a)Object.prototype.hasOwnProperty.call(a,r)&&(e[r]=a[r])}return e},C=function(){function e(e,t){var a=[],r=!0,i=!1,s=void 0;try{for(var n,o=e[Symbol.iterator]();!(r=(n=o.next()).done)&&(a.push(n.
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 79 4e 61 6d 65 2c 44 3d 52 2e 67 65 74 57 61 66 65 72 46 6f 72 54 79 70 65 2c 46 3d 52 2e 67 65 74 57 61 66 65 72 49 6e 73 74 61 6e 63 65 46 6f 72 45 6c 65 6d 2c 7a 3d 52 2e 73 65 74 54 69 6d 65 6f 75 74 2c 48 3d 5b 22 63 61 61 73 2d 63 6f 6c 6c 61 70 73 65 64 22 2c 22 63 61 61 73 2d 75 72 6c 22 2c 22 63 61 61 73 2d 75 75 69 64 22 5d 2c 59 3d 7b 7d 2c 55 3d 7b 7d 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 73 3d 61 2e 63 61 61 73 43 6f 6e 66 69 67 2c 6e 3d 61 2e 65 72 72 6f 72 43 6c 61 73 73 2c 6f 3d 61 2e 73 65 6c 65 63 74 Data Ascii: yName,D=R.getWaferForType,F=R.getWaferInstanceForElem,z=R.setTimeout,H=["caas-collapsed","caas-url","caas-uuid"],Y={},U={},G=function(e){function t(e){var a=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},s=a.caasConfig,n=a.errorClass,o=a.select
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 6e 75 6c 6c 3d 3d 3d 66 7c 7c 76 6f 69 64 20 30 3d 3d 3d 66 3f 30 3a 4e 75 6d 62 65 72 28 66 29 2c 22 63 61 61 73 2d 75 72 6c 22 3a 75 2c 22 63 61 61 73 2d 75 75 69 64 22 3a 68 2c 63 61 63 68 65 3a 6e 75 6c 6c 3d 3d 3d 64 7c 7c 76 6f 69 64 20 30 3d 3d 3d 64 3f 31 3a 4e 75 6d 62 65 72 28 64 29 2c 63 61 61 73 43 6f 6e 66 69 67 3a 73 2c 63 61 63 68 65 53 74 72 61 74 65 67 79 3a 76 2c 63 61 63 68 65 54 74 6c 3a 6e 75 6c 6c 3d 3d 3d 70 7c 7c 76 6f 69 64 20 30 3d 3d 3d 70 3f 33 30 30 3a 4e 75 6d 62 65 72 28 70 29 2c 64 65 70 65 6e 64 65 6e 63 79 45 6c 65 6d 3a 50 2c 69 73 50 72 65 66 65 74 63 68 3a 6e 75 6c 6c 3d 3d 3d 6d 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6d 3f 30 3a 4e 75 6d 62 65 72 28 6d 29 2c 74 61 72 67 65 74 45 6c 65 6d 3a 6a 2c 74 69 6d 65 6f 75 74 3a 6e Data Ascii: null===f\|\|void 0===f?0:Number(f),"caas-url":u,"caas-uuid":h,cache:null===d\|\|void 0===d?1:Number(d),caasConfig:s,cacheStrategy:v,cacheTtl:null===p\|\|void 0===p?300:Number(p),dependencyElem:P,isPrefetch:null===m\|\|void 0===m?0:Number(m),targetElem:j,timeout:n
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 69 3d 72 2e 64 65 70 65 6e 64 65 6e 63 79 45 6c 65 6d 2c 73 3d 72 2e 73 75 63 63 65 73 73 43 6c 61 73 73 3b 69 66 28 69 26 26 21 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 73 29 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 6e 65 77 20 45 72 72 6f 72 28 22 64 65 70 65 6e 64 65 6e 63 79 20 6e 6f 74 20 79 65 74 20 63 6f 6d 70 6c 65 74 65 22 29 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 3b 69 66 28 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 73 29 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 21 30 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 63 3d 6f 2e 63 61 61 73 43 6f 6e 66 69 67 2c 6c 3d 76 6f Data Ascii: =this._util,i=r.dependencyElem,s=r.successClass;if(i&&!i.classList.contains(s))return Promise.reject(new Error("dependency not yet complete"));var n=this._util.elem;if(n.classList.contains(s))return Promise.resolve(!0);var o=this._util,c=o.caasConfig,l=vo
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 65 28 74 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 28 65 29 7d 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 61 73 73 65 74 73 3b 69 66 28 21 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 3b 69 66 28 22 73 69 64 65 6b 69 63 6b 22 21 3d 3d 77 26 26 77 69 6e 64 6f 77 2e 43 41 41 53 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 61 3d 65 2e 73 74 79 6c 65 2c 72 3d 59 5b 77 5d 3b 72 65 74 75 72 6e 20 72 3f 72 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 29 3a 28 59 5b 77 5d 3d 79 28 74 2c 61 2c 77 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 29 2c 59 5b 77 5d 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 Data Ascii: e(t)}).catch(function(e){r(e)})}).then(function(e){var t=e.assets;if(!t.length)return e;if("sidekick"!==w&&window.CAAS)return e;var a=e.style,r=Y[w];return r?r.then(function(){return e}):(Y[w]=y(t,a,w).then(function(){return e}),Y[w])}).then(function(r){v
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 6c 61 73 73 4e 61 6d 65 28 22 63 61 61 73 2d 62 6f 64 79 2d 77 72 61 70 70 65 72 22 29 29 5b 30 5d 3b 56 26 26 56 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 63 61 61 73 2d 62 6f 64 79 2d 63 6f 6c 6c 61 70 73 65 64 22 29 7d 69 66 28 6f 26 26 6f 2e 63 61 6c 6c 28 65 2c 6e 2c 72 29 2c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 63 61 61 73 2d 74 72 69 67 67 65 72 2d 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 73 29 2c 53 2e 65 6d 69 74 4c 6f 67 28 7b 6e 61 6d 65 3a 22 57 61 66 65 72 43 61 61 73 22 2c 65 6c 65 6d 3a 6e 2c 6d 65 74 61 3a 7b 64 75 72 61 74 69 6f 6e 3a 6c 2c 73 6f 75 72 63 65 3a 67 3f 22 4d 45 4d 4f 52 59 22 3a 64 2c 75 72 6c 3a 74 7d 7d 29 2c 22 64 65 66 61 75 6c Data Ascii: lassName("caas-body-wrapper"))[0];V&&V.classList.add("caas-body-collapsed")}if(o&&o.call(e,n,r),n.classList.remove("wafer-caas-trigger-inprogress"),n.classList.add(s),S.emitLog({name:"WaferCaas",elem:n,meta:{duration:l,source:g?"MEMORY":d,url:t}}),"defaul
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 63 61 61 73 2d 62 6f 64 79 2d 77 72 61 70 70 65 72 22 29 29 5b 30 5d 3b 6e 26 26 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 63 61 61 73 2d 62 6f 64 79 2d 63 6f 6c 6c 61 70 73 65 64 22 29 7d 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 69 29 2c 53 2e 65 6d 69 74 4c 6f 67 28 7b 6e 61 6d 65 3a 22 57 61 66 65 72 43 61 61 73 22 2c 65 6c 65 6d 3a 72 2c 6d 65 74 61 3a 7b 7d 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 53 70 61 63 69 6e 67 41 6e 64 47 65 74 4f 66 66 73 65 74 41 62 6f 76 65 52 69 67 68 74 52 61 69 6c 41 64 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 61 3d 74 2e 63 61 61 73 42 6f 64 79 2c 72 3d 74 Data Ascii: tElementsByClassName("caas-body-wrapper"))[0];n&&n.classList.add("caas-body-collapsed")}r.classList.add(i),S.emitLog({name:"WaferCaas",elem:r,meta:{}})}},{key:"handleSpacingAndGetOffsetAboveRightRailAds",value:function(e){var t=this._util,a=t.caasBody,r=t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49803	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:27 UTC	546	OUT	GET /cx/hp-viewer/desktop_1.11.170.modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:27 UTC	777	IN	HTTP/1.1 200 OK x-amz-id-2: hRO/Q57rf+etLVCxHD/NX6zY9nW6/jlRFs9dwqM7IwnU2bYL9UIrnF8TZqU2z9MOfD6HLbT1b9Q= x-amz-request-id: WAVW5F2FX4V31CGN Date: Fri, 29 Mar 2024 00:03:53 GMT Last-Modified: Thu, 21 Mar 2024 22:45:54 GMT ETag: "f658eb6d20576439c63d08fcdb198362" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 62689 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 2255 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 5b 22 66 69 6e 61 6e 63 65 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 22 6e 65 77 73 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 22 73 70 6f 72 74 73 2e 79 61 68 6f 6f 2e 63 6f 6d 22 5d 2c 74 3d 6e 65 77 20 52 65 67 45 78 70 28 2f 72 73 3d 22 28 5b 5e 22 5d 2a 29 22 2f 29 2c 69 3d 7b 6c 6d 73 69 64 3a 22 6c 6d 73 69 64 22 2c 6c 70 73 74 61 69 64 3a 22 6c 70 73 74 61 69 64 22 2c 6c 75 3a 22 6c 75 22 2c 70 63 74 3a 22 70 61 67 65 43 6f 6e 74 65 6e 74 54 79 70 65 22 2c 70 64 3a 22 70 61 67 65 44 65 73 69 67 6e 22 2c 70 6c 3a 22 70 6c 22 2c 70 74 3a 22 70 61 67 65 54 79 70 65 22 2c 72 65 76 73 70 3a 22 72 65 76 73 70 22 2c 76 65 72 3a 22 61 70 70 4e 61 6d 65 22 7d 2c 73 3d 5b Data Ascii: !function(){"use strict";const e=["finance.yahoo.com","news.yahoo.com","sports.yahoo.com"],t=new RegExp(/rs="([^"]*)"/),i={lmsid:"lmsid",lpstaid:"lpstaid",lu:"lu",pct:"pageContentType",pd:"pageDesign",pl:"pl",pt:"pageType",revsp:"revsp",ver:"appName"},s=[
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 73 2d 63 6f 6d 70 6c 65 74 65 22 29 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 69 29 2e 66 69 6e 64 49 6e 64 65 78 28 28 74 3d 3e 74 3d 3d 3d 65 29 29 2b 31 7d 2c 6d 3d 28 29 3d 3e 77 69 6e 64 6f 77 2e 76 7a 6d 3f 2e 67 65 74 50 61 67 65 43 6f 6e 74 65 78 74 3f 2e 28 29 7c 7c 77 69 6e 64 6f 77 2e 59 41 48 4f 4f 3f 2e 63 6f 6e 74 65 78 74 2c 66 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 6d 28 29 3b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 65 3f 2e 62 75 63 6b 65 74 7c 7c 65 3f 2e 62 75 63 6b 65 74 49 64 7c 7c 22 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 63 6f 6e 73 74 20 74 3d 5b 5d 3b 66 6f 72 28 63 6f 6e 73 74 20 69 20 69 6e 20 65 29 69 66 28 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 29 7b 63 6f 6e 73 74 20 73 3d Data Ascii: s-complete");return Array.from(i).findIndex((t=>t===e))+1},m=()=>window.vzm?.getPageContext?.()\|\|window.YAHOO?.context,f=()=>{const e=m();return String(e?.bucket\|\|e?.bucketId\|\|"")};function g(e){const t=[];for(const i in e)if(e.hasOwnProperty(i)){const s=
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 2e 62 65 6e 6a 69 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 62 65 6e 6a 69 2e 75 70 64 61 74 65 49 31 33 4e 29 7b 63 6f 6e 73 74 7b 61 64 4d 65 74 61 3a 69 2c 73 70 61 63 65 49 64 3a 73 2c 68 6f 6d 65 70 61 67 65 55 72 6c 3a 6e 7d 3d 65 2e 6d 65 74 61 2e 64 61 74 61 2c 61 3d 7b 7d 2c 72 3d 22 66 72 6f 6e 74 70 61 67 65 22 3d 3d 3d 74 7c 7c 22 66 70 22 3d 3d 3d 74 3b 61 2e 73 70 61 63 65 69 64 3d 69 2e 73 70 61 63 65 69 64 7c 7c 73 7c 7c 22 22 2c 69 2e 68 61 73 68 74 61 67 26 26 28 61 2e 68 61 73 68 74 61 67 3d 69 2e 68 61 73 68 74 61 67 2e 73 70 6c 69 74 28 22 3b 22 29 29 2c 72 26 26 69 2e 73 69 74 65 26 26 28 61 2e 73 69 74 65 3d 69 2e 73 69 74 65 29 2c 61 2e 75 72 6c 3d 6e 7c 7c 22 22 3b 28 69 2e 72 73 26 26 69 Data Ascii: .benji&&"function"==typeof window.benji.updateI13N){const{adMeta:i,spaceId:s,homepageUrl:n}=e.meta.data,a={},r="frontpage"===t\|\|"fp"===t;a.spaceid=i.spaceid\|\|s\|\|"",i.hashtag&&(a.hashtag=i.hashtag.split(";")),r&&i.site&&(a.site=i.site),a.url=n\|\|"";(i.rs&&i
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 69 64 65 73 68 6f 77 3a 22 73 74 6f 72 79 22 7d 3b 63 6f 6e 73 74 20 6a 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 22 63 6c 65 61 72 4d 61 72 6b 73 22 69 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 63 6f 6e 73 74 20 59 3d 65 3d 3e 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 63 6f 6e 74 72 6f 6c 73 22 29 2c 7a 3d 65 3d 3e 59 28 65 29 3f 65 2e 63 6f 6e 74 72 6f 6c 73 2e 69 73 50 6c 61 79 69 6e 67 28 29 3a 65 2e 69 73 50 6c 61 79 69 6e 67 28 29 2c 4a 3d 65 3d 3e 59 28 65 29 3f 65 2e 63 6f 6e 74 72 6f 6c 73 2e 70 61 75 73 65 28 29 3a 65 2e 70 61 75 73 65 28 29 2c 71 3d 65 3d 3e 59 28 65 29 3f 65 2e 63 6f 6e 74 72 6f 6c 73 2e 70 6c 61 79 28 29 3a 65 2e 70 6c 61 79 28 29 3b 63 6f 6e 73 74 7b 62 6f 64 79 3a 47 7d Data Ascii: ideshow:"story"};const j=window.performance&&"clearMarks"in window.performance;const Y=e=>e.hasOwnProperty("controls"),z=e=>Y(e)?e.controls.isPlaying():e.isPlaying(),J=e=>Y(e)?e.controls.pause():e.pause(),q=e=>Y(e)?e.controls.play():e.play();const{body:G}
2024-03-29 00:41:27 UTC	842	IN	Data Raw: 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 65 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 69 3d 74 68 69 73 2e 73 70 61 63 65 69 64 2c 73 3d 7b 5f 52 3a 74 68 69 73 2e 61 72 74 69 63 6c 65 55 72 6c 2c 5f 77 3a 74 68 69 73 2e 68 6f 6d 65 55 72 6c 2c 6e 61 76 74 79 70 65 3a 22 63 6c 69 65 6e 74 22 7d 2c 6e 3d 7b 65 6c 6d 3a 22 62 61 63 6b 62 74 6e 22 2c 65 6c 6d 74 3a 22 63 6c 22 2c 69 74 63 3a 30 2c 72 73 70 6e 73 3a 22 63 6c 22 2c 74 61 72 3a 70 28 74 68 69 73 2e 68 6f 6d 65 55 72 6c 29 2c 74 61 72 5f 75 72 69 3a 22 2f 22 2c 2e 2e 2e 74 7c 7c 7b 7d 7d 2c 6f 3d 6e 2e 73 6c 6b 3b 6c 65 74 20 61 3b 6f 3f 61 3d 6f 3a 28 61 3d 22 64 65 73 6b 74 6f 70 22 3d 3d 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 64 65 76 69 63 65 3f 22 61 72 74 Data Ascii: ){if(!window.rapidInstance)return;const i=this.spaceid,s={_R:this.articleUrl,_w:this.homeUrl,navtype:"client"},n={elm:"backbtn",elmt:"cl",itc:0,rspns:"cl",tar:p(this.homeUrl),tar_uri:"/",...t\|\|{}},o=n.slk;let a;o?a=o:(a="desktop"===this.config.device?"art
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 65 29 7b 74 68 69 73 2e 66 6c 75 73 68 4d 6f 64 75 6c 65 50 72 6f 67 72 65 73 73 69 6f 6e 28 29 2c 61 77 61 69 74 20 74 68 69 73 2e 62 65 61 63 6f 6e 44 77 65 6c 6c 53 74 6f 70 28 29 2c 74 68 69 73 2e 62 65 61 63 6f 6e 4d 6f 64 61 6c 43 6f 6e 74 65 6e 74 28 65 29 2c 74 68 69 73 2e 72 65 66 65 72 65 72 55 72 6c 21 3d 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 26 26 28 74 68 69 73 2e 72 65 66 65 72 65 72 55 72 6c 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2c 74 68 69 73 2e 76 69 65 77 65 64 41 72 74 69 63 6c 65 73 2e 61 64 64 28 65 2e 65 6c 65 6d 2e 69 64 29 7d 75 70 64 61 74 65 52 61 70 69 64 41 74 74 72 69 62 75 74 65 73 28 65 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 65 29 72 65 Data Ascii: e){this.flushModuleProgression(),await this.beaconDwellStop(),this.beaconModalContent(e),this.refererUrl!==window.location.href&&(this.refererUrl=window.location.href),this.viewedArticles.add(e.elem.id)}updateRapidAttributes(e){if(!window.rapidInstance)re
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 74 28 6d 2c 31 30 29 29 7d 62 65 61 63 6f 6e 4d 6f 64 61 6c 43 6f 6e 74 65 6e 74 28 65 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 65 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 7b 65 6c 65 6d 3a 7b 69 64 3a 74 7d 7d 3d 65 3b 74 68 69 73 2e 75 70 64 61 74 65 52 61 70 69 64 41 74 74 72 69 62 75 74 65 73 28 65 29 2c 77 69 6e 64 6f 77 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 65 2e 62 65 61 63 6f 6e 50 61 67 65 76 69 65 77 28 29 2c 77 69 6e 64 6f 77 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 65 2e 69 73 4d 6f 64 75 6c 65 54 72 61 63 6b 65 64 28 74 29 3f 77 69 6e 64 6f 77 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 65 2e 72 65 66 72 65 73 68 4d 6f 64 75 6c 65 28 74 2c 21 31 2c 21 30 29 3a 77 69 6e 64 6f 77 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 Data Ascii: t(m,10))}beaconModalContent(e){if(!window.rapidInstance)return;const{elem:{id:t}}=e;this.updateRapidAttributes(e),window.rapidInstance.beaconPageview(),window.rapidInstance.isModuleTracked(t)?window.rapidInstance.refreshModule(t,!1,!0):window.rapidInstanc
2024-03-29 00:41:27 UTC	1300	IN	Data Raw: 69 65 77 70 6f 72 74 41 64 46 65 74 63 68 53 6c 6f 74 49 6e 64 65 78 3d 5b 5d 2c 74 68 69 73 2e 76 69 65 77 70 6f 72 74 50 72 65 76 69 6f 75 73 41 64 46 65 74 63 68 53 6c 6f 74 49 6e 64 65 78 3d 5b 5d 2c 74 68 69 73 2e 70 61 67 65 43 6f 6e 74 65 78 74 3d 7b 7d 2c 74 68 69 73 2e 76 69 65 77 65 72 41 64 73 43 6f 6e 66 69 67 3d 7b 7d 2c 74 68 69 73 2e 62 65 6e 6a 69 41 64 49 64 41 72 72 3d 5b 5d 7d 69 6e 69 74 28 65 29 7b 63 6f 6e 73 74 7b 61 64 73 43 6f 6e 66 69 67 3a 74 2c 62 65 6e 6a 69 3a 69 2c 77 61 66 65 72 3a 73 7d 3d 77 69 6e 64 6f 77 3b 69 66 28 65 26 26 28 74 68 69 73 2e 73 69 74 65 3d 65 2e 63 6f 6e 74 65 78 74 3f 2e 73 69 74 65 7c 7c 22 66 70 22 2c 74 68 69 73 2e 76 69 65 77 65 72 41 64 73 43 6f 6e 66 69 67 3d 65 2e 61 64 73 7c 7c 7b 7d 29 2c 74 Data Ascii: iewportAdFetchSlotIndex=[],this.viewportPreviousAdFetchSlotIndex=[],this.pageContext={},this.viewerAdsConfig={},this.benjiAdIdArr=[]}init(e){const{adsConfig:t,benji:i,wafer:s}=window;if(e&&(this.site=e.context?.site\|\|"fp",this.viewerAdsConfig=e.ads\|\|{}),t
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 6e 65 72 28 22 76 69 65 77 65 72 53 63 72 6f 6c 6c 52 65 73 74 6f 72 65 64 22 2c 74 68 69 73 2e 6f 6e 76 69 65 77 65 72 53 63 72 6f 6c 6c 52 65 73 74 6f 72 65 64 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 6f 6e 43 6c 69 63 6b 28 65 29 7b 22 73 6c 69 64 65 73 68 6f 77 22 3d 3d 3d 65 2e 74 79 70 65 26 26 77 69 6e 64 6f 77 2e 44 41 52 4c 41 26 26 21 77 69 6e 64 6f 77 2e 44 41 52 4c 41 2e 69 6e 50 72 6f 67 72 65 73 73 28 29 26 26 77 69 6e 64 6f 77 2e 44 41 52 4c 41 2e 65 76 65 6e 74 28 22 73 6c 69 64 65 73 68 6f 77 22 29 7d 67 65 74 41 64 42 6c 6f 63 6b 43 6f 6e 66 69 67 28 29 7b 69 66 28 21 74 68 69 73 2e 63 6f 6e 66 69 67 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 2e Data Ascii: ner("viewerScrollRestored",this.onviewerScrollRestored.bind(this))}onClick(e){"slideshow"===e.type&&window.DARLA&&!window.DARLA.inProgress()&&window.DARLA.event("slideshow")}getAdBlockConfig(){if(!this.config)return;const e=JSON.parse(JSON.stringify(this.
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 22 2b 74 2e 69 64 2b 22 2d 62 61 73 65 22 2c 61 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 25 22 2c 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 75 62 61 2d 63 6f 6e 74 61 69 6e 65 72 22 2c 73 2e 69 64 3d 74 2e 63 6c 65 61 6e 2c 6e 2e 69 64 3d 74 2e 64 65 73 74 2c 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 73 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 2c 21 65 2e 76 69 65 77 65 72 50 6f 73 69 74 69 6f 6e 4d 65 74 61 3f 2e 65 6e 61 62 6c 65 55 42 41 4d 4f 4e 29 7b 63 6f 6e 73 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 29 3b 65 2e 69 6e 6e 65 72 54 65 78 74 3d 69 2c 65 2e 73 74 79 6c 65 2e 63 6f 6c 6f 72 3d 22 23 37 38 37 64 38 32 22 2c 65 2e 73 74 Data Ascii: "+t.id+"-base",a.style.width="100%",a.className="uba-container",s.id=t.clean,n.id=t.dest,s.parentNode.insertBefore(a,s),a.appendChild(s),!e.viewerPositionMeta?.enableUBAMON){const e=document.createElement("span");e.innerText=i,e.style.color="#787d82",e.st

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49806	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	893	OUT	GET /__rapid-worker-1.2.js HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-03-29 00:41:28 UTC	859	IN	HTTP/1.1 200 OK x-amz-id-2: pPNCwAIRS/hovUEYGY6rClM9TZDcZg9b+hB6y/DzofDsVuB2Q6y46V+UcAq2gPrLiglHt+Vkes0= x-amz-request-id: TA7VCY08E98RMQYA Date: Thu, 28 Mar 2024 15:45:05 GMT Last-Modified: Tue, 06 Mar 2018 20:46:57 GMT ETag: "e2202e6ed6ef52cec2c4a875c99225ba" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-meta-created-date: Wed, 15 Oct 2014 18:48:37 GMT x-amz-meta-mbst-etag: "YM:1:e64293ae-a913-4bb2-8dd1-87431f3be4230005057a946243f1" x-amz-meta-x-ysws-mbst-vtime: 1413398917170161 Expires: Sat, 05 Sep 2026 00:00:00 GMT x-amz-meta-x-ysws-access: public x-amz-version-id: null Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 15697 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 32184 ATS-Carp-Promotion: 1 Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:28 UTC	743	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 73 61 6e 64 62 6f 78 20 61 6c 6c 6f 77 2d 66 6f 72 6d 73 20 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 2d 74 6f 2d 65 73 63 61 70 65 2d 73 61 6e 64 62 6f 78 20 61 6c 6c 6f 77 2d 70 72 65 73 65 6e 74 61 74 69 6f 6e 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 61 74 73 26 73 69 74 65 3d 66 72 6f 6e 74 70 61 67 65 26 72 65 67 69 6f 6e 3d 55 53 26 6c 61 6e 67 3d 65 6e 2d 55 53 26 64 65 76 69 63 65 3d 64 65 73 6b 74 6f 70 26 79 72 69 64 3d 31 6a 33 71 6d 31 Data Ascii: Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=1j3qm1
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 2f 2a 20 40 70 72 65 73 65 72 76 65 0a 20 2a 20 24 49 64 3a 20 72 61 77 64 65 66 6c 61 74 65 2e 6a 73 2c 76 20 30 2e 33 20 32 30 30 39 2f 30 33 2f 30 31 20 31 39 3a 30 35 3a 30 35 20 64 61 6e 6b 6f 67 61 69 20 45 78 70 20 64 61 6e 6b 6f 67 61 69 20 24 0a 20 2a 0a 20 2a 20 4f 72 69 67 69 6e 61 6c 3a 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 6e 69 63 6f 73 2e 63 6f 6d 2f 73 74 61 66 66 2f 69 7a 2f 61 6d 75 73 65 2f 6a 61 76 61 73 63 72 69 70 74 2f 65 78 70 65 72 74 2f 64 65 66 6c 61 74 65 2e 74 78 74 0a 20 2a 2f 0a 2f 2a 20 40 70 72 65 73 65 72 76 65 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 39 20 4d 61 73 61 6e 61 6f 20 49 7a 75 6d 6f 20 3c 69 7a 40 6f 6e 69 63 6f 73 2e 63 6f 2e 6a 70 3e 0a 20 2a 20 56 65 72 73 69 6f 6e 3a Data Ascii: /* @preserve * $Id: rawdeflate.js,v 0.3 2009/03/01 19:05:05 dankogai Exp dankogai $ * * Original: * http://www.onicos.com/staff/iz/amuse/javascript/expert/deflate.txt // @preserve * Copyright (C) 1999 Masanao Izumo <iz@onicos.co.jp> * Version:
2024-03-29 00:41:28 UTC	685	IN	Data Raw: 65 72 72 6f 72 3a 20 7a 69 70 5f 57 53 49 5a 45 20 69 73 20 74 6f 6f 20 6c 61 72 67 65 22 29 2c 5f 3e 64 2d 31 26 26 70 6f 73 74 4d 65 73 73 61 67 65 28 22 65 72 72 6f 72 3a 20 7a 69 70 5f 48 41 53 48 5f 42 49 54 53 20 69 73 20 74 6f 6f 20 6c 61 72 67 65 22 29 2c 28 38 3e 5f 7c 7c 32 35 38 21 3d 68 29 26 26 70 6f 73 74 4d 65 73 73 61 67 65 28 22 65 72 72 6f 72 3a 20 43 6f 64 65 20 74 6f 6f 20 63 6c 65 76 65 72 22 29 3b 76 61 72 20 76 2c 79 2c 77 2c 6d 2c 67 2c 78 2c 62 2c 70 2c 4d 2c 43 2c 42 2c 7a 2c 49 2c 52 2c 58 2c 44 2c 6a 2c 6b 2c 4e 2c 53 2c 48 2c 55 2c 5a 2c 45 2c 46 2c 54 2c 57 2c 71 2c 47 2c 4a 2c 4b 2c 4c 2c 4f 2c 50 2c 51 2c 56 2c 59 2c 24 2c 72 74 2c 74 74 2c 65 74 2c 6e 74 2c 66 74 2c 6f 74 2c 69 74 2c 61 74 2c 6c 74 2c 75 74 2c 73 74 2c 63 Data Ascii: error: zip_WSIZE is too large"),_>d-1&&postMessage("error: zip_HASH_BITS is too large"),(8>_\|\|258!=h)&&postMessage("error: Code too clever");var v,y,w,m,g,x,b,p,M,C,B,z,I,R,X,D,j,k,N,S,H,U,Z,E,F,T,W,q,G,J,K,L,O,P,Q,V,Y,$,rt,tt,et,nt,ft,ot,it,at,lt,ut,st,c
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 68 69 73 2e 6e 69 63 65 5f 6c 65 6e 67 74 68 3d 65 2c 74 68 69 73 2e 6d 61 78 5f 63 68 61 69 6e 3d 6e 7d 2c 47 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 65 78 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6c 65 6e 3d 30 2c 74 68 69 73 2e 70 74 72 3d 41 72 72 61 79 28 75 29 2c 74 68 69 73 2e 6f 66 66 3d 30 7d 2c 4a 74 3d 41 72 72 61 79 28 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 2c 31 2c 31 2c 31 2c 32 2c 32 2c 32 2c 32 2c 33 2c 33 2c 33 2c 33 2c 34 2c 34 2c 34 2c 34 2c 35 2c 35 2c 35 2c 35 2c 30 29 2c 4b 74 3d 41 72 72 61 79 28 30 2c 30 2c 30 2c 30 2c 31 2c 31 2c 32 2c 32 2c 33 2c 33 2c 34 2c 34 2c 35 2c 35 2c 36 2c 36 2c 37 2c 37 2c 38 2c 38 2c 39 2c 39 2c 31 30 2c 31 30 2c 31 31 2c 31 31 2c 31 32 2c 31 32 2c 31 33 2c 31 33 29 2c 4c 74 3d Data Ascii: his.nice_length=e,this.max_chain=n},Gt=function(){this.next=null,this.len=0,this.ptr=Array(u),this.off=0},Jt=Array(0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0),Kt=Array(0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13),Lt=
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 3d 3d 75 26 26 6b 65 28 29 7d 2c 65 65 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 26 3d 36 35 35 33 35 2c 75 2d 32 3e 78 2b 67 3f 28 46 74 5b 78 2b 67 2b 2b 5d 3d 32 35 35 26 72 2c 46 74 5b 78 2b 67 2b 2b 5d 3d 72 3e 3e 3e 38 29 3a 28 74 65 28 32 35 35 26 72 29 2c 74 65 28 72 3e 3e 3e 38 29 29 7d 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 58 3d 28 58 3c 3c 45 74 5e 32 35 35 26 70 5b 48 2b 63 2d 31 5d 29 26 67 74 2c 44 3d 24 74 28 58 29 2c 42 5b 48 26 78 74 5d 3d 44 2c 72 65 28 58 2c 48 29 7d 2c 66 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 58 65 28 74 5b 72 5d 2e 66 63 2c 74 5b 72 5d 2e 64 6c 29 7d 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 32 35 35 26 28 32 35 36 3e 72 3f 6f 74 5b 72 5d 3a 6f 74 5b 32 35 36 2b 28 72 3e 3e Data Ascii: ==u&&ke()},ee=function(r){r&=65535,u-2>x+g?(Ft[x+g++]=255&r,Ft[x+g++]=r>>>8):(te(255&r),te(r>>>8))},ne=function(){X=(X<<Et^255&p[H+c-1])&gt,D=$t(X),B[H&xt]=D,re(X,H)},fe=function(r,t){Xe(t[r].fc,t[r].dl)},oe=function(r){return 255&(256>r?ot[r]:ot[256+(r>>
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 6e 2b 3d 74 7d 5a 7c 7c 28 72 3d 61 65 28 70 2c 48 2b 45 2c 6e 29 2c 30 3e 3d 72 3f 5a 3d 21 30 3a 45 2b 3d 72 29 7d 2c 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 30 21 3d 45 26 26 6e 75 6c 6c 3d 3d 79 3b 29 7b 76 61 72 20 72 3b 69 66 28 6e 65 28 29 2c 44 21 3d 62 74 26 26 43 74 3e 3d 48 2d 44 26 26 28 4e 3d 75 65 28 44 29 2c 4e 3e 45 26 26 28 4e 3d 45 29 29 2c 4e 3e 3d 63 29 69 66 28 72 3d 7a 65 28 48 2d 55 2c 4e 2d 63 29 2c 45 2d 3d 4e 2c 54 3e 3d 4e 29 7b 4e 2d 2d 3b 64 6f 20 48 2b 2b 2c 6e 65 28 29 3b 77 68 69 6c 65 28 30 21 3d 2d 2d 4e 29 3b 48 2b 2b 7d 65 6c 73 65 20 48 2b 3d 4e 2c 4e 3d 30 2c 58 3d 32 35 35 26 70 5b 48 5d 2c 58 3d 28 58 3c 3c 45 74 5e 32 35 35 26 70 5b 48 2b 31 5d 29 26 67 74 3b 65 6c 73 65 20 72 3d 7a 65 28 30 2c 32 Data Ascii: n+=t}Z\|\|(r=ae(p,H+E,n),0>=r?Z=!0:E+=r)},ce=function(){for(;0!=E&&null==y;){var r;if(ne(),D!=bt&&Ct>=H-D&&(N=ue(D),N>E&&(N=E)),N>=c)if(r=ze(H-U,N-c),E-=N,T>=N){N--;do H++,ne();while(0!=--N);H++}else H+=N,N=0,X=255&p[H],X=(X<<Et^255&p[H+1])>else r=ze(0,2
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 78 5f 63 6f 64 65 3d 30 2c 56 2e 64 79 6e 5f 74 72 65 65 3d 4b 2c 56 2e 73 74 61 74 69 63 5f 74 72 65 65 3d 4f 2c 56 2e 65 78 74 72 61 5f 62 69 74 73 3d 4b 74 2c 56 2e 65 78 74 72 61 5f 62 61 73 65 3d 30 2c 56 2e 65 6c 65 6d 73 3d 6b 74 2c 56 2e 6d 61 78 5f 6c 65 6e 67 74 68 3d 7a 74 2c 56 2e 6d 61 78 5f 63 6f 64 65 3d 30 2c 59 2e 64 79 6e 5f 74 72 65 65 3d 50 2c 59 2e 73 74 61 74 69 63 5f 74 72 65 65 3d 6e 75 6c 6c 2c 59 2e 65 78 74 72 61 5f 62 69 74 73 3d 4c 74 2c 59 2e 65 78 74 72 61 5f 62 61 73 65 3d 30 2c 59 2e 65 6c 65 6d 73 3d 4e 74 2c 59 2e 6d 61 78 5f 6c 65 6e 67 74 68 3d 49 74 2c 59 2e 6d 61 78 5f 63 6f 64 65 3d 30 2c 65 3d 30 2c 6e 3d 30 3b 52 74 2d 31 3e 6e 3b 6e 2b 2b 29 66 6f 72 28 69 74 5b 6e 5d 3d 65 2c 72 3d 30 3b 31 3c 3c 4a 74 5b 6e 5d Data Ascii: x_code=0,V.dyn_tree=K,V.static_tree=O,V.extra_bits=Kt,V.extra_base=0,V.elems=kt,V.max_length=zt,V.max_code=0,Y.dyn_tree=P,Y.static_tree=null,Y.extra_bits=Lt,Y.extra_base=0,Y.elems=Nt,Y.max_length=It,Y.max_code=0,e=0,n=0;Rt-1>n;n++)for(it[n]=e,r=0;1<<Jt[n]
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 3b 30 21 3d 66 3b 66 2d 2d 29 66 6f 72 28 65 3d 24 5b 66 5d 3b 30 21 3d 65 3b 29 6e 3d 72 74 5b 2d 2d 74 5d 2c 6e 3e 73 7c 7c 28 61 5b 6e 5d 2e 64 6c 21 3d 66 26 26 28 41 74 2b 3d 28 66 2d 61 5b 6e 5d 2e 64 6c 29 2a 61 5b 6e 5d 2e 66 63 2c 61 5b 6e 5d 2e 66 63 3d 66 29 2c 65 2d 2d 29 7d 7d 2c 67 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 65 2c 6e 2c 66 3d 41 72 72 61 79 28 7a 74 2b 31 29 2c 6f 3d 30 3b 66 6f 72 28 65 3d 31 3b 7a 74 3e 3d 65 3b 65 2b 2b 29 6f 3d 6f 2b 24 5b 65 2d 31 5d 3c 3c 31 2c 66 5b 65 5d 3d 6f 3b 66 6f 72 28 6e 3d 30 3b 74 3e 3d 6e 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 72 5b 6e 5d 2e 64 6c 3b 30 21 3d 69 26 26 28 72 5b 6e 5d 2e 66 63 3d 44 65 28 66 5b 69 5d 2b 2b 2c 69 29 29 7d 7d 2c 78 65 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ;0!=f;f--)for(e=$[f];0!=e;)n=rt[--t],n>s\|\|(a[n].dl!=f&&(At+=(f-a[n].dl)*a[n].fc,a[n].fc=f),e--)}},ge=function(r,t){var e,n,f=Array(zt+1),o=0;for(e=1;zt>=e;e++)o=o+$[e-1]<<1,f[e]=o;for(n=0;t>=n;n++){var i=r[n].dl;0!=i&&(r[n].fc=De(f[i]++,i))}},xe=function(
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 7b 76 61 72 20 72 3b 66 6f 72 28 62 65 28 4a 2c 51 2e 6d 61 78 5f 63 6f 64 65 29 2c 62 65 28 4b 2c 56 2e 6d 61 78 5f 63 6f 64 65 29 2c 78 65 28 59 29 2c 72 3d 4e 74 2d 31 3b 72 3e 3d 33 26 26 30 3d 3d 50 5b 4f 74 5b 72 5d 5d 2e 64 6c 3b 72 2d 2d 29 3b 72 65 74 75 72 6e 20 41 74 2b 3d 33 2a 28 72 2b 31 29 2b 35 2b 35 2b 34 2c 72 7d 2c 43 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3b 66 6f 72 28 58 65 28 72 2d 32 35 37 2c 35 29 2c 58 65 28 74 2d 31 2c 35 29 2c 58 65 28 65 2d 34 2c 34 29 2c 6e 3d 30 3b 65 3e 6e 3b 6e 2b 2b 29 58 65 28 50 5b 4f 74 5b 6e 5d 5d 2e 64 6c 2c 33 29 3b 70 65 28 4a 2c 72 2d 31 29 2c 70 65 28 4b 2c 74 2d 31 29 7d 2c 42 65 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 2c 6f 2c 69 2c 61 3b 69 66 28 61 Data Ascii: {var r;for(be(J,Q.max_code),be(K,V.max_code),xe(Y),r=Nt-1;r>=3&&0==P[Ot[r]].dl;r--);return At+=3*(r+1)+5+5+4,r},Ce=function(r,t,e){var n;for(Xe(r-257,5),Xe(t-1,5),Xe(e-4,4),n=0;e>n;n++)Xe(P[Ot[n]].dl,3);pe(J,r-1),pe(K,t-1)},Be=function(r){var t,o,i,a;if(a
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 29 2c 6e 75 6c 6c 3d 3d 79 3f 79 3d 77 3d 72 3a 77 3d 77 2e 6e 65 78 74 3d 72 2c 72 2e 6c 65 6e 3d 67 2d 78 2c 74 3d 30 3b 72 2e 6c 65 6e 3e 74 3b 74 2b 2b 29 72 2e 70 74 72 5b 74 5d 3d 46 74 5b 78 2b 74 5d 3b 67 3d 78 3d 30 7d 7d 2c 4e 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 65 2c 6e 3b 76 74 3d 72 2c 79 74 3d 30 2c 74 3d 3d 3d 76 6f 69 64 20 30 26 26 28 74 3d 6f 29 2c 51 74 28 74 29 3b 66 6f 72 28 76 61 72 20 66 3d 41 72 72 61 79 28 31 30 32 34 29 2c 69 3d 5b 5d 3b 28 65 3d 41 65 28 66 2c 30 2c 66 2e 6c 65 6e 67 74 68 29 29 3e 30 3b 29 7b 76 61 72 20 61 3d 41 72 72 61 79 28 65 29 3b 66 6f 72 28 6e 3d 30 3b 65 3e 6e 3b 6e 2b 2b 29 61 5b 6e 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 66 5b 6e 5d 29 3b 69 5b 69 2e Data Ascii: ),null==y?y=w=r:w=w.next=r,r.len=g-x,t=0;r.len>t;t++)r.ptr[t]=Ft[x+t];g=x=0}},Ne=function(r,t){var e,n;vt=r,yt=0,t===void 0&&(t=o),Qt(t);for(var f=Array(1024),i=[];(e=Ae(f,0,f.length))>0;){var a=Array(e);for(n=0;e>n;n++)a[n]=String.fromCharCode(f[n]);i[i.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49807	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	535	OUT	GET /uc/sf/0.1.360/js/safe.min.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:28 UTC	802	IN	HTTP/1.1 200 OK x-amz-id-2: 745iMmasT6XkIUz/TQfaH3L0WwyWV+aaImuGl4T84n5sZSQwt3bOP9iOATfVzzApyA4y1DPwhJE= x-amz-request-id: 564T8NZ0J74HHYW9 Date: Tue, 26 Mar 2024 21:44:03 GMT Last-Modified: Thu, 10 Aug 2023 17:34:40 GMT ETag: "ca6c03a0104a0556de35624aa3065b70" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 71184 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 183446 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 2f 2a 21 20 53 41 46 45 46 52 41 4d 45 20 30 2e 31 2e 33 36 30 20 c2 a9 20 32 30 32 33 2c 20 59 61 68 6f 6f 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 38 35 34 35 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 28 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 7b 7d 3a 65 29 2e 63 6c 6f 73 65 3d 7b 6e 61 6d 65 3a 22 63 6c 6f 73 65 22 2c 68 65 69 67 68 74 3a 34 38 2c 77 69 64 74 68 3a 34 38 2c 70 61 74 68 3a 22 4d 33 37 2e 39 38 20 33 34 2e 38 32 37 6c 2d 39 2e 39 2d 39 2e 39 20 39 2e 39 2d 39 2e 38 39 38 63 2e 37 38 2d 2e 37 38 32 2e 37 38 2d 32 2e 30 35 20 30 2d 32 2e 38 33 2d 2e 37 38 2d 2e 37 38 2d 32 2e 30 34 37 2d 2e 37 38 2d 32 2e 38 32 38 20 30 6c Data Ascii: /! SAFEFRAME 0.1.360 2023, Yahoo Inc. All rights reserved. /!function(){var t={8545:function(t){var e;(e=void 0===e?{}:e).close={name:"close",height:48,width:48,path:"M37.98 34.827l-9.9-9.9 9.9-9.898c.78-.782.78-2.05 0-2.83-.78-.78-2.047-.78-2.828 0l
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 3a 6e 2e 63 6f 6f 6b 69 65 73 3b 69 66 28 6e 3d 75 28 6e 29 2c 65 3d 65 7c 7c 7b 7d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 6e 2e 65 72 72 6f 72 28 5b 22 43 6f 6f 6b 69 65 3a 3a 67 65 74 20 2d 20 69 6e 76 61 6c 69 64 20 69 6e 70 75 74 22 2c 7b 6e 61 6d 65 3a 74 2c 6f 70 74 73 3a 65 7d 2c 28 6e 65 77 20 45 72 72 6f 72 29 2e 73 74 61 63 6b 5d 2e 6a 6f 69 6e 28 22 5c 6e 22 29 29 2c 6e 75 6c 6c 3b 76 61 72 20 61 3d 72 5b 74 5d 3b 72 65 74 75 72 6e 20 65 2e 6a 73 6f 6e 26 26 61 26 26 28 61 3d 69 28 61 29 29 2c 76 6f 69 64 20 30 21 3d 3d 61 3f 61 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 2c 6e 29 7b 65 3d 65 7c 7c 7b 7d 3b 76 61 72 20 72 3d 6c 28 74 2c 6e 75 6c 6c 2c 6e 29 3b 69 66 28 22 73 74 72 69 6e Data Ascii: :n.cookies;if(n=u(n),e=e\|\|{},"string"!=typeof t)return n.error(["Cookie::get - invalid input",{name:t,opts:e},(new Error).stack].join("\n")),null;var a=r[t];return e.json&&a&&(a=i(a)),void 0!==a?a:null}function p(t,e,n){e=e\|\|{};var r=l(t,null,n);if("strin
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 6f 6e 29 2c 72 2e 6a 73 6f 6e 3d 21 31 2c 64 28 74 2c 69 2c 72 29 7d 2c 74 2e 65 78 70 6f 72 74 73 2e 73 65 74 53 75 62 73 3d 64 7d 2c 38 38 36 31 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3b 74 72 79 7b 6e 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 7d 63 61 74 63 68 28 74 29 7b 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 64 69 72 26 26 63 6f 6e 73 6f 6c 65 2e 64 69 72 28 74 29 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 7b 7d 3a 65 7d 72 65 74 75 72 6e 20 6e 7d 7d 2c 38 32 32 30 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 Data Ascii: on),r.json=!1,d(t,i,r)},t.exports.setSubs=d},8861:function(t){"use strict";t.exports=function(t,e){var n;try{n=JSON.parse(t)}catch(t){console&&console.dir&&console.dir(t),n=void 0===e?{}:e}return n}},8220:function(t){"use strict";t.exports=function(t,e){v
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 74 28 6f 2e 70 61 74 68 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6f 70 74 69 6f 6e 20 70 61 74 68 20 69 73 20 69 6e 76 61 6c 69 64 22 29 3b 75 2b 3d 22 3b 20 50 61 74 68 3d 22 2b 6f 2e 70 61 74 68 7d 6f 2e 65 78 70 69 72 65 73 26 26 28 75 2b 3d 22 3b 20 45 78 70 69 72 65 73 3d 22 2b 6f 2e 65 78 70 69 72 65 73 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 29 3b 6f 2e 68 74 74 70 4f 6e 6c 79 26 26 28 75 2b 3d 22 3b 20 48 74 74 70 4f 6e 6c 79 22 29 3b 6f 2e 73 65 63 75 72 65 26 26 28 75 2b 3d 22 3b 20 53 65 63 75 72 65 22 29 3b 6f 2e 66 69 72 73 74 50 61 72 74 79 4f 6e 6c 79 26 26 28 75 2b 3d 22 3b 20 46 69 72 73 74 2d 50 61 72 74 79 2d 4f 6e 6c 79 22 29 3b 72 65 74 75 72 6e 20 75 7d 3b 76 61 72 20 6e 3d 64 65 63 6f 64 65 55 52 49 43 Data Ascii: t(o.path))throw new TypeError("option path is invalid");u+="; Path="+o.path}o.expires&&(u+="; Expires="+o.expires.toUTCString());o.httpOnly&&(u+="; HttpOnly");o.secure&&(u+="; Secure");o.firstPartyOnly&&(u+="; First-Party-Only");return u};var n=decodeURIC
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 6e 20 72 28 74 68 69 73 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 7d 2c 31 33 31 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 35 36 35 36 29 2c 6f 3d 6e 28 31 34 30 30 29 2c 69 3d 6e 28 36 32 34 34 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 61 29 7b 76 61 72 20 63 2c 75 3d 72 28 65 29 2c 73 3d 69 28 75 29 2c 66 3d 6f 28 61 2c 73 29 3b 69 66 28 74 26 26 6e 21 3d 6e 29 7b 66 6f 72 28 3b 73 3e 66 3b 29 69 66 28 28 63 3d 75 5b 66 2b 2b 5d 29 21 3d 63 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 66 6f 72 28 3b 73 3e 66 3b 66 2b 2b 29 69 66 28 28 74 7c 7c 66 20 69 6e 20 75 29 26 Data Ascii: n r(this,t,arguments.length>1?arguments[1]:void 0)}},1318:function(t,e,n){var r=n(5656),o=n(1400),i=n(6244),a=function(t){return function(e,n,a){var c,u=r(e),s=i(u),f=o(a,s);if(t&&n!=n){for(;s>f;)if((c=u[f++])!=c)return!0}else for(;s>f;f++)if((t\|\|f in u)&
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 39 36 36 32 29 2c 6f 3d 6e 28 37 39 30 38 29 2c 69 3d 6e 28 38 33 36 31 29 2c 61 3d 6e 28 36 32 34 34 29 2c 63 3d 54 79 70 65 45 72 72 6f 72 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 75 2c 73 29 7b 72 28 6e 29 3b 76 61 72 20 66 3d 6f 28 65 29 2c 6c 3d 69 28 66 29 2c 70 3d 61 28 66 29 2c 64 3d 74 3f 70 2d 31 3a 30 2c 76 3d 74 3f 2d 31 3a 31 3b 69 66 28 75 3c 32 29 66 6f 72 28 3b 3b 29 7b 69 66 28 64 20 69 6e 20 6c 29 7b 73 3d 6c 5b 64 5d 2c 64 2b 3d 76 3b 62 72 65 61 6b 7d 69 66 28 64 2b 3d 76 2c 74 3f 64 3c 30 3a 70 3c 3d 64 29 74 68 72 6f 77 20 63 28 22 52 65 64 75 63 65 20 6f 66 20 65 6d 70 74 79 20 61 72 72 61 79 20 77 69 Data Ascii: unction(t,e,n){var r=n(9662),o=n(7908),i=n(8361),a=n(6244),c=TypeError,u=function(t){return function(e,n,u,s){r(n);var f=o(e),l=i(f),p=a(f),d=t?p-1:0,v=t?-1:1;if(u<2)for(;;){if(d in l){s=l[d],d+=v;break}if(d+=v,t?d<0:p<=d)throw c("Reduce of empty array wi
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 75 6d 65 6e 74 73 22 3d 3d 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 7d 28 29 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 3f 69 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 2c 72 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 3f 22 55 6e 64 65 66 69 6e 65 64 22 3a 6e 75 6c 6c 3d 3d 3d 74 3f 22 4e 75 6c 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 63 61 74 63 68 28 74 29 7b 7d 7d 28 65 3d 63 28 74 29 2c 61 29 29 3f 6e 3a 75 3f 69 28 65 29 3a 22 4f 62 6a 65 63 74 22 3d 3d 28 72 3d 69 28 65 29 29 26 26 6f 28 65 2e 63 61 6c 6c 65 65 29 3f 22 41 72 67 75 6d 65 6e 74 73 22 3a 72 7d 7d 2c 39 Data Ascii: uments"==i(function(){return arguments}());t.exports=r?i:function(t){var e,n,r;return void 0===t?"Undefined":null===t?"Null":"string"==typeof(n=function(t,e){try{return t[e]}catch(t){}}(e=c(t),a))?n:u?i(e):"Object"==(r=i(e))&&o(e.callee)?"Arguments":r}},9
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 74 61 62 6c 65 3a 21 63 2e 6e 6f 6e 57 72 69 74 61 62 6c 65 7d 29 7d 72 65 74 75 72 6e 20 74 7d 7d 2c 33 30 37 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 38 35 34 29 2c 6f 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 72 79 7b 6f 28 72 2c 74 2c 7b 76 61 6c 75 65 3a 65 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 7d 63 61 74 63 68 28 6e 29 7b 72 5b 74 5d 3d 65 7d 72 65 74 75 72 6e 20 65 7d 7d 2c 39 37 38 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 32 39 33 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: table:!c.nonWritable})}return t}},3072:function(t,e,n){var r=n(7854),o=Object.defineProperty;t.exports=function(t,e){try{o(r,t,{value:e,configurable:!0,writable:!0})}catch(n){r[t]=e}return e}},9781:function(t,e,n){var r=n(7293);t.exports=!r((function(){re
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 72 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 72 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 3b 74 2e 65 78 70 6f 72 74 73 3d 6f 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3f 76 6f 69 64 20 30 3a 6f 7d 2c 37 38 37 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 33 38 32 33 29 2c 6f 3d 6e 28 35 32 36 38 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 72 26 26 21 6f 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 7d 2c 33 38 32 33 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 44 65 6e 6f 26 26 44 65 6e 6f 26 26 22 6f 62 6a Data Ascii: r.constructor&&r.constructor.prototype;t.exports=o===Object.prototype?void 0:o},7871:function(t,e,n){var r=n(3823),o=n(5268);t.exports=!r&&!o&&"object"==typeof window&&"object"==typeof document},3823:function(t){t.exports="object"==typeof Deno&&Deno&&"obj
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 74 61 74 3b 69 66 28 6e 3d 6d 3f 72 3a 68 3f 72 5b 76 5d 7c 7c 63 28 76 2c 7b 7d 29 3a 28 72 5b 76 5d 7c 7c 7b 7d 29 2e 70 72 6f 74 6f 74 79 70 65 29 66 6f 72 28 66 20 69 6e 20 65 29 7b 69 66 28 70 3d 65 5b 66 5d 2c 6c 3d 74 2e 64 6f 6e 74 43 61 6c 6c 47 65 74 53 65 74 3f 28 64 3d 6f 28 6e 2c 66 29 29 26 26 64 2e 76 61 6c 75 65 3a 6e 5b 66 5d 2c 21 73 28 6d 3f 66 3a 76 2b 28 68 3f 22 2e 22 3a 22 23 22 29 2b 66 2c 74 2e 66 6f 72 63 65 64 29 26 26 76 6f 69 64 20 30 21 3d 3d 6c 29 7b 69 66 28 74 79 70 65 6f 66 20 70 3d 3d 74 79 70 65 6f 66 20 6c 29 63 6f 6e 74 69 6e 75 65 3b 75 28 70 2c 6c 29 7d 28 74 2e 73 68 61 6d 7c 7c 6c 26 26 6c 2e 73 68 61 6d 29 26 26 69 28 70 2c 22 73 68 61 6d 22 2c 21 30 29 2c 61 28 6e 2c 66 2c 70 2c 74 29 7d 7d 7d 2c 37 32 39 33 3a Data Ascii: tat;if(n=m?r:h?r[v]\|\|c(v,{}):(r[v]\|\|{}).prototype)for(f in e){if(p=e[f],l=t.dontCallGetSet?(d=o(n,f))&&d.value:n[f],!s(m?f:v+(h?".":"#")+f,t.forced)&&void 0!==l){if(typeof p==typeof l)continue;u(p,l)}(t.sham\|\|l&&l.sham)&&i(p,"sham",!0),a(n,f,p,t)}}},7293:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49805	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	549	OUT	GET /nn/lib/metro/g/myy/advertisement_0.0.19.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:28 UTC	809	IN	HTTP/1.1 200 OK x-amz-id-2: VRZX1mkOY8riEyXWisTHDOoiYICO7YaFAgwz8PgmKNG1F09EBo2BTv+MKlFF1WPS60Qox0YYLMw= x-amz-request-id: PMYYPQTV8MRVQXFE Date: Thu, 28 Mar 2024 22:14:53 GMT Last-Modified: Tue, 19 May 2020 03:33:21 GMT ETag: "ca243b22264dca7a4a899c51cc2dc963" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public, immutable Accept-Ranges: bytes Content-Type: application/x-javascript Server: ATS Content-Length: 158 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:28 UTC	158	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 64 69 76 20 69 64 3d 22 61 64 76 65 72 74 69 73 65 6d 65 6e 74 2d 74 68 61 6d 62 61 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 44 69 73 70 6c 61 79 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 3c 2f 64 69 76 3e 27 29 3b 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 30 2c 20 59 61 68 6f 6f 21 20 49 6e 63 2e 20 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 0a Data Ascii: document.write('<div id="advertisement-thamba" style="display:none">Display Advertisement</div>');/* Copyright (c) 2020, Yahoo! Inc. All rights reserved. */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49808	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	540	OUT	GET /aaq/wf/wf-toggle-1.15.4-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:28 UTC	853	IN	HTTP/1.1 200 OK x-amz-id-2: G3n7EkPtja68hIXTBg2LdtdOCNP0R3KtXkeBprldhbPqC9A+4XXpuhdOKosLQxkw1cFHTwZxQIA= x-amz-request-id: 1ERRVKBYA5VEWH35 Date: Thu, 28 Mar 2024 18:55:54 GMT Last-Modified: Wed, 20 Apr 2022 09:12:23 GMT ETag: "9ec69a2055c595f415eade096a476b0d" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: HE26GDjTNsmXBUPJeKnrarkIBLKe8tee Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 12433 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 20735 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 74 6f 67 67 6c 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 74 6f 67 67 6c 65 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-toggle",[],t):"object"==typeof exports?exports["wafer-toggle"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 Data Ascii: prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 6e 29 26 26 28 65 5b 6e 5d 3d 72 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e Data Ascii: s[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},f=function(){function e(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 28 6b 2b 22 74 6f 67 67 6c 65 2d 63 6c 61 73 73 22 29 7c 7c 22 22 2c 75 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6b 2b 22 74 6f 67 67 6c 65 2d 70 72 65 76 65 6e 74 2d 62 72 6f 77 73 65 72 2d 64 65 66 61 75 6c 74 2d 62 65 68 61 76 69 6f 72 22 29 2c 6c 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6b 2b 22 74 6f 67 67 6c 65 2d 70 72 65 76 65 6e 74 2d 73 63 72 6f 6c 6c 22 29 2c 66 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6b 2b 22 73 79 6e 63 2d 64 65 6c 61 79 22 29 2c 64 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6b 2b 22 74 6f 67 67 6c 65 2d 74 61 72 67 65 74 22 29 2c 76 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6b 2b 22 74 6f 67 67 6c 65 2d 62 6f 75 6e 64 61 72 79 22 29 2c 68 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6b 2b Data Ascii: (k+"toggle-class")\|\|"",u=e.getAttribute(k+"toggle-prevent-browser-default-behavior"),l=e.getAttribute(k+"toggle-prevent-scroll"),f=e.getAttribute(k+"sync-delay"),d=e.getAttribute(k+"toggle-target"),v=e.getAttribute(k+"toggle-boundary"),h=e.getAttribute(k+
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 26 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 22 2c 6f 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 65 2e 65 6c 65 6d 2c 72 3d 65 2e 65 76 65 6e 74 73 3b 69 66 28 30 21 3d 3d 72 2e 73 69 7a 65 29 7b 76 61 72 20 6e 3d 21 30 2c 6f 3d 21 31 2c 69 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 61 2c 73 3d 72 2e 6b 65 79 73 28 29 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 6e 3d 28 61 3d 73 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 6e 3d 21 30 29 7b 76 61 72 20 75 3d 61 2e 76 61 6c 75 65 2c 6c 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e Data Ascii: &r.setAttribute("aria-controls",o)}},{key:"addEventListeners",value:function(){var e=this._util,t=e.elem,r=e.events;if(0!==r.size){var n=!0,o=!1,i=void 0;try{for(var a,s=r.keys()[Symbol.iterator]();!(n=(a=s.next()).done);n=!0){var u=a.value,l=this._state.
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 6e 4c 6f 61 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 6f 63 65 73 73 54 61 72 67 65 74 73 28 22 6f 6e 4c 6f 61 64 22 29 7d 7d 2c 7b 6b 65 79 3a 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 6f 63 65 73 73 54 61 72 67 65 74 73 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 29 7d 7d 2c 7b 6b 65 79 3a 22 6d 6f 75 73 65 45 6e 74 65 72 44 65 6c 61 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 63 6c 69 63 6b 41 6e 64 4d 6f 75 73 65 45 78 69 74 54 69 6d 65 6f 75 74 29 7d 7d 2c 7b 6b 65 79 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: nLoad",value:function(){this.processTargets("onLoad")}},{key:"mouseenter",value:function(){this.processTargets("mouseenter")}},{key:"mouseEnterDelay",value:function(){clearTimeout(this._state.clickAndMouseExitTimeout)}},{key:"mouseleave",value:function(){
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 74 68 69 73 2e 73 77 69 70 65 72 69 67 68 74 28 29 7d 7d 2c 7b 6b 65 79 3a 22 73 77 69 70 65 6c 65 66 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 6f 63 65 73 73 54 61 72 67 65 74 73 28 22 73 77 69 70 65 6c 65 66 74 22 29 7d 7d 2c 7b 6b 65 79 3a 22 73 77 69 70 65 72 69 67 68 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 6f 63 65 73 73 54 61 72 67 65 74 73 28 22 73 77 69 70 65 72 69 67 68 74 22 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6c 65 61 72 44 72 61 67 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 75 74 69 6c 2e 64 72 61 67 3d 7b 65 6e 64 58 3a 30 2c 65 6e 64 59 3a 30 2c 6f 76 65 72 61 6c 6c 44 69 72 65 63 74 69 6f 6e 58 3a 30 2c 73 74 61 72 74 58 3a 30 2c 73 Data Ascii: this.swiperight()}},{key:"swipeleft",value:function(){this.processTargets("swipeleft")}},{key:"swiperight",value:function(){this.processTargets("swiperight")}},{key:"clearDrag",value:function(){this._util.drag={endX:0,endY:0,overallDirectionX:0,startX:0,s
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 68 69 73 2e 67 65 74 54 61 72 67 65 74 73 28 66 2c 61 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6e 3d 74 2e 5f 75 74 69 6c 2e 66 6f 63 75 73 54 61 72 67 65 74 7c 7c 42 6f 6f 6c 65 61 6e 28 63 26 26 75 29 3f 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 75 29 7c 7c 72 3a 72 3b 74 2e 5f 75 74 69 6c 2e 66 6f 63 75 73 54 61 72 67 65 74 3d 74 2e 5f 75 74 69 6c 2e 66 6f 63 75 73 54 61 72 67 65 74 7c 7c 6e 2c 64 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 6f 3d 6c 28 6e 2c 32 29 2c 69 3d 6f 5b 30 5d 2c 75 3d 6f 5b 31 5d 2c 63 3d 72 2e 63 6c 61 73 73 4c 69 73 74 2c 66 3d 69 2e 72 65 70 6c 61 63 65 28 22 57 69 74 68 53 79 6e 63 55 49 44 65 6c 61 79 22 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 22 57 Data Ascii: his.getTargets(f,a).forEach(function(r){var n=t._util.focusTarget\|\|Boolean(c&&u)?r.querySelector(u)\|\|r:r;t._util.focusTarget=t._util.focusTarget\|\|n,d.forEach(function(n){var o=l(n,2),i=o[0],u=o[1],c=r.classList,f=i.replace("WithSyncUIDelay","").replace("W
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 28 22 73 74 61 74 65 43 68 61 6e 67 65 22 29 26 26 28 22 31 22 3d 3d 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 6b 65 79 3f 72 2e 67 65 74 28 22 73 74 61 74 65 43 68 61 6e 67 65 22 29 5b 30 5d 5b 30 5d 3d 22 61 64 64 22 3a 72 2e 67 65 74 28 22 73 74 61 74 65 43 68 61 6e 67 65 22 29 5b 30 5d 5b 30 5d 3d 22 72 65 6d 6f 76 65 22 2c 74 68 69 73 2e 70 72 6f 63 65 73 73 54 61 72 67 65 74 73 28 22 73 74 61 74 65 43 68 61 6e 67 65 22 29 29 7d 7d 2c 7b 6b 65 79 3a 22 64 65 73 74 72 6f 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 2c 64 28 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2e Data Ascii: ("stateChange")&&("1"===this._util.key?r.get("stateChange")[0][0]="add":r.get("stateChange")[0][0]="remove",this.processTargets("stateChange"))}},{key:"destroy",value:function(){this.removeEventListeners(),d(t.prototype.__proto__\|\|Object.getPrototypeOf(t.
2024-03-29 00:41:28 UTC	733	IN	Data Raw: 75 29 7d 29 2c 75 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 2c 75 7d 72 65 74 75 72 6e 20 75 28 74 2c 65 29 2c 53 28 74 2c 5b 7b 6b 65 79 3a 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 50 28 64 6f 63 75 6d 65 6e 74 2c 22 6b 65 79 64 6f 77 6e 22 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 4b 65 79 44 6f 77 6e 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 68 61 6e 64 6c 65 4b 65 79 44 6f 77 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 77 69 74 63 68 28 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 2c 65 2e 6b 65 79 43 6f 64 65 29 7b 63 61 73 65 20 32 37 3a 76 61 72 20 74 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 2c 72 3d Data Ascii: u)}),u.addEventListeners(),u}return u(t,e),S(t,[{key:"addEventListeners",value:function(){P(document,"keydown",this._handleKeyDown)}},{key:"_handleKeyDown",value:function(e){switch(e=e\|\|window.event,e.keyCode){case 27:var t=this._state.elementInstances,r=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49810	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	530	OUT	GET /uu/api/res/1.2/0zC5NXzRCqBOHX.B5QV02Q--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/6cfa7630-ed0f-11ee-bcd5-e9299db72d6c.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:28 UTC	1287	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 476109948304187328152412711835384141309,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="6cfa7630-ed0f-11ee-bcd5-e9299db72d6c.webp" Edge-Cache-Tag: 476109948304187328152412711835384141309,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "e38a51cad346f9c073c288cb0fb7a91b" Expiration: expiry-date="Wed, 25 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 28 Mar 2024 14:31:52 GMT Server: ATS Surrogate-Reporting: width=356,height=180,bytes=6184,owidth=3332,oheight=1876,obytes=1068000,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 28 Mar 2024 14:48:12 GMT X-Served-By: cache-lga21969-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711637292.238854,VS0,VE1 Age: 35596 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-lga21969-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 18076 ATS-Carp-Promotion: 1
2024-03-29 00:41:28 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 34 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 24 61 70 70 6c 04 00 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 df 00 0a 00 0e 00 0d 00 08 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 61 70 70 6c e5 bb 0e 98 67 bd 46 cd 4b be 44 6e bd 1b 75 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 65 63 70 72 74 00 00 01 64 00 00 00 23 77 74 70 74 00 00 01 88 00 00 00 14 72 58 59 5a 00 00 01 9c 00 00 00 14 67 58 59 5a 00 00 01 b0 00 00 00 14 62 58 59 5a 00 00 01 c4 00 00 00 14 72 54 52 43 00 00 01 d8 00 00 00 20 63 Data Ascii: JFIF4ICC_PROFILE$applmntrRGB XYZ 9acspAPPLAPPL-applgFKDnudescecprtd#wtptrXYZgXYZbXYZrTRC c
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 60 ba 07 2a 77 29 1f 9f b5 5a f0 b9 e4 27 e5 e0 b1 a5 b3 e2 3b 42 bc 24 b1 73 5b 91 65 30 a5 a3 c3 6b 99 e0 a5 24 12 53 cd ca 3c dd 3b 63 04 6f 9c 80 ef f0 19 df 23 3e 5e bd 0b da 7e 21 34 3d d6 6c 58 96 f4 cb 59 90 a2 16 b7 12 10 96 46 d8 27 27 27 62 09 03 a6 45 21 f8 8c f1 fa 12 f6 b0 b6 74 7f 0f e4 47 92 8e 78 d2 1a 75 24 24 e5 0a cf ad 63 50 71 74 35 b4 d1 77 5a 5c 4a 23 0c f7 a7 c5 70 67 97 63 c3 72 8e 01 19 fe 74 45 10 8d 5a 63 cc 6d 48 3b f5 de b9 fb 06 fd 7e 8e 7a d7 96 34 12 e9 42 09 14 7a f2 a1 b2 54 55 8f c6 44 75 72 84 e0 8a e9 29 26 0d d0 dc ba 05 48 aa 00 45 e7 c6 31 b5 1a 20 d1 c7 46 76 c5 59 4c 49 6e 8c 51 44 0a b1 84 95 67 b5 11 63 25 a0 d5 25 64 10 75 a5 1e 82 8c 8c 68 ec 67 d5 fb 95 42 df 62 48 88 f0 39 29 a2 45 0f 99 49 42 46 45 11 04 Data Ascii: `*w)Z';B$s[e0k$S<;co#>^~!4=lXYF'''bE!tGxu$$cPqt5wZ\J#pgcrtEZcmH;~z4BzTUDur)&HE1 FvYLInQDgc%%duhgBbH9)EIBFE
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 5c 6d 85 2b 21 28 48 e8 13 d4 ed 91 9d 87 71 45 7d 19 2f db 96 11 7f 47 88 4c 29 88 2d b9 18 b8 82 90 ef 82 79 3e a5 45 27 3e 98 18 20 01 8f 52 c4 90 32 44 71 36 5b a4 09 ed b5 72 b6 30 b6 5e 58 43 6b f1 42 d0 e2 bf 84 28 74 5f 7e 53 be 33 d0 0c 1b 02 89 78 b3 3a dc 76 d1 01 45 50 a5 25 4a 61 24 63 c1 90 94 95 29 24 64 a9 2a c6 31 8d f9 b1 d4 1d e1 61 5b 5d a1 c9 ad 39 18 c7 69 0b 46 03 81 04 f2 c8 07 2a 41 c0 20 0c 84 9f 30 00 ef 8e b9 49 b0 5a a1 39 4c bd 6d 7f ed 56 1a 52 e6 5a 9b 22 43 47 fe d5 09 25 68 c8 e9 91 cb cb b0 dc 2c 2b d2 a8 a2 d9 b7 c4 6b 55 c1 fb 01 c1 cf 28 c0 7e e9 05 d3 ba 82 5b 56 1d fa 90 85 39 84 f5 c2 c7 5a 81 91 2b 8c 09 2b ba b8 ea 22 78 6e 44 6d 5e 23 41 1c a4 92 84 00 06 fb f9 92 0f e6 4f 7a 96 82 f5 27 9a 1a 43 96 8b 1f 2b b6 Data Ascii: \m+!(HqE}/GL)-y>E'> R2Dq6[r0^XCkB(t_~S3x:vEP%Ja$c)$d1a[]9iFA 0IZ9LmVRZ"CG%h,+kU(~[V9Z++"xnDm^#AOz'C+
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 57 ec 17 f4 a1 fb 64 65 55 7b ff 00 ac 9d fa d3 10 27 67 70 fd c8 68 8c da 12 37 02 ba 58 15 98 32 aa 26 e5 f3 e2 04 b7 dc ef 5b a2 8c cd d9 17 e2 c3 be 1e 93 7c ff 00 95 5b fe 55 af 0a 52 90 9c d2 69 1c 0b 72 5a 93 3d ed cf e2 3f d6 bd 36 3d 2a 47 1a 7b 4e f8 63 72 f2 ff 00 88 fe b4 7f 0c 0f 94 ff 00 b1 35 4a 5f 4d ff 00 5a af 82 bf a2 fe 53 fe c4 d7 29 44 fe 23 fa d5 af 1c bf a2 d6 d3 fe c5 a3 c8 5a 96 13 cc ad fd eb 36 c6 9c 52 0e 3b 2e 44 b6 c6 db 8b 67 1c c7 af ad 78 af 29 05 06 d1 da d5 93 68 35 f2 ab 08 ea 77 f7 af 3d 46 db 13 31 16 7f 7c 8f ce 87 d4 96 6b f2 0a ea 5e 5f eb 56 95 12 c4 60 c3 52 2e c0 97 56 7f 3a 27 12 c9 1f 12 78 8f 1f 85 1c 2c bc eb 37 16 90 fc 38 c5 30 d2 48 1c f2 57 e5 6c 7b 8e 63 93 ec 0d 2f 57 5d e6 ce 04 9d 23 e5 54 db 83 f7 Data Ascii: WdeU{'gph7X2&[\|[URirZ=?6=*G{Ncr5J_MZS)D#Z6R;.Dgx)h5w=F1\|k^_V`R.V:'x,780HWl{c/W]#T
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 91 5f bc 67 d7 e8 9e 37 1f c3 ed 5c 4d a4 75 30 36 65 e0 0b 67 23 35 cc a3 7a e8 83 6a 38 49 59 70 a5 be b9 ad b8 1d 0b 91 5a df 61 73 24 f9 3f 0e d5 ba 2c 54 88 3d ca 11 6f 39 4d 6b 80 96 47 2e 31 81 41 c0 ad 08 a6 01 75 07 b6 d5 62 9b 69 88 14 9c ee 68 fd 4b ec f7 2f bd 4f 52 e8 c7 2f a9 ab 51 a2 9f 06 85 19 ef 57 17 45 0b b2 39 90 15 eb 4c aa 25 9a ba 90 30 33 4b 91 04 b0 68 48 65 b0 44 86 cf 60 a1 50 85 e9 c3 a5 f2 c7 46 06 73 50 32 7c f6 54 d2 86 3a d5 90 ad ef 4d 7f 88 bb e5 ef eb 47 64 3b 1b 43 8e 58 ed ac 76 15 d5 c0 a8 e5 cb 92 59 21 d0 56 94 e7 7c 66 b5 b6 27 d6 99 11 e2 80 ce 94 91 bf ee 9f e9 5b f4 7f 9a 46 5d bf e2 ce 2a 9e d7 f7 d7 87 f9 cf f5 af a2 c5 70 8f 2d 3e 64 37 f0 7f cb 57 40 3e 0f 16 73 fb b5 1a a2 ac d4 c6 07 f7 68 68 96 87 50 a3 Data Ascii: _g7\Mu06eg#5zj8IYpZas$?,T=o9MkG.1AubihK/OR/QWE9L%03KhHeD`PFsP2\|T:MGd;CXvY!V\|f'[F]*p->d7W@>shhP
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 81 e4 1e c9 1b 03 de b9 9b 2f f2 4e ce 0a e0 97 c9 40 1d 6b 93 b3 c1 d1 d6 e8 60 fa 30 3a 57 35 73 66 e4 45 ef 2d 6c af ad 32 2c 84 26 f6 c9 51 3c a3 a5 6a c6 29 90 9b 8c 72 a2 a0 a4 f5 15 bf 1f 42 d9 19 b8 42 49 e6 05 34 e8 8b 60 09 10 80 ce 12 6b 42 16 fb 03 4d 82 50 4a d0 9d ba 91 4e 88 32 e8 1c b6 ca 71 8a 34 ac 53 b1 17 52 76 a9 44 e4 49 49 26 a5 15 6c 73 19 07 c2 1e 5f e7 53 d4 be 0f 3a d8 24 79 71 f9 d5 55 16 8d 7c 3c 50 b5 43 22 ec c2 51 97 53 b6 d5 45 97 67 0d 13 cb 15 1b 76 a5 35 c1 76 58 0f 20 a8 0c d2 c2 2b 8b db 7f e2 4e f5 eb eb 56 43 a7 b4 a7 de c2 42 09 ae dc 4e 6d 07 b6 69 ce 5c 53 21 d9 11 1e e2 22 1d 91 60 53 6d 8c e4 2b 3f a5 6e d2 95 66 4c cb b5 1b 89 ca 73 19 76 24 c7 a3 ba 9c 29 2a 26 be 9b ae d4 a2 8f 21 b5 1f 57 62 7c bc db e6 9a Data Ascii: /N@k`0:W5sfE-l2,&Q<j)rBBI4`kBMPJN2q4SRvDII&ls_S:$yqU\|<PC"QSEgv5vX +NVCBNmi\S!"`Sm+?nfLsv$)*&!Wb\|
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: b5 05 c9 f6 19 49 52 a3 aa 6b e5 5f 5e 55 36 83 8e bb ef d2 96 e3 4c 38 b7 45 cd c1 de 21 dd ae f7 16 ac 77 79 7c ae 28 72 b7 e3 2b 25 47 d3 3b 66 b3 e5 54 74 70 da 5c 97 36 a6 b2 c9 45 9e 41 4f 39 5a 93 c8 0a 50 56 42 4f 50 00 dc 92 36 1e f4 50 74 39 b2 a2 e2 a7 0a 19 bf 68 46 e3 c2 90 a8 f7 04 3c 93 f2 cf 23 01 b4 02 08 23 27 75 6d dc ef 93 5a 62 ce 3e d6 b3 93 b1 8f 0b 78 35 64 12 59 bb 8b 79 87 71 8c 90 da 9d 8e 54 94 a9 27 39 46 f8 0b 46 c3 b6 fe dd c2 6d 84 e3 fa 68 ea 5b 0a 79 a2 47 ff 00 c2 49 fe 55 c2 cf fc e8 e5 e4 55 26 3d b8 27 0c 13 d2 b1 6c a1 fa c0 07 5c f2 f4 ae 65 72 74 e3 d0 22 e1 f8 c9 a3 8b a0 ab ec 8c dd 58 04 29 7c bd 6b 44 05 34 42 ee 2c e5 7f 87 f9 d6 c8 3f a0 5a a2 31 70 8f 92 4f 2d 69 83 16 d5 00 a5 b2 06 76 a7 46 42 d8 2a 5b 3e Data Ascii: IRk_^U6L8E!wy\|(r+%G;fTtp\6EAO9ZPVBOP6Pt9hF<##'umZb>x5dYyqT'9FFmh[yGIUU&='l\ert"X)\|kD4B,?Z1pO-ivFB*[>
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: a9 b4 b6 30 50 32 35 87 46 eb 3d 54 f4 7b 24 6e 54 36 c7 2b 39 6f 91 3e 38 ea 4e ff 00 bb b7 d4 28 74 a7 c1 d0 8d 94 a4 44 21 87 6c d2 26 59 dd 29 71 6c ba 8d c1 f3 14 04 80 90 7f 30 aa d3 76 ac e6 28 24 c9 0c 19 4d a9 81 c9 d0 56 59 72 cd 51 54 89 e6 80 d4 22 1d c0 34 b3 ba b1 8f ca 95 ec c2 ab 45 cd 77 b0 c4 d4 f0 9b b8 45 6d 91 21 09 39 46 71 e2 03 ff 00 a6 28 fd 8a 51 1c 58 34 94 54 29 6e 3d 68 69 e7 11 8c 15 fe 7b e3 d7 df e9 57 ec ca 5c 05 ae 76 57 e5 2c 1f 0c 21 b4 ee 94 0e 89 47 75 7e 99 1f 9d 03 61 c1 51 48 ea 07 4a 5c 75 82 72 39 ce 07 a5 29 db 34 a0 ff 00 0d 6f 2b 66 4a ed 6e 36 b7 03 c4 06 b1 fb be a2 a9 44 bb 2c db 1c cf 02 6b b0 f3 e4 ce 40 35 3a 29 c4 23 7e 9e 1b 89 84 ab 93 a8 a9 ee 12 82 1f e8 79 08 5d 82 13 ce ab 0a 58 73 24 ff 00 e2 2a Data Ascii: 0P25F=T{$nT6+9o>8N(tD!l&Y)ql0v($MVYrQT"4EwEm!9Fq(QX4T)n=hi{W\vW,!Gu~aQHJ\ur9)4o+fJn6D,k@5:)#~y]Xs$*
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 72 32 5d 29 69 3d b1 9d 85 39 2f 54 37 1c 3d 99 63 58 74 a4 08 6c b4 d2 59 05 78 c9 c8 a4 b6 6d 8c 09 64 1d 1b 11 e5 27 9e 3a 09 3b f4 a9 6c 62 83 7d 12 2b 77 0e 60 25 48 7b c1 49 eb b7 27 ff 00 ed 57 b3 43 a1 ae d9 28 8d 61 6a 13 61 28 69 18 f4 03 a5 58 e5 af 40 db d5 a1 a9 ad a8 14 27 f4 a1 ba 15 2d 76 c1 9a 4e 7c ed 3b 78 4c 65 b8 43 4a 3e 42 68 24 ad 1c cd 9d 6f 5e 4e 9f d3 77 64 5d ed 6d 48 0a ca c2 40 57 d6 b1 e5 8d 72 61 71 f5 41 5a 48 23 69 9f b0 55 42 00 98 59 4c 8c e7 bd 13 b2 d3 a2 e0 d0 e0 2d a1 90 08 20 02 0f d2 95 20 d1 28 5d 82 ce cb 2e 96 ed cc 20 2d 05 2a e4 40 04 e7 de 97 2f d2 36 0b 9b 39 87 89 fc 3f d5 7a 1a e7 3f 50 69 7b 53 d7 bb 3e 54 f1 8d 15 69 f9 88 a3 af 28 49 fc 49 f4 df 23 18 3b 6e 36 6b 6e 45 70 ce b2 d9 6d 1c d5 ab f8 85 7a Data Ascii: r2])i=9/T7=cXtlYxmd':;lb}+w`%H{I'WC(aja(iX@'-vN\|;xLeCJ>Bh$o^Nwd]mH@WraqAZH#iUBYL- (]. -*@/69?z?Pi{S>Ti(II#;n6knEpmz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49811	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	530	OUT	GET /uu/api/res/1.2/tXCn99NsQ3wJ0BycVro10Q--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/fbab62a0-ed4a-11ee-bdf3-f469c68a66f4.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:28 UTC	1282	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 217197692562078129425292227957531936545,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="fbab62a0-ed4a-11ee-bdf3-f469c68a66f4.webp" Edge-Cache-Tag: 217197692562078129425292227957531936545,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "74f0368647e498b5482e2d4b6cd5d04f" Expiration: expiry-date="Wed, 25 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 28 Mar 2024 21:35:29 GMT Server: ATS Surrogate-Reporting: width=356,height=180,bytes=9944,owidth=5875,oheight=3308,obytes=2454337,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Fri, 29 Mar 2024 00:12:45 GMT X-Served-By: cache-lga21926-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711671165.101445,VS0,VE1 Age: 1723 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-lga21926-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 21412 Connection: close
2024-03-29 00:41:28 UTC	178	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 cf 00 06 00 03 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF@ICC_PROFILE0ADBEmntrRGB XYZ acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: c4 b1 7c 50 1a 86 91 14 34 66 de 38 0b c6 c1 c0 20 f3 c2 22 c0 44 ee b2 14 97 e5 8b 40 bd b2 9e 5f ae 14 b4 b8 37 c4 47 70 14 59 51 be 07 56 b7 81 be 02 f8 0a 60 26 03 ae da 7a 62 4c d0 f3 34 1c 4f 5d 53 55 51 4f 3e 5a ce b4 e4 86 92 1b b2 82 3d 79 83 e3 85 25 b6 28 73 5a 2a f5 d5 4d 50 8e 7a a8 6e f0 f5 1c f1 a8 c6 99 3b 85 2d 26 ab e2 5d b4 4a aa 9d e3 7f 79 a7 d8 8f 88 78 e2 03 46 12 aa 30 ee 9e 82 f8 50 b8 16 eb 8c 8a 45 53 da 38 4d 16 bf 5b e3 5e 01 81 be 11 36 15 ab a5 d7 fb d8 87 78 73 1e 38 0e 53 ca 27 46 16 b1 16 be 2c 45 ab 93 40 25 5b 1f 91 c6 d4 38 2a 2e 7b 29 47 2f b0 eb 80 71 51 77 b0 b6 39 5b 36 42 a2 27 33 f6 b1 2e e2 c4 e2 a8 89 50 1d 43 11 be 05 d3 4f 15 13 01 30 13 01 4c 04 c0 4c 04 c0 5f 00 ae 64 1b dd 59 d4 5c a1 0d 6f 1b 1b e0 cc 87 Data Ascii: \|P4f8 "D@_7GpYQV`&zbL4O]SUQO>Z=y%(sZMPzn;-&]JyxF0PES8M[^6xs8S'F,E@%[8.{)G/qQw9[6B'3.PCO0LL_dY\o
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 02 66 51 07 12 b1 b2 a7 33 80 73 5f 96 09 66 8d 4c 6b f1 6d 8c d1 48 6a 00 e9 85 14 af bc c6 3e 3d b0 a2 9c f7 91 f9 7e f8 51 4e f6 ff 00 c9 f7 c2 8a 4e df f9 3e f8 53 33 34 a7 6f fc 9f 7c 4e 29 6a 35 42 1f 83 bd 6c 58 8a 3c 92 a8 87 de 0b cd 2b 5d a3 f8 76 e5 7e 7f a6 35 11 69 3d 97 8a b2 55 45 56 b3 5b 91 38 d4 42 5c b2 48 59 25 0a c3 78 d4 ad ff 00 cc 71 b8 8a 53 15 c9 23 01 d9 a9 37 52 a4 df 7b 5d 48 bf d3 18 07 a5 97 dd 75 f6 2b a7 b4 37 3b e2 f9 84 89 68 89 e4 b0 2f bd f9 63 34 dc 4a dd b8 36 ba db e7 8e 7c 56 3b bb da e9 fe 1f be 1c 56 8a 66 19 8c 94 90 19 d6 3b e9 e9 7e 7b 81 fd 71 62 29 2e 9f 31 a8 a9 8a aa a9 aa 66 75 62 d7 25 42 d8 13 62 07 d2 f8 eb 8c 29 48 6a 0c b3 c3 34 2a 21 bb 08 5a db 92 01 03 63 d3 9e 37 18 a4 cd 29 5c d5 72 d4 15 8a 69 Data Ascii: fQ3s_fLkmHj>=~QNN>S34o\|N)j5BlX<+]v~5i=UEV[8B\HY%xqS#7R{]Hu+7;h/c4J6\|V;Vf;~{qb).1fub%Bb)Hj4*!Zc7)\ri
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 4e c7 33 05 a0 2c 11 27 1f 13 1b 13 72 3a f2 e9 80 d7 59 e1 a8 45 92 09 03 a1 17 0c 39 11 80 ac ed ad 3d 0e 02 e9 25 85 ad 80 ba 3e b7 09 6e 7d 70 6d 12 e5 d5 3f 35 fe c2 f8 00 cc 89 32 14 7d 5b f2 b1 b6 32 d3 b5 2b fb c6 5e 5b 8c 05 ea 26 22 56 00 60 2e 5a dd 31 a6 25 03 5f a6 0e 73 21 6a 1f 97 ef 82 a6 a1 f9 7e f8 09 ab cb 05 4b f9 60 2b ac 7e 51 f4 c0 4e d2 35 f8 c8 1e 18 05 d4 13 a8 df 7d 44 5f d0 db 1a 86 64 b2 d5 53 35 32 ba 54 46 74 f8 b0 03 e6 4e 2a 28 b5 50 a5 15 bb ed 60 5b b8 85 86 de 63 6f be 00 4b 98 52 d7 44 be e6 8f 50 b1 16 52 ea 0d 81 bd b9 73 e9 ce d8 b1 16 04 6a b5 23 a0 11 27 74 9f de a3 74 f0 bd b7 f3 df 11 21 23 9d e4 ab 8a 3a 6a b8 9e 36 56 2c 55 45 f6 b5 b9 de dc ff 00 4c 1b 83 91 50 b3 a3 99 27 8e 65 5b 5c 4f a8 b7 5f e6 b7 db 18 Data Ascii: N3,'r:YE9=%>n}pm?52}[2+^[&"V`.Z1%_s!j~K`+~QN5}D_dS52TFtN*(P`[coKRDPRsj#'tt!#:j6V,UELP'e[\O_
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 3f 5c 49 c7 b3 70 a6 79 5e 95 35 93 c7 1b eb 44 3d 92 f4 b0 50 00 fb 01 f4 c4 d1 8b f2 cc b1 d7 5d ac 58 9b 74 f0 c7 7a 60 68 f5 8f 86 46 18 93 10 e9 12 66 8a a2 55 a9 58 a5 72 63 7d 98 1d f1 8c a2 16 66 de ce 5c aa a6 38 e9 e4 42 92 18 fb fd 9e e0 fc c5 81 fa 1c 79 32 96 aa 4e c1 99 9a 54 10 1a 36 a3 2c e5 99 b4 d8 28 fe 51 e5 d3 c2 f8 ca f1 0a 3a e8 95 20 76 93 b3 31 cd 73 7e f1 24 1b 92 7c 7a 74 c1 a6 8c 75 31 d4 b3 34 73 24 b5 32 2e ee 7b a9 08 f2 3b ef 6b 8d af b9 c0 29 1c 11 89 b5 c9 52 0c 4b 52 46 88 cd c4 9e 61 7c 30 1b 90 49 11 85 a0 33 05 9a a1 41 92 4b 6d 1a 0d 89 fb 85 1e a4 e0 12 35 34 6f 12 51 d2 46 40 91 c5 e4 bf 74 e9 ef 6d e3 ca f8 34 8a 94 d2 ca d1 a4 c6 72 05 e4 73 c9 17 a9 51 e3 d3 00 b4 34 99 65 63 c9 22 aa ad 39 98 88 50 2e d6 2b a6 Data Ascii: ?\Ipy^5D=P]Xtz`hFfUXrc}f\8By2NT6,(Q: v1s~$\|ztu14s$2.{;k)RKRFa\|0I3AKm54oQF@tm4rsQ4ec"9P.+
2024-03-29 00:41:28 UTC	89	IN	Data Raw: dd c4 07 4e ee db 74 18 08 99 9c 43 ba d1 aa f9 81 e5 85 88 73 38 49 d9 57 e5 b6 02 82 aa 8b a5 34 67 fc 80 fe b8 0e 2d 6d 2a fc 10 44 2f cf b8 3f a6 35 33 14 2d fb 46 3e 91 a7 c9 40 fd 06 39 d8 e3 55 ab 7f e1 e1 ff 00 96 bf db 1b e4 94 bb d5 51 85 16 a3 8a fe 1d 9a Data Ascii: NtCs8IW4g-m*D/?53-F>@9UQ
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: ff 00 6c 39 14 14 95 14 cd 6f f5 38 87 f9 17 fb 62 d9 4e 7b cd 1b db 45 1c 1b 78 44 a3 fa 62 72 29 63 53 06 86 45 a6 8d 75 78 20 fe 83 16 32 29 04 d4 83 ff 00 07 07 fc a5 fe d8 b6 94 ef 6d 49 d2 8a 9f fe 5a 0f d7 12 32 27 15 3d f6 98 fc 74 94 ed e1 fb b5 fe d8 b6 50 2e b9 4c 84 3b e5 74 45 c7 33 d8 2e f8 cd ad 2e d5 19 5c 76 03 2b a4 ff 00 92 bf db 12 e0 a1 1b 34 42 34 8a 58 ad d2 ca 36 fa 8c 52 94 6c c6 23 ff 00 84 8f e6 ab fd b1 6c a7 46 63 0f 5a 2a 7f 9c 4b fd b1 2e 4a 85 e3 ce 64 24 ec 80 7f 2a e2 5b 7c 5c 6c e1 af de 68 d7 c2 fb 5f 12 19 71 b3 85 04 80 6f e7 8d c4 d2 c4 5b a9 9a 3c b7 d2 01 b7 96 32 8e b6 7a 47 32 0f 90 1b fc 86 0b 11 62 7e d5 9c f3 03 06 94 39 bc a4 58 b8 4f 52 45 fe d8 01 fe dc 76 1f c7 b7 86 f8 09 26 6e ea 40 ed 09 bf 81 c2 c1 13 Data Ascii: l9o8bN{ExDbr)cSEux 2)mIZ2'=tP.L;tE3..\v+4B4X6Rl#lFcZK.Jd$[\|\lh_qo[<2zG2b~9XOREv&n@
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: ce b0 07 fc 58 23 ca 7e de ae 4e 39 83 27 82 07 93 29 10 d4 6a d3 4c e5 7b 65 48 d8 06 99 96 c4 77 b6 0a 76 3c ef c8 4b 7a be 1a 7d 2c 75 7f 2f 4d 16 61 96 54 46 1e 2a 26 88 1f 05 ba 9f 35 3d 46 30 e1 30 90 cd 44 e5 f5 89 1b 4b 95 ee ad f9 63 51 34 94 13 9a 1a b2 2a 84 d4 b2 96 bd 89 6d 43 e7 73 a4 1f 43 8d 5a 1d a5 6a 19 93 40 0b 1f 65 1f 32 e9 ab f5 36 da f8 20 c6 75 20 1b 16 07 93 02 0d ff 00 cc 48 07 10 27 2e 6b 41 1d 62 46 f5 11 ab ef a5 0b ae a6 f9 5f f4 be 28 0d 4e 60 f0 27 ee a4 85 ba 22 ca ea 8f 7f 00 6f 6b 9f 96 22 8e b3 97 85 1c cd 0b b1 b8 60 b2 5a c2 e7 6b ec 0f 2c 6a 24 0e 6a 93 01 65 9f b2 8d 7f 2c 93 05 2d 85 d9 76 04 35 f4 d9 8a b7 ba d4 d4 b7 66 da 5d 18 3d bd 15 74 83 f4 f2 c4 1d 9a a6 0a 59 0c 2a b3 96 6d 96 f4 fa 77 f0 b8 53 6c 22 51 Data Ascii: X#~N9')jL{eHwv<Kz},u/MaTF&5=F00DKcQ4mCsCZj@e26 u H'.kAbF_(N`'"ok"`Zk,j$je,-v5f]=tY*mwSl"Q
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 4a 9d 6c 9b 33 34 c4 02 7a 86 b5 86 de 9d 71 ca 25 ac 55 86 4a b9 20 8c c9 d8 2e 9b 85 02 a1 90 5b c0 f5 36 f5 eb 8e 90 dc 42 ab 17 bc ff 00 dd 53 a6 9f ca a4 f3 ea 48 73 b7 cc f3 1e 38 ae 59 79 12 6c a0 c5 3b d4 31 44 69 c8 d7 a6 25 1a 80 22 ff 00 f5 cb 15 71 17 dc 8c 2f 24 01 cc 36 5b 68 89 94 85 bf 96 9b 63 0e 91 14 5a a2 86 60 8b 14 5a 12 45 5b 4a ea b1 89 03 0f e2 24 9d 36 f9 63 52 93 14 ec 30 55 47 01 6a 64 9e a0 33 00 1d 24 81 4b 5f ae c1 ac 6f 6c 61 0d 15 77 a7 d1 28 58 e7 95 6e 58 48 18 29 f0 36 55 16 b1 1e bf 2c 5b 2d c3 4d 2b b2 a4 94 f1 4d d8 92 43 2a a9 00 9b 5a fc c8 ee 8e 9e 38 cc f9 21 45 83 37 66 ec d6 9e 98 46 a3 7d 3a 89 fa 0b 8f d3 12 2e 15 9d 59 47 2c 13 bc 90 d6 b4 4a 9c 95 63 66 bd ff 00 dd 6b 7d 41 c7 48 48 5e 9e bf 38 a7 42 9e fb Data Ascii: Jl34zq%UJ .[6BSHs8Yyl;1Di%"q/$6[hcZ`ZE[J$6cR0UGjd3$K_olaw(XnXH)6U,[-M+MC*Z8!E7fF}:.YG,Jcfk}AHH^8B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49809	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	530	OUT	GET /uu/api/res/1.2/yzJLCRT._OcfHpmpL5upqg--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/bbc85280-ed48-11ee-aefe-2ec31e2ca7f6.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:28 UTC	1298	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 257301947391333314072561479413611006217,506573680972586326961225611793831006275,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="bbc85280-ed48-11ee-aefe-2ec31e2ca7f6.webp" Edge-Cache-Tag: 257301947391333314072561479413611006217,506573680972586326961225611793831006275,ae7a14591aaf8d474cdb3f92111c923e Etag: "4b14b9f987142f5d247a3649dd845e4d" Last-Modified: Thu, 28 Mar 2024 21:18:37 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=560,height=272,bytes=44594,owidth=4932,oheight=2777,obytes=1091299,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 1e75bec896c54306b6dd8e8005fb79f6 Accept-Ranges: bytes Date: Thu, 28 Mar 2024 23:53:07 GMT X-Served-By: cache-iad-kiad7000177-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711669988.809077,VS0,VE1 Age: 2901 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 1e75bec896c54306b6dd8e8005fb79f6 cld_by: cache-iad-kiad7000177-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 53750 ATS-Carp-Promotion: 1
2024-03-29 00:41:28 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-03-29 00:41:28 UTC	1219	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 01 10 02 30 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 05 06 04 07 02 03 08 09 01 00 ff c4 00 4a 10 00 01 03 03 03 02 04 04 03 05 04 09 02 06 01 05 01 02 03 04 00 05 11 06 12 21 07 31 13 22 41 51 08 61 71 81 14 32 91 15 23 42 Data Ascii: JFIFCC0J!1"AQaq2#B
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 5b 8f 0b c4 97 03 2b 39 f5 4e f2 0a 81 cf 7f 9d 4c 18 2e e0 d4 b8 91 93 29 a7 5f 9c db 2a 50 09 53 61 cf 18 28 71 d9 69 24 67 f5 fb 51 80 1b 85 65 32 1c 79 e4 5d 5a 98 de c2 a0 d8 56 d5 85 83 e5 07 20 70 40 39 c7 1d b9 f4 a9 db 2f b9 f4 13 46 ba b7 e9 eb 5c 85 ce 8e 86 c3 ec 6c 40 2e fe f0 ac 0c 6d 48 c7 3c 8f e5 4b b0 28 1e 6c 37 76 ae 96 a8 f3 18 ba 2d b2 94 80 9f 31 49 4f 63 c2 71 f9 7f a9 35 9a cf 35 1d dc 37 5c fa b0 cb 2f 7e cf 81 21 53 24 b1 b5 b6 db 04 80 0f 3e 75 0f e1 1e a7 fc e4 1d 03 25 68 fd 56 65 5c a4 49 bd 5e 4a 7f 76 54 c3 71 c0 49 75 6a 20 6d 00 e7 3c 9e 38 ce 39 a0 f2 9d 94 87 40 69 0d 53 a7 ed 2f 26 33 ef 2e 44 82 32 f2 96 a1 fb b2 06 d3 b4 13 eb ed ed 4c aa 9f 33 35 85 89 66 d4 a8 99 2e 5b 31 56 97 0e cd ea 0d a4 a8 00 38 04 a8 1e 39 Data Ascii: [+9NL.)_*PSa(qi$gQe2y]ZV p@9/F\l@.mH<K(l7v-1IOcq557\/~!S$>u%hVe\I^JvTqIuj m<89@iS/&3.D2L35f.[1V89
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 10 b4 2f 08 57 0a e6 bd c7 41 fc 45 7e a3 51 15 d9 e8 cb 75 3e 32 3e 07 d0 96 0b cb 50 da 06 49 af a5 47 26 02 9a 89 71 b9 44 ea 86 a0 9d 63 80 e4 f5 04 21 45 c7 48 43 09 6d c4 b7 9d aa c1 39 2b 6d 5c 80 41 21 23 3c 57 4b 05 ed e2 c0 e7 f6 4e d5 6a d5 52 22 33 78 be c5 8a 9b 70 59 53 91 5b 70 f8 ad 34 ac a7 82 a0 52 a7 0e 4e 41 ec 4e 01 c6 4d 0d 70 b1 e2 a5 47 32 51 3d 58 3d 04 83 6f 71 d8 77 7b 8c 89 ff 00 87 0a 52 61 2d 01 ac 60 e4 3b bd 25 39 e7 07 39 50 c0 ed 8e 42 4d 55 e5 f6 72 f6 ac b6 5d f4 ec 07 2e 76 ab 7a 24 46 75 7e 37 8a e2 d4 db 91 da 39 c3 a1 04 80 a4 e0 0c 11 90 49 38 c1 03 70 59 c2 e4 3a 04 7d 57 ab a7 4c 8a 34 fc 58 92 43 0d c3 f0 d2 f2 95 94 ee 58 f3 2d 44 f0 78 c0 20 e7 1b b8 c6 0e e5 6d 21 bb ee 24 e9 a9 17 0b 5d e1 71 75 54 54 b5 19 Data Ascii: /WAE~Qu>2>PIG&qDc!EHCm9+m\A!#<WKNjR"3xpYS[p4RNANMpG2Q=X=oqw{Ra-`;%99PBMUr].vz$Fu~79I8pY:}WL4XCX-Dx m!$]quTT
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 72 87 99 ea c9 b5 a5 b5 d1 89 2a 6a c5 fb 29 ec 87 23 a8 a0 03 c7 15 e4 7a bd 0c 96 e5 fc 8f d2 3e 75 96 8c 52 3c 3d be d5 c0 7a e7 23 60 3a 4b 69 83 79 4c b2 ac 29 69 da 13 8e e6 bb 9d 2d 30 df 7f b2 d9 e5 d7 12 75 be f2 64 cc 53 0b 6b 6f 86 ad bf 5a ec 66 0f 6c a8 34 c7 47 ae b7 1b 7c 69 eb b8 a0 b4 39 00 f9 8a 81 fb 57 3f a7 fe 1c 9b d2 2c 66 3c cd ba ae 38 0a 6b 2d 31 6e b0 58 94 22 3c a4 38 d2 39 4e ef cd f6 af 43 af e9 d4 51 a4 98 db d1 8a 8b d9 dc ab a3 43 79 87 5a 91 3c 2d 31 56 a0 16 af e2 db ea 6b e7 54 69 a1 2e 89 b1 7c 4e d3 dd 10 9f d8 da ed db 44 c1 80 10 ce a0 67 71 04 04 ad e1 c7 f7 d7 a4 b7 a5 f4 db 2b cb 7e 4e 7f e7 2c df 61 1a 66 ad 76 52 8b 0c b6 db 8c a7 b3 84 77 15 e4 1f 48 b1 6e 35 cf 03 e2 fd c2 76 8b 14 2b c4 d6 0c 74 94 38 a4 85 Data Ascii: r*j)#z>uR<=z#`:KiyL)i-0udSkoZfl4G\|i9W?,f<8k-1nX"<89NCQCyZ<-1VkTi.\|NDgq+~N,afvRwHn5v+t8
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 7d 54 cc 6c bc 07 b2 4f c8 38 ce b2 b8 34 da 59 8f b1 7b 7b 93 ea 29 73 d7 ad d3 b6 0e bb ff 00 62 9a 95 66 dd 4c e6 6b 09 f2 1b c3 21 2d a9 b3 dd 27 24 f1 4a 9f c4 76 bb 6d 0b b4 15 f9 75 f9 02 a4 5d ae 33 fc cf 4a 75 4b 39 18 49 c0 fe 55 a6 9e ad 6e aa 3f a8 0b b4 86 96 dc b9 c6 49 53 12 55 95 0c 1c f2 69 3f 9b 57 86 94 9e 49 db d8 57 91 31 87 e7 3a 89 32 14 87 09 c2 b2 6b c4 6a 19 d9 e6 65 87 f8 9b 23 5b 21 21 e6 dc 6d e4 a9 2d 9c 9c 9e 4d 22 ae a6 ef 95 2f cc 05 18 a1 12 f3 3d 9b c4 a4 5b da 70 a1 b6 56 15 b8 1e 09 1e 95 ce d4 dc ff 00 19 f4 53 4e 5e 82 f1 de 4c b0 db 2d 64 06 ce d2 41 f5 ac 4b 4b af 8c fd 85 0f 90 6d 11 c2 00 56 70 4d 6a d0 5f 3a 16 da 63 91 cc b9 19 96 f6 24 94 a8 6e 3e d5 d4 7e bf 7d 93 2a d1 b4 15 81 a1 6d ca 40 04 73 59 99 ac b3 Data Ascii: }TlO84Y{{)sbfLk!-'$Jvmu]3JuK9IUn?ISUi?WIW1:2kje#[!!m-M"/=[pVSN^L-dAKKmVpMj_:c$n>~}*m@sY
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: cf cc 06 fe c1 66 e1 aa ef 97 27 5d 0a 8c 1b 79 b1 e3 17 1c 25 6c b6 09 00 02 a2 71 c6 78 03 9e 31 4f f6 64 91 61 9b 6c 89 f7 05 b0 6e 65 61 dc a5 e2 86 82 10 d8 ee 42 50 92 49 27 b0 04 02 7d b1 c5 5f 20 c1 32 6c d9 d6 b0 63 c3 b4 0b 7c 66 54 50 80 eb 84 38 e2 87 aa 80 e4 73 dc ab d7 35 3e c6 58 05 93 2b 51 4b 8c ef 87 70 01 4a 18 6d b6 bc a3 27 9f b8 c6 7d e9 fe 42 85 bb 4d d2 75 ba f6 d5 c2 64 ac ae 23 a9 5a 8a 95 f3 e7 27 d6 93 bc ee 42 c1 b0 cd b7 0b fd c1 52 1c db 11 d4 2d a4 38 a2 09 f1 55 92 95 0c f7 e3 23 ea 47 b5 38 10 33 f7 79 71 e7 b8 a4 a1 d9 28 ca ca 0b a0 0c 7b 60 77 03 8e dd b9 a8 43 66 85 87 71 d7 7a ba 35 98 25 69 61 6f 37 f8 83 bb 29 2d 82 54 a4 fd c2 48 fa e2 a5 53 9b 15 67 82 85 6f 8d da ed 57 eb b5 e1 6c 78 8a 6d e5 06 d3 c1 21 00 ed Data Ascii: f']y%lqx1OdalneaBPI'}_ 2lc\|fTP8s5>X+QKpJm'}BMud#Z'BR-8U#G83yq({`wCfqz5%iao7)-THSgoWlxm!
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 92 49 07 38 c9 1f a5 72 11 ac 46 c6 04 36 c1 7d 23 ac 59 54 c3 0d 99 db 52 84 67 ce 7b fc a9 af a5 5b b6 6b 3e 82 9b b8 23 eb 3d 7b 75 97 70 45 97 f7 65 87 48 4f 88 06 3f 53 5d 4a 3c 2b d9 7d 19 33 f2 2c cd 01 a6 5a 85 6b 44 a9 4e 20 b8 e0 0a 18 e0 53 aa ea 0d a5 59 6f 66 b7 45 62 75 ea ce 87 65 a1 f7 65 29 29 f4 01 5c 7e 95 cd d5 f5 09 d7 4c 6f c1 49 46 24 44 5e a2 db e4 ae 0c 95 87 f1 c2 52 47 98 8a 74 55 0e 90 db fa 27 ff 00 52 7b 80 4c b4 b9 73 81 1b 63 89 49 29 6c a7 19 a5 4d 39 f9 11 b2 c4 83 61 be dc ee 31 93 1d fb 78 65 43 ba bd 07 f8 d5 2e d5 2e 3e e0 50 d4 c3 88 d8 d7 29 df 9c f3 5d 0d 15 a9 46 d6 44 7a 1a fe 46 c7 3f 07 28 78 cf a5 20 b7 da b7 6b 3a c5 76 a4 cc c6 db 0a 4a 95 4d 65 08 f0 8a e3 a4 04 fb 0a f3 6d 75 96 b7 71 3d 0f 2b fd 5d a7 1b Data Ascii: I8rF6}#YTRg{[k>#={upEeHO?S]J<+}3,ZkDN SYofEbuee))\~LoIF$D^RGtU'R{LscI)lM9a1xeC..>P)]FDzF?(x k:vJMemuq=+]
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 9f 9d 03 6a 29 68 df ec 2f 46 4a bd c4 6a 31 54 92 9d a9 1c ff 00 85 1f 7d ec 4c 22 77 81 7d cd 8d 56 ed 41 1e e4 de 20 3e 85 24 1c 1d bc d2 a2 8b 74 7b 3d 72 57 7b 33 7b c9 75 85 19 21 49 52 bb 9c fb 56 86 d7 6b 2c 5c 5e 78 33 db 33 11 96 e0 e7 6f 30 64 2c 34 a4 23 38 21 49 e0 93 42 b6 6a 13 69 89 30 fe 6c 93 16 f7 6a 69 ad ab 09 6c e7 09 49 1c d3 de b6 d4 79 34 f2 1f e6 db f9 37 c5 bf 5b a7 c9 54 36 52 38 ee ac 7f 4a c3 75 77 34 e3 96 fb 0f 4d 6c 64 47 99 a5 2d 4e 38 b9 4e 47 4b 8b 27 77 23 d6 b7 55 d6 f5 15 27 65 a7 83 6d 77 d9 ed 7d 14 f6 bf b5 5e a5 dc 4b ff 00 b1 9c 6a 3a 06 c4 29 29 c9 3f 33 8a f7 7d 03 5f a7 4a f6 67 de 4e e5 1a 94 7a fc e7 91 2a e3 a7 ae d6 94 37 2e 5c 72 db 6e 11 82 6b d7 55 af ab 50 b8 24 f2 73 eb b3 f5 c9 f6 47 4b 32 db 05 3e Data Ascii: j)h/FJj1T}L"w}VA >$t{=rW{3{u!IRVk,\^x33o0d,4#8!IBji0ljilIy47[T6R8Juw4MldG-N8NGK'w#U'emw}^Kj:))?3}_JgNz*7.\rnkUP$sGK2>
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 05 4a b7 b0 a4 20 23 ca 14 85 f9 02 4e 30 0e 32 a3 9f a7 b5 69 ee 70 51 f7 fd 61 85 7f b5 c6 89 2c 9f 1a 1b ee 29 95 83 91 b1 61 3f af e4 ed 49 9b 49 b1 bd 0f a6 6b 22 de fc 98 ca 78 a4 a6 3b 9b 73 9f 64 28 9e df 23 e8 78 fa 4f 99 7f 02 5d 9d 5f 83 8e e4 59 20 34 e2 1d f1 36 2c 11 8c 0e 52 07 a7 7c fd 6a 48 45 a3 a3 6e 8f 16 8a 62 2d 4a 75 b6 fc 84 ab 07 6f a8 3f 51 9f e7 50 32 dd d1 77 06 21 db 9c 94 fb ae 21 f0 77 37 e6 29 d8 33 c7 73 8f f2 78 f5 ac 56 37 97 f4 3a 39 2f be 9e 6b a9 17 20 c4 56 9d 5b ee ba 00 52 50 d8 d8 c8 00 93 9e 00 f5 3f 3c 0c f1 5c 3d 7d 69 f2 6f 40 f9 17 6c 42 da 61 b6 51 9c a9 3e 6c f2 73 f3 f9 d7 0e dd 7d 55 c6 11 e8 6a 79 11 dc 4b ce a8 07 36 84 27 9d c7 be 6b c8 df 62 cd b3 f5 01 fa 35 c9 b6 fe 39 49 4a 9c 49 40 18 02 ae 2b df Data Ascii: J #N02ipQa,)a?IIk"x;sd(#xO]_Y 46,R\|jHEnb-Juo?QP2w!!w7)3sxV7:9/k V[RP?<\=}io@lBaQ>ls}UjyK6'kb59IJI@+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49812	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	589	OUT	GET /aaq/fp/js/react-wafer-featurebar.custom.modern.12732500bc8e47693f0d777bbe88001c.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:28 UTC	852	IN	HTTP/1.1 200 OK x-amz-id-2: cnFKcC/4V8XPJqNP1gRTURxcT/q125W0l/iIZ0501b6jFs38f9XN1xUSWD821otXUpyhgbzvqMw= x-amz-request-id: X7BHCGATYD5Q1MR1 Date: Thu, 28 Mar 2024 15:41:04 GMT Last-Modified: Thu, 04 Aug 2022 04:32:27 GMT ETag: "12732500bc8e47693f0d777bbe88001c" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: ktIqZY5t35wTM4d07XFqB.S0kDb7QpBg Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 1615 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 32425 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 66 65 61 74 75 72 65 62 61 72 49 64 22 2c 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 72 65 61 63 74 2d 77 61 66 65 72 2d 46 65 61 74 75 72 65 62 61 72 22 29 5b 30 5d 3b 69 66 28 65 29 7b 69 66 28 65 2e 63 6c 61 73 73 4c 69 73 74 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 61 75 74 6f 2d 63 6c 6f 73 65 22 29 29 7b 76 61 72 20 61 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 66 65 61 74 75 72 65 62 61 72 2d 63 6f 6e 74 65 Data Ascii: window.addEventListener("load",(function(){var t="featurebarId",e=document.getElementsByClassName("react-wafer-Featurebar")[0];if(e){if(e.classList&&e.classList.contains&&e.classList.contains("auto-close")){var a=e.getElementsByClassName("featurebar-conte
2024-03-29 00:41:28 UTC	315	IN	Data Raw: 73 6c 61 74 65 59 28 22 2b 72 2b 22 29 22 29 7d 29 29 2c 75 28 29 29 7d 76 61 72 20 66 3d 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 73 63 72 6f 6c 6c 2d 74 6f 2d 73 68 6f 77 22 29 3b 63 6f 6e 73 74 20 6d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 63 72 6f 6c 6c 2d 74 68 72 65 73 68 6f 6c 64 22 29 7c 7c 31 38 30 30 3b 69 66 28 66 26 26 77 69 6e 64 6f 77 2e 77 61 66 65 72 29 7b 63 6f 6e 73 74 20 77 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 75 74 69 6c 73 2e 74 68 72 6f 74 74 6c 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 73 63 72 6f 6c 6c 59 3e 3d 6d 26 26 28 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 56 28 68 29 22 29 2c 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 72 65 6d 6f 76 65 4c 69 Data Ascii: slateY("+r+")")})),u())}var f=e.classList.contains("scroll-to-show");const m=e.getAttribute("data-scroll-threshold")\|\|1800;if(f&&window.wafer){const w=window.wafer.utils.throttle((function(t){t.scrollY>=m&&(e.classList.remove("V(h)"),window.wafer.removeLi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49814	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	507	OUT	GET /uu/api/res/1.2/aKMXvSoVtv7RskBHCCkbOw--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/644d1fd159a0d4d95b364a1ff409b0d5.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:28 UTC	1298	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 442462528586941774434289730395252732012,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="644d1fd159a0d4d95b364a1ff409b0d5.webp" Edge-Cache-Tag: 442462528586941774434289730395252732012,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "3f67ce8c697ba06a6ba84e4861da27d3" Expiration: expiry-date="Wed, 25 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 28 Mar 2024 14:54:33 GMT Server: ATS Surrogate-Reporting: width=356,height=180,bytes=12472,owidth=5296,oheight=2979,obytes=9843806,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 28 Mar 2024 15:34:08 GMT X-Served-By: cache-iad-kiad7000075-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711640048.339442,VS0,VE1 Age: 32840 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-iad-kiad7000075-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 29834 ATS-Carp-Promotion: 1
2024-03-29 00:41:28 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF@ICC_PROFILE0ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: aa 6b 1d e6 89 8f 27 cb fa c5 60 47 c1 b9 0c 39 20 14 38 82 86 7a 22 f7 0a f8 f9 8f 4c 3c 46 42 ce e3 47 8e 3b 8a 69 c1 ee ad 27 71 fe bf 03 84 91 22 17 33 51 8d 35 7e c7 39 b4 a5 40 94 a5 e4 fb a4 f9 03 e7 e9 86 60 c9 8d 39 a1 f5 52 18 54 32 bb 38 e8 ba 47 9d bf fd c5 bb 7d 8a ec e8 bf 60 3e cd ed 70 c3 87 03 89 99 a5 90 9c cf 9a e3 eb 8a da 9b 00 c4 84 ad d2 3f bc bb 25 67 d3 47 2b 91 89 a5 3c 06 be 5b 20 a7 4e ed 03 95 69 5c 52 7b 87 86 47 e8 9a 01 a5 4c 5b 9f a2 5c af bc d5 fa 11 b0 0a 3b 6a ba 7c af 14 ab 78 67 4d ff 00 a5 2e 3f 0c f7 b8 ff 00 a0 e7 0e 64 39 cc f7 d1 1d 4b 88 b9 04 8d ec 7a 83 e4 7d 30 7b b3 94 71 71 78 62 5c c3 96 a8 39 b6 8b 2f 2e 66 4a 54 7a 85 36 7b 45 99 11 9f 46 a4 38 83 d3 d0 f5 04 6e 08 04 60 72 d3 c8 dc 9c bb ed 23 d9 df 32 Data Ascii: k'`G9 8z"L<FBG;i'q"3Q5~9@`9RT28G}`>p?%gG+<[ Ni\R{GL[\;j\|xgM.?d9Kz}0{qqxb\9/.fJTz6{EF8n`r#2
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 8f 96 66 65 3c db 4e 6e 65 3e 6a 0a 54 92 3c 4d ab ee b8 83 f7 56 93 62 0f 98 c4 b0 b8 76 cd 4a 2c 8f 9d 99 cc 9e d0 7d 9f f3 27 01 2b 25 32 1a 5d 43 2f 4d 78 8a 75 5b 4e 84 b8 0f 26 9c e8 97 46 fb 6c 14 37 4d ec 46 3b bd 23 56 57 0b 0d ee 51 b8 b6 f2 81 4a da 54 88 8b 7c a7 42 9a 21 49 17 e6 0f 5c 6e e7 25 09 47 0b 72 c8 76 3e a6 70 f2 2d 1f 31 e6 bc f7 5f a1 49 43 2d 22 60 a3 3a d0 92 e3 28 8a bb fb 5a f7 01 00 2d 5a 42 77 2a 04 ed 65 0b e2 6a be e3 b9 46 8a 78 fb e4 b9 6e 92 05 a9 cd ec 64 5e 2b 54 73 35 56 93 4a cf 61 12 fd b6 24 95 3e a1 19 e7 14 bb f7 aa 4d b5 12 09 f7 15 b0 23 7b e3 43 b5 dd 5b 76 fd 24 19 f9 05 4e d0 bc 68 a5 67 ca fc ec b2 ee 5e 87 24 d0 9e 43 50 aa 8d b8 50 fb 0e 04 a4 ad 22 c2 ca 6f 55 c0 49 07 95 c1 07 10 69 96 5e d5 b7 dd fd Data Ascii: fe<Nne>jT<MVbvJ,}'+%2]C/Mxu[N&Fl7MF;#VWQJT\|B!I\n%Grv>p-1_IC-"`:(Z-ZBw*ejFxnd^+Ts5VJa$>M#{C[v$Nhg^$CPP"oUIi^
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: c9 3c 13 de ca 3c 10 af bf 9b a8 79 ea a1 98 32 fc 5a 74 37 0b c2 2a 6a 2d 3f 2a 40 52 54 90 90 db 64 84 5c 28 fb c4 11 e5 88 b5 6b f6 a9 7a 31 4f 3f d3 fc 92 5b a5 9d c9 bf 68 5e 08 f0 97 83 b4 39 d9 e2 9f 96 ea f3 64 55 e6 29 0c 30 99 4a 44 18 0e af 72 b2 1b 00 da fc 92 49 04 ed b6 2a 69 57 f5 ee 2a 76 b7 c0 d7 31 4f c0 30 ec cb c1 3c 91 53 9d 59 cd 28 ce a9 98 a9 ad bb 4b a9 d3 55 00 35 ec 42 4a 74 ec b2 b5 6b 3c 88 b0 17 1d 71 ab a9 5d dc 6d db 12 be 36 03 fc 6a ff 00 85 59 12 b3 23 28 64 f9 75 e9 b3 20 c8 53 32 e6 54 4b 6c 37 a9 06 ca 4a 19 4a 75 73 fb c4 f4 d8 75 c6 b5 8b af 74 93 ad f1 fd c8 1e c0 b1 ca f2 9d 59 5b 61 4a 1e 78 d8 c1 18 2f 99 d9 e7 3d b3 73 09 da 6c cb 72 4a 1f 52 54 7e 45 36 1f 5c 78 37 ae 75 1d a4 76 a1 c2 6e 22 53 ee 5f cb 0f ad Data Ascii: <<y2Zt7j-?@RTd\(kz1O?[h^9dU)0JDrIiWv1O0<SY(KU5BJtk<q]m6jY#(du S2TKl7JJusutY[aJx/=slrJRT~E6\x7uvn"S_
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: d8 23 5a 89 37 4a 42 05 93 8d 25 6a 9a 1b bb 3b 0d f9 d6 b2 bc ed 5f 73 33 56 a2 33 ed f2 50 8f 69 53 57 09 79 d0 90 14 e9 49 bd 94 ad 37 36 da f7 c5 ab 44 ad 96 08 5f 22 e8 39 72 98 e4 64 ab b9 48 bf a6 25 cb 64 47 ba c8 c7 82 b5 b1 d6 60 c5 2e 79 8b e2 16 f7 e4 2c 24 66 5c 68 fb cd 03 f2 c2 52 6c 76 93 e0 41 3b 2c 65 5a b0 26 a1 43 81 26 fc fb e8 e9 59 fa 91 82 53 68 6c 60 8d cf e0 a7 0b e7 5e f9 79 b6 2f fd 82 d4 dd be 49 b0 c4 8a be 05 da 9f 04 6a 7f 66 ac 91 2e fe c5 52 a8 c5 fc 21 0b 4a 80 ff 00 30 27 f3 c1 ab 90 3d 1c 91 b9 bd 97 67 80 55 4f cd 6d aa dc 92 fb 04 6d fd e0 af e1 89 55 c0 bd 06 46 e7 76 78 e2 14 3b a9 84 53 e5 a7 a7 75 20 83 ff 00 30 03 f3 c1 2a c9 8c e9 60 8b d6 38 6f 9e 68 4d 29 fa 96 5c 90 86 41 b1 75 2a 4a 93 f5 07 07 09 77 02 e3 Data Ascii: #Z7JB%j;_s3V3PiSWyI76D_"9rdH%dG`.y,$f\hRlvA;,eZ&C&YShl`^y/Ijf.R!J0'=gUOmmUFvx;Su 0`8ohM)\AuJw
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 49 97 d9 f9 69 f4 07 12 b4 a5 27 91 0b 3b ee 07 ef 38 f3 37 03 0f b9 98 bd 96 a0 38 bd 6c 49 74 5f 98 36 3f ba d8 87 d1 c8 bb 99 1c 7d b9 5f 6a 37 49 84 d3 4e b8 e6 b3 a9 c7 0a 00 09 b5 ce c1 47 ae 14 68 a6 3e 45 9f 61 57 11 ef d3 d0 bf 56 5f 49 1f f3 69 3f 96 24 f4 86 72 13 2a 25 51 1f ae a5 4a 6e fc bc 3a ef fe 4b 8c 37 a0 83 52 c0 94 a8 b7 62 f2 54 cd f9 07 50 a4 13 fe 60 30 2e 89 24 66 7c 97 82 af dd 3a 93 6e 7a 54 0e 01 d2 c0 fe a1 ea a4 bd a3 46 ac 33 58 e0 69 4f 62 ba 71 fb 89 e9 97 3d 19 56 9b 22 cd 47 20 be 06 f7 5e fb 62 dd 37 d9 b9 0c b7 d8 97 f0 63 80 f0 e5 52 e1 e6 9e 2c 4c ae c4 a4 4e 4f 7b 1e 05 31 84 19 2f b3 cd 2e 2c b8 a1 a1 26 f7 d2 90 a2 41 17 b7 2c 45 5e ff 00 3b 22 f5 b6 9c f9 65 ab 97 c3 1e cc d0 b2 74 3a 94 6a 05 26 1c 09 29 08 8b Data Ascii: Ii';878lIt_6?}_j7INGh>EaWV_Ii?$r*%QJn:K7RbTP`0.$f\|:nzTF3XiObq=V"G ^b7cR,LNO{1/.,&A,E^;"et:j&)
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 03 29 d3 28 df cd b7 51 50 6d 30 a3 21 b2 a4 a6 e1 cd 46 c5 4b 25 24 9b 9b 9f 08 c7 0f 29 ca be 72 ce e7 a3 2e 63 6d aa 41 4b 82 9d c1 a8 f7 6c 7e aa fa 94 55 ef 63 11 ce 59 3e 93 8f 6b 8a 60 3e b1 98 d8 61 91 16 0d 1e 03 85 96 50 87 0c 5a cb 61 cd 76 b9 1a 14 2f d7 17 5c 4f 91 b2 12 78 40 f3 d2 f2 cb b2 64 46 95 18 aa 4a 92 1b 90 ea 5c 36 00 0b 85 24 90 41 c4 13 0a 2f 22 9a 3b 26 6e 6c 2b d1 7e e2 3a cf 3e 7a d6 07 ff 00 4c 3d 10 f2 b0 45 67 71 82 7c 0c c1 51 80 9a 9d 11 6c 44 90 a6 52 87 dc 0d ab 6e 63 72 3a e1 db dc 8c 7e a0 71 4a 55 6a a8 cd 2d 71 60 38 cb a4 27 bd 66 40 55 bd 76 b8 3f 5c 10 59 14 af 89 30 da 90 f3 4f d1 a4 69 65 c2 82 b4 78 f9 12 2f 6b 0b 60 64 37 70 ae 0e 67 ca 99 82 52 9b 72 06 a7 42 14 e1 2f 47 49 16 02 e7 9e 17 68 7d c4 4b 88 99 Data Ascii: )(QPm0!FK%$)r.cmAKl~UcY>k`>aPZav/\Ox@dFJ\6$A/";&nl+~:>zL=Egq\|QlDRncr:~qJUj-q`8'f@Uv?\Y0Oiex/k`d7pgRrB/GIh}K
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 11 b7 9d 87 ce ce 95 47 69 5c 75 c9 d5 24 48 43 5d cc f0 ca b5 1b 5d 2f 02 d1 ff 00 ab 18 da c6 25 41 a6 5b b5 4f 39 3a 87 54 a6 c6 ad d2 26 52 a6 b6 17 1e 6c 75 b0 ea 48 b8 28 5a 48 3f 91 38 e1 5e cc d7 a3 3f 4e 6a 6b 94 73 0e bf 42 6b 24 e6 0a a6 53 a8 92 87 a9 73 1d 8f 65 58 12 90 af 09 dc 8e 62 c7 e7 8a d2 b6 4d 9f 4c 68 77 ca ee c6 9d 5c f2 8a bb 9b a7 c0 6e 53 cd 4c aa 53 dd 50 5a f5 99 b9 7d 69 2a f1 1d f5 a0 6e 70 ec f9 8d 07 7e 11 43 6a 0f 0d 61 2d 96 e0 84 b8 95 bf 78 4d ad 0c 9d 4a 26 e9 0b f1 0d 88 e7 8a cf 90 87 5c aa dd aa d5 47 ef fa a6 db 41 16 ea 01 57 ff 00 7c 32 d8 17 b0 08 ef ea ce 54 e7 54 fb 9a e2 9a 76 53 ae 0b 53 63 48 6a c5 46 da 4f bd 6c 1f 68 c2 ee 19 25 b9 99 e2 24 97 10 c9 75 94 bf 20 29 ca 2a e3 ba 2c 85 1d 9c 1e 14 f3 c3 88 Data Ascii: Gi\u$HC]]/%A[O9:T&RluH(ZH?8^?NjksBk$SseXbMLhw\nSLSPZ}inp~Cja-xMJ&\GAW\|2TTvSScHjFOlh%$u ),
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 93 7f a9 4a 4b 1d c5 57 a1 38 8a 75 4d 28 5f ba 14 6d f0 38 da fa 4a ee 39 41 eb 23 f0 ef 38 f1 4a a0 dd 1f 27 51 9d 94 b5 00 a7 64 2f 52 18 61 27 aa d7 b0 1c 8e dc f6 da f8 a9 73 a9 ab 65 c9 62 de dd 67 2c 5a 32 0d 7b 84 19 fe 32 33 33 1d dc da 4c b6 64 a0 b7 bb 57 42 92 b0 b4 1e a2 c3 9d 87 3c 73 97 7a a7 b9 d8 f5 7d 0f 40 b1 b9 d3 dd 65 2e e6 97 fe 0e 9a 53 df 6d f8 8d 3c da ae 97 10 95 24 f9 82 36 c6 24 b9 3c d6 a7 c6 6d 7d 99 58 38 ff 00 d9 ea bd 9c 38 88 fe 66 cb 6e 29 0d 54 23 34 b9 00 28 01 df 26 e8 36 bf ec a5 38 24 ce cb 49 ea 49 58 da c6 87 d8 e6 0c fa 7e 6d 69 b5 39 3a 91 9d 61 92 01 52 15 29 12 2f fe 15 5b f3 18 aa d9 c7 96 2b 29 a3 b8 e1 dd 36 ea 75 4a 5c 06 b5 17 40 4b 84 e9 1b a8 0d 81 f3 b6 20 7c 88 d3 4e 5a 22 d0 73 15 59 6a ea f3 a1 5e Data Ascii: JKW8uM(_m8J9A#8J'Qd/Ra'sebg,Z2{233LdWB<sz}@e.Sm<$6$<m}X88fn)T#4(&68$IIX~mi9:aR)/[+)6uJ\@K \|NZ"sYj^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49815	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	513	OUT	GET /uu/api/res/1.2/tWcwFX8HQlVWon2w5cWwwg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/nbc_news_122/ec4ca8639c46e06de9e43dd9c84991cf.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:28 UTC	1294	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 180441425768035156770260874800692557522,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="ec4ca8639c46e06de9e43dd9c84991cf.webp" Edge-Cache-Tag: 180441425768035156770260874800692557522,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "400604c45eff6a0377a76e61ea570ebf" Last-Modified: Wed, 27 Mar 2024 21:52:15 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=356,height=180,bytes=13432,owidth=1500,oheight=1000,obytes=370178,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: f67887647881f5f4dac3d0a8c7b376e8 Accept-Ranges: bytes Date: Thu, 28 Mar 2024 12:28:17 GMT X-Served-By: cache-iad-kjyo7100023-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711628897.287757,VS0,VE1 Age: 43991 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: f67887647881f5f4dac3d0a8c7b376e8 cld_by: cache-iad-kjyo7100023-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 28641 ATS-Carp-Promotion: 1
2024-03-29 00:41:28 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 b4 01 64 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 03 02 04 05 06 07 08 01 00 09 ff c4 00 4b 10 00 02 01 03 04 00 05 02 03 04 06 07 05 05 09 00 01 02 03 04 05 11 00 06 12 21 07 13 22 31 41 14 51 08 32 61 15 23 42 71 52 81 Data Ascii: JFIFCCdK!"1AQ2a#BqR
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 38 d0 36 94 01 86 6f 7d 44 ec 4a 04 d5 31 9f e3 d3 a7 62 d0 87 a8 8f af 5f f7 68 92 81 b5 44 7f d3 1a 6b 15 c4 03 54 21 c7 af 52 c1 42 5e a5 7a c3 68 a6 23 40 24 98 63 45 bb 11 ab 02 6a 06 7e 75 2c 14 04 d4 69 94 92 0a 42 5a a0 7d b4 dd 64 92 e0 03 d4 03 8c e7 52 db 12 a8 19 94 1f 9d 3a 60 ed 81 69 57 ef fd da 9d 42 f4 00 79 01 f7 3a 16 20 07 91 47 ce 8a 69 04 14 a5 7e ff 00 dd a2 c5 a1 b3 32 8f 9d 18 b1 68 0c 92 01 d6 7f bb 4f 6a 81 43 67 70 7e 7f bb 48 dd f8 25 02 72 74 cd 80 03 be 4e 31 a4 b2 00 6d 44 06 24 f7 a9 42 50 17 e8 ea c0 9e 90 4f b8 c6 8a 16 45 9f 60 78 6f ba 3c 4c dc 31 ed 9d ad 1d 27 d5 cd 14 b3 2b d5 cc 62 85 52 28 da 49 19 98 2b 10 02 23 1e 81 27 1d 0d 1c cf b2 53 21 a5 97 6a 54 de f6 ed d6 fe 97 db 1d 3b 5a de 35 5a 19 aa 64 8e a6 ad 1d Data Ascii: 86o}DJ1b_hDkT!RB^zh#@$cEj~u,iBZ}dR:`iWBy: Gi~2hOjCgp~H%rtN1mD$BPOE`xo<L1'+bR(I+#'S!jT;Z5Zd
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: fb cb ff 00 96 9d 23 1d 79 24 d6 e4 71 f9 f4 c9 06 cf 7f 68 9f e9 1f ed d3 00 43 55 f2 fe 3d 56 df 24 02 d5 4d fd 3d 1a 0d 81 6a 92 71 eb ce 95 ae 49 6c f3 cf eb db 51 22 36 e8 94 b4 dd c4 26 58 44 9e c1 1b 27 f5 cf fd 35 ae ed 19 9f 0c 79 53 5d 24 88 03 7b 69 5c 6c 2a 4c 87 ab 98 1c 60 7d f4 8e 34 32 95 91 93 bf 7e da 47 11 d4 86 12 4a 01 d0 a0 d8 06 94 0d 3d 0b d4 5b fc 2a df b5 3b 0f 71 c9 73 a7 8e 9e 44 a9 a7 6a 59 92 78 52 45 64 24 37 f1 03 83 c9 14 e4 7c 64 7c ea 74 d9 46 56 2f 74 d1 da 2e 55 55 17 2a 3a 74 84 54 ca f2 85 8b 21 13 27 3c 40 24 e4 0f 6e fb fb 93 ab bb 1c 08 b6 08 ba 0f 0f 77 65 ea c3 72 dc f6 4b 34 d5 96 ab 4b 2a d6 54 a3 a7 18 4b 7e 50 41 3c 89 ce 3d 81 f7 d2 46 14 4e fd f9 2a b5 0b 2c 2d c2 54 64 61 f0 74 54 47 eb b1 ab 39 d2 b8 f2 Data Ascii: #y$qhCU=V$M=jqIlQ"6&XD'5yS]${i\lL`}42~GJ=[;qsDjYxREd$7\|d\|tFV/t.UU:tT!'<@$nwerK4KTK~PA<=FN*,-TdatTG9
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 0f d1 40 62 6f 2c 33 9e 6c d9 62 06 7a 27 ae fe d8 f7 d4 ed 15 f7 b9 2b b2 a1 5f bf f3 d2 ac 48 7e ed a1 ac 84 af b6 83 8d 0a e4 05 e7 0b c7 96 46 48 1a 1d 34 1b b3 ee 67 52 81 62 5e 4f 6c ff 00 86 8f 4d 83 a8 f6 38 e6 7c 88 e3 e7 8f 7f 50 1f e2 46 a2 8d 88 db 3d aa a7 a9 a3 63 1d 54 66 39 15 d9 0a f3 56 20 8c 7f 44 9f be 94 29 b1 a3 ce 7e e7 50 1d 40 5e 5c fc 7b 6a 3e 41 67 af 4b 35 4c b2 88 4a f2 45 2f c5 9b 0c 40 4c 9c 7f 50 3a cf 89 92 c6 32 2f 02 07 e7 c8 07 29 ec 3f 4e f1 ab 99 2c 58 98 9f 9d 65 aa 3a 5d 42 2e 12 7f f6 5d 66 47 fb 87 ff 00 94 e9 1f 90 58 f6 99 b1 4f 10 ff 00 80 7f 86 9a 2a c9 63 a8 e5 23 db 4f 14 10 c9 30 38 d1 8c 51 07 11 4e 7e 08 d3 a8 d0 2c 72 93 b1 1e c3 4d 44 6c 28 97 97 b8 d4 f1 c8 a4 93 da eb 21 a7 15 6c 91 f9 4d 52 29 03 09 Data Ascii: @bo,3lbz'+_H~FH4gRb^OlM8\|PF=cTf9V D)~P@^\{j>AgK5LJE/@LP:2/)?N,Xe:]B.]fGXO*c#O08QN~,rMDl(!lMR)
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: c6 d7 00 a1 2f 66 b9 45 44 2a e5 a2 aa 46 e6 ca c9 e4 9f 48 03 25 89 fb 7c 7f 6f db 51 ec 27 c0 39 26 3c 3a b1 d2 ee cb e5 1d 92 5a 8a 60 f5 33 ac 06 59 19 b8 ab 36 78 fb 11 ef 83 fd 9a c1 bf b3 d8 56 8b b5 f5 de 6e 59 a2 7e 22 fc 27 a3 f0 17 75 52 58 ed 37 ab 55 e2 29 e9 a4 9e 2a d0 d2 2f 37 54 e4 a8 54 3b 2a 9f 31 40 39 3e c7 3f 38 d7 17 f9 8e 6c ac dd b1 ac e2 bc 18 dd 65 69 86 9e 3a d8 e3 a3 a4 92 29 8a 22 c7 10 74 75 58 a3 72 59 80 cb 00 5c 8e c9 f6 fd 35 b5 6c e4 68 e7 b5 40 ab b7 d5 ee bf cf b7 cb 0d a6 24 fa 6e 41 e9 ed d0 09 0b a3 20 00 b9 42 c0 70 e5 ec 41 eb df e3 5a 14 db 03 45 8f 62 ec bb cf 88 5b 72 f5 72 b6 50 dc ae 37 1b 7d c2 d9 46 b4 b6 d8 7d 7e 55 4f d4 79 93 b1 54 6e 2b 1f 92 b9 f4 e3 d7 d9 18 ee cf 72 d0 bd 16 3f 5d bd 0e d6 db 17 86 Data Ascii: /fEDFH%\|oQ'9&<:Z`3Y6xVnY~"'uRX7U)/7TT;*1@9>?8lei:)"tuXrY\5lh@$nA BpAZEb[rrP7}F}~UOyTn+r?]
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: c9 ff 00 fd ce 0b 9d af 26 74 b9 e4 b6 f8 55 b6 eb 7f 67 5f ee d5 fb f2 df b6 aa 6d f0 99 e1 a7 9e 9a ae 69 a7 78 f3 eb 06 28 1c 22 28 27 25 b0 4e 46 01 f7 19 72 54 bc c8 df 9b 66 ab 12 80 f7 6d 6f b9 aa a7 35 7e 24 50 cd ba 28 a4 86 4a 5a 14 15 69 01 82 57 c8 57 32 34 32 61 94 a8 21 4a 81 f1 df 7a c0 ae f9 3a 90 d9 c1 d3 59 4a 85 c6 2b ed 74 86 b2 0a b0 55 a4 8e 54 8a 0a 76 e0 91 9c f2 38 e2 a1 40 3c 47 43 be 63 db 5a a3 29 7d 0c 3b 2b 5d bf 84 73 6d ba 6d 0b 52 cd 25 df 6d cd 7b a9 99 56 38 5e 56 92 05 8f 05 79 0c 23 77 cb 0e a7 e7 be b0 75 62 96 43 32 8e 1a e0 98 f0 a3 c5 2d f9 e1 74 b7 49 6c 12 44 f1 dd 24 a5 f3 cb c0 25 54 11 19 0a 05 cf ea e7 f3 7d 86 71 a3 d5 f7 17 a5 5f 04 ee e6 df fb 8f c4 2d c3 55 bb 37 4d c2 1a 8a eb 82 aa 4a b2 53 ab 44 40 2a Data Ascii: &tUg_mix("('%NFrTfmo5~$P(JZiWW242a!Jz:YJ+tUTv8@<GCcZ)};+]smmR%m{V8^Vy#wubC2-tIlD$%T}q_-U7MJSD@*
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 6f d5 a4 6d b5 b1 61 b6 55 43 22 b4 b3 5b 54 99 c1 45 c6 49 0b e8 4e 4f d8 3e dc 73 91 d6 9f db 93 dc 96 0a ef 1e ef 53 6d eb 5d 92 0d b9 67 82 7b 65 37 95 25 62 40 87 ea 19 5a 56 04 a9 1c 72 0c de e3 fa 00 1e ba 21 e0 af 20 7b 1f 91 59 a4 f1 47 76 59 ac 17 0d 91 68 82 86 1b 6d d2 05 8e 66 34 c9 ce 37 12 23 99 52 4c 65 59 82 95 3f 18 63 8c 1d 0e 94 8a 9e 66 d9 20 be 26 6f ba ca 0a 1b 69 aa e1 4d 4f 4b 1c 2b 1a 07 02 aa 45 9a 59 12 66 54 ca ac a1 65 68 c3 e3 3c 40 f9 ce a5 0a e5 26 54 29 a6 b9 79 b3 55 25 54 90 f3 9a 6a 87 0e 43 a8 c9 04 f6 c7 39 f6 eb bc 83 df dc 15 c1 4b ea b1 c5 2c 95 30 a9 90 d6 c2 f2 08 d4 aa 67 2a ab eb 62 70 b9 e2 c1 b0 7e e3 e4 63 3a 7e ae 03 d0 3e db f7 5a 2b 43 25 3d 60 99 63 79 47 26 88 90 54 64 10 c5 81 e5 d7 79 c7 df 23 1d e6 Data Ascii: omaUC"[TEINO>sSm]g{e7%b@ZVr! {YGvYhmf47#RLeY?cf &oiMOK+EYfTeh<@&T)yU%TjC9K,0g*bp~c:~>Z+C%=`cyG&Tdy#
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 94 96 42 42 64 97 0b 90 be f8 18 01 75 22 ff 00 70 a6 b9 27 36 1f 86 fb 5e eb 79 5a 1d c1 77 b8 4b 03 cb e5 22 51 a2 c4 cf 38 04 84 67 60 fc 41 c7 b8 46 38 c1 c1 d3 72 54 e4 a4 4d 54 c1 e1 6d 92 a6 e1 35 17 87 71 d5 2c 0b 18 45 ad ae 96 49 3c d4 70 5d 08 3c 14 82 55 97 1c 47 5f cf 1a 46 4a 33 69 a9 0d d3 cf ab 5b 64 10 24 6c 11 04 43 8a c8 c4 80 00 1f 94 1e fa f6 e8 7d 81 3a 28 2d f4 9e 18 6a 04 e6 0a b7 2f 15 38 52 65 89 4b 27 a5 8a a1 0e 3f 87 27 df 1f 3a b3 ca 28 7c b1 dd ba 86 16 59 25 a8 32 29 2e 60 89 e3 55 23 8f df d5 83 fd d8 fd 75 5d 03 91 cc f6 b2 d1 c7 2d 5d 47 9b 4c e8 f0 d3 ca a8 78 48 f1 9c 34 62 45 c8 04 65 4f 59 e9 86 ac 48 68 d0 67 a3 8a 0f 2e 25 67 5a 69 e3 49 3c a5 60 39 7a f8 aa e4 67 d5 e8 27 18 e8 fe 83 4d 54 58 d1 f2 d0 47 6e a9 55 Data Ascii: BBdu"p'6^yZwK"Q8g`AF8rTMTm5q,EI<p]<UG_FJ3i[d$lC}:(-j/8ReK'?':(\|Y%2).`U#u]-]GLxH4bEeOYHhg.%gZiI<`9zg'MTXGnU
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 57 5c f3 d5 95 20 01 2b c8 99 5c 82 ca 0a b1 f4 b2 a9 04 83 9c 7d 8f 7a d3 d3 81 af 98 56 6c 7e 16 78 cb 73 da f6 0b 96 d0 7d a9 4f 34 35 31 97 b7 cb 57 0b cc df 51 2b 46 8a 82 4f 3d 5a 34 60 c5 c3 76 50 aa 8e c1 2c 32 70 ca da 2b 7b c1 a5 4a 0b 48 86 aa 4a 32 68 e2 8d 9e 59 8c 2a 17 cb 43 eb 03 b2 32 57 b0 7a c7 eb 91 6a 85 82 0e 99 0f 74 ba d3 54 c1 6d a9 7b c5 0d 34 d3 d1 ac d3 99 d5 cc 93 4a ee ec d2 33 79 67 99 24 f6 73 f1 8f 8d 54 de 4f ed 3a 4b 5f 13 e6 cc 9a 95 11 43 19 21 85 17 81 c9 12 8f f2 3a 06 12 66 92 68 0d 73 d4 9a ba 74 91 d9 9a 30 39 33 33 90 70 3d f1 ef fa 7c e8 a2 15 da d2 ff 00 57 21 4e 5d 9e c2 af 23 fd 9a 7b 09 3f b7 bc 32 de 57 f5 59 69 2d 9e 4d 3b 7b 4d 50 dc 32 3e 18 20 cb 90 7e e1 4e a5 90 bb 51 78 3b b7 6d 11 1a ab ed c6 4b 85 Data Ascii: W\ +\}zVl~xs}O451WQ+FO=Z4`vP,2p+{JHJ2hY*C2WzjtTm{4J3yg$sTO:K_C!:fhst0933p=\|W!N]#{?2WYi-M;{MP2> ~NQx;mK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49816	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	530	OUT	GET /uu/api/res/1.2/.dZjwniw6OupEJN8hP1Dng--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/1fe5be50-ed54-11ee-bfee-5aba1490b416.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:28 UTC	1281	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 443913271807000044816960781046936028986,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="1fe5be50-ed54-11ee-bfee-5aba1490b416.webp" Edge-Cache-Tag: 443913271807000044816960781046936028986,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Etag: "ef0db41b665ee2f45ec37b26f48ad267" Last-Modified: Thu, 28 Mar 2024 22:40:09 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=700,height=420,bytes=42512,owidth=5392,oheight=3592,obytes=3163985,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 3bd8ea9fcd39074e0f5b9c1e3e42dddc Accept-Ranges: bytes Date: Thu, 28 Mar 2024 22:40:29 GMT X-Served-By: cache-iad-kiad7000070-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711665628.874763,VS0,VE1337 Age: 7261 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 3bd8ea9fcd39074e0f5b9c1e3e42dddc cld_by: cache-iad-kiad7000070-IAD cld_latency: 1337 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 60069
2024-03-29 00:41:28 UTC	243	IN	Data Raw: 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: ATS-Carp-Promotion: 1Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 01 e1 01 e9 01 f2 01 fa 02 03 02 0c 02 14 02 1d 02 26 02 2f 02 38 02 41 02 4b 02 54 02 5d 02 67 02 71 02 7a 02 84 02 8e 02 98 02 a2 02 ac 02 b6 02 c1 02 cb 02 d5 02 e0 02 eb 02 f5 03 00 03 0b 03 16 03 21 03 2d 03 38 03 43 03 4f 03 5a 03 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 Data Ascii: &/8AKT]gqz!-8COZfr~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 78 cc 79 2a 79 89 79 e7 7a 46 7a a5 7b 04 7b 63 7b c2 7c 21 7c 81 7c e1 7d 41 7d a1 7e 01 7e 62 7e c2 7f 23 7f 84 7f e5 80 47 80 a8 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 33 89 99 89 fe 8a 64 8a ca 8b 30 8b 96 8b fc 8c 63 8c ca 8d 31 8d 98 8d ff 8e 66 8e ce 8f 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac Data Ascii: xy*yyzFz{{c{\|!\|\|}A}~~b~#Gk0WGr;i3d0c1f6n?zM _4uL$hBd@iG&vV8nR7u\
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: e8 80 a2 eb 8b 20 28 14 6e 05 02 c8 04 22 c8 00 91 63 64 03 10 0a d4 01 d8 e0 50 04 d5 ec a0 f2 63 9f 71 c2 b2 b0 2e 16 25 1b 81 8a d0 62 85 9e ad 06 b5 42 ce 02 e8 b0 11 ad d5 dd 00 f6 32 dd d0 07 6b 6c b2 b4 e1 a2 54 5b 01 ba ca dc f2 ba 8c d1 6b a8 98 69 9c 88 b1 69 13 95 20 64 9a bd 91 b5 1b 8a 0d d3 9a e1 a4 4f e0 ed 5e ca 26 15 93 24 3b 5e c8 29 94 59 5d 62 ba 23 0c 2c 8f 27 73 e8 b6 a3 2b 23 de e7 85 a3 39 11 a5 59 24 c4 6c 45 d0 13 21 1c 6e 80 9b 11 16 b7 a2 00 e0 dd 01 5a 87 7d 90 03 71 08 08 f2 0f 88 a0 23 bc db 64 2b 01 3c d9 29 35 07 38 f2 a2 4e 0f 0f bf 65 9d 97 0a 22 c8 68 6b 9b ab ba 53 38 4c 90 dd bc 6f 74 4c e4 88 d6 4d 31 22 38 9f 26 91 a8 e9 69 36 1e bb 2a 8e 53 36 3a 2a 37 3f f9 72 c5 24 2f 73 80 63 dc d3 a7 7e 01 f9 fa ff 00 81 a1 5a Data Ascii: (n"cdPcq.%bB2klT[kii dO^&$;^)Y]b#,'s+#9Y$lE!nZ}q#d+<)58Ne"hkS8LotLM1"8&i6S6:7?r$/sc~Z
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 75 60 50 6e 80 23 1f 63 ba 02 54 2f 01 01 21 b2 5b b2 2c 0f f3 2f b9 40 35 d2 5b 84 03 7c cf 54 00 9d 28 24 dc 15 07 90 4b ef dc ab 24 e8 5f 0c b4 52 53 16 8f bc 09 1a f8 8e c0 38 58 87 36 fe bf 84 81 ec ee e7 71 68 97 b6 c4 6f e8 a0 24 e1 78 7d 66 29 59 1d 05 05 3b e6 9e 57 06 b1 8c 17 24 ff 00 8f 5d 94 86 f0 c9 9e 1f 81 fb bc d9 ae ae ac b2 aa da 61 c3 e1 7c d1 07 ee 07 9d 23 49 16 07 9d 23 82 77 ec 4c 6e b7 45 6b b7 f6 59 e9 37 4f f2 35 04 d3 d7 e1 f4 94 d5 30 34 35 c2 18 d8 eb 07 03 f8 5c f8 c4 8e 06 e7 e2 2e 70 23 d9 6f 14 ab 96 f7 b5 ba 43 af ea 25 66 58 95 94 b9 78 61 18 b5 33 db a4 53 54 52 3a 9e 56 71 f0 b1 ed d4 24 16 dc 83 a4 f7 dc 2a de 51 5d de e6 2b 5d 9e ea eb ea be f9 82 0f e1 b5 8d 73 bc c8 61 7b 01 71 b6 f7 68 00 38 5b f2 b8 6f b5 ac 42 Data Ascii: u`Pn#cT/![,/@5[\|T($K$_RS8X6qho$x}f)Y;W$]a\|#I#wLnEkY7O5045\.p#oC%fXxa3STR:Vq$*Q]+]sa{qh8[oB
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: db b2 ed 83 f4 2f 3b e4 5c 5a 2c 53 2e 54 49 2c 7e 60 74 a6 16 88 dd eb ab 4d f7 37 df 6f 4b 6c 8d f2 3e db 39 a6 c9 d8 fe 2f 82 bf fc ae c0 68 71 2c 2a 69 5e f7 41 3c 02 58 e0 9a df 0b 9b 76 92 cf 88 92 1c d2 d2 cd 44 de e0 ad 7d 4c 2d 46 3d 8a 64 78 6b e8 5f 84 53 bb 17 92 9a b2 27 ff 00 12 a1 91 e1 d5 23 50 b0 7c 35 0e f8 9d 2b 6c 0b 5e e2 5e fd 2e 05 ef d4 d0 89 b3 38 a6 c7 32 75 67 c3 2c 90 65 4a fc 57 25 d4 cf 8d e2 f4 d1 08 2a 66 63 23 86 73 4b a8 e9 f3 22 31 86 cb bb 03 35 00 1c 3e 00 41 2a eb 39 86 99 cb 8c f3 f6 52 c4 f2 9e 34 fa 2c 43 0d 92 91 fa 5a 5f 13 da e6 ba 27 91 72 c7 35 c0 39 8e 07 96 b8 02 3f 74 96 c6 55 85 20 1c d6 fb a0 09 a7 dd 2c ad 44 59 48 b1 a4 5d 5a 0a d6 8b df d1 41 c1 fa 02 95 44 64 66 b6 c2 dd ca ca d6 5c 0f 18 3b 0e ca 2d Data Ascii: /;\Z,S.TI,~`tM7oKl>9/hq,i^A<XvD}L-F=dxk_S'#P\|5+l^^.82ug,eJW%fc#sK"15>A*9R4,CZ_'r59?tU ,DYH]ZADdf\;-
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 4c 91 cd f7 54 02 90 01 d9 5a 01 74 60 94 02 f9 67 d1 05 92 f9 69 fa 4d 15 20 a4 03 9a dd 5d d0 05 6a 59 07 81 6e f7 53 b9 62 20 29 4e 45 88 0d d5 41 76 a0 6f d9 54 46 12 33 0d ae 9a b2 73 0d ae a0 bb 3d 58 93 74 7b a0 88 e6 ef ca 9e d5 d8 64 69 e5 24 84 ef 4e e8 06 93 63 65 60 e0 2e 80 ad 3e e9 64 1e 19 b5 82 7b 80 82 33 e8 96 42 93 07 0e f6 53 33 95 61 4f 20 9d bb 27 13 94 84 e7 7b 29 04 92 12 22 f3 e3 3a d9 7d 2e db f0 bb d0 fe 86 de b6 f9 ab 05 86 07 c8 03 9c d7 34 3b 76 d9 b7 73 87 b0 ef bd c7 a6 c8 0d d1 d2 0e 92 61 19 a7 08 9b 19 c4 33 83 70 e6 c6 e7 0f 2d d4 2f 9a 58 b4 91 f1 e8 6c 8d d8 8b f0 eb fc 3e eb 2b 6a ec 0e 8d c3 e9 32 7e 1d 83 bf 2b 65 fc 4a 7a b8 62 89 ad a6 c6 66 93 7a b0 d7 17 36 29 1a 7e 26 b0 17 12 c0 37 b6 a0 e3 7f c3 76 9e 10 c7 Data Ascii: LTZt`giM ]jYnSb )NEAvoTF3s=Xt{di$Nce`.>d{3BS3aO '{)":}.4;vsa3p-/Xl>+j2~+eJzbfz6)~&7v
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: a7 55 65 39 e9 e7 83 90 f6 33 e1 f3 03 5c 35 39 a7 9f 52 08 ef 6e df 54 1d 19 17 98 c1 1b 5e f0 6c f7 18 f4 96 d8 da fb 1e 07 f8 28 5e 56 69 63 d3 36 96 dd da ae 40 b5 bb 6d eb df f6 59 4d 79 74 c5 b8 5a df 59 a4 b9 ae 78 d4 76 37 1b 85 86 ee 5d 91 04 6e 25 e5 9b ff 00 f3 2d 29 76 7a 94 65 38 0e 2f 46 e2 1e fa b0 c7 01 76 82 2e 5c 7b 85 df a3 7a c3 cb f2 2b 6f c2 e1 88 66 10 f3 33 1b 20 21 db 12 f0 1c d2 7f e8 b6 b6 ae 11 4d 16 29 8a d6 b2 a6 72 e8 79 3c 90 39 5c d7 9d dc ba f4 a3 68 30 54 9d 8b 5d 62 39 17 4b a6 93 1b d8 a7 5d f0 d7 67 3e 95 e3 b4 86 84 d6 d4 d3 d0 4b 34 51 b5 8d 91 ce 0c 61 36 0d 3f 89 c3 90 01 04 da d7 17 5a 52 ef 3f c8 d1 d9 ea ab c6 5a 86 e5 1a 2a da ec 22 63 99 20 12 bd f0 0f 32 18 da c9 46 bb 10 63 73 ae 0b 4d ce ad 47 76 8d ae ba Data Ascii: Ue93\59RnT^l(^Vic6@mYMytZYxv7]n%-)vze8/Fv.\{z+of3 !M)ry<9\h0T]b9K]g>K4Qa6?ZR?Z*"c 2FcsMGv
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 02 c5 30 77 99 ec 80 26 a3 d9 01 08 9b 28 56 48 4d c1 1e a8 33 1c 38 ba 13 c9 2d bd d1 61 93 81 bf 6b 20 cf 06 e8 c9 9e dd d0 9c 08 05 fb a1 47 11 64 02 8f ec 42 64 fd 3e 88 19 2a 95 1a e7 6a 2a 82 88 42 01 70 d3 62 81 21 2b 06 20 6e 38 1b a8 b0 39 86 c5 0b 48 6b b4 a2 c7 93 49 b2 09 5a f7 bd 91 20 9a bd 90 37 28 34 9d 87 24 d8 20 0b 00 7c 12 b4 b1 da 9c f1 f8 40 bb 5e 3f a4 fa de c8 0c ba 3c b7 89 d2 e2 5f 74 c3 64 8a 36 08 e3 75 44 33 92 d7 34 96 35 cf 6e 97 10 24 b1 d4 3e 12 6e 1b f3 45 bd 28 6f 5e 99 e4 fc af 88 e5 8a de a1 d4 61 ad 97 13 c0 6a 63 0d 6c 60 3a 39 25 24 79 24 06 b4 3a c3 e3 25 c5 df 96 da 40 b3 8c e7 27 65 ca 7a ca f9 70 1a 87 e2 b8 74 50 ca e9 5e f7 81 26 a2 62 77 e1 3a ad 7b b5 d7 6d c0 3d ae 00 3b 56 20 98 06 28 ea 68 20 9d 95 b5 ac Data Ascii: 0w&(VHM38-ak GdBd>jBpb!+ n89HkIZ 7(4$ \|@^?<_td6uD345n$>nE(o^ajcl`:9%$y$:%@'ezptP^&bw:{m=;V (h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49820	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	538	OUT	GET /aaq/wf/wf-video-3.1.2-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:28 UTC	803	IN	HTTP/1.1 200 OK x-amz-id-2: lt6NUA8WyjdoUuWElkceCIxDUAuz4hs+NorV3dXVUljYx+pku5ih5la2hbDg629S0pNKu3HUPpA= x-amz-request-id: G1D6CDKK5KB3YXZY Date: Fri, 29 Mar 2024 00:41:29 GMT Last-Modified: Fri, 09 Feb 2024 08:42:19 GMT ETag: "798299e9fbb5ccb39c74e2cb1b118f39" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: M63GV62aiVRXg270pL.Hqqb3qJzMf0Sc Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 29755 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:28 UTC	792	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 76 69 64 65 6f 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 76 69 64 65 6f 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-video",[],t):"object"==typeof exports?exports["wafer-video"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 7d 2c 74 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 61 71 2f 77 66 2f 22 2c 74 28 74 2e 73 3d 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 29 7d 28 7b 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 Data Ascii: },t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,i){"use strict";function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n(e,t){if(!e)throw new ReferenceError("this h
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 5f 73 74 61 74 65 2c 61 3d 69 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 3b 28 69 2e 70 6c 61 79 6c 69 73 74 4d 61 70 2e 67 65 74 28 65 29 7c 7c 5b 5d 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 69 3d 61 2e 67 65 74 28 65 29 7c 7c 7b 7d 2c 6e 3d 69 2e 69 6e 73 74 61 6e 63 65 3b 6e 26 26 28 6e 2e 63 6f 6e 66 69 67 2e 69 64 3d 3d 3d 74 3f 6e 2e 70 6c 61 79 6c 69 73 74 49 74 65 6d 41 63 74 69 76 65 3d 21 30 3a 6e 2e 70 6c 61 Data Ascii: }}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function u(e,t){var i=this._state,a=i.elementInstances;(i.playlistMap.get(e)\|\|[]).forEach(function(e){var i=a.get(e)\|\|{},n=i.instance;n&&(n.config.id===t?n.playlistItemActive=!0:n.pla
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 69 64 65 6f 4d 6f 75 73 65 4c 65 61 76 65 22 5d 2c 49 3d 5b 5d 2c 56 3d 2f 5c 77 7b 38 7d 2d 5c 77 7b 34 7d 2d 5c 77 7b 34 7d 2d 5c 77 7b 34 7d 2d 5c 77 7b 31 32 7d 2f 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6d 65 64 69 61 49 74 65 6d 73 2c 69 3d 65 2e 70 61 67 65 53 70 61 63 65 49 64 2c 61 3d 65 2e 72 65 67 69 6f 6e 2c 6e 3d 65 2e 73 69 74 65 2c 72 3d 65 2e 6c 61 6e 67 2c 73 3d 65 2e 70 6c 75 67 69 6e 43 6f 6e 66 69 67 73 2c 6c 3d 76 6f 69 64 20 30 3d 3d 3d 73 3f 7b 7d 3a 73 2c 64 3d 65 2e 72 61 70 69 64 43 6f 6e 66 69 67 2c 75 3d 65 2e 76 69 64 65 6f 52 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 2c 63 3d 28 65 2e 66 6f 72 63 65 44 69 73 61 62 6c 65 46 69 72 73 74 41 64 2c 65 2e 6d 65 64 69 61 49 74 65 6d 2c 65 2e 70 6c 61 79 Data Ascii: ideoMouseLeave"],I=[],V=/\w{8}-\w{4}-\w{4}-\w{4}-\w{12}/,S=function(e){var t=e.mediaItems,i=e.pageSpaceId,a=e.region,n=e.site,r=e.lang,s=e.pluginConfigs,l=void 0===s?{}:s,d=e.rapidConfig,u=e.videoRecommendations,c=(e.forceDisableFirstAd,e.mediaItem,e.play
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 72 3d 69 2e 65 72 72 6f 72 43 6c 61 73 73 2c 6f 3d 69 2e 73 65 6c 65 63 74 6f 72 2c 73 3d 69 2e 73 75 63 63 65 73 73 43 6c 61 73 73 3b 61 28 74 68 69 73 2c 74 29 3b 76 61 72 20 6c 3d 6e 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 7b 65 72 72 6f 72 43 6c 61 73 73 3a 72 2c 73 65 6c 65 63 74 6f 72 3a 6f 2c 73 75 63 63 65 73 73 43 6c 61 73 73 3a 73 7d 2c 7b 53 54 41 54 45 5f 41 54 54 52 53 3a 49 7d 29 29 2c 64 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 5f 2b 22 73 72 63 22 29 2c 75 3d 65 2e 67 65 74 41 74 74 72 69 62 75 Data Ascii: id 0!==arguments[1]?arguments[1]:{},r=i.errorClass,o=i.selector,s=i.successClass;a(this,t);var l=n(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,e,{errorClass:r,selector:o,successClass:s},{STATE_ATTRS:I})),d=e.getAttribute(_+"src"),u=e.getAttribu
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 65 74 45 6c 65 6d 3a 53 2c 74 72 69 67 67 65 72 3a 66 2c 74 79 70 65 3a 63 2c 76 69 64 65 6f 48 61 6e 64 6c 65 3a 6e 75 6c 6c 3d 3d 3d 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 68 3f 31 3a 4e 75 6d 62 65 72 28 68 29 2c 76 69 64 65 6f 4c 6f 61 64 43 6c 61 73 73 4e 61 6d 65 3a 54 2c 61 64 56 69 65 77 43 6f 6e 74 69 6e 75 6f 75 73 3a 6e 75 6c 6c 3d 3d 3d 56 7c 7c 76 6f 69 64 20 30 3d 3d 3d 56 3f 30 3a 4e 75 6d 62 65 72 28 56 29 7d 29 2c 6c 2e 5f 73 74 61 74 65 3d 76 28 7b 7d 2c 6c 2e 5f 73 74 61 74 65 2c 7b 61 64 50 6c 61 79 69 6e 67 3a 21 31 2c 61 64 56 69 65 77 65 64 3a 21 31 2c 63 72 65 61 74 65 64 3a 21 31 2c 6d 6f 75 6e 74 65 64 3a 21 31 2c 70 6c 61 79 69 6e 67 3a 21 31 2c 70 6c 61 79 69 6e 67 41 73 50 6c 61 79 6c 69 73 74 3a 21 31 2c 72 65 6e 64 65 72 49 6e Data Ascii: etElem:S,trigger:f,type:c,videoHandle:null===h\|\|void 0===h?1:Number(h),videoLoadClassName:T,adViewContinuous:null===V\|\|void 0===V?0:Number(V)}),l._state=v({},l._state,{adPlaying:!1,adViewed:!1,created:!1,mounted:!1,playing:!1,playingAsPlaylist:!1,renderIn
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 74 3d 65 2e 63 6f 6e 66 69 67 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 7b 7d 3a 74 2c 61 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 6e 3d 61 2e 74 79 70 65 2c 72 3d 61 2e 70 6c 61 79 6c 69 73 74 54 72 69 67 67 65 72 3b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 22 79 76 69 64 65 6f 22 3a 74 68 69 73 2e 5f 63 72 65 61 74 65 59 56 69 64 65 6f 28 69 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 79 76 69 64 65 6f 50 6c 61 79 6c 69 73 74 22 3a 76 61 72 20 6f 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 73 3d 6f 2e 65 6c 65 6d 2c 6c 3d 6f 2e 74 61 72 67 65 74 45 6c 65 6d 3b 74 68 69 73 2e 61 64 64 54 6f 50 6c 61 79 6c 69 73 74 46 6f 72 56 69 64 65 6f 28 6c 2c 73 29 2c 73 2e 63 6c 61 73 73 Data Ascii: !==arguments[0]?arguments[0]:{},t=e.config,i=void 0===t?{}:t,a=this._util,n=a.type,r=a.playlistTrigger;switch(n){case"yvideo":this._createYVideo(i);break;case"yvideoPlaylist":var o=this._util,s=o.elem,l=o.targetElem;this.addToPlaylistForVideo(l,s),s.class
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 28 73 29 7d 7d 7d 7d 2c 7b 6b 65 79 3a 22 5f 63 72 65 61 74 65 59 56 69 64 65 6f 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 61 3d 69 2e 66 6f 72 63 65 2c 6e 3d 76 6f 69 64 20 30 21 3d 3d 61 26 26 61 2c 72 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 61 79 65 72 3b 69 66 28 6e 7c 7c 21 72 29 7b 76 61 72 20 73 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 6c 3d 73 2e 65 Data Ascii: (s)}}}},{key:"_createYVideo",value:function(){var e=this,t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},i=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},a=i.force,n=void 0!==a&&a,r=this._util.player;if(n\|\|!r){var s=this._util,l=s.e
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 64 43 6f 6e 66 69 67 3a 7b 70 61 67 65 50 61 72 61 6d 73 3a 43 7d 7d 2c 77 2c 7b 61 75 74 6f 70 6c 61 79 3a 21 21 70 7d 29 3b 62 3d 53 28 62 29 3b 74 72 79 7b 69 66 28 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 61 79 65 72 29 74 72 79 7b 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 61 79 65 72 2e 64 65 73 74 72 6f 79 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 61 79 65 72 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 59 41 48 4f 4f 2e 56 69 64 65 6f 50 6c 61 74 66 6f 72 6d 2e 56 69 64 65 6f 50 6c 61 79 65 72 28 62 29 2c 21 64 29 7b 76 61 72 20 45 3d 6c 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 77 61 66 65 72 2d 79 76 69 64 65 6f 22 29 5b 30 5d 3b 45 26 26 45 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 Data Ascii: dConfig:{pageParams:C}},w,{autoplay:!!p});b=S(b);try{if(this._util.player)try{this._util.player.destroy()}catch(e){}if(this._util.player=new window.YAHOO.VideoPlatform.VideoPlayer(b),!d){var E=l.getElementsByClassName("wafer-yvideo")[0];E&&E.parentNode.re
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 6d 75 74 65 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 46 75 6c 6c 73 63 72 65 65 6e 43 6c 69 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 22 79 76 69 64 65 6f 22 3d 3d 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 74 79 70 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 61 79 65 72 3b 74 26 26 74 2e 73 65 74 46 75 6c 6c 73 63 72 65 65 6e 28 21 74 2e 67 65 74 46 75 6c 6c 73 63 72 65 65 6e 28 29 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 56 69 64 65 6f 4d 6f 75 73 65 45 6e 74 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 22 79 76 69 64 65 6f 50 6c 61 79 6c 69 73 74 22 3d 3d 3d 74 68 69 73 2e 5f 75 74 Data Ascii: mute)}},{key:"handleFullscreenClick",value:function(e){if(e.preventDefault(),"yvideo"===this._util.type){var t=this._util.player;t&&t.setFullscreen(!t.getFullscreen())}}},{key:"handleVideoMouseEnter",value:function(){var e=this;"yvideoPlaylist"===this._ut

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49819	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	537	OUT	GET /aaq/wf/wf-text-1.2.0-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:28 UTC	872	IN	HTTP/1.1 200 OK x-amz-id-2: 4rnVKYtNwug4WxZyWCOpsmmuyq+jLGBKFnECqMHVGmedFJIFFJW5jg3PHxhVtjkMlvhX6JoBHYk5mnAS96HU4oBM5pHGee/q x-amz-request-id: WMAACC3F42PQ22M8 Date: Thu, 28 Mar 2024 10:24:53 GMT Last-Modified: Mon, 23 Aug 2021 06:24:25 GMT ETag: "956dabf4d28930bc42d934995b814d6d" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 8acCB8Oldv6HTX7VU3iQtZux9BoZJqhX Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 3412 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 51396 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 74 65 78 74 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 74 65 78 74 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-text",[],t):"object"==typeof exports?exports["wafer-text"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 Data Ascii: ype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function i(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a func
2024-03-29 00:41:28 UTC	812	IN	Data Raw: 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 66 3d 72 2e 73 65 6c 65 63 74 6f 72 3b 6f 28 74 68 69 73 2c 74 29 3b 76 61 72 20 69 3d 6e 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 7b 73 65 6c 65 63 74 6f 72 3a 66 7d 2c 7b 53 54 41 54 45 5f 41 54 54 52 53 3a 6c 7d 29 29 3b 72 65 74 75 72 6e 20 69 2e 5f 75 74 69 6c 3d 75 28 7b 7d 2c 69 2e 5f 75 74 69 6c 2c 7b 65 6c 65 6d 3a 65 7d 29 2c 69 2e 73 74 61 74 65 44 69 64 55 70 64 61 74 65 28 29 2c 69 7d 72 65 74 75 72 6e 20 66 28 74 2c 65 29 2c 73 28 74 2c 5b 7b 6b 65 79 3a 22 73 74 61 74 Data Ascii: length>1&&void 0!==arguments[1]?arguments[1]:{},f=r.selector;o(this,t);var i=n(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,e,{selector:f},{STATE_ATTRS:l}));return i._util=u({},i._util,{elem:e}),i.stateDidUpdate(),i}return f(t,e),s(t,[{key:"stat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49818	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	537	OUT	GET /aaq/wf/wf-bind-1.1.3-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:28 UTC	884	IN	HTTP/1.1 200 OK x-amz-id-2: 5AHJVSvDbupHPB5xR86B86oUHdijiNvwcni/KntsdYB1xN8I6vbuicFA6VyBd05Lv7jbR+QOh3rfx/O+nrVUfCopZMyef2lrqOYTE92IF98= x-amz-request-id: N88224DFCHE0SWM1 Date: Thu, 28 Mar 2024 11:13:31 GMT Last-Modified: Tue, 11 Jan 2022 10:14:03 GMT ETag: "9fba2531ffa6cb0b4d3d34c56c295495" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: Qyt1s0oNtpHMZryrsEe7nbfplEXvu_oO Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 3666 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 48478 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 62 69 6e 64 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 62 69 6e 64 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-bind",[],t):"object"==typeof exports?exports["wafer-bind"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 Data Ascii: ype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a func
2024-03-29 00:41:28 UTC	1066	IN	Data Raw: 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 69 3d 72 2e 73 65 6c 65 63 74 6f 72 3b 6f 28 74 68 69 73 2c 74 29 3b 66 6f 72 28 76 61 72 20 61 3d 5b 5d 2c 66 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 75 3d 30 3b 75 3c 66 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 7b 76 61 72 20 73 3d 66 5b 75 5d 2e 6e 61 6d 65 2e 6d 61 74 63 68 28 70 29 3b 73 26 26 73 5b 31 5d 26 26 61 2e 70 75 73 68 28 73 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 76 61 72 20 6c 3d 6e 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c Data Ascii: ){var r=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},i=r.selector;o(this,t);for(var a=[],f=e.attributes,u=0;u<f.length;u++){var s=f[u].name.match(p);s&&s[1]&&a.push(s[1].toLowerCase())}var l=n(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49817	54.210.0.216	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	753	OUT	GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1 Host: guce.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-03-29 00:41:28 UTC	206	IN	HTTP/1.1 200 OK Connection: close Server: guce Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Type: application/json Content-Length: 140 Date: Fri, 29 Mar 2024 00:41:28 GMT
2024-03-29 00:41:28 UTC	140	IN	Data Raw: 7b 22 69 64 65 6e 74 69 66 69 65 72 22 3a 22 31 61 72 6b 62 74 74 6a 30 63 33 68 39 22 2c 22 69 64 65 6e 74 69 66 69 65 72 54 79 70 65 22 3a 22 62 69 64 22 2c 22 74 6f 73 52 65 63 6f 72 64 73 22 3a 7b 22 6e 6f 6e 45 75 22 3a 7b 22 63 6f 6e 73 65 6e 74 45 76 65 6e 74 73 22 3a 7b 22 69 61 62 43 43 50 41 22 3a 22 31 59 4e 4e 22 2c 22 67 70 70 22 3a 22 44 42 41 41 22 2c 22 67 70 70 53 69 64 22 3a 22 2d 31 22 7d 7d 7d 7d Data Ascii: {"identifier":"1arkbttj0c3h9","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49821	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	538	OUT	GET /aaq/wf/wf-image-1.4.0-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:28 UTC	834	IN	HTTP/1.1 200 OK x-amz-id-2: rBX6R2Fx2xC72HEBSSEqmkrfqvJDeYPlBFW1NuD2X8Wob7+IH6sMIGcXNx/tiRnCD2qsMphFaLEt+mVzVW0PFXKztFf0pJs2cXEmcDJRiq8= x-amz-request-id: G1D140SF20XKJ965 Date: Fri, 29 Mar 2024 00:41:29 GMT Last-Modified: Fri, 15 Apr 2022 16:44:15 GMT ETag: "2e3968239b770b8186bb480d513311cd" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: kGIIRCHIdgWfcr_wSmm8v8C_z6K3HVA8 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 6645 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 69 6d 61 67 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 69 6d 61 67 65 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-image",[],t):"object"==typeof exports?exports["wafer-image"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 2c 72 29 7b 72 26 26 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 73 65 74 22 2c 72 29 2c 65 2e 73 72 63 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 72 29 7b 76 61 72 20 61 3d 65 2e 67 65 Data Ascii: totype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function n(e,t,r){r&&e.setAttribute("srcset",r),e.src=t}function i(e,t,r){var a=e.ge
2024-03-29 00:41:28 UTC	318	IN	Data Raw: 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 72 3d 65 2e 72 6f 6f 74 2c 73 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 64 6f 63 75 6d 65 6e 74 3a 72 3b 61 28 74 68 69 73 2c 74 29 3b 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 66 69 67 73 2c 69 3d 6e 2e 64 61 72 6b 53 72 63 73 65 74 2c 6c 3d 6e 2e 6e 61 74 69 76 65 43 6c 61 73 73 2c 75 3d 6e 2e 73 65 6c 65 63 74 6f 72 2c 66 3d 6e 2e 73 65 70 61 72 61 74 6f 72 2c 64 3d 6e 2e 73 72 63 73 65 74 2c 70 3d 6e 2e 73 75 63 63 65 73 73 43 6c 61 73 73 2c 79 3d 6f 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 72 6f 6f 74 3a 73 2c 73 65 6c 65 63 74 6f 72 3a 75 2c 73 75 63 63 65 73 73 43 6c Data Ascii: uments[0]:{},r=e.root,s=void 0===r?document:r;a(this,t);var n=t.prototype.configs,i=n.darkSrcset,l=n.nativeClass,u=n.selector,f=n.separator,d=n.srcset,p=n.successClass,y=o(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,{root:s,selector:u,successCl
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 74 4f 66 66 73 65 74 58 3a 30 2c 64 65 66 61 75 6c 74 4f 66 66 73 65 74 59 3a 35 30 30 2c 6e 61 74 69 76 65 43 6c 61 73 73 3a 6c 2c 73 65 70 61 72 61 74 6f 72 3a 66 2c 73 72 63 73 65 74 3a 64 7d 29 2c 79 2e 73 79 6e 63 28 29 2c 79 7d 72 65 74 75 72 6e 20 73 28 74 2c 65 29 2c 6c 28 74 2c 5b 7b 6b 65 79 3a 22 6e 61 74 69 76 65 4c 61 7a 79 4c 6f 61 64 45 6c 65 6d 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 67 65 74 49 6d 61 67 65 4d 65 74 61 57 69 74 68 54 79 70 65 28 65 29 2c 72 3d 74 2e 74 79 70 65 3b 69 66 28 72 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 62 61 73 65 2e 63 6f 6c 6f 72 53 63 68 65 6d 61 2c 6f 3d 22 64 61 72 6b 22 3d 3d 3d 61 2c 73 3d 74 68 69 73 2e 5f 6f 70 74 Data Ascii: tOffsetX:0,defaultOffsetY:500,nativeClass:l,separator:f,srcset:d}),y.sync(),y}return s(t,e),l(t,[{key:"nativeLazyLoadElement",value:function(e){var t=this._getImageMetaWithType(e),r=t.type;if(r){var a=window.wafer.base.colorSchema,o="dark"===a,s=this._opt
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 26 26 73 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 72 29 74 68 72 6f 77 20 61 7d 7d 7d 7d 2c 7b 6b 65 79 3a 22 5f 61 64 64 42 6f 75 6e 64 61 72 79 53 75 63 63 65 73 73 43 6c 61 73 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 66 2d 62 6f 75 6e 64 61 72 79 22 29 2c 72 3d 74 26 26 62 28 65 2c 74 29 3b 72 26 26 28 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 69 6d 61 67 65 2d 62 6f 75 6e 64 61 72 79 2d 73 75 63 63 65 73 73 22 29 2c 72 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 69 6d 61 67 65 2d 62 6f 75 6e 64 61 72 79 2d 65 72 72 6f 72 22 29 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 69 74 65 Data Ascii: &&s.return()}finally{if(r)throw a}}}},{key:"_addBoundarySuccessClass",value:function(e){var t=e.getAttribute("data-wf-boundary"),r=t&&b(e,t);r&&(r.classList.add("wafer-image-boundary-success"),r.classList.remove("wafer-image-boundary-error"))}},{key:"_ite
2024-03-29 00:41:28 UTC	1127	IN	Data Raw: 22 2c 76 29 2c 6e 28 74 2c 73 2c 69 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 61 64 64 44 61 72 6b 6d 6f 64 65 41 74 74 72 69 62 75 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2c 72 3d 74 2e 64 61 72 6b 53 72 63 2c 61 3d 74 2e 64 61 72 6b 53 72 63 73 65 74 3b 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 61 29 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 68 2b 22 64 61 72 6b 6d 6f 64 65 2d 66 61 6c 6c 62 61 63 6b 2d 73 72 63 22 29 29 26 26 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 66 2d 68 61 73 2d 64 61 72 6b 6d 6f 64 65 22 2c 22 31 22 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 67 65 74 49 6d 61 67 65 4d 65 Data Ascii: ",v),n(t,s,i)}},{key:"_addDarkmodeAttribute",value:function(e){var t=this._options,r=t.darkSrc,a=t.darkSrcset;(e.getAttribute(r)\|\|e.getAttribute(a)\|\|e.getAttribute(h+"darkmode-fallback-src"))&&e.setAttribute("data-wf-has-darkmode","1")}},{key:"_getImageMe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49822	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	539	OUT	GET /aaq/wf/wf-rapid-1.10.8-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:28 UTC	815	IN	HTTP/1.1 200 OK x-amz-id-2: cn6NIlXd/9451kcRk5syY6eIpxvM/MH5RTZ5kmz64svn7O6Q+ZrbQ/cRnkTRY0jqUKa7U/7Fl5frxBkDt+8agQ== x-amz-request-id: G1D0NZNEVB8FQRFA Date: Fri, 29 Mar 2024 00:41:29 GMT Last-Modified: Thu, 16 Nov 2023 07:51:34 GMT ETag: "ea64a20375abf74f7191d89062a7d4f4" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: Q69wD21Xmgx79j1lWnoee6Lougj4LC2V Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 12647 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:28 UTC	779	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 72 61 70 69 64 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 72 61 70 69 64 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-rapid",[],t):"object"==typeof exports?exports["wafer-rapid"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 74 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 61 71 2f 77 66 2f 22 2c 74 28 74 2e 73 3d 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 29 7d 28 7b 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 Data Ascii: rty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function i(e,t){if(!e)throw new Reference
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 72 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 72 2c 65 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 75 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 75 74 69 6c 73 2e 67 65 74 2c 66 3d 6e 75 6c 6c 2c 64 3d 6e 75 6c 6c 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 28 64 3d 65 29 2c 21 66 26 26 64 26 26 28 66 3d 75 28 77 69 6e 64 6f 77 2c 64 29 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 66 2e 72 65 66 72 Data Ascii: ct.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}Object.defineProperty(t,"__esModule",{value:!0});var u=window.wafer.utils.get,f=null,d=null,p=function(e){return e&&(d=e),!f&&d&&(f=u(window,d))&&"function"!=typeof f.refr
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 69 6e 64 6f 77 2e 77 61 66 65 72 2c 62 3d 77 2e 62 61 73 65 2c 5f 3d 77 2e 63 6f 6e 73 74 61 6e 74 73 2c 6d 3d 77 2e 75 74 69 6c 73 2c 6b 3d 77 2e 57 61 66 65 72 42 61 73 65 43 6c 61 73 73 2c 4f 3d 6d 2e 67 65 74 44 61 74 61 59 6c 6b 2c 54 3d 6d 2e 67 65 74 59 6c 6b 4d 61 70 46 6f 72 4e 6f 64 65 2c 6a 3d 6d 2e 73 65 74 54 69 6d 65 6f 75 74 2c 56 3d 6d 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 2c 49 3d 5f 2e 41 54 54 52 5f 50 52 45 46 49 58 2c 45 3d 5b 5d 2c 50 3d 5b 22 68 61 6e 64 6c 65 43 6c 69 63 6b 22 2c 22 68 61 6e 64 6c 65 52 61 70 69 64 4d 6f 75 73 65 45 6e 74 65 72 22 2c 22 68 61 6e 64 6c 65 52 61 70 69 64 4d 6f 75 73 65 4c 65 61 76 65 22 5d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 72 3d 61 72 Data Ascii: indow.wafer,b=w.base,_=w.constants,m=w.utils,k=w.WaferBaseClass,O=m.getDataYlk,T=m.getYlkMapForNode,j=m.setTimeout,V=m.clearTimeout,I=_.ATTR_PREFIX,E=[],P=["handleClick","handleRapidMouseEnter","handleRapidMouseLeave"],C=function(e){function t(e){var r=ar
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 4c 6f 63 6b 3d 21 31 2c 6f 2e 5f 73 74 61 74 65 2e 69 6e 56 69 65 77 54 69 6d 65 6f 75 74 49 6e 73 74 61 6e 63 65 3d 6e 75 6c 6c 2c 6f 2e 5f 75 74 69 6c 2e 74 72 69 67 67 65 72 43 6f 75 6e 74 3d 68 2e 6c 65 6e 67 74 68 2d 31 29 2c 50 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 5b 65 5d 3d 6f 5b 65 5d 2e 62 69 6e 64 28 6f 29 7d 29 2c 22 6f 6e 4c 6f 61 64 22 3d 3d 3d 73 3f 28 6f 2e 5f 62 65 61 63 6f 6e 54 72 69 67 67 65 72 28 29 2c 6f 2e 64 65 73 74 72 6f 79 28 29 29 3a 22 6d 6f 75 73 65 65 6e 74 65 72 22 3d 3d 3d 73 26 26 28 6f 2e 5f 73 74 61 74 65 2e 6d 6f 75 73 65 45 6e 74 65 72 54 69 6d 65 6f 75 74 3d 6e 75 6c 6c 2c 6f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 29 2c 6f 7d 72 65 74 75 72 6e 20 61 28 74 2c 65 29 2c Data Ascii: Lock=!1,o._state.inViewTimeoutInstance=null,o._util.triggerCount=h.length-1),P.forEach(function(e){o[e]=o[e].bind(o)}),"onLoad"===s?(o._beaconTrigger(),o.destroy()):"mouseenter"===s&&(o._state.mouseEnterTimeout=null,o.addEventListeners()),o}return a(t,e),
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 74 61 74 65 2e 69 6e 56 69 65 77 54 69 6d 65 6f 75 74 49 6e 73 74 61 6e 63 65 3d 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 65 2e 5f 73 74 61 74 65 2e 69 6e 56 69 65 77 54 69 6d 65 6f 75 74 49 6e 73 74 61 6e 63 65 3d 6e 75 6c 6c 2c 65 2e 5f 73 74 61 74 65 2e 69 6e 56 69 65 77 43 6f 75 6e 74 3e 65 2e 5f 75 74 69 6c 2e 74 72 69 67 67 65 72 43 6f 75 6e 74 2d 31 29 72 65 74 75 72 6e 20 65 2e 5f 62 65 61 63 6f 6e 54 72 69 67 67 65 72 28 29 2c 76 6f 69 64 28 65 2e 5f 73 74 61 74 65 2e 69 6e 56 69 65 77 43 6f 75 6e 74 3d 30 29 3b 65 2e 5f 62 65 61 63 6f 6e 54 72 69 67 67 65 72 28 29 2c 2b 2b 65 2e 5f 73 74 61 74 65 2e 69 6e 56 69 65 77 43 6f 75 6e 74 2c 65 2e 6e 6f 64 65 49 6e 56 69 65 77 28 29 7d 2c 74 68 69 73 2e 5f 75 74 69 6c 2e 74 72 69 67 67 65 72 49 Data Ascii: tate.inViewTimeoutInstance=j(function(){if(e._state.inViewTimeoutInstance=null,e._state.inViewCount>e._util.triggerCount-1)return e._beaconTrigger(),void(e._state.inViewCount=0);e._beaconTrigger(),++e._state.inViewCount,e.nodeInView()},this._util.triggerI
2024-03-29 00:41:28 UTC	1097	IN	Data Raw: 7b 69 66 28 69 29 74 68 72 6f 77 20 61 7d 7d 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 20 74 3b 69 66 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 69 6e 20 4f 62 6a 65 63 74 28 74 29 29 72 65 74 75 72 6e 20 65 28 74 2c 72 29 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 4d 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 Data Ascii: {if(i)throw a}}return r}return function(t,r){if(Array.isArray(t))return t;if(Symbol.iterator in Object(t))return e(t,r);throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),M=Object.assign\|\|function(e){for(var t=1;t<arguments.le
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 29 26 26 21 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 66 2d 72 61 70 69 64 2d 74 72 69 67 67 65 72 22 29 26 26 28 72 3d 74 29 2c 74 3d 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 72 7d 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 74 2e 67 65 74 28 65 29 3b 69 66 28 21 72 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6e 3d 72 2e 69 6e 73 74 61 6e 63 65 2c 69 3d 6e 2e 5f 75 74 69 6c 2e 74 72 69 67 67 65 72 3b 69 66 28 21 65 2e 69 64 26 26 69 29 72 65 74 75 72 6e 21 31 3b 69 66 28 21 65 2e 69 64 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 61 3d 70 28 29 3b 69 66 28 21 61 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6f 3d 58 28 65 29 2c 73 3d 6f 2e 69 64 2c 6c 3d 21 31 3b 69 66 28 61 2e 69 73 4d Data Ascii: )&&!t.getAttribute("data-wf-rapid-trigger")&&(r=t),t=t.parentElement;return r},q=function(e,t){var r=t.get(e);if(!r)return!1;var n=r.instance,i=n._util.trigger;if(!e.id&&i)return!1;if(!e.id)return!1;var a=p();if(!a)return!1;var o=X(e),s=o.id,l=!1;if(a.isM
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 2c 75 2e 5f 76 61 6c 69 64 61 74 65 57 69 74 68 54 68 72 6f 74 74 6c 65 3d 42 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 74 3d 41 72 72 61 79 28 65 29 2c 72 3d 30 3b 72 3c 65 3b 72 2b 2b 29 74 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 75 2e 76 61 6c 69 64 61 74 65 2e 61 70 70 6c 79 28 75 2c 74 29 7d 2c 63 2c 75 29 2c 75 2e 73 79 6e 63 28 29 2c 75 7d 72 65 74 75 72 6e 20 6c 28 74 2c 65 29 2c 78 28 74 2c 5b 7b 6b 65 79 3a 22 74 72 69 67 67 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 2c 72 3d 74 2e 67 65 74 28 65 29 2c 6e 3d 72 2e 69 6e 73 74 61 6e 63 65 Data Ascii: ,u._validateWithThrottle=B(function(){for(var e=arguments.length,t=Array(e),r=0;r<e;r++)t[r]=arguments[r];u.validate.apply(u,t)},c,u),u.sync(),u}return l(t,e),x(t,[{key:"trigger",value:function(e){var t=this._state.elementInstances,r=t.get(e),n=r.instance
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 77 22 3a 65 7c 7c 75 2e 6e 6f 64 65 4f 75 74 4f 66 56 69 65 77 28 29 7d 7d 7d 63 61 74 63 68 28 65 29 7b 6e 3d 21 30 2c 69 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 72 26 26 6f 2e 72 65 74 75 72 6e 26 26 6f 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 6e 29 74 68 72 6f 77 20 69 7d 7d 7d 7d 2c 7b 6b 65 79 3a 22 77 69 6c 6c 56 61 6c 69 64 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 74 2e 73 63 72 6f 6c 6c 44 69 72 65 63 74 69 6f 6e 3b 69 66 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 64 69 64 53 63 72 6f 6c 6c 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 73 74 61 74 65 2c 69 3d 6e 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 2c 61 3d 6e 2e 65 6c 65 6d 65 6e 74 57 69 74 68 49 6e 74 65 6e Data Ascii: w":e\|\|u.nodeOutOfView()}}}catch(e){n=!0,i=e}finally{try{!r&&o.return&&o.return()}finally{if(n)throw i}}}},{key:"willValidate",value:function(e,t){var r=t.scrollDirection;if(this._state.didScroll){var n=this._state,i=n.elementInstances,a=n.elementWithInten

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49823	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	530	OUT	GET /uu/api/res/1.2/83XTQMluFLe.mjd0Wi63yg--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/16757f70-ed5b-11ee-adfd-f9a7606cf807.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:28 UTC	1284	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 299474684652507520213133815389274278598,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="16757f70-ed5b-11ee-adfd-f9a7606cf807.webp" Edge-Cache-Tag: 299474684652507520213133815389274278598,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Etag: "0046a161620feec961636c3a43dd5bb2" Last-Modified: Thu, 28 Mar 2024 23:30:16 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=700,height=420,bytes=55132,owidth=6004,oheight=4003,obytes=5188795,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 82b5c1e1f621f1f6619c4bcd20df8072 Accept-Ranges: bytes Date: Thu, 28 Mar 2024 23:52:50 GMT X-Served-By: cache-lga21954-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711669971.893769,VS0,VE1 Age: 2918 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 82b5c1e1f621f1f6619c4bcd20df8072 cld_by: cache-lga21954-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 74945 ATS-Carp-Promotion: 1
2024-03-29 00:41:28 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-03-29 00:41:28 UTC	810	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF@ICC_PROFILE0ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 03 04 00 05 11 06 12 07 21 31 41 08 13 51 61 14 22 71 81 32 91 09 15 23 42 52 a1 b1 62 72 82 c1 16 24 33 43 92 a2 d1 f0 17 e1 26 34 53 63 83 c2 f1 18 25 27 44 73 a3 b2 57 74 93 94 b3 c3 ff c4 00 1c 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 04 01 03 05 06 07 08 ff c4 00 3f 11 00 01 03 03 03 03 03 02 05 02 05 02 05 04 03 00 00 01 02 03 04 11 12 05 21 31 13 22 32 06 41 51 14 23 15 33 42 61 71 52 a1 07 24 81 91 b1 16 43 25 34 53 c1 e1 17 35 45 62 72 a2 f1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f3 1b 6f bd 4c 80 9a 00 50 02 80 2d be f4 26 64 b5 35 f6 30 10 e2 b1 50 06 ca 25 f2 6a 56 94 21 4a 52 89 c0 03 99 27 b0 02 a6 8d 07 b1 f1 b4 ce be 6f 86 fc 23 93 c3 fb af ea e6 ec 92 ad 73 6e ea b8 32 a5 2b e0 4c 17 12 fb 4b 47 22 4e 56 06 32 30 7e 95 Data Ascii: !1AQa"q2#BRbr$3C&4Sc%'DsWt?!1"2AQ#3BaqR$C%4S5Ebr?oLP-&d50P%jV!JR'o#sn2+LKG"NV20~
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 10 a5 de 34 e5 de 45 c7 4c 4c f8 74 85 1b 79 71 4d 8c 10 00 0b 42 14 01 50 e6 a4 af 9f 43 54 e7 66 1e 3e e4 d0 f3 f3 c4 dd 9f 56 59 78 f9 ae 63 eb 3b 73 f0 e7 bf 79 93 29 08 74 e7 74 77 16 54 ca 92 ae 8a 41 6c a3 04 76 f4 e9 56 62 f1 22 aa 76 e4 6e 2b df 3c 23 f8 31 d0 fa 86 e0 cf eb 5d 69 a9 5c c4 38 d7 17 dc 5a 52 c3 99 74 15 8c 83 b1 b6 83 63 00 8f 99 c0 3d 6b 63 e3 cc 31 d6 23 5e 2e 57 2b 8e 7e 0c 34 37 1d 27 79 0a b9 db 1d 61 e9 6b 69 00 20 25 f3 f0 ef a0 7f 0f ed d0 d1 c7 4e 54 64 78 19 7b cf 3e 02 54 a5 04 a4 64 93 80 3b 93 52 35 9d eb a6 ee 0b f0 0f e1 f6 25 f2 73 e9 99 c4 ee 23 38 cc c6 ac d2 4a 8c 68 11 db 4e 41 79 00 82 54 12 e7 cc 32 0e e5 a4 74 49 34 7b 1a 4c 90 78 9a e1 e5 bf c5 bf 01 34 27 88 0e 19 e9 86 e5 6b 59 52 22 db 6f 09 84 d8 0b 79 Data Ascii: 4ELLtyqMBPCTf>VYxc;sy)ttwTAlvVb"vn+<#1]i\8ZRtc=kc1#^.W+~47'yaki %NTdx{>Td;R5%s#8JhNAyT2tI4{Lx4'kYR"oy
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 32 29 cf 12 7c 61 be 71 ef 8a 17 0d 6b 3f cc 66 0a 7f d5 6d 71 56 72 58 8a 92 76 e7 b6 f5 12 54 af 75 63 a0 15 af 72 79 1d 8f fa 39 2f 9a 8b 46 f0 17 88 1a 9e e4 c1 7e c5 69 94 f4 c6 13 bf 04 ad b8 de 63 c9 1c 88 48 21 28 e7 ea 4d 65 ef 16 c8 e3 9b e7 88 be 21 ea ae 37 5b 78 d7 a9 67 29 e9 d6 db 83 72 22 c5 46 43 31 63 25 79 f8 76 d3 d9 3b 49 04 f5 24 92 72 4d 61 83 22 e2 f1 35 c0 5e 23 f1 bf 8d 4a e2 df 0a 6c 6a d4 5a 5f 88 22 dc e4 09 f0 94 95 a2 3a fe 19 a6 96 89 1c f2 d6 d5 b6 a2 54 46 dc 11 cf 39 03 76 cf e4 cd c9 77 18 f5 c6 9b f0 67 c3 06 f8 13 c2 a9 d1 5f d7 77 36 42 af b7 78 fc dc 8c 54 3e 67 09 ea 1c 20 94 b6 9f dc 4f cd c8 91 9a cf ef fe 10 96 38 1c 26 5c 58 56 ed c7 3d 72 4f 3c fa e6 a6 05 c9 93 26 63 cb 91 32 4b af ba e1 ca 9c 75 65 6a 3f 52 Data Ascii: 2)\|aqk?fmqVrXvTucry9/F~icH!(Me!7[xg)r"FC1c%yv;I$rMa"5^#JljZ_":TF9vwg_w6BxT>g O8&\XV=rO<&c2Kuej?R
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 85 06 2b d2 64 be b0 db 4c b2 d9 5a dc 59 38 09 4a 47 32 4f a0 a1 33 6d 7c b1 5f b4 95 c1 76 5d 53 62 b8 d9 ee 0d a5 2a 5c 59 f1 5c 8e f2 52 46 41 28 58 0a 00 f6 e5 4f 33 2a 8a 9c 9a f5 49 4e 3e 54 9a 62 60 48 75 c3 d1 15 2c 40 3f 6c be 47 90 ac d9 00 af 85 2b 1c d4 4d 63 60 1a 62 a0 75 e7 51 c8 0a 01 94 73 27 a7 6a c6 40 0a 92 d2 7a 63 95 63 20 32 f4 fe 47 04 0a 5c 18 66 57 cd 91 9a c0 08 cc 57 6c fd e8 02 54 87 14 31 d3 de b3 88 1b de b5 0c 15 56 00 5c fb 92 6a 56 02 dc ed 59 02 09 c5 00 9a 00 c9 cd 00 54 06 45 00 32 7b 9a 00 92 9d dd e8 40 52 55 bb b5 00 aa 00 c2 8a 7f 0a a9 90 1d 44 97 12 30 49 a9 e4 0d a5 a7 50 39 05 c4 ab 9f 2a 93 1c 45 cc b9 30 89 c4 64 a4 00 f0 c1 fa d6 fe a9 a1 f0 a9 9a ad 7d 11 cc 72 e9 5b 7a b6 35 f4 54 52 35 3d b9 dc 92 ac 67 Data Ascii: +dLZY8JG2O3m\|_v]Sb\Y\RFA(XO3IN>Tb`Hu,@?lG+Mc`buQs'j@zcc 2G\fWWlT1V\jVYTE2{@RUD0IP9*E0d}r[z5TR5=g
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 9c c1 4a 4f 3c f3 ee 2b 8e b4 d9 f2 7a 2f ab c3 66 91 bf 18 d6 e8 fa 3b c2 ee a5 b7 c2 0d a1 32 9e 81 1f 08 46 d0 7f d6 5b 51 3f 92 0f e7 57 69 62 e9 bc e4 d7 d4 2c 91 ae 47 97 e4 93 5d 6f 63 80 ee 05 75 ac 98 33 ac 53 45 a6 f5 6f ba a9 b4 a8 44 96 d3 e5 25 39 0a 08 58 56 08 3f 4a 83 f8 d8 9b 51 6e 7b 13 c7 2e 0a 68 bf 11 16 5d 05 ad dd b3 44 96 20 5d ed 97 40 56 d8 22 45 ad d7 11 e7 b2 bf 56 cb 6a df 8f 54 7b 9a d2 e7 9d 55 8d ae 39 03 f4 93 f0 67 87 9c 3a b8 e8 dd 4d a0 b4 9d b2 c2 9b c0 99 1a 63 36 e8 e9 8e c3 9e 50 68 b6 a0 d2 70 94 9f 9d 60 90 06 79 67 a5 6d 63 ee 57 ab 63 52 d8 9c 4f 90 7a 56 c3 9e 0a c8 08 9c 50 09 a0 05 00 28 04 d4 00 a2 33 53 01 2a 80 2a 00 50 02 80 14 02 48 c5 09 8d d0 80 28 4c 70 74 34 22 e0 c8 cd 0c 09 a1 30 94 9d bd e8 40 4d Data Ascii: JO<+z/f;2F[Q?Wib,G]ocu3SEoD%9XV?JQn{.h]D ]@V"EVjT{U9g:Mc6Php`ygmcWcROzVP(3S**PH(Lpt4"0@M
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 42 c8 18 a0 c8 cc 8b 2c b6 32 0f d6 a6 60 12 24 07 b3 b8 f5 a6 40 4b 2a 09 58 cd 09 37 63 33 e2 5b c8 19 eb 50 2d 75 76 dc 0e 79 6a 19 1c f3 43 4b dd 90 c3 80 76 a9 9a 42 ec 47 ad 00 d8 18 a0 10 e2 40 55 62 c0 2a c8 10 95 10 3a f5 a1 00 ca ca 48 29 34 c8 98 b2 f2 cf 45 62 99 00 d3 25 c4 9e b4 c8 80 e2 27 38 9e 61 75 9c ae 4a c3 bf ac dc 47 55 2b f3 ac de e2 c3 88 ba a8 1e e7 eb 59 30 3e 9b a2 0f e2 eb 51 b9 9c 45 fc 7b 47 ae 45 64 c8 62 5b 2a e4 0e 4e 33 c8 54 40 45 e6 d4 33 9a 23 88 6e 25 4e 0e dc ea 44 c4 29 5b bb 50 04 32 79 27 a9 38 1f 5a 8b b6 43 27 ad fe 1e b4 77 fa 09 c1 3d 13 60 5b 48 6e 40 b6 a6 74 80 07 20 ec 82 5d 3f 70 14 01 fa 57 32 67 e4 e3 b3 4c cc 23 2c 3b 7c 82 a9 aa 64 b8 09 cf 21 e9 5a 8d e5 1b fa 40 66 86 7c 39 5c 5a 52 b9 c8 b9 c1 6d Data Ascii: B,2`$@KX7c3[P-uvyjCKvBG@Ub:H)4Eb%'8auJGU+Y0>QE{GEdb[*N3T@E3#n%ND)[P2y'8ZC'w=`[Hn@t ]?pW2gL#,;\|d!Z@f\|9\ZRm
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 97 88 03 9a d0 72 0e 3d 31 9c d7 9d c3 93 d3 bd d6 25 57 5b 8b 5a 4b 40 6b 3d 63 3d c4 20 5b ed 6e 88 e0 8c 17 16 a6 f6 a0 0f aa 94 91 f7 ab b4 90 e4 f2 85 74 df 69 4f 38 ab d4 a7 07 8e 5e 41 51 35 82 a6 4c 07 90 cd 40 80 9a 13 05 00 da 93 b7 bd 08 0b 27 14 26 34 e7 6a 01 34 00 a0 05 00 28 01 40 0a 01 e6 da 27 38 35 85 5b 25 c1 d0 dc 2e f0 3d c5 fe 2b 68 85 6b 8d 37 1a 32 22 a9 25 6c b4 ea 8a 54 e8 1d c1 af 2d 55 ea 7a 7a 5a 85 81 52 f6 e5 4e a4 1a 6c 93 33 32 90 d4 7a 4a fb a4 ef 93 34 ed fe 0b 91 2e 10 5d 2d 3e cb 83 05 2a 15 e8 29 ab 62 a9 89 24 62 ec a5 09 21 96 37 2b 4d 32 fa fd aa d1 5c 4d 00 28 01 40 38 95 67 da 80 52 56 79 f5 1f 7a ce 40 50 70 8a 64 04 93 93 9a c0 05 00 28 01 40 0a 00 50 02 80 14 02 54 ad bd a8 05 50 0f 32 85 2b 9a 4f 4e b5 30 3e Data Ascii: r=1%W[ZK@k=c= [ntiO8^AQ5L@'&4j4(@'85[%.=+hk72"%lT-UzzZRNl32zJ4.]->*)b$b!7+M2\M(@8gRVyz@Ppd(@PTP2+ON0>
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 50 04 5a 27 a7 3a 01 ba 80 1c 65 39 c9 22 a6 07 01 c5 00 de ef 6a 13 08 a8 9e b4 02 77 7b 54 08 04 4e 6a 60 14 00 a8 00 54 c0 2a 00 f4 57 f4 70 69 e5 d9 b8 59 aa b5 a3 ac f3 bb dd 11 0d 93 82 09 44 76 f2 79 9e 44 6e 78 8e 5e 86 a9 d5 3f 73 a5 44 c2 fa be dc 1d f3 02 14 80 02 be 6e 67 ad 50 73 b6 3b 4c 61 93 a6 a6 b6 cc 84 15 b8 93 e9 ca b2 8f b9 ae 64 d8 ce f1 06 96 6e 3e 1e 78 84 ca fe 6f fd 18 b8 ac 0f 52 98 eb 50 fe 60 55 98 bc 8e 74 be 0a 78 b6 4e 2b a3 ec 72 dd c0 49 24 74 a9 83 a2 3c 0d 58 65 6a 2e 3b 45 62 2a 95 be 3d be 43 bc bd 0e 11 ff 00 cf 9f b5 53 aa f1 c4 bb 45 d9 22 38 ec 49 c8 4d 9f 53 4b 65 2e 2d 05 32 55 e5 28 e7 25 39 af 3a f4 56 38 f6 50 59 ec dc e8 3e 16 dc 76 30 9f 8d 59 0b 79 b0 12 55 cb 27 ad 5f 81 fb 6e 73 aa e3 45 f1 21 9e 3a 75 Data Ascii: PZ':e9"jw{TNj`TWpiYDvyDnx^?sDngPs;Ladn>xoRP`UtxN+rI$t<Xej.;Eb=CSE"8IMSKe.-2U(%9:V8PY>v0YyU'_nsE!:u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49824	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	530	OUT	GET /uu/api/res/1.2/QmRSNXBrC7HxHZxQKfNaLQ--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/03d4b380-ed4d-11ee-bdfd-93ccd8c91a7d.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:28 UTC	1279	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 249617341784440560564412466750049420383,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="03d4b380-ed4d-11ee-bdfd-93ccd8c91a7d.webp" Edge-Cache-Tag: 249617341784440560564412466750049420383,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Etag: "dc9bc38351e5f90861fb70680106e906" Last-Modified: Thu, 28 Mar 2024 21:50:52 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=700,height=420,bytes=40628,owidth=2982,oheight=1680,obytes=303100,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: a932119668774c1d9b5d2b9c0e2e7386 Accept-Ranges: bytes Date: Thu, 28 Mar 2024 21:50:51 GMT X-Served-By: cache-iad-kjyo7100170-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711662651.921641,VS0,VE788 Age: 10238 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: a932119668774c1d9b5d2b9c0e2e7386 cld_by: cache-iad-kjyo7100170-IAD cld_latency: 788 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 52249
2024-03-29 00:41:28 UTC	220	IN	Data Raw: 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: ATS-Carp-Promotion: 1Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 01 a4 02 bc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 04 03 05 01 02 06 07 08 09 ff c4 00 48 10 00 01 04 01 02 04 04 04 03 06 04 03 06 06 02 03 01 00 02 03 11 04 05 21 06 12 31 41 13 22 51 61 07 32 71 81 14 91 a1 08 42 52 Data Ascii: JFIFCCH!1A"Qa2qBR
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 9e 2f 24 9a e6 0a 4d 17 a0 ec ab 5b 7d a7 34 9c 90 c8 c7 bd e9 74 52 ee 6d 4d 38 95 74 b8 fb f4 5d 15 bb 8a da 44 a6 c6 b3 d1 5e 97 73 6a 69 90 9b 1c 8e cb a6 ba 8e 3b e9 90 9a 11 67 62 af 5b 7d 38 b5 74 8a 49 1d 76 56 8b 38 f5 34 8b 49 18 be 8a b5 97 06 a6 9e 10 3c 52 a3 9a d1 86 10 50 80 10 02 00 40 08 01 00 20 04 00 80 10 02 00 5b 90 11 12 02 d8 b0 0b 77 06 79 bd 93 ee 66 07 32 dd fe 5a 39 bd 91 ee b3 03 9b d9 6f bb 23 0c 93 48 f7 59 83 7a 5e 51 c5 d4 31 e7 31 09 79 5e 3c 84 5f 37 b5 26 f7 73 18 35 3e 33 95 e4 fc 4d a8 c3 31 9e 09 04 51 cc c1 cc d6 55 13 d2 cf e4 b9 6d a7 b5 d7 ee ba 2d 03 8a e4 8f 93 1f f1 9c cd 20 55 1d da 68 6c d3 d4 1b 07 7f 72 93 2d dc 93 23 4f 76 6e a0 fd 47 2c 72 c4 23 2d 0e 88 86 97 86 f4 04 f5 aa ae b7 d1 75 fb b3 ed ed 2e ce Data Ascii: /$M[}4tRmM8t]D^sji;gb[}8tIvV84I<RP@ [wyf2Z9o#HYz^Q11y^<_7&s5>3M1QUm- Uhlr-#OvnG,r#-u.
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 85 e9 92 33 e3 1e 9c aa d5 b3 9e d4 21 91 01 dc 9b 57 a5 9c da 9a 79 57 cf 09 04 85 d3 5b 61 c9 7d 25 76 46 3d 59 05 75 56 f8 71 ea e9 11 9a 1d b9 80 dd 74 56 f9 71 6a 69 60 9c 8c a5 5a cb 83 57 4f 25 a5 60 aa 2a d0 f3 f5 34 d0 16 d7 45 47 34 d7 0d 50 50 80 10 02 00 40 08 0e b7 83 78 31 9a f4 b1 cf 97 a9 63 e3 63 93 e6 e7 04 ec 3e 6b f4 20 51 fb 8f 43 4b 36 5e 9a 5b a3 2b a7 f0 3f 0d e2 62 08 9d aa fe 22 79 64 a6 4a d1 ca c0 39 80 23 a9 b2 01 f6 a2 45 d8 59 b9 5f 66 ae 5b 89 f4 dc cd 32 76 62 4f 86 c8 a2 89 80 35 ec 02 a4 34 01 24 8f 5f cd 3b 9f 56 b8 95 0a 13 08 01 00 20 04 00 80 10 1b 45 14 b3 c8 d8 61 8d d2 48 f2 1a d6 b4 59 71 f4 03 ba 02 49 71 72 b1 d8 d9 26 c7 91 8c 7d f2 97 34 80 6b ad 21 b3 18 42 86 36 6c 4f 70 b0 d2 41 e8 40 40 74 98 1c 39 93 8b Data Ascii: 3!WyW[a}%vF=YuVqtVqji`ZWO%`*4EG4PP@x1cc>k QCK6^[+?b"ydJ9#EY_f[2vbO54$_;V EaHYqIqr&}4k!B6lOpA@@t9
2024-03-29 00:41:28 UTC	324	IN	Data Raw: 86 db 4e 3d 7d 50 29 6c 2f ff 00 c5 34 6d 53 48 87 13 5b ca c9 12 40 40 89 d1 9e 6f 29 26 c5 74 15 67 df 73 ea 8f ec 7e 2f 1f 26 dc 45 c1 da 56 9b c3 ac d7 34 fd 7e 0c ce 7c 86 b1 8d 68 3c ce 63 9b 62 c1 dc 38 16 9b ed e6 1e 8b 62 d9 f0 cd 4d 1d b5 ce 5c 7a 67 38 40 08 01 00 20 04 00 b7 20 23 f6 02 60 10 02 00 40 08 01 20 08 01 00 20 04 00 80 10 02 dc 00 b0 05 b8 01 60 0b 70 02 60 16 e0 05 81 b3 5b ee 98 1a 85 95 49 ff 00 ab 72 61 a2 92 1b 31 e1 b0 16 97 21 97 79 4d 26 22 07 b8 de c9 ab 38 96 60 07 6d 48 c8 88 c2 46 92 42 56 a5 69 ae cb 63 88 c0 48 0d 80 56 06 e8 0f bc a4 87 9c 55 2f e1 39 7e 95 29 2e 38 69 ba 4f 9f 2d 9e 4a 4b 08 17 b5 aa d6 dc 27 68 c7 30 52 58 06 e7 95 3e 70 42 92 63 77 01 3d 6d 82 5b 82 32 63 96 b8 83 b0 f5 56 ad a2 49 b4 ac b8 e2 cf Data Ascii: N=}P)l/4mSH[@@o)&tgs~/&EV4~\|h<cb8bM\zg8@ #`@ `p`[Ira1!yM&"8`mHFBVicHVU/9~).8iO-JK'h0RX>pBcw=m[2cVI
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 46 dc 12 9a 03 67 65 68 b6 10 9a f9 21 3c 1e 6b a0 6d 56 2c 8d ab 92 33 c0 77 be ea d5 b2 37 a2 be 78 36 d9 ab a6 96 72 6a 51 5b 3c 14 2e 97 65 25 c5 a9 4e 08 4f 10 23 a6 ea f5 97 9f ab 4c c1 29 62 bf aa b5 6c f3 f5 74 4b 49 1d 6e 02 ad 6c f3 f5 34 d0 d5 15 47 3c b0 86 01 d5 01 e9 78 72 eb 12 60 41 8f c3 7a 69 83 04 c7 19 98 61 c2 41 37 47 9a 49 6c bc 9b 1d 2f d8 00 a3 bf c4 bd 1d 38 9c 46 23 82 5f 8d d0 f0 b0 e4 76 a1 a4 b7 27 2a 77 87 bd f7 ca 23 0d b0 03 4e f7 76 09 3b 74 02 b6 b2 1b e2 5b 17 5b d1 26 96 33 2e 93 1c 4c 61 34 e1 6e 77 36 de 62 2e 8f f2 41 37 42 0e 2c 9e 13 10 64 2f 74 cd 7e ed 91 c4 93 54 2c 6e 3f 8a d6 c7 74 f5 7f 05 56 85 11 0f 74 af 77 2b 0f 92 ee a8 9a 4f 6e c8 e9 f1 ca f3 17 0f 2a 2c 99 a7 99 b2 35 ec a0 ce 66 10 03 ac 79 89 ef d2 Data Ascii: Fgeh!<kmV,3w7x6rjQ[<.e%NO#L)bltKInl4G<xr`AziaA7GIl/8F#_v'w#Nv;t[[&3.La4nw6b.A7B,d/t~T,n?tVtw+On,5fy
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 29 d4 6f f9 fd 37 f5 48 cd a7 34 de 11 d5 75 29 03 71 db 11 6f 31 0f 71 7f 95 80 1a b3 5b d7 5e 83 b1 f4 43 7d ab 3b 37 70 b6 27 0f 44 ed 73 52 c9 6c 92 b0 30 e3 e3 e3 b3 95 c4 9e a4 97 0d fa df a7 e9 62 d1 4d 8a 5d 57 8a 61 10 bb 1f 46 86 38 9f 99 46 84 60 3f 7d bc cf eb 67 7f 28 db a1 42 77 b9 38 34 ac c7 37 15 f9 a7 c4 39 0e 7b f9 18 f3 cc e6 06 83 64 f4 e5 bb e9 be ce f6 43 16 9a 46 8d f8 56 3f 56 d4 a6 c1 c3 c4 c2 00 73 39 b4 e9 1c 6c 88 c0 68 24 b8 90 77 f4 07 b0 34 59 4a 53 ff 00 c5 56 4e 58 91 b9 59 9e 28 2f cb 69 73 1a c1 7c 9e 6e a7 7d 87 5a bf f4 4a 7d 4d 4f a7 35 23 9c 5e e7 3b e6 bd fe ab 5c d9 9e e0 4e f0 7a 94 4d 61 b1 a9 30 73 f1 42 a3 87 c4 6d 36 88 7e fe 5b df b2 49 a2 91 ab e1 99 72 03 22 a6 cf e2 12 f2 36 27 a7 ae eb 36 1a 6f 10 df 01 Data Ascii: )o7H4u)qo1q[^C};7p'DsRl0bM]WaF8F`?}g(Bw8479{dCFV?Vs9lh$w4YJSVNXY(/is\|n}ZJ}MO5#^;\NzMa0sBm6~[Ir"6'6o
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: ae 68 25 84 46 7a d3 bb 7b 25 8e 57 bd fe 2e 06 59 1d 2c ae 95 dd 5e 49 3f 55 57 2a 20 e2 3b a0 8b dd 1a 60 f8 a4 9a 59 5e c6 e2 35 a4 72 9e 50 3c de bd 4e fb a9 5a 1d 5a 56 f8 cb 1c 4f ad 43 ad bf 1a 71 e6 95 91 96 c8 fa 22 f7 d8 57 b6 fd 3d 53 52 bb 49 ab 78 bf 65 1a 74 02 00 40 08 01 00 20 04 e0 26 c8 08 01 00 25 0c f3 7b 26 0c 83 68 0c 8e ab 6c 46 11 11 e4 e1 6c d7 2c c8 4b b4 64 27 c6 06 42 0a 10 69 0b 66 32 50 8c 00 97 6f 93 64 2c 68 44 c0 6c d5 81 bb 3a a6 c7 00 dc 20 80 4f ae c9 4e 61 83 7b f4 42 92 db f7 96 79 1e 18 92 f9 0d 2d 4e c4 dc 0d fb a0 8c b0 2d b0 4c df a6 eb 03 64 04 c0 5a 02 56 8a 15 64 a1 8f d1 77 43 47 ae eb f8 16 ec f6 7e 99 9e 4b c9 10 37 b7 4d 93 67 e9 3e c5 64 84 77 09 da 4e 48 0e f4 3a a7 13 c1 59 b1 e8 12 42 22 c4 9e 0a 4b 8f Data Ascii: h%Fz{%W.Y,^I?UW* ;`Y^5rP<NZZVOCq"W=SRIxet@ &%{&hlFl,Kd'Bif2Pod,hDl: ONa{By-N-LdZVdwCG~K7Mg>dwNH:YB"K
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 34 92 53 43 66 c8 fb 2a 56 53 98 c2 bb 22 07 5d ed b2 b5 6d e5 29 82 53 42 37 be ea b5 b2 56 aa bb 26 0b bd bb 2b 44 b9 ef 4c ab e5 c7 d8 8f 4f 65 6a 59 cd 68 f1 2a dc ac 6e bb 2a d6 71 d9 2b 55 5d 3c 3c bb 11 d1 5a 96 ca 17 a9 19 a2 3d fa 2e 8a 5a 1c d6 a6 08 4f 00 20 da e8 a5 dc ba 9a 79 e5 5b 3e 3f 29 b5 d3 5b 38 f5 29 84 6c cd ce c6 75 45 95 2b 2c 72 82 1d 5b 7a 7d 3d 95 b3 97 25 e0 de 9d af ea 10 89 62 8d f2 36 29 08 25 91 97 72 97 76 b6 de ff 00 ec 9f 6a 3b 8f 64 e7 67 63 61 46 58 e9 59 1c 8e 2d 2d 73 4b 69 c0 0d eb b9 b2 37 5b 94 2e ad ca 95 d0 41 e1 ba 57 4b 26 49 e6 1e 60 00 b2 77 24 fd 3a f6 4f 47 2e af 64 9a a7 0a f1 1e 8f 89 28 cc c1 6c 71 cd c8 ff 00 16 36 97 07 37 cd e5 04 0d fb 13 46 ab 94 f7 5b be ae 23 32 68 63 44 d1 d8 65 8e 21 35 b1 f2 Data Ascii: 4SCfVS"]m)SB7V&+DLOejYhn*q+U]<<Z=.ZO y[>?)[8)luE+,r[z}=%b6)%rvj;dgcaFXY--sKi7[.AWK&I`w$:OG.d(lq67F[#2hcDe!5
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 01 20 10 48 1d 47 6b 51 a5 33 67 1d f6 e9 d6 6c ea 75 5f 85 da 6e 36 95 2c 5a 14 ad 7c d9 12 48 f9 3c 76 47 c8 28 07 06 5b 5e e1 54 6e fb 92 01 a3 d3 aa 94 ff 00 d9 e2 db ab f9 61 f3 7f 11 e7 64 47 af 64 e3 09 5c d8 f1 66 7b 19 18 05 a1 bb 9b 15 b5 1f 54 db 63 0f 46 93 98 27 91 ab cd 9b 96 e9 f2 9e 1e 5d 7e 62 07 52 3a d2 5a 53 64 1f 71 47 cb 2b 5d 20 32 f3 59 e6 2e f5 af fa aa b1 8f 12 49 64 12 c4 ce 57 36 8f 33 76 af 44 0e fc ac 70 65 6b c0 c6 7c 21 c2 ae c0 35 57 67 a2 5c a8 de 72 1a e9 1e c7 96 50 24 86 ec 0f b6 df 92 63 9e c4 d4 32 22 c4 26 07 b1 ae e6 22 c1 27 94 f6 35 d3 f8 b6 23 b9 fa a1 35 63 b5 a9 dd 1b a2 74 85 ef 75 b5 c5 e3 62 d3 d7 f3 41 77 10 25 8e 01 cd bb 3b 3a c2 02 df 44 31 c5 98 27 32 3c 46 5f 6c 60 d9 a4 d1 00 b8 de d5 7e e8 52 9f 93 Data Ascii: HGkQ3glu_n6,Z\|H<vG([^TnadGd\f{TcF']~bR:ZSdqG+] 2Y.IdW63vDpek\|!5Wg\rP$c2"&"'5#5ctubAw%;:D1'2<F_l`~R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49826	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	539	OUT	GET /aaq/wf/wf-beacon-1.3.4-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:28 UTC	803	IN	HTTP/1.1 200 OK x-amz-id-2: 5R6V+3SwL423zlp5dmN03VxD9OZaPf2VMxMecqOqpHyCCQOAZb3OzFgfvpOkysVsBxburC5eprY= x-amz-request-id: G1DFY5GBWM514S1C Date: Fri, 29 Mar 2024 00:41:29 GMT Last-Modified: Mon, 13 Feb 2023 05:31:36 GMT ETag: "397b59e3eeca4f747ea1f6ff6323154c" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: tENZ6Ri2vrrjg96D4AX.qx653XeJQH2M Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 10637 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 62 65 61 63 6f 6e 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 62 65 61 63 6f 6e 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-beacon",[],t):"object"==typeof exports?exports["wafer-beacon"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 Data Ascii: prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 74 2c 72 29 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e Data Ascii: t,r);throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),u=function(){function e(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 74 74 72 69 62 75 74 65 28 4f 2b 22 74 72 69 67 67 65 72 2d 70 65 72 63 65 6e 74 61 67 65 22 29 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 20 22 29 2c 6d 3d 66 28 77 2c 32 29 2c 6b 3d 6d 5b 30 5d 2c 54 3d 6d 5b 31 5d 2c 6a 3d 6b 3f 4d 61 74 68 2e 6d 61 78 28 4d 61 74 68 2e 6d 69 6e 28 31 30 30 2c 70 61 72 73 65 49 6e 74 28 6b 2c 31 30 29 29 2c 30 29 3a 35 30 2c 43 3d 54 3f 4d 61 74 68 2e 6d 61 78 28 4d 61 74 68 2e 6d 69 6e 28 31 30 30 2c 70 61 72 73 65 49 6e 74 28 54 2c 31 30 29 29 2c 30 29 3a 35 30 2c 50 3d 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 4f 2b 22 74 72 69 67 67 65 72 2d 63 75 6d 75 6c 61 74 69 76 65 22 29 2c 41 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4f 2b 22 62 65 61 63 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 6c 61 73 73 22 29 7c 7c Data Ascii: ttribute(O+"trigger-percentage")\|\|"").split(" "),m=f(w,2),k=m[0],T=m[1],j=k?Math.max(Math.min(100,parseInt(k,10)),0):50,C=T?Math.max(Math.min(100,parseInt(T,10)),0):50,P=e.hasAttribute(O+"trigger-cumulative"),A=e.getAttribute(O+"beacon-container-class")\|\|
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 6f 66 66 73 65 74 59 2c 70 3d 69 2e 73 65 6c 65 63 74 6f 72 2c 79 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 63 2d 75 29 3b 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 62 65 61 63 6f 6e 2d 69 6e 2d 70 72 6f 67 72 65 73 73 22 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 28 66 7c 7c 21 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 73 29 29 26 26 28 30 3d 3d 3d 79 7c 7c 21 31 3d 3d 3d 6e 7c 7c 64 2e 69 73 50 61 67 65 56 69 73 69 62 6c 65 26 26 77 28 6f 2c 6c 28 7b 7d 2c 69 2c 7b 6f 66 66 73 65 74 58 3a 68 2c 6f 66 66 73 65 74 59 3a 76 7d 29 2c 64 2e 76 69 65 77 70 6f 72 74 29 29 29 72 65 74 75 72 6e 20 61 26 26 61 2e 73 70 6c 69 74 28 22 7c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 Data Ascii: offsetY,p=i.selector,y=Math.max(0,c-u);o.classList.add("wafer-beacon-in-progress"),setTimeout(function(){if((f\|\|!o.classList.contains(s))&&(0===y\|\|!1===n\|\|d.isPageVisible&&w(o,l({},i,{offsetX:h,offsetY:v}),d.viewport)))return a&&a.split("\|").forEach(funct
2024-03-29 00:41:28 UTC	436	IN	Data Raw: 6e 63 74 69 6f 6e 28 72 29 7b 72 26 26 22 6d 6f 75 73 65 65 6e 74 65 72 22 3d 3d 3d 74 26 26 65 2e 64 65 73 74 72 6f 79 28 29 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 6f 66 66 73 65 74 59 22 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 30 3b 74 68 69 73 2e 5f 75 74 69 6c 2e 6f 66 66 73 65 74 59 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 6f 66 66 73 65 74 59 7c 7c 65 7d 7d 2c 7b 6b 65 79 3a 22 6f 66 66 73 65 74 58 22 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e Data Ascii: nction(r){r&&"mouseenter"===t&&e.destroy()})}},{key:"offsetY",set:function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:0;this._util.offsetY=this._util.offsetY\|\|e}},{key:"offsetX",set:function(){var e=arguments.length>0&&void 0!==argumen
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 74 72 69 67 67 65 72 3a 65 2e 74 72 69 67 67 65 72 7d 7d 7d 5d 29 2c 74 7d 28 62 29 3b 6b 2e 65 76 65 6e 74 73 3d 7b 63 6c 69 63 6b 3a 5b 5b 22 68 61 73 2d 62 65 61 63 6f 6e 2d 63 6c 69 63 6b 22 2c 22 68 61 6e 64 6c 65 42 65 61 63 6f 6e 43 6c 69 63 6b 22 5d 5d 2c 6d 6f 75 73 65 65 6e 74 65 72 3a 5b 5b 22 5f 73 65 6c 66 22 2c 22 68 61 6e 64 6c 65 42 65 61 63 6f 6e 4d 6f 75 73 65 65 6e 74 65 72 22 5d 5d 7d 3b 76 61 72 20 54 3d 6b 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 2c 6e 3d 21 30 2c 69 3d 21 31 2c 6f 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 61 2c 73 3d 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 6e 3d 28 61 3d 73 2e 6e 65 78 74 28 29 29 Data Ascii: trigger:e.trigger}}}]),t}(b);k.events={click:[["has-beacon-click","handleBeaconClick"]],mouseenter:[["_self","handleBeaconMouseenter"]]};var T=k,j=function(){function e(e,t){var r=[],n=!0,i=!1,o=void 0;try{for(var a,s=e[Symbol.iterator]();!(n=(a=s.next())
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 2e 73 65 6c 65 63 74 6f 72 2c 6c 3d 65 2e 73 75 63 63 65 73 73 43 6c 61 73 73 2c 66 3d 76 6f 69 64 20 30 3d 3d 3d 6c 3f 22 77 61 66 65 72 2d 62 65 61 63 6f 6e 2d 6c 6f 61 64 65 64 22 3a 6c 2c 75 3d 65 2e 76 61 6c 69 64 61 74 65 44 65 6c 61 79 2c 68 3d 76 6f 69 64 20 30 3d 3d 3d 75 3f 32 35 3a 75 3b 61 28 74 68 69 73 2c 74 29 3b 76 61 72 20 76 3d 73 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 72 6f 6f 74 3a 6f 2c 73 65 6c 65 63 74 6f 72 3a 63 2c 70 72 6f 70 73 3a 7b 73 65 6c 65 63 74 6f 72 3a 63 2c 73 75 63 63 65 73 73 43 6c 61 73 73 3a 66 7d 2c 57 61 66 65 72 43 6c 61 73 73 3a 54 7d 29 29 3b 72 65 74 75 72 6e 20 76 2e 5f 6f 70 74 Data Ascii: .selector,l=e.successClass,f=void 0===l?"wafer-beacon-loaded":l,u=e.validateDelay,h=void 0===u?25:u;a(this,t);var v=s(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,{root:o,selector:c,props:{selector:c,successClass:f},WaferClass:T}));return v._opt
2024-03-29 00:41:28 UTC	1101	IN	Data Raw: 7d 29 7d 74 68 69 73 2e 5f 6d 61 70 4f 66 66 73 65 74 28 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 77 69 6c 6c 56 61 6c 69 64 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 2c 72 3d 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 3b 74 68 69 73 2e 5f 6d 61 70 4f 66 66 73 65 74 28 29 2c 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 28 65 29 2c 69 3d 6e 2e 69 6e 73 74 61 6e 63 65 2c 6f 3d 69 2e 63 6f 6e 66 69 67 2c 61 3d 6f 2e 6f 66 66 73 65 74 58 2c 73 3d 6f 2e 6f 66 66 73 65 74 59 2c 63 3d 6f 2e 73 75 63 63 65 73 73 43 6c 61 73 73 3b 73 77 69 74 63 68 28 6f 2e 74 72 69 67 67 65 72 29 7b 63 61 73 65 Data Ascii: })}this._mapOffset()}}},{key:"willValidate",value:function(e){var t=this._state.elementInstances,r=this._options;this._mapOffset(),e.forEach(function(e){var n=t.get(e),i=n.instance,o=i.config,a=o.offsetX,s=o.offsetY,c=o.successClass;switch(o.trigger){case

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49828	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	1907	OUT	GET /caas/content/article/?uuid=9667f626-9602-3f80-8f31-6786323de4e0,9a8d4713-ce83-455a-b9a5-930026b49ca3,cd680bf4-4be7-3e46-aa91-62baac020327,48379597-0675-38b3-9e93-2179864043a5,e7dab064-a495-3430-b19f-a75550693a12,e15a82c8-6454-39a6-831a-b18adf614afe,ef86a629-1eb8-4e0f-845e-22934adc8a31,2f3e0630-3b39-4af5-9229-793976190a44,9c59bff8-7554-4369-8a9c-59e768feaff6,52221875-54c2-37ef-8de3-d700cefb20e7&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=2vl5n89j0c3hk HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-03-29 00:41:29 UTC	1268	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-credentials: true access-control-allow-methods: GET, OPTIONS access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept content-type: application/json; charset=utf-8 content-length: 589133 etag: W/"8fd4d-8URlJ2VYZMmDVFW1yNtqU8bYnaw" vary: Accept-Encoding date: Fri, 29 Mar 2024 00:41:29 GMT x-envoy-upstream-service-time: 164 server: ATS Age: 2 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=7sui0itj0c3ho&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Referrer-Policy: no-referrer-when-downgrade Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 70 61 72 74 6e 65 72 44 61 74 61 22 3a 7b 22 61 64 4d 65 74 61 22 3a 7b 22 68 61 73 68 74 61 67 22 3a 22 6e 65 77 73 3b 63 75 6c 74 75 72 65 3b 63 72 69 6d 65 3b 6c 65 67 61 6c 6d 61 74 74 65 72 73 22 2c 22 69 73 53 75 70 70 6c 79 53 65 67 6d 65 6e 74 22 3a 22 66 61 6c 73 65 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 72 73 22 3a 22 6c 6d 73 69 64 3a 61 30 37 37 30 30 30 30 30 30 32 47 5a 35 69 41 41 47 3b 72 65 76 73 70 3a 72 65 75 74 65 72 73 2d 66 69 6e 61 6e 63 65 2e 63 6f 6d 3b 6c 70 73 74 61 69 64 3a 39 36 36 37 66 36 32 36 2d 39 36 30 32 2d 33 66 38 30 2d 38 66 33 31 2d 36 37 38 36 33 32 33 64 65 34 65 30 3b 70 74 3a 63 6f 6e 74 65 6e 74 Data Ascii: {"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"news;culture;crime;legalmatters","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0770000002GZ5iAAG;revsp:reuters-finance.com;lpstaid:9667f626-9602-3f80-8f31-6786323de4e0;pt:content
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 69 63 6b 73 4c 69 73 74 22 3a 22 22 2c 22 65 6e 74 69 74 69 65 73 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 57 49 4b 49 49 44 3a 46 54 58 22 2c 22 6c 61 62 65 6c 22 3a 22 46 54 58 22 2c 22 63 61 70 41 62 74 53 63 6f 72 65 22 3a 22 30 2e 39 32 37 22 2c 22 6d 65 74 61 44 61 74 61 22 3a 5b 7b 22 76 69 73 69 62 6c 65 22 3a 22 66 61 6c 73 65 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 34 33 2c 22 65 6e 64 63 68 61 72 22 3a 34 35 2c 22 73 70 65 63 69 61 6c 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 2c 22 69 6e 73 74 61 6e 63 65 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 7d 2c 7b 22 74 65 72 6d 22 3a 22 57 49 4b 49 49 44 3a 54 65 6c 65 67 72 61 6d 5f 25 32 38 73 6f 66 74 77 61 72 65 25 32 39 22 2c 22 6c 61 62 65 6c 22 3a 22 54 65 6c 65 67 72 61 6d 22 2c 22 63 61 70 Data Ascii: icksList":"","entities":[{"term":"WIKIID:FTX","label":"FTX","capAbtScore":"0.927","metaData":[{"visible":"false"}],"startchar":43,"endchar":45,"specialParentTags":[],"instanceParentTags":[]},{"term":"WIKIID:Telegram_%28software%29","label":"Telegram","cap
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 22 3a 22 43 72 69 6d 65 20 26 20 4a 75 73 74 69 63 65 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 59 43 54 3a 30 30 31 30 30 30 37 38 30 22 2c 22 73 63 6f 72 65 22 3a 22 30 2e 38 32 32 38 35 37 22 2c 22 6c 61 62 65 6c 22 3a 22 53 6f 63 69 65 74 79 20 26 20 43 75 6c 74 75 72 65 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 59 43 54 3a 30 30 31 30 30 30 31 36 36 22 2c 22 73 63 6f 72 65 22 3a 22 30 2e 36 32 39 38 37 22 2c 22 6c 61 62 65 6c 22 3a 22 43 6f 6d 70 61 6e 79 20 4c 65 67 61 6c 20 26 20 4c 61 77 20 4d 61 74 74 65 72 73 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 59 43 54 3a 30 30 31 30 30 30 31 32 36 22 2c 22 73 63 6f 72 65 22 3a 22 31 2e 30 22 2c 22 6c 61 62 65 6c 22 3a 22 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 59 43 54 3a 30 30 31 30 30 30 33 32 33 22 2c 22 73 63 6f 72 65 22 Data Ascii: ":"Crime & Justice"},{"term":"YCT:001000780","score":"0.822857","label":"Society & Culture"},{"term":"YCT:001000166","score":"0.62987","label":"Company Legal & Law Matters"},{"term":"YCT:001000126","score":"1.0","label":""},{"term":"YCT:001000323","score"
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 69 67 69 6e 61 6c 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 50 65 72 73 6f 6e 61 6c 46 69 6e 61 6e 63 65 41 72 74 69 63 6c 65 22 3a 66 61 6c 73 65 2c 22 69 73 53 70 6f 6e 73 6f 72 65 64 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 46 54 58 2c 20 54 65 6c 65 67 72 61 6d 2c 20 73 65 6e 74 65 6e 63 65 2c 20 53 61 6d 20 42 61 6e 6b 6d 61 6e 2d 46 72 69 65 64 2c 20 75 6e 73 75 73 70 65 63 74 69 6e 67 20 63 75 73 74 6f 6d 65 72 73 2c 20 74 68 65 20 73 65 6e 74 65 6e 63 65 2c 20 42 61 6e 6b 6d 61 6e 2d 46 72 69 65 64 22 2c 22 6d 65 74 61 22 3a 7b 22 70 6c 61 79 65 72 22 3a 7b 22 74 79 70 65 22 3a 22 76 69 64 65 6f 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 66 69 6e 61 6e 63 65 2e 79 61 68 6f 6f 2e 63 6f 6d Data Ascii: iginalContent":false,"isPersonalFinanceArticle":false,"isSponsoredContent":false,"keywords":"FTX, Telegram, sentence, Sam Bankman-Fried, unsuspecting customers, the sentence, Bankman-Fried","meta":{"player":{"type":"video","url":"https://finance.yahoo.com
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 69 65 73 22 3a 5b 7b 22 63 61 6e 6f 6e 69 63 61 6c 49 64 22 3a 22 44 69 73 61 70 70 6f 69 6e 74 6d 65 6e 74 22 2c 22 63 61 6e 6f 6e 69 63 61 6c 54 79 70 65 22 3a 22 77 69 6b 69 5f 69 64 22 2c 22 73 65 63 6f 6e 64 61 72 79 49 64 73 22 3a 7b 22 77 69 6b 69 5f 69 64 22 3a 22 44 69 73 61 70 70 6f 69 6e 74 6d 65 6e 74 22 2c 22 79 6b 5f 69 64 22 3a 22 36 64 66 33 36 39 34 34 2d 32 65 38 63 2d 34 30 63 31 2d 61 37 35 63 2d 38 33 64 32 61 36 39 36 61 38 33 62 22 7d 2c 22 74 65 78 74 22 3a 22 64 69 73 61 70 70 6f 69 6e 74 6d 65 6e 74 22 2c 22 74 79 70 65 22 3a 22 43 4f 4e 43 45 50 54 22 7d 2c 7b 22 63 61 6e 6f 6e 69 63 61 6c 49 64 22 3a 22 41 6e 67 65 72 22 2c 22 63 61 6e 6f 6e 69 63 61 6c 54 79 70 65 22 3a 22 77 69 6b 69 5f 69 64 22 2c 22 73 65 63 6f 6e 64 61 72 Data Ascii: ies":[{"canonicalId":"Disappointment","canonicalType":"wiki_id","secondaryIds":{"wiki_id":"Disappointment","yk_id":"6df36944-2e8c-40c1-a75c-83d2a696a83b"},"text":"disappointment","type":"CONCEPT"},{"canonicalId":"Anger","canonicalType":"wiki_id","secondar
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 20 76 69 63 74 69 6d 73 20 77 68 6f 20 68 6f 70 65 64 20 66 6f 72 20 73 74 69 66 66 65 72 20 73 65 6e 74 65 6e 63 65 22 2c 22 74 70 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 74 79 70 65 22 3a 22 73 74 6f 72 79 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 66 69 6e 61 6e 63 65 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6e 65 77 73 2f 66 72 75 73 74 72 61 74 69 6f 6e 2d 62 61 6e 6b 6d 61 6e 2d 66 72 69 65 64 73 2d 76 69 63 74 69 6d 73 2d 68 6f 70 65 64 2d 31 38 34 30 33 34 31 39 35 2e 68 74 6d 6c 22 2c 22 75 75 69 64 22 3a 22 39 36 36 37 66 36 32 36 2d 39 36 30 32 2d 33 66 38 30 2d 38 66 33 31 2d 36 37 38 36 33 32 33 64 65 34 65 30 22 2c 22 76 69 64 65 6f 50 6f 73 69 74 69 6f 6e 22 3a 22 22 2c 22 77 69 6b 69 69 64 73 22 3a 22 46 54 58 2c 54 65 6c 65 67 72 61 Data Ascii: victims who hoped for stiffer sentence","tpConsent":true,"type":"story","url":"https://finance.yahoo.com/news/frustration-bankman-frieds-victims-hoped-184034195.html","uuid":"9667f626-9602-3f80-8f31-6786323de4e0","videoPosition":"","wikiids":"FTX,Telegra
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 42 4c 4f 43 4b 45 44 5f 33 50 5f 42 55 54 54 4f 4e 5f 41 4c 4c 4f 57 5c 22 3a 5c 22 41 6c 6c 6f 77 5c 22 2c 5c 22 4c 45 53 53 5c 22 3a 5c 22 4c 65 73 73 5c 22 2c 5c 22 4c 49 56 45 5f 49 53 5f 4f 56 45 52 5c 22 3a 5c 22 4c 49 56 45 20 43 4f 56 45 52 41 47 45 20 49 53 20 4f 56 45 52 5c 22 2c 5c 22 4c 4f 41 44 49 4e 47 5c 22 3a 5c 22 4c 6f 61 64 69 6e 67 5c 22 2c 5c 22 4d 4f 52 45 5c 22 3a 5c 22 4d 6f 72 65 5c 22 2c 5c 22 4e 45 57 5f 55 50 44 41 54 45 5c 22 3a 5c 22 6e 65 77 20 75 70 64 61 74 65 5c 22 2c 5c 22 4e 45 57 5f 55 50 44 41 54 45 53 5c 22 3a 5c 22 6e 65 77 20 75 70 64 61 74 65 73 5c 22 2c 5c 22 4a 55 53 54 5f 4e 4f 57 5c 22 3a 5c 22 4a 75 73 74 20 6e 6f 77 5c 22 2c 5c 22 52 45 4c 4f 41 44 5c 22 3a 5c 22 43 6c 69 63 6b 20 74 6f 20 72 65 6c 6f 61 64 Data Ascii: BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 75 65 2c 5c 22 65 6e 61 62 6c 65 41 64 4c 69 74 65 55 70 53 65 6c 6c 46 65 65 64 62 61 63 6b 5c 22 3a 74 72 75 65 7d 2c 5c 22 63 6f 6e 66 69 67 5c 22 3a 7b 5c 22 61 75 74 68 6f 72 42 79 6c 69 6e 65 43 6f 6c 6c 61 70 73 65 4c 69 6e 65 43 6f 75 6e 74 5c 22 3a 32 2c 5c 22 63 6f 6d 6d 65 72 63 65 51 75 69 63 6b 4f 76 65 72 76 69 65 77 4c 69 6d 69 74 5c 22 3a 35 2c 5c 22 66 72 65 65 7a 65 4f 6e 4c 69 6e 6b 43 6c 69 63 6b 5c 22 3a 74 72 75 65 2c 5c 22 6c 61 7a 79 4f 66 66 73 65 74 59 5c 22 3a 31 33 30 30 2c 5c 22 6c 69 76 65 63 6f 76 65 72 61 67 65 5c 22 3a 7b 5c 22 64 65 66 65 72 5c 22 3a 66 61 6c 73 65 7d 2c 5c 22 69 6d 61 67 65 43 61 70 74 69 6f 6e 43 6f 6c 6c 61 70 73 65 4c 69 6e 65 43 6f 75 6e 74 5c 22 3a 33 2c 5c 22 73 6c 69 64 65 73 68 6f 77 43 61 70 74 Data Ascii: ue,\"enableAdLiteUpSellFeedback\":true},\"config\":{\"authorBylineCollapseLineCount\":2,\"commerceQuickOverviewLimit\":5,\"freezeOnLinkClick\":true,\"lazyOffsetY\":1300,\"livecoverage\":{\"defer\":false},\"imageCaptionCollapseLineCount\":3,\"slideshowCapt
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 72 73 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 21 2d 2d 46 2f 2d 2d 3e 3c 64 69 76 20 63 6c 61 73 73 3d 63 61 61 73 2d 74 69 74 6c 65 2d 77 72 61 70 70 65 72 3e 3c 68 31 20 69 64 3d 63 61 61 73 2d 6c 65 61 64 2d 68 65 61 64 65 72 2d 39 36 36 37 66 36 32 36 2d 39 36 30 32 2d 33 66 38 30 2d 38 66 33 31 2d 36 37 38 36 33 32 33 64 65 34 65 30 20 64 61 74 61 2d 74 65 73 74 2d 6c 6f 63 61 74 6f 72 3d 68 65 61 64 6c 69 6e 65 3e 46 72 75 73 74 72 61 74 69 6f 6e 20 66 6f 72 20 73 6f 6d 65 20 6f 66 20 42 61 6e 6b 6d 61 6e 2d 46 72 69 65 64 27 73 20 76 69 63 74 69 6d 73 20 77 68 6f 20 68 6f 70 65 64 20 66 6f 72 20 73 74 69 66 66 65 72 20 73 65 6e 74 65 6e 63 65 3c 2f 68 31 3e 3c 2f 64 69 76 3e 3c 2f 68 65 61 64 65 72 3e 3c 64 69 76 20 63 6c 61 73 73 3d Data Ascii: rs</span></a></div>...F/--><div class=caas-title-wrapper><h1 id=caas-lead-header-9667f626-9602-3f80-8f31-6786323de4e0 data-test-locator=headline>Frustration for some of Bankman-Fried's victims who hoped for stiffer sentence</h1></div></header><div class=
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 38 37 36 61 35 2e 34 35 31 20 35 2e 34 35 31 20 30 20 30 20 31 20 31 2e 33 32 20 34 2e 33 36 43 32 30 2e 36 30 32 20 31 33 2e 39 35 32 20 31 38 2e 31 34 36 20 31 36 20 31 35 2e 32 33 39 20 31 36 48 31 31 2e 31 37 39 6c 2d 2e 35 33 2e 33 39 4c 38 20 31 38 2e 33 34 32 76 2d 32 2e 31 38 35 6c 2d 31 2e 33 33 31 2d 2e 34 37 32 61 35 2e 35 32 32 20 35 2e 35 32 32 20 30 20 30 20 31 2d 33 2e 36 35 31 2d 35 2e 36 32 34 43 33 2e 32 33 37 20 37 2e 32 32 33 20 35 2e 37 35 37 20 35 20 38 2e 37 35 37 20 35 68 36 2e 37 33 33 5c 22 20 2f 3e 3c 2f 73 76 67 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 64 61 74 61 2d 69 64 3d 39 36 36 37 66 36 32 36 2d 39 36 30 32 2d 33 66 38 30 2d 38 66 33 31 2d 36 37 38 36 33 32 33 64 65 34 65 30 20 64 61 74 61 2d 74 79 70 65 3d 63 6f 6d 6d Data Ascii: 876a5.451 5.451 0 0 1 1.32 4.36C20.602 13.952 18.146 16 15.239 16H11.179l-.53.39L8 18.342v-2.185l-1.331-.472a5.522 5.522 0 0 1-3.651-5.624C3.237 7.223 5.757 5 8.757 5h6.733\" /></svg></span><span data-id=9667f626-9602-3f80-8f31-6786323de4e0 data-type=comm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49827	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	1907	OUT	GET /caas/content/article/?uuid=742c2e0f-6948-3d4f-9b25-8519b485868c,4a1da1fc-247f-3458-9f80-595e9ebabd07,315ec9d5-2c30-3dd6-91e7-283df7c28d1a,bdfa16b4-1c8c-446f-b3d6-5774a1e6188c,9bcd113d-71df-4a3d-a934-a61254bdc0e4,4a9adca9-cd26-384b-87f2-3372b00ad06a,4abbeabc-fcfd-44a3-b6d9-63a5da05c452,029f5683-400d-494c-b56e-55f216472a39,79932e4b-67c6-4356-b79b-5ee7902e8a91,cffc80bc-7ebd-4f76-ae5a-5f9a3328558f&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=2vl5n89j0c3hk HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-03-29 00:41:29 UTC	1268	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-credentials: true access-control-allow-methods: GET, OPTIONS access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept content-type: application/json; charset=utf-8 content-length: 639842 etag: W/"9c362-d1DyozwbQCTdUfmQ23ePlonZjO0" vary: Accept-Encoding date: Fri, 29 Mar 2024 00:41:28 GMT x-envoy-upstream-service-time: 108 server: ATS Age: 3 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=2jgtr1lj0c3ho&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Referrer-Policy: no-referrer-when-downgrade Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 70 61 72 74 6e 65 72 44 61 74 61 22 3a 7b 22 61 64 4d 65 74 61 22 3a 7b 22 68 61 73 68 74 61 67 22 3a 22 79 73 63 61 6d 61 72 63 68 3b 63 6f 6c 6c 65 67 65 62 61 73 6b 65 74 62 61 6c 6c 3b 62 61 73 6b 65 74 62 61 6c 6c 3b 73 70 6f 72 74 73 22 2c 22 69 73 53 75 70 70 6c 79 53 65 67 6d 65 6e 74 22 3a 22 66 61 6c 73 65 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 72 73 22 3a 22 6c 6d 73 69 64 3a 61 30 61 30 57 30 30 30 30 30 4d 73 4c 59 4b 51 41 33 3b 72 65 76 73 70 3a 75 73 61 5f 74 6f 64 61 79 5f 73 70 6f 72 74 73 5f 61 72 74 69 63 6c 65 73 5f 35 35 38 3b 6c 70 73 74 61 69 64 3a 37 34 32 63 32 65 30 66 2d 36 39 34 38 2d 33 64 34 66 2d 39 62 32 35 Data Ascii: {"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"yscamarch;collegebasketball;basketball;sports","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0a0W00000MsLYKQA3;revsp:usa_today_sports_articles_558;lpstaid:742c2e0f-6948-3d4f-9b25
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 2c 22 72 65 61 64 4d 6f 72 65 50 6f 73 69 74 69 6f 6e 22 3a 2d 31 2c 22 74 6f 74 61 6c 50 61 72 61 67 72 61 70 68 73 22 3a 30 7d 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 73 74 6f 72 79 22 2c 22 65 64 69 74 6f 72 69 61 6c 50 69 63 6b 73 4c 69 73 74 22 3a 22 22 2c 22 65 6e 74 69 74 69 65 73 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 22 2c 22 6c 61 62 65 6c 22 3a 22 4e 43 41 41 20 54 6f 75 72 6e 61 6d 65 6e 74 22 2c 22 63 61 70 41 62 74 53 63 6f 72 65 22 3a 22 30 2e 39 31 31 22 2c 22 6d 65 74 61 44 61 74 61 22 3a 5b 7b 22 76 69 73 69 62 6c 65 22 3a 22 66 61 6c 73 65 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 31 31 38 2c 22 65 6e 64 63 68 61 72 22 3a 31 33 32 2c 22 73 70 65 63 69 61 6c 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 22 61 22 5d 2c 22 69 6e 73 74 Data Ascii: ,"readMorePosition":-1,"totalParagraphs":0},"contentType":"story","editorialPicksList":"","entities":[{"term":"","label":"NCAA Tournament","capAbtScore":"0.911","metaData":[{"visible":"false"}],"startchar":118,"endchar":132,"specialParentTags":["a"],"inst
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 74 73 5f 74 65 61 6d 22 2c 22 73 70 6f 72 74 73 5f 75 73 5f 65 6e 5f 75 73 5f 61 62 73 6f 6c 75 74 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 70 6f 72 74 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6e 63 61 61 62 2f 74 65 61 6d 73 2f 6e 2d 63 61 72 6f 6c 69 6e 61 2f 22 2c 22 72 65 73 6f 6c 75 74 69 6f 6e 2e 73 70 6f 72 74 73 49 64 22 3a 22 6e 63 61 61 62 2e 74 2e 34 31 33 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 37 37 32 2c 22 65 6e 64 63 68 61 72 22 3a 37 38 35 2c 22 73 70 65 63 69 61 6c 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 22 61 22 5d 2c 22 69 6e 73 74 61 6e 63 65 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 7d 2c 7b 22 74 65 72 6d 22 3a 22 22 2c 22 6c 61 62 65 6c 22 3a 22 74 6f 75 72 6e 61 6d 65 6e 74 20 74 65 61 6d 73 22 2c 22 63 61 70 41 62 74 Data Ascii: ts_team","sports_us_en_us_absolute_url":"https://sports.yahoo.com/ncaab/teams/n-carolina/","resolution.sportsId":"ncaab.t.413"}],"startchar":772,"endchar":785,"specialParentTags":["a"],"instanceParentTags":[]},{"term":"","label":"tournament teams","capAbt
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 72 6c 22 3a 22 2f 6e 63 61 61 62 2f 70 6c 61 79 65 72 73 2f 31 35 33 39 30 36 22 2c 22 73 70 6f 72 74 73 2e 55 53 2e 65 6e 2d 55 53 2e 65 6e 74 69 74 79 5f 74 79 70 65 22 3a 22 73 70 6f 72 74 73 5f 70 6c 61 79 65 72 22 2c 22 73 70 6f 72 74 73 5f 75 73 5f 65 6e 5f 75 73 5f 61 62 73 6f 6c 75 74 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 70 6f 72 74 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6e 63 61 61 62 2f 70 6c 61 79 65 72 73 2f 31 35 33 39 30 36 2f 22 2c 22 72 65 73 6f 6c 75 74 69 6f 6e 2e 73 70 6f 72 74 73 49 64 22 3a 22 6e 63 61 61 62 2e 70 2e 31 35 33 39 30 36 22 2c 22 72 65 73 6f 6c 75 74 69 6f 6e 2e 73 70 6f 72 74 73 54 65 61 6d 49 64 22 3a 22 6e 63 61 61 62 2e 74 2e 34 31 33 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 32 37 33 30 2c 22 65 6e Data Ascii: rl":"/ncaab/players/153906","sports.US.en-US.entity_type":"sports_player","sports_us_en_us_absolute_url":"https://sports.yahoo.com/ncaab/players/153906/","resolution.sportsId":"ncaab.p.153906","resolution.sportsTeamId":"ncaab.t.413"}],"startchar":2730,"en
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 72 65 22 3a 22 30 2e 36 34 37 22 2c 22 72 65 73 6f 6c 75 74 69 6f 6e 2e 73 70 6f 72 74 73 55 72 6c 22 3a 22 2f 6e 63 61 61 62 2f 74 65 61 6d 73 2f 76 69 72 67 69 6e 69 61 2f 22 2c 22 73 70 6f 72 74 73 2e 55 53 2e 65 6e 2d 55 53 2e 65 6e 74 69 74 79 5f 74 79 70 65 22 3a 22 73 70 6f 72 74 73 5f 74 65 61 6d 22 2c 22 73 70 6f 72 74 73 5f 75 73 5f 65 6e 5f 75 73 5f 61 62 73 6f 6c 75 74 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 70 6f 72 74 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6e 63 61 61 62 2f 74 65 61 6d 73 2f 76 69 72 67 69 6e 69 61 2f 22 2c 22 72 65 73 6f 6c 75 74 69 6f 6e 2e 73 70 6f 72 74 73 49 64 22 3a 22 6e 63 61 61 62 2e 74 2e 36 31 38 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 33 31 31 2c 22 65 6e 64 63 68 61 72 22 3a 33 31 38 2c 22 73 70 Data Ascii: re":"0.647","resolution.sportsUrl":"/ncaab/teams/virginia/","sports.US.en-US.entity_type":"sports_team","sports_us_en_us_absolute_url":"https://sports.yahoo.com/ncaab/teams/virginia/","resolution.sportsId":"ncaab.t.618"}],"startchar":311,"endchar":318,"sp
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 6f 75 72 6e 61 6d 65 6e 74 2c 20 42 72 61 64 20 42 72 6f 77 6e 65 6c 6c 2c 20 54 68 65 20 41 43 43 2c 20 43 6c 65 6d 73 6f 6e 2c 20 4e 6f 72 74 68 20 43 61 72 6f 6c 69 6e 61 2c 20 74 6f 75 72 6e 61 6d 65 6e 74 20 74 65 61 6d 73 2c 20 43 6f 6c 6f 72 61 64 6f 20 53 74 61 74 65 2c 20 41 72 6d 61 6e 64 6f 20 42 61 63 6f 74 2c 20 50 4a 20 48 61 6c 6c 2c 20 41 6c 61 62 61 6d 61 2c 20 56 69 72 67 69 6e 69 61 22 2c 22 6d 65 74 61 22 3a 7b 22 70 6c 61 79 65 72 22 3a 7b 22 74 79 70 65 22 3a 22 76 69 64 65 6f 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 70 6f 72 74 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6d 65 6e 73 2d 73 77 65 65 74 2d 31 36 2d 68 65 61 64 6c 69 6e 65 73 2d 72 65 64 2d 31 38 34 32 35 31 33 30 34 2e 68 74 6d 6c 3f 66 6f 72 6d 61 74 3d 65 6d 62 Data Ascii: ournament, Brad Brownell, The ACC, Clemson, North Carolina, tournament teams, Colorado State, Armando Bacot, PJ Hall, Alabama, Virginia","meta":{"player":{"type":"video","url":"https://sports.yahoo.com/mens-sweet-16-headlines-red-184251304.html?format=emb
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 66 37 32 35 36 33 36 37 32 65 36 65 33 31 39 38 31 63 37 65 39 61 63 64 66 32 62 64 36 63 22 2c 22 77 69 64 74 68 22 3a 31 32 30 30 2c 22 68 65 69 67 68 74 22 3a 38 30 30 7d 2c 22 73 68 6f 77 45 64 69 74 6f 72 69 61 6c 50 69 63 6b 73 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 66 61 6c 73 65 2c 22 73 6c 69 63 6b 54 68 75 6d 62 6e 61 69 6c 22 3a 7b 7d 2c 22 73 70 61 63 65 49 64 22 3a 22 31 31 39 37 37 39 32 34 34 36 22 2c 22 73 70 6f 6e 73 6f 72 65 64 43 6f 6e 74 65 6e 74 22 3a 74 72 75 65 2c 22 73 75 6d 6d 61 72 79 22 3a 22 54 68 65 20 41 43 43 20 77 61 73 6e 27 74 20 76 69 65 77 65 64 20 61 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 62 65 74 74 65 72 20 63 6f 6e 66 65 72 65 6e 63 65 73 20 74 68 69 73 20 73 65 61 73 6f 6e 2e 20 4e 6f 77 2c 20 69 74 20 68 61 73 20 Data Ascii: f72563672e6e31981c7e9acdf2bd6c","width":1200,"height":800},"showEditorialPicksPlaceholder":false,"slickThumbnail":{},"spaceId":"1197792446","sponsoredContent":true,"summary":"The ACC wasn't viewed as one of the better conferences this season. Now, it has
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 53 65 63 74 69 6f 6e 49 64 22 3a 35 36 36 38 31 34 39 2c 22 68 6f 6d 65 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 70 6f 72 74 73 2f 64 6f 77 6e 2d 61 63 63 2d 74 68 69 6e 6b 2d 61 67 61 69 6e 2d 63 6f 6e 66 65 72 65 6e 63 65 2d 30 30 34 35 34 36 34 32 36 2e 68 74 6d 6c 22 7d 7d 2c 22 6d 6f 64 75 6c 65 73 22 3a 7b 7d 2c 22 6d 61 72 6b 75 70 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 61 61 73 20 63 61 61 73 2d 63 63 20 66 72 6f 6e 74 70 61 67 65 20 65 6e 61 62 6c 65 45 56 50 6c 61 79 65 72 20 65 6e 61 62 6c 65 4f 76 65 72 72 69 64 65 53 70 61 63 65 49 64 20 63 6f 6e 74 65 6e 74 46 65 65 64 62 61 63 6b 45 6e 61 62 6c 65 64 20 65 6e 61 62 6c 65 41 64 46 65 65 64 62 61 63 6b 56 32 20 65 6e 61 62 Data Ascii: SectionId":5668149,"homepageUrl":"https://www.yahoo.com/sports/down-acc-think-again-conference-004546426.html"}},"modules":{},"markup":"<div class=\"caas caas-cc frontpage enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 enab
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 54 72 79 20 61 67 61 69 6e 5c 22 2c 5c 22 55 50 44 41 54 45 53 5c 22 3a 5c 22 75 70 64 61 74 65 73 5c 22 2c 5c 22 56 49 44 45 4f 5f 41 31 31 59 5f 44 49 53 41 42 4c 45 5f 46 55 4c 4c 53 43 52 45 45 4e 5c 22 3a 5c 22 46 75 6c 6c 20 53 63 72 65 65 6e 2c 20 62 75 74 74 6f 6e 2c 20 64 69 73 61 62 6c 65 64 2c 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 73 63 72 65 65 6e 20 72 65 61 64 65 72 20 75 73 65 72 73 5c 22 7d 27 20 64 61 74 61 2d 6c 61 6e 67 3d 65 6e 2d 55 53 20 64 61 74 61 2d 74 7a 3d 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 20 64 61 74 61 2d 70 61 72 61 6d 73 3d 27 7b 5c 22 66 65 61 74 75 72 65 73 5c 22 3a 7b 5c 22 65 6e 61 62 6c 65 45 56 Data Ascii: ething went wrong. Try again\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not available for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\"features\":{\"enableEV
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 6e 64 65 78 3d 2d 31 20 63 6c 61 73 73 3d 63 61 61 73 2d 63 6f 6e 74 61 69 6e 65 72 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 63 61 61 73 2d 6c 65 61 64 2d 68 65 61 64 65 72 2d 37 34 32 63 32 65 30 66 2d 36 39 34 38 2d 33 64 34 66 2d 39 62 32 35 2d 38 35 31 39 62 34 38 35 38 36 38 63 3e 3c 68 65 61 64 65 72 20 63 6c 61 73 73 3d 63 61 61 73 2d 68 65 61 64 65 72 3e 3c 21 2d 2d 46 23 66 5f 34 2d 2d 3e 3c 64 69 76 20 63 6c 61 73 73 3d 63 61 61 73 2d 6c 6f 67 6f 3e 3c 61 20 63 6c 61 73 73 3d 5c 22 6c 69 6e 6b 20 72 61 70 69 64 2d 6e 6f 63 6c 69 63 6b 2d 72 65 73 70 20 63 61 61 73 2d 61 74 74 72 2d 70 72 6f 76 69 64 65 72 2d 6c 6f 67 6f 5c 22 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 61 74 6f 64 61 79 2e 63 6f 6d 2f 73 70 6f 72 74 73 Data Ascii: ndex=-1 class=caas-container aria-labelledby=caas-lead-header-742c2e0f-6948-3d4f-9b25-8519b485868c><header class=caas-header>...F#f_4--><div class=caas-logo><a class=\"link rapid-noclick-resp caas-attr-provider-logo\" href=https://www.usatoday.com/sports

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49825	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	1125	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=2023538075&yhlCT=2&yhlBTMS=1711672888128&yhlClientVer=3.53.39&yhlRnd=UaVMnGtcozPW9JlV&yhlCompressed=3 HTTP/1.1 Host: udc.yahoo.com Connection: keep-alive Content-Length: 4504 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-03-29 00:41:28 UTC	4504	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 31 56 72 62 63 74 73 34 45 76 30 56 6c 47 70 72 25 32 46 57 49 36 76 46 39 53 74 62 55 6c 79 30 70 47 48 70 4f 32 4c 4e 6c 65 65 54 4c 46 41 6b 46 51 67 6b 51 53 48 42 4b 55 4c 4b 66 79 5a 66 75 32 58 37 59 4e 30 70 5a 6b 4f 35 36 5a 54 56 61 54 35 43 55 6d 47 74 66 75 50 74 30 34 44 65 56 6a 4a 79 6f 36 62 7a 39 32 51 71 78 56 6e 62 65 64 25 32 42 42 25 32 46 64 59 66 66 34 75 4c 63 34 50 38 34 6d 76 66 35 46 66 62 34 34 50 6e 58 45 54 32 59 25 32 46 53 55 37 75 54 71 6c 79 46 73 32 75 33 76 57 6e 25 32 46 65 50 75 38 46 31 79 72 45 38 75 62 73 56 71 71 54 4b 25 32 46 47 31 4b 25 32 46 32 25 32 42 33 25 32 42 66 53 51 58 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'1Vrbcts4Ev0VlGpr%2FWI6vF9StbUly0pGHpO2LNleeTLFAkFQgkQSHBKULKfyZfu2X7YN0pZkO56ZTVaT5CUmGtfuPt04DeVjJyo6bz92QqxVnbed%2BB%2FdYff4uLc4P84mvf5Ffb44PnXET2Y%2FSU7uTqlyFs2u3vWn%2FePu8F1yrE8ubsVqqTK%2FG1K%2F2%2B3%2BfSQX
2024-03-29 00:41:29 UTC	591	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.yahoo.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 3 date: Fri, 29 Mar 2024 00:41:28 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49829	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	1796	OUT	GET /caas/content/article/?uuid=d045bf6b-f631-471e-85f5-f96a61504456,747d213d-feeb-344b-9f11-46ff213b038f,5b9c2182-9890-3c45-9adc-de7f18290b6a,3a1dbd93-3944-31c4-9897-57e5492bdc58,51d79ed4-e44e-374e-933d-c1e0adc2ae91,ddb65e10-dda4-3026-b3ea-45ba16328ad9,dd5e065f-7870-3aac-8d1c-ff5e94237f9a&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=2vl5n89j0c3hk HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-03-29 00:41:29 UTC	1267	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-credentials: true access-control-allow-methods: GET, OPTIONS access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept content-type: application/json; charset=utf-8 content-length: 347995 etag: W/"54f5b-yE0ASvt2YM5eFzOHjD+JW9nbeVo" vary: Accept-Encoding date: Fri, 29 Mar 2024 00:41:28 GMT x-envoy-upstream-service-time: 62 server: ATS Age: 3 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=4agast5j0c3ho&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Referrer-Policy: no-referrer-when-downgrade Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 70 61 72 74 6e 65 72 44 61 74 61 22 3a 7b 22 61 64 4d 65 74 61 22 3a 7b 22 68 61 73 68 74 61 67 22 3a 22 6e 65 77 73 3b 73 6f 63 63 65 72 3b 73 70 6f 72 74 73 22 2c 22 69 73 53 75 70 70 6c 79 53 65 67 6d 65 6e 74 22 3a 22 66 61 6c 73 65 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 72 73 22 3a 22 6c 6d 73 69 64 3a 61 30 37 37 30 30 30 30 30 30 44 41 66 4d 75 41 41 4c 3b 72 65 76 73 70 3a 75 73 2e 73 70 6f 72 74 73 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 6c 70 73 74 61 69 64 3a 64 30 34 35 62 66 36 62 2d 66 36 33 31 2d 34 37 31 65 2d 38 35 66 35 2d 66 39 36 61 36 31 35 30 34 34 35 36 3b 70 74 3a 63 6f 6e 74 65 6e 74 3b 70 64 3a 6d 6f 64 61 6c 3b 76 65 72 Data Ascii: {"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"news;soccer;sports","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a077000000DAfMuAAL;revsp:us.sports.yahoo.com;lpstaid:d045bf6b-f631-471e-85f5-f96a61504456;pt:content;pd:modal;ver
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 3a 66 61 6c 73 65 2c 22 68 61 73 45 6d 62 65 64 41 74 45 6e 64 22 3a 66 61 6c 73 65 2c 22 68 61 73 59 61 68 6f 6f 56 69 64 65 6f 22 3a 66 61 6c 73 65 2c 22 69 73 4c 6f 6e 67 41 72 74 69 63 6c 65 22 3a 66 61 6c 73 65 2c 22 70 6f 74 65 6e 74 69 61 6c 53 6c 6f 74 73 22 3a 30 2c 22 6f 75 74 73 74 72 65 61 6d 41 64 50 6f 73 69 74 69 6f 6e 22 3a 2d 31 2c 22 72 65 61 64 4d 6f 72 65 50 6f 73 69 74 69 6f 6e 22 3a 2d 31 2c 22 74 6f 74 61 6c 50 61 72 61 67 72 61 70 68 73 22 3a 30 7d 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 73 74 6f 72 79 22 2c 22 65 64 69 74 6f 72 69 61 6c 50 69 63 6b 73 4c 69 73 74 22 3a 22 22 2c 22 65 6e 74 69 74 69 65 73 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 57 49 4b 49 49 44 3a 4d 65 67 61 6e 5f 52 61 70 69 6e 6f 65 22 2c 22 6c 61 62 65 6c Data Ascii: :false,"hasEmbedAtEnd":false,"hasYahooVideo":false,"isLongArticle":false,"potentialSlots":0,"outstreamAdPosition":-1,"readMorePosition":-1,"totalParagraphs":0},"contentType":"story","editorialPicksList":"","entities":[{"term":"WIKIID:Megan_Rapinoe","label
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 79 5f 49 6d 61 67 65 73 22 2c 22 6c 61 62 65 6c 22 3a 22 47 65 74 74 79 20 49 6d 61 67 65 73 22 2c 22 63 61 70 41 62 74 53 63 6f 72 65 22 3a 22 30 2e 39 31 33 22 2c 22 6d 65 74 61 44 61 74 61 22 3a 5b 7b 22 76 69 73 69 62 6c 65 22 3a 22 66 61 6c 73 65 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 37 31 37 2c 22 65 6e 64 63 68 61 72 22 3a 37 32 38 2c 22 73 70 65 63 69 61 6c 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 2c 22 69 6e 73 74 61 6e 63 65 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 7d 2c 7b 22 74 65 72 6d 22 3a 22 57 49 4b 49 49 44 3a 50 61 72 69 73 5f 53 61 69 6e 74 2d 47 65 72 6d 61 69 6e 5f 46 2e 43 2e 22 2c 22 6c 61 62 65 6c 22 3a 22 50 61 72 69 73 20 53 61 69 6e 74 2d 47 65 72 6d 61 69 6e 22 2c 22 63 61 70 41 62 74 53 63 6f 72 65 22 3a 22 30 2e Data Ascii: y_Images","label":"Getty Images","capAbtScore":"0.913","metaData":[{"visible":"false"}],"startchar":717,"endchar":728,"specialParentTags":[],"instanceParentTags":[]},{"term":"WIKIID:Paris_Saint-Germain_F.C.","label":"Paris Saint-Germain","capAbtScore":"0.
2024-03-29 00:41:29 UTC	766	IN	Data Raw: 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 49 6d 6d 65 72 73 69 76 65 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 4f 72 69 67 69 6e 61 6c 43 6f 6e 74 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 50 65 72 73 6f 6e 61 6c 46 69 6e 61 6e 63 65 41 72 74 69 63 6c 65 22 3a 66 61 6c 73 65 2c 22 69 73 53 70 6f 6e 73 6f 72 65 64 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 4d 65 67 61 6e 20 52 61 70 69 6e 6f 65 2c 20 4b 6f 72 62 69 6e 20 41 6c 62 65 72 74 2c 20 41 63 68 69 6c 6c 65 73 20 69 6e 6a 75 72 79 2c 20 55 53 57 4e 54 2c 20 47 65 74 74 79 20 49 6d 61 67 65 73 2c 20 50 61 72 69 73 20 53 61 69 6e 74 2d 47 65 72 6d 61 69 6e 2c 20 66 61 72 65 77 65 6c 6c 20 67 61 6d 65 22 2c 22 6d 65 74 61 22 3a 7b 7d 2c 22 6d 6f 64 Data Ascii: ntent":false,"isImmersiveContent":false,"isOriginalContent":true,"isPersonalFinanceArticle":false,"isSponsoredContent":false,"keywords":"Megan Rapinoe, Korbin Albert, Achilles injury, USWNT, Getty Images, Paris Saint-Germain, farewell game","meta":{},"mod
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 7b 22 69 64 22 3a 22 34 36 37 63 35 36 64 32 2d 30 65 30 65 2d 33 32 62 38 2d 38 39 32 39 2d 64 32 37 65 32 32 38 63 31 64 36 30 22 2c 22 62 72 61 6e 64 49 64 22 3a 22 79 61 68 6f 6f 5f 73 70 6f 72 74 73 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 59 61 68 6f 6f 20 53 70 6f 72 74 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 65 63 6f 6e 64 61 72 79 54 79 70 65 73 22 3a 5b 5d 2c 22 73 6f 63 69 61 6c 41 6c 69 61 73 65 73 22 3a 5b 5d 2c 22 63 61 6c 6c 54 6f 41 63 74 69 6f 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 61 6c 6c 54 6f 41 63 74 69 6f 6e 73 22 3a 5b 5d 2c 22 62 72 61 6e 64 54 68 65 6d 65 22 3a 7b 7d 2c 22 73 61 6d 65 41 73 41 75 74 68 6f 72 22 3a 66 61 6c 73 65 2c 22 69 73 43 72 Data Ascii: {"id":"467c56d2-0e0e-32b8-8929-d27e228c1d60","brandId":"yahoo_sports","displayName":"Yahoo Sports","description":"","state":"","secondaryTypes":[],"socialAliases":[],"callToActionEnabled":false,"callToActions":[],"brandTheme":{},"sameAsAuthor":false,"isCr
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 65 72 20 6c 69 6b 65 73 20 70 6f 73 74 20 6d 6f 63 6b 69 6e 67 20 68 65 72 20 63 61 72 65 65 72 2d 65 6e 64 69 6e 67 20 69 6e 6a 75 72 79 22 2c 22 74 69 74 6c 65 54 61 67 22 3a 22 4d 65 67 61 6e 20 52 61 70 69 6e 6f 65 20 69 73 73 75 65 73 20 73 63 61 74 68 69 6e 67 20 73 74 61 74 65 6d 65 6e 74 20 61 66 74 65 72 20 79 6f 75 6e 67 20 55 53 57 4e 54 20 70 6c 61 79 65 72 20 6c 69 6b 65 73 20 70 6f 73 74 20 6d 6f 63 6b 69 6e 67 20 68 65 72 20 63 61 72 65 65 72 2d 65 6e 64 69 6e 67 20 69 6e 6a 75 72 79 20 2d 20 59 61 68 6f 6f 20 53 70 6f 72 74 73 22 2c 22 74 70 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 74 79 70 65 22 3a 22 73 74 6f 72 79 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 70 6f 72 74 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6d 65 67 61 6e 2d Data Ascii: er likes post mocking her career-ending injury","titleTag":"Megan Rapinoe issues scathing statement after young USWNT player likes post mocking her career-ending injury - Yahoo Sports","tpConsent":true,"type":"story","url":"https://sports.yahoo.com/megan-
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 35 30 30 22 2c 22 68 65 69 67 68 74 22 3a 34 38 2c 22 77 69 64 74 68 22 3a 34 38 2c 22 74 61 67 22 3a 22 34 38 2a 34 38 22 7d 5d 7d 2c 22 73 70 6f 72 74 73 50 6c 61 79 65 72 49 64 22 3a 5b 22 73 6f 63 63 65 72 2e 70 2e 35 34 39 39 38 30 22 5d 2c 22 73 70 6f 72 74 73 4c 65 61 67 75 65 49 64 22 3a 5b 22 73 6f 63 63 65 72 2e 6c 2e 66 62 75 73 6e 77 73 6c 22 5d 2c 22 73 65 6f 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 73 70 6f 72 74 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 6f 63 63 65 72 2f 70 6c 61 79 65 72 73 2f 35 34 39 39 38 30 22 7d 5d 2c 22 79 63 74 73 22 3a 22 30 30 31 30 30 30 30 30 31 2c 30 30 31 30 30 30 30 32 38 2c 30 30 31 30 30 30 30 30 31 22 2c 22 68 61 73 59 61 68 6f 6f 56 69 64 65 6f 22 3a 66 61 6c 73 65 2c 22 63 6f 6d 6d 65 6e 74 53 65 63 74 Data Ascii: 500","height":48,"width":48,"tag":"48*48"}]},"sportsPlayerId":["soccer.p.549980"],"sportsLeagueId":["soccer.l.fbusnwsl"],"seoLink":"https://sports.yahoo.com/soccer/players/549980"}],"ycts":"001000001,001000028,001000001","hasYahooVideo":false,"commentSect
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 22 4c 6f 61 64 69 6e 67 5c 22 2c 5c 22 4d 4f 52 45 5c 22 3a 5c 22 4d 6f 72 65 5c 22 2c 5c 22 4e 45 57 5f 55 50 44 41 54 45 5c 22 3a 5c 22 6e 65 77 20 75 70 64 61 74 65 5c 22 2c 5c 22 4e 45 57 5f 55 50 44 41 54 45 53 5c 22 3a 5c 22 6e 65 77 20 75 70 64 61 74 65 73 5c 22 2c 5c 22 4a 55 53 54 5f 4e 4f 57 5c 22 3a 5c 22 4a 75 73 74 20 6e 6f 77 5c 22 2c 5c 22 52 45 4c 4f 41 44 5c 22 3a 5c 22 43 6c 69 63 6b 20 74 6f 20 72 65 6c 6f 61 64 20 77 69 74 68 20 6c 61 74 65 73 74 20 75 70 64 61 74 65 5c 22 2c 5c 22 53 45 45 20 7b 30 7d 20 4d 4f 52 45 5c 22 3a 5c 22 53 65 65 20 7b 30 7d 20 6d 6f 72 65 5c 22 2c 5c 22 53 45 45 5f 4c 45 53 53 5c 22 3a 5c 22 53 65 65 20 6c 65 73 73 5c 22 2c 5c 22 53 45 45 5f 4d 4f 52 45 5c 22 3a 5c 22 53 65 65 20 6d 6f 72 65 5c 22 2c 5c 22 Data Ascii: "Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 77 4c 69 6d 69 74 5c 22 3a 35 2c 5c 22 66 72 65 65 7a 65 4f 6e 4c 69 6e 6b 43 6c 69 63 6b 5c 22 3a 74 72 75 65 2c 5c 22 6c 61 7a 79 4f 66 66 73 65 74 59 5c 22 3a 31 33 30 30 2c 5c 22 6c 69 76 65 63 6f 76 65 72 61 67 65 5c 22 3a 7b 5c 22 64 65 66 65 72 5c 22 3a 66 61 6c 73 65 7d 2c 5c 22 69 6d 61 67 65 43 61 70 74 69 6f 6e 43 6f 6c 6c 61 70 73 65 4c 69 6e 65 43 6f 75 6e 74 5c 22 3a 33 2c 5c 22 73 6c 69 64 65 73 68 6f 77 43 61 70 74 69 6f 6e 43 6f 6c 6c 61 70 73 65 4c 69 6e 65 43 6f 75 6e 74 5c 22 3a 32 2c 5c 22 75 69 53 68 6f 77 50 72 65 76 69 6f 75 73 42 75 74 74 6f 6e 4f 6e 4c 6f 61 64 5c 22 3a 74 72 75 65 2c 5c 22 70 72 65 73 74 69 67 65 53 63 72 6f 6c 6c 4d 61 72 67 69 6e 54 6f 70 5c 22 3a 2d 37 32 7d 7d 27 20 64 61 74 61 2d 73 70 61 63 65 2d 69 64 3d Data Ascii: wLimit\":5,\"freezeOnLinkClick\":true,\"lazyOffsetY\":1300,\"livecoverage\":{\"defer\":false},\"imageCaptionCollapseLineCount\":3,\"slideshowCaptionCollapseLineCount\":2,\"uiShowPreviousButtonOnLoad\":true,\"prestigeScrollMarginTop\":-72}}' data-space-id=
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 74 2d 6c 6f 63 61 74 6f 72 3d 68 65 61 64 6c 69 6e 65 3e 4d 65 67 61 6e 20 52 61 70 69 6e 6f 65 20 69 73 73 75 65 73 20 73 63 61 74 68 69 6e 67 20 73 74 61 74 65 6d 65 6e 74 20 61 66 74 65 72 20 79 6f 75 6e 67 20 55 53 57 4e 54 20 70 6c 61 79 65 72 20 6c 69 6b 65 73 20 70 6f 73 74 20 6d 6f 63 6b 69 6e 67 20 68 65 72 20 63 61 72 65 65 72 2d 65 6e 64 69 6e 67 20 69 6e 6a 75 72 79 3c 2f 68 31 3e 3c 64 69 76 20 63 6c 61 73 73 3d 63 61 61 73 2d 73 75 62 68 65 61 64 6c 69 6e 65 3e 3c 68 32 3e 4b 6f 72 62 69 6e 20 41 6c 62 65 72 74 20 61 70 6f 6c 6f 67 69 7a 65 64 20 68 6f 75 72 73 20 6c 61 74 65 72 3c 2f 68 32 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 68 65 61 64 65 72 3e 3c 64 69 76 20 63 6c 61 73 73 3d 63 61 61 73 2d 63 6f 6e 74 65 6e 74 2d 62 79 6c 69 6e Data Ascii: t-locator=headline>Megan Rapinoe issues scathing statement after young USWNT player likes post mocking her career-ending injury</h1><div class=caas-subheadline><h2>Korbin Albert apologized hours later</h2></div></div></header><div class=caas-content-bylin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49830	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	530	OUT	GET /uu/api/res/1.2/WpktrU2qWbIUypW2ykNmfA--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/361d4cf0-ed5f-11ee-b63e-945d160be8bf.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:28 UTC	1298	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 222625658006135444901691020609430819544,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="361d4cf0-ed5f-11ee-b63e-945d160be8bf.webp" Edge-Cache-Tag: 222625658006135444901691020609430819544,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Etag: "663bbf55473aa38691bf5b4a6bde972c" Last-Modified: Thu, 28 Mar 2024 23:59:52 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=700,height=420,bytes=52434,owidth=5417,oheight=3611,obytes=7000176,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 1510887e51f0ef9c47de4a48f831925d Accept-Ranges: bytes Date: Fri, 29 Mar 2024 00:09:45 GMT X-Served-By: cache-iad-kiad7000061-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711670985.306403,VS0,VE1 Age: 1903 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 1510887e51f0ef9c47de4a48f831925d cld_by: cache-iad-kiad7000061-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 65358 ATS-Carp-Promotion: 1
2024-03-29 00:41:28 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-03-29 00:41:28 UTC	1049	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF@ICC_PROFILE0ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: a5 98 0c b6 da 4d 0f b0 b0 b0 66 e5 79 14 6a 37 57 b8 b3 68 c6 d6 06 b9 a6 06 ca 13 42 3b 7a 56 7a 95 a2 9e db 0d 84 0c 56 5b 96 a8 13 82 e5 95 39 f3 f7 a5 68 4d f8 c7 04 1d d4 07 62 f8 91 f9 88 a6 72 9d 45 78 c5 8a ef fd eb 85 73 70 e0 8f 99 b3 9a 01 5f 53 81 99 b9 ed e7 56 92 00 5d e9 99 24 94 1f a5 39 75 08 ba d2 f2 0a 81 82 6a bb b9 9e 30 b9 b4 c6 e7 81 db d2 9b ed 4e b8 df a2 d1 f6 00 59 3c 8f 95 36 e3 11 db b6 d3 86 33 b7 b7 b5 2e e7 d1 4a 6d 34 34 80 60 71 ed de a9 b1 b4 c3 c4 d3 02 63 00 71 ed 5c d8 f3 c6 2d 67 63 b5 b0 17 1e e4 52 6e d3 3c 66 5d 36 15 0a 1b 1e d5 da a6 98 34 d8 c8 10 06 22 a4 d3 81 5b 7b 90 c7 24 d7 29 69 a5 e8 e7 01 3f 35 2d 29 34 f0 dc c8 a0 0c 93 f7 a5 1d 87 5e dd 33 29 c1 3c 7b d3 0a a2 9e a9 33 0c 8a 11 aa 2a ea 0e 4b 1e fd Data Ascii: Mfyj7WhB;zVzV[9hMbrExsp_SV]$9uj0NY<63.Jm44`qcq\-gcRn<f]64"[{$)i?5-)4^3)<{3*K
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 0b c0 a7 01 72 a4 89 9d be 94 e5 c8 6d c3 4b 83 b8 8a 67 1c 8b c9 11 76 96 ed 40 43 71 78 5c 36 5b 86 f2 a3 fd 82 ae ac 72 5b ed 4d 3e cb 70 4f d5 6d cb 12 48 ed 9a bc fb 65 ae 2e cb 97 96 c5 09 00 55 70 cf 53 d0 7b 46 01 cd 55 37 a0 66 81 49 96 82 24 0f 8f 2a 03 df 19 e8 0f 7c 67 61 82 68 3a cd 94 46 59 00 c7 e6 38 a9 e4 e7 be 9d d3 ce 53 70 ac b5 4a c3 4a d0 ac f1 1a fc a1 73 51 a6 b9 38 59 5b e4 e3 1d ea 3b 60 f8 17 4b 00 c9 b8 a3 64 0f 4a e6 f8 55 42 ee d9 61 ce cf 4a 78 a2 54 a9 41 a9 fe 19 f0 08 c0 3e 46 b5 f1 d3 2f 24 a6 9f a8 d6 30 1b 77 e9 de b4 4d 32 d2 31 d4 d1 ec 20 4b fa d6 84 cb ba df 50 89 54 ed 71 8f 51 47 64 24 5c 6a 6d 24 c4 87 3f ad 69 8a 2d 7a 11 b0 bf dd 8e 7e 61 dc 7a d5 13 33 69 b7 b8 2b 86 c1 a7 2d fa 36 59 eb 1e 12 8e 7b 52 38 9a Data Ascii: rmKgv@Cqx\6[r[M>pOmHe.UpS{FU7fI$*\|gah:FY8SpJJsQ8Y[;`KdJUBaJxTA>F/$0wM21 KPTqQGd$\jm$?i-z~az3i+-6Y{R8
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: b3 6d fe d6 e2 bb 60 30 46 68 77 65 87 b8 76 53 c9 ec 6b b8 72 f2 5f d4 c9 66 2c 7d eb 54 7b 61 e4 29 ea a7 82 a7 cf b8 ad 93 ed 8e fd 97 d6 1d e4 91 c9 aa 24 2f a3 74 f4 f7 92 0c 46 47 da 87 3b 6b 3d 27 d1 87 e4 fe 50 f2 a1 3d 9a ff 00 4e 74 ef 81 b3 f9 60 30 c5 04 ec f7 67 63 1c 51 80 50 50 e3 cb 99 52 10 70 30 07 73 42 85 4d 6e e8 49 91 9c 54 a8 4b 38 ea 19 80 0c 77 76 cf 95 46 da 23 db 3c d5 e7 c3 37 cc 32 7b 9a cd 72 dd c6 0e 6f 18 0c 0a 9b 47 6b 36 77 2d 34 80 e7 8a 4f 4a ed e4 c9 62 ff 00 28 1c af 03 93 42 83 96 4a 5d 83 31 e4 50 17 64 85 ca f2 3f 7a 9e ce 56 55 25 b7 73 92 ab 91 4d b1 36 04 d4 60 9a 35 38 1c 8e c6 98 b5 40 73 4a 14 10 de 7c 8f ad 07 db 0a e6 50 39 0c 49 a7 d7 c2 7b 2b dc 5c 1d 9f 4a 70 0b 75 77 b7 9c d3 1f b0 bb 8b de fd c5 3e b9 Data Ascii: m`0FhwevSkr_f,}T{a)$/tFG;k='P=Nt`0gcQPPRp0sBMnITK8wvF#<72{roGk6w-4OJb(BJ]1Pd?zVU%sM6`58@sJ\|P9I{+\Jpuw>
2024-03-29 00:41:28 UTC	1300	IN	Data Raw: 3a 6a f2 10 c5 41 6c 79 62 9f 65 36 0d 96 d2 e6 dd 88 74 23 14 ee fb 58 82 52 1b 1e 94 5f b3 45 0f e9 8e 59 80 27 23 d2 96 bd b5 c1 9e ca 4e c5 6b 99 68 81 18 ce 47 6e d4 86 cb 84 b3 92 f0 b2 a6 15 23 1b a4 72 70 15 7d 4d 09 73 f3 4f 16 3b cb f5 df 52 da 69 51 3d 9e 9a de 17 84 c4 82 09 cc ac 07 0c c4 77 cb 30 fb 66 bb ab e6 fe 47 c8 ae 6a ef 21 f7 5d 53 6b 6b 65 71 78 ab b6 28 d4 93 31 39 62 fd 87 7c f2 4e 3f 5a 4a 8d 99 76 2c 69 7d 4b aa bd c9 97 5e f1 2f 42 0d d1 d9 e7 6c 5c 9e 0c 98 fc dd fb 1c 8f 23 c7 14 95 0b 76 13 af 5c eb fa ed d4 72 4d a7 cc 8b 1f 11 26 d2 11 47 96 c1 e4 3e 83 ce 9a 7a c3 ba 55 09 e9 ba 7e b2 98 8f c0 6f 1d 86 36 aa ee 72 3d 2a 57 78 c2 d1 07 6d 13 e0 1f 5a 75 54 6a d7 b3 c7 a7 db ce 43 37 88 4b 3b 9f 56 1d c9 fa 9f 3a 8d 7c a9 Data Ascii: :jAlybe6t#XR_EY'#NkhGn#rp}MsO;RiQ=w0fGj!]Skkeqx(19b\|N?ZJv,i}K^/Bl\#v\rM&G>zU~o6r=*WxmZuTjC7K;V:\|
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 23 fc 31 36 b1 63 1d ce ad a8 4d 1b 63 25 a3 00 9c 8f 2f 61 58 eb 96 b3 e9 bb f1 c3 51 e9 ff 00 e1 96 c3 a7 6d a3 bf b5 31 ca 24 52 c1 fb b9 c7 a9 3c e6 a3 cb 15 5f 97 6b c5 4f f4 3f 6b d2 16 7a 6b 02 63 05 97 dc d6 5c ff 00 b6 8d 8c 16 36 22 38 c6 d0 07 d6 bb d3 99 ae d7 5a c9 d4 87 00 00 3b e0 55 8c f6 06 92 19 46 30 37 71 9c e2 99 33 06 8f d4 7a be 9c ca 60 ba 03 18 71 bc 9c 0c 55 23 96 a1 1b e2 9b 57 f8 db d3 5d 15 f1 cf a1 1a d3 5c b7 8a c7 a8 6c 91 a4 b1 d4 23 c1 d8 dc 7c ad e6 55 b1 82 bf 7e e0 1a df c3 f2 75 fc b2 cd 8e 2a 8f fd 3f 9c fd 47 a1 df 74 fe b1 75 a2 ea 70 98 6e ad 24 31 c8 bd c6 47 98 3e 60 8c 10 7d 0d 7b 71 99 e5 9d a4 b5 7a 97 ae d4 29 c8 00 67 d2 9e a4 bf 70 4d c3 6d ef e9 59 ea 4f f7 96 f5 53 90 6a 3a e0 b5 cd e0 a7 73 76 f0 c9 b4 Data Ascii: #16cMc%/aXQm1$R<_kO?kzkc\6"8Z;UF07q3z`qU#W]\l#\|U~u*?Gtupn$1G>`}{qz)gpMmYOSj:sv
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 6c 9f 2a f6 6b 0c 1f 60 55 d4 05 87 2b ef 59 68 6e 5e d4 6d d8 e7 23 3e 62 b3 51 73 c8 46 d6 60 28 e4 0f 94 9a a4 97 39 d8 21 65 74 7e 4d 35 39 da fc 17 84 28 00 f7 f7 a9 e5 4d 97 12 f0 91 c3 1c 9f 2a 53 26 6b e7 f2 38 a5 f0 a6 df ed f9 75 33 c6 49 18 fd e8 eb 04 df 2b 11 ea 85 8e 0b 57 7a c2 d3 c8 21 6b a9 0c 7e 61 fa d2 54 b4 f1 f2 8c 5b 5f 70 01 6a 95 4b 6f 1f 2e 04 a2 b9 dc 3e 9e f5 2a 96 89 e5 7e 69 d4 f3 9a e6 65 49 b4 42 70 38 1f d6 92 a5 da ae dc 96 0f c8 ed 42 74 e5 9f 03 2a 7b 57 70 c9 ca 1d 74 a4 b1 c7 6a b4 30 72 00 df 85 62 c7 be 6b 5e 19 28 0a 6e 64 26 9d 13 06 86 42 00 49 ee 29 29 49 3e 69 13 01 80 38 ac 76 d9 39 f0 68 b5 9c 00 01 6a cf 95 e6 9e c9 a8 28 27 2d da b8 6e dc 1d 58 81 80 c7 3e b9 ae e8 3b 7e 93 59 c8 2c 5f 1e c4 d7 74 77 b0 9b Data Ascii: lk`U+Yhn^m#>bQsF`(9!et~M59(MS&k8u3I+Wz!k~aT[_pjKo.>~ieIBp8Bt{Wptj0rbk^(nd&BI))I>i8v9hj('-nX>;~Y,_tw
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 24 97 3f 4a 71 b2 09 af 48 18 53 f5 a7 d3 24 d9 46 e2 f9 b1 f9 bb 55 31 29 d5 02 5e df 6f ce 6a 98 c6 72 cd 74 07 71 71 99 0e 39 aa ea 93 c8 d8 15 ef 4a ef 6f 5f b7 7e 68 32 8c ee 00 c1 a3 05 ca 80 7c 7b 55 4b 95 98 e4 20 e4 0a ef 63 b5 9f 1f 8c d1 d9 50 49 2e 73 cd 70 2a 3b e4 60 50 15 99 cf 14 1c 57 4a bd 68 9c 02 78 f2 e6 82 34 4d 07 5b 68 c8 60 dc 76 a4 07 bd 37 a9 32 aa 37 f6 e2 94 0d 8e a3 e3 f3 d1 b0 63 29 37 cb 92 dd eb 3e 8f 4f 77 4b 77 b4 e4 1a 5a 97 76 5f b6 bf 5c 13 9f b5 70 db 24 fc 51 99 8f fa d7 66 49 c9 42 b6 91 ee 0b b4 63 35 a2 18 af 23 96 11 15 2a 4f 97 15 59 4f 26 2b 69 ff 00 0e 06 39 38 1e 74 c9 d7 a1 5b 3b c1 81 cf 14 03 1d 95 fa 82 01 20 66 80 20 26 52 37 29 07 e9 40 46 f7 2c a0 ae 3f 7a 00 46 a5 72 59 5c 36 1b 8c f3 e5 41 89 fa b3 Data Ascii: $?JqHS$FU1)^ojrtqq9Jo_~h2\|{UK cPI.sp;`PWJhx4M[h`v727c)7>OwKwZv_\p$QfIBc5#OYO&+i98t[; f &R7)@F,?zFrY\6A
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 89 5d 41 88 1c f6 cd 00 e3 a7 e9 d1 aa 01 e1 83 49 41 35 cd 88 00 e0 63 ed 4a a6 c5 7d 4a 2d ac d8 ed 5c d4 6e 16 8e a2 4e 5a 9c 55 67 27 2e 96 7f 9d 06 3f cd cd 76 8b fa 6b 1a 12 84 da c3 ce b2 72 fb 36 0f 5a 54 c7 82 4e 2b 15 aa 66 b5 b8 01 07 3c f6 ac 79 f6 75 0d 53 51 f0 b7 6d 6c 7a 9a e8 23 f5 0f 51 24 4a c5 9f 00 7b d3 7b 71 81 fc 45 eb c5 80 b6 d9 b8 1f b7 bd 57 8f 88 af 9f ba 87 af e4 b8 91 84 4d 90 73 ce 6b 74 71 17 62 75 e6 b3 75 76 e4 3c c7 06 a9 a3 8a cb 3b 16 cb 39 e3 b5 73 ff 00 61 62 3b 83 81 cf 6a e6 4f b1 83 a6 e4 59 6e dd 65 7e 16 17 61 ef c6 3f bd 26 5d ed 3d e2 96 da 09 7e 43 63 6a fe 87 07 e9 9f b5 1d b8 8b 4e b3 76 90 b8 56 1f 2a 82 07 23 38 e4 f3 ef 5c aa 13 27 2d 2e cd 4c 0a ae 08 90 1c 9c 8e e0 81 fe 9f bd 67 aa f2 d1 3e cc da 1e Data Ascii: ]AIA5cJ}J-\nNZUg'.?vkr6ZTN+f<yuSQmlz#Q$J{{qEWMsktqbuuv<;9sab;jOYne~a?&]=~CcjNvV*#8\'-.Lg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49832	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	381	OUT	GET /pv/static/img/icon-flame-light-202303010352.gif HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:29 UTC	831	IN	HTTP/1.1 200 OK x-amz-id-2: cakjGD3NUSjqx+WoN3RFWCEuAMwUu6UIDiiYFqaEG19f6TZ05kXWBpkC/EzeIhtukv/fZk7/Quc= x-amz-request-id: TGVWPF2X5JX2E057 Date: Mon, 25 Mar 2024 22:17:38 GMT Last-Modified: Wed, 01 Mar 2023 03:52:06 GMT ETag: "2fb9d43c74752389405abc1a5814b44a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public Expires: Tue, 01 Mar 2033 03:52:18 GMT Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 539840 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 267831 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 47 49 46 38 39 61 04 01 54 01 f7 01 00 ff ff ff fd fd ff fd ff ff ff f9 ff ff fa f4 ff fb ee ff fb ff ff fd fd ff fe f6 ff fe ff ff ff fa ff ff fe ff f3 ea ff f4 f5 ff fa fa ff fb fb f7 e5 e2 f8 fe ff fe e4 d1 ff e8 d1 ff f6 d8 ff fa e6 f4 55 2e f5 52 1a fb 51 10 fc 4f 0b fc d6 c2 fc e8 c5 fe 4b 0a fe 4d 08 fe 4e 0b fe 4e 13 fe 4f 0d fe 50 0c fe 51 0d fe 51 0f fe 53 16 fe 55 15 ff 4e 0d ff ef d2 ff b8 8c ff c3 a9 ff e4 c4 ff fe e8 d8 5e 3c e6 6d 43 fc 4e 12 fd 4f 0f fe 4c 22 fe 51 18 fe 53 13 fe 5b 18 ff 4d 15 ff f3 d5 c5 80 64 d3 64 3f dc a0 8d fe 70 41 bc 69 4d fe 68 2f d1 86 69 e4 cf b4 e0 bf b5 ff ad 95 fb 84 66 fe ea d3 fe fd ff fe ff fd ff e0 d0 ff f8 ee ff fb f8 ff fe fc ff ff fc fb ff fb fb ff ff ff ea e2 ff ef d9 ff f7 f6 ff fd f7 ff fd fa f7 df Data Ascii: GIF89aTU.RQOKMNNOPQQSUN^<mCNOL"QS[Mdd?pAiMh/if
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 07 ff 80 00 82 83 84 85 86 87 88 86 47 47 82 09 09 89 90 91 92 93 94 95 8d 5c 01 98 8f 96 9c 9d 9e 93 06 0f 46 5f 4d a5 a1 11 8e a9 a9 9f ac ad 91 a7 a4 a6 a8 aa aa ae b6 b7 97 a4 4b 10 0e 03 4a bf b4 8e b8 c3 ac 0b 48 04 0c 10 bc be c0 c1 c4 cf 9c 0a 48 ca bb 4b 0d 98 b9 ab d0 db af 4e 58 d4 d4 51 8c 00 ce dc e6 b5 e4 0e 5e 56 d4 12 ca d7 d2 02 02 e6 f4 83 e8 c6 ec ca ee 50 bb f0 f2 f5 f5 82 35 c8 b7 af 20 03 2c 08 87 28 3c 06 10 9a 40 30 ed 24 10 69 27 25 e1 42 24 0d 9f 05 6b 07 61 a2 c7 70 e2 e2 61 cc 38 ec 91 2a 8e 1f 3f fa 8b 47 b2 e4 b1 27 eb aa f1 4b 49 51 d4 28 2e 2d 71 bd 1c 88 b2 a0 ca 95 38 73 76 12 96 4e 5a 11 82 3d 69 1e 8c 95 50 a8 25 a2 3b f3 f5 ec e8 f3 9d ac 45 4e 2b c1 32 8a 14 25 55 a5 eb bc c1 dc 79 51 9e d9 79 4e b7 22 28 d0 75 e6 57 Data Ascii: GG\F_MKJHHKNXQ^VP5 ,(<@0$i'%B$kapa8*?G'KIQ(.-q8svNZ=iP%;EN+2%UyQyN"(uW
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 18 1b 7a d9 e8 20 4b 84 8c 20 43 62 64 60 a9 41 47 25 22 53 aa 4c c0 b2 a5 80 81 0d 7e fc 30 f9 71 a5 cd 9b 62 cc c9 34 47 a5 26 ce 9f 20 53 c8 ec 27 09 82 93 05 40 93 5a 84 30 b4 1f 2b 43 3d 95 4a 6d 08 81 1a 3f 7d 44 c7 e9 a3 39 b5 ab 4b 9f d4 7c 5c cd 5a 8a a7 d7 b3 06 3e 6e d1 d0 74 6c a1 38 a8 50 fa 7c 89 16 a8 06 b1 58 b5 ba 4d 31 f7 00 dd ba 36 ef 58 69 9b 57 6f 1c a3 48 12 a7 05 7c 73 9e 4e b7 fd 0a 47 96 c5 f5 2b e3 94 86 22 9b 22 ec 96 15 11 23 48 17 5b be 7c 71 f0 0f 53 5a 39 47 96 04 2a aa e8 d1 a4 1f da c1 5b 48 af e4 bc 92 7e 20 1e 80 a0 37 ec df b1 15 23 90 40 3b f5 ed d5 3f 7c 2c e1 ed 1b 78 70 84 05 b6 c4 a9 4d dd f6 f1 ab 71 9e 14 60 ee f7 81 f7 8a ce 63 57 ff 81 52 fd fa f5 92 af bf 83 7f 0e 5b 03 3b cd d6 cb cb c7 fa 59 8c fa fb e1 2f Data Ascii: z K Cbd`AG%"SL~0qb4G& S'@Z0+C=Jm?}D9K\|\Z>ntl8P\|XM16XiWoH\|sNG+""#H[\|qSZ9G*[H~ 7#@;?\|,xpMq`cWR[;Y/
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 04 00 21 f9 04 05 03 00 c3 00 2c 4e 00 de 00 6d 00 76 00 00 08 ff 00 01 08 1c 48 b0 a0 c1 83 08 13 22 59 c8 50 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 33 06 e0 c2 31 8a c7 2b 54 be 44 39 41 ec 81 91 04 06 52 4e 59 c9 b2 a3 c6 97 30 25 82 9c 49 e7 12 98 27 28 55 ce 6c 19 b3 a7 cf 8d 1f 09 88 11 29 72 09 a3 59 92 20 1c 18 da 6e 27 cf 9f 50 7d 12 6d 50 69 13 1b 1b 50 74 3e 75 19 b5 eb 4b 06 4b 80 58 70 33 28 de 23 04 42 81 6e f5 ca 16 63 03 28 8a 60 08 8b 21 6d c7 98 b4 6b db ea 95 59 c4 88 86 3c 26 00 f9 b9 d5 a1 03 bb 62 26 d5 3a d0 ba b7 71 ce c7 3b bd 70 03 5c cd 1a 61 60 90 82 08 49 bc b8 b3 62 c7 a0 b1 84 41 2b 81 db d8 ca 96 79 c9 fb 73 76 b4 d3 a5 a1 63 17 70 fd e3 18 8d db a8 53 b3 11 9d a5 77 13 ce b1 65 43 80 7b 5a c4 9f 70 c8 67 88 92 97 62 89 eb Data Ascii: !,NmvH"YP#JH31+TD9ARNY0%I'(Ul)rY n'P}mPiPt>uKKXp3(#Bnc(`!mkY<&b&:q;p\a`IbA+ysvcpSweC{Zpgb
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: f9 ff ce 0f ca c0 16 8d 38 a5 b0 2c 91 b6 4b ee 33 97 fd f4 5f d1 68 91 03 02 56 80 1a a3 08 da 6d d6 99 d0 40 ee 06 95 ac a8 c5 c4 f8 e9 ce 8a 72 d4 4e b2 1c 20 67 98 c0 83 56 c2 d3 a3 59 1c 1a 24 c7 26 90 20 18 ab a3 28 b5 e6 24 28 b1 52 96 12 e1 a5 27 8d a9 0f 83 99 4c c5 11 c3 0c bf f3 45 ad bc a6 53 f7 8d 82 1d 4a b1 a9 ca 76 48 46 84 16 15 73 49 19 e2 4f 83 2a 54 62 3e 55 a1 41 64 29 00 88 b0 54 fd 39 f5 aa 71 cb aa 52 73 6a 55 b0 16 6f 06 89 58 82 56 27 00 54 b3 02 12 1c d9 f4 29 4e 4d fa 55 b7 1e 4c 18 3e 78 9e 62 ba 80 0e aa 96 d5 ae 2f 6c 83 39 4c d8 05 1c f8 f5 af 80 05 21 1b 06 6b c2 29 72 6f a8 75 4d 6c 9a 2c 10 8b 5e d2 0f 0c f0 a9 a2 64 21 d8 06 88 10 09 97 82 db 6c ba e4 f3 2d 02 ba 0d b4 a2 55 ec 35 ea 59 90 42 a4 b3 03 f8 8b 23 6a 53 4b Data Ascii: 8,K3_hVm@rN gVY$& ($(R'LESJvHFsIO*Tb>UAd)T9qRsjUoXV'T)NMUL>xb/l9L!k)rouMl,^d!l-U5YB#jSK
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 0d 31 81 43 84 73 f6 29 27 1b c8 cc 73 9b 9a 78 6a 61 28 02 5e 6c 61 8a 74 7e 5e 49 e6 2a 73 1c 3a e4 9a 05 54 d1 42 33 1e 34 aa 29 2f c1 2c d3 0d 72 ca 4d 5a a3 94 fb c4 e3 22 9c 3c 6e 5a 8d 28 80 a4 30 1a 86 85 82 ff 8a 40 1d df 2c 62 6b 9c a8 3a 2a e7 3a 1a 20 3a 68 a1 14 14 d3 88 38 b8 e6 aa ab 9c f1 90 32 cf 71 b1 22 50 8c 21 2c 7a 66 ec b4 aa c2 b2 49 25 d8 35 4b 0c 37 3a fe 48 6d aa 4a f6 39 c9 23 52 1c 10 6b 0a 3a dc 3a e6 b7 e1 8a bb 03 18 e5 56 26 ea 65 bd 31 f2 26 ab ec 16 ab 2a 0b c3 14 21 c6 bc bb 31 41 4d 26 62 e2 9b 2f b8 8d 7a ea 1d a1 1c d2 11 1e 2e 16 1e ac af aa 32 38 62 5c 7f 0c ef 26 47 ba 11 1f 8b 70 b5 8e f8 9a f1 6a 1e 76 c2 a9 c1 1e a7 3c a7 37 91 b6 e3 24 77 76 d0 e1 0a 88 de 4e ac f2 a6 9c 78 e3 f2 cb 00 93 15 c4 0f 87 d9 4c f1 Data Ascii: 1Cs)'sxja(^lat~^Is:TB34)/,rMZ"<nZ(0@,bk:: :h82q"P!,zfI%5K7:HmJ9#Rk::V&e1&*!1AM&b/z.28b\&Gpjv<7$wvNxL
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: b1 8f 05 42 84 f6 d6 b8 c8 37 5e 44 73 b9 bb e4 81 10 c3 0c 19 86 b2 24 d9 c1 61 2a 2f b9 c9 5a e6 69 22 bc ca d1 2a 33 79 a0 36 3c 59 9a c3 fc c3 77 8c c6 ff cb 55 96 00 9a b3 cc e6 f9 8d 19 ce 71 ae 55 9d 0d 7a 67 3c 4b e4 41 e8 1c f2 9a f7 8c 40 70 64 f7 c4 4a fe 32 0f 46 f9 56 42 ff 70 6e 49 4e f4 9f d1 a1 35 b3 ea 75 d0 8e 96 5c 2d d8 60 0e 09 6b 48 d2 36 c2 01 8d 1b 9d e9 e4 1d a6 d3 ff fa b4 aa 41 ed 90 56 8c 22 6b 96 a6 68 a9 63 c7 86 78 10 37 d5 14 36 33 93 7d c1 6b 22 cb 7a d6 9a 6e 03 6b c6 10 bc 4b 0b 19 d8 a1 53 84 b0 3d ad 6b 82 1c 07 1e 20 8d f5 b1 91 fd b6 58 84 8c d9 cd 26 88 20 f4 30 88 f1 52 7b 7b c2 d0 83 6b b1 ad 91 1f 70 db d7 df a6 b5 2d e8 1b e3 85 a0 22 15 a3 4e 77 ec 66 71 0c cb b5 5b 21 e0 f1 b6 bc 93 cd 0f 7b df 1b 21 5d 40 87 Data Ascii: B7^Ds$a/Zi"3y6<YwUqUzg<KA@pdJ2FVBpnIN5u\-`kH6AV"khcx763}k"znkKS=k X& 0R{{kp-"Nwfq[!{!]@
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: c1 9f 7f fe cd d1 49 53 c0 44 38 08 66 22 54 68 e1 1a ab c9 62 47 4d 48 d8 c5 60 68 08 b4 b0 0c 79 14 5e 68 60 25 5c c9 d6 a1 87 1f e6 45 00 01 2a f4 03 a1 7d 25 9a 38 9d 38 fa d1 f4 04 8b 2d e2 f5 62 0a df c4 80 9a 81 35 da f8 87 38 40 e9 c8 63 8f 6c 79 e1 c5 0e 58 d1 88 8d 1a 54 56 69 a4 0b a8 54 70 dd 82 49 44 b0 00 93 3e a2 23 cd 22 7e 48 69 65 91 e5 a1 f5 de 92 60 8a b5 65 23 b6 68 c6 98 09 19 d4 39 e5 99 78 96 79 c1 23 5e ee c7 66 9b 30 ad 70 9d 39 93 f4 45 e4 9d 79 16 f9 49 1b 4a 02 da 64 18 75 3c 83 a1 99 88 26 3a 5e 66 9e 04 c1 e1 8a 5f 3a ea a6 1c 41 5e 69 a7 a5 79 ea 60 88 60 9c 7a aa 53 01 15 30 41 e2 a1 68 c6 ff 1a ca 05 8c 28 30 0f 64 5b a6 aa 6a 4b d7 d9 81 0c 7d 94 c2 21 ac ac b1 ee e0 cf 1d 2f e6 ba ab 4e fd 6c d3 4b 62 71 0d 49 ec b4 16 Data Ascii: ISD8f"ThbGMH`hy^h`%\E*}%88-b58@clyXTViTpID>#"~Hie`e#h9xy#^f0p9EyIJdu<&:^f_:A^iy``zS0Ah(0d[jK}!/NlKbqI
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 2f 66 44 9c 00 2d 2e 78 41 b8 8a 68 d4 34 bb 3e 6b 07 05 28 30 56 79 aa 77 bd 32 2c 43 1d 58 a5 dd 54 6d e0 57 df bd 2f 7e e1 c7 09 12 ce b6 21 0a 0c f0 5c 07 ec 5a 7a ec d3 7c a4 a5 2d 18 3a 2b 60 06 7f f6 02 f4 a8 87 0f 20 1c 61 db 6c c0 9e 08 74 29 6b 2d 1c d4 e7 01 41 03 4a fc 08 45 c8 30 ce 10 57 98 c4 43 c4 c4 0f 78 07 ca 86 6c 6f aa 2e 8e de 88 61 5c d6 36 d4 60 03 59 8d c8 04 f0 b0 da d3 51 58 4f 22 e6 b1 67 47 d1 83 5b 05 b9 b9 ac 44 69 5f 5f ac 64 ce e1 63 0e f3 b8 15 45 48 99 45 78 ee 98 ca 55 ae 9a b5 36 30 d9 87 fc 13 a8 e4 0c b3 71 93 04 b2 cb 79 77 ff b1 6a d6 6d 59 1c ba 90 29 26 36 cd 71 96 2e 35 38 fc 90 55 ea 78 c1 79 26 31 2d 6d 33 94 20 48 42 a5 81 86 71 33 ee aa 10 0d 74 4d c1 89 06 ef 32 4c 61 5e 84 94 e1 c8 1a fd 72 a4 e5 ca 66 8e Data Ascii: /fD-.xAh4>k(0Vyw2,CXTmW/~!\Zz\|-:+` alt)k-AJE0WCxlo.a\6`YQXO"gG[Di__dcEHExU60qywjmY)&6q.58Uxy&1-m3 HBq3tM2La^rf
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 03 ac e7 93 d8 b4 04 d4 b0 2d 1f 89 7a 79 c6 55 01 69 87 20 32 8a 4b 10 07 f0 d0 83 73 48 62 cd 60 95 57 69 89 2a 26 19 92 60 6c ff 08 71 7b e9 0d 14 57 6a a1 c1 04 6b f9 94 61 37 91 0c 76 0a fb b5 94 94 b9 2a 82 65 0e ee e0 88 3b 57 9a e0 c6 09 c7 f2 99 82 f7 28 2e 27 1b 2a 10 07 6f 96 79 a6 d9 58 fa 15 8a 5a b9 98 3d a9 98 68 79 07 e7 e0 0e cf 94 99 c9 58 8e 41 a5 0a 37 50 09 14 a0 81 74 49 15 c9 72 08 28 00 25 c1 f9 88 9b 25 95 f8 d4 14 33 40 06 75 30 5f 04 99 9c ac 69 0e cc 00 09 67 e0 3d be b8 5b d2 d0 90 0a 36 b0 61 ba 79 8f 3d c2 2a 41 50 0c f8 d3 8f c1 04 1d 93 70 44 b5 17 93 b8 49 2f 1a d0 9b ab d0 7c 90 d5 4d a7 77 61 a4 94 0d ac 90 8d af 53 9f e5 a2 25 75 70 0a 8e 80 99 fc a9 49 f5 57 27 8c 60 0a e3 75 9c b7 79 72 7e f9 32 8d 22 0b 95 70 0c 3a Data Ascii: -zyUi 2KsHb`Wi&`lq{Wjka7ve;W(.'oyXZ=hyXA7PtIr(%%3@u0_ig=[6ay=APpDI/\|MwaS%upIW'`uyr~2"p:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49831	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	1125	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=2023538075&yhlCT=2&yhlBTMS=1711672888296&yhlClientVer=3.53.39&yhlRnd=75cvvGMsyHREiNaz&yhlCompressed=3 HTTP/1.1 Host: udc.yahoo.com Connection: keep-alive Content-Length: 2210 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-03-29 00:41:28 UTC	2210	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 76 56 6a 66 55 39 73 34 45 50 35 58 4d 6e 36 34 65 30 6e 41 63 51 67 4a 7a 4e 79 44 53 55 31 70 70 30 41 67 25 32 46 42 68 61 4f 68 35 5a 56 68 49 31 74 75 57 54 5a 61 63 35 68 76 25 32 46 39 64 75 31 67 42 32 51 36 4e 31 50 4e 50 55 58 61 58 65 32 33 4b 33 32 37 6b 76 4e 6b 42 61 6c 31 25 32 46 47 54 35 70 4a 39 5a 78 31 62 34 6c 33 76 6c 6e 70 78 4d 56 70 63 6e 38 63 50 45 6d 25 32 42 61 58 71 35 50 50 49 33 56 32 34 4d 33 6e 48 33 35 25 32 42 5a 72 30 76 77 66 4c 32 31 46 74 34 4a 25 32 42 37 56 36 66 7a 45 65 5a 68 25 32 42 56 65 76 43 35 75 65 75 7a 38 35 64 31 25 32 46 31 6a 68 67 35 63 56 33 7a 6b 30 25 32 42 76 5a Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'vVjfU9s4EP5XMn64e0nAcQgJzNyDSU1pp0Ag%2FBhaOh5ZVhI1tuWTZac5hv%2F9du1gB2Q6N1PNPUXaXe23K327kvNkBal1%2FGT5pJ9Zx1b4l3vlnpxMVpcn8cPEm%2BaXq5PPI3V24M3nH35%2BZr0vwfL21Ft4J%2B7V6fzEeZh%2BVevC5ueuz85d1%2F1jhg5cV3zk0%2BvZ
2024-03-29 00:41:29 UTC	591	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.yahoo.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 1 date: Fri, 29 Mar 2024 00:41:28 GMT server: ATS Age: 2 Connection: close Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49835	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	539	OUT	GET /aaq/wf/wf-fetch-1.19.1-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:29 UTC	853	IN	HTTP/1.1 200 OK x-amz-id-2: 7u5XqbfU1FJS2Ky8M9pb0Xgmst+HK3+zitulqvyshqnDz8UD0LwpJpnr8Cbh1u2DmiChpoTwQTQ= x-amz-request-id: ZA8FNB4R1MX37N2Q Date: Thu, 28 Mar 2024 16:44:01 GMT Last-Modified: Fri, 20 Oct 2023 09:18:13 GMT ETag: "f085d6c42acb1394e457e463230de8ba" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: XcyEKreDz4JYLdlgGq65LAHV5Dsub3V6 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 16798 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 28649 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 66 65 74 63 68 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 66 65 74 63 68 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-fetch",[],t):"object"==typeof exports?exports["wafer-fetch"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: ction"!=typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function, not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Objec
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 6c 6c 79 7b 69 66 28 69 29 74 68 72 6f 77 20 61 7d 7d 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 20 74 3b 69 66 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 69 6e 20 4f 62 6a 65 63 74 28 74 29 29 72 65 74 75 72 6e 20 65 28 74 2c 72 29 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b Data Ascii: lly{if(i)throw a}}return r}return function(t,r){if(Array.isArray(t))return t;if(Symbol.iterator in Object(t))return e(t,r);throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),h=function(){function e(e,t){for(var r=0;r<t.length;
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 2e 75 72 6c 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 75 72 6c 22 29 2c 68 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 62 6f 75 6e 64 61 72 79 22 29 2c 64 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 63 61 63 68 65 22 29 2c 79 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 63 72 65 64 65 6e 74 69 61 6c 73 22 29 2c 76 3d 63 2e 5f 75 74 69 6c 2e 63 61 63 68 65 4b 65 79 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 63 61 63 68 65 2d 6b 65 79 22 29 2c 6d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 63 61 63 68 65 2d 73 74 72 61 74 65 67 79 22 29 7c 7c 22 6e 65 74 77 6f 72 6b 46 69 72 73 74 22 2c 70 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 63 61 63 68 65 2d 74 74 6c Data Ascii: .url\|\|e.getAttribute(b+"url"),h=e.getAttribute(b+"boundary"),d=e.getAttribute(b+"cache"),y=e.getAttribute(b+"credentials"),v=c._util.cacheKey\|\|e.getAttribute(b+"cache-key"),m=e.getAttribute(b+"cache-strategy")\|\|"networkFirst",p=e.getAttribute(b+"cache-ttl
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 2c 56 3d 6e 75 6c 6c 29 2c 22 73 74 61 74 65 43 68 61 6e 67 65 22 21 3d 3d 58 7c 7c 48 7c 7c 28 48 3d 30 29 2c 30 21 3d 3d 59 29 73 77 69 74 63 68 28 58 29 7b 63 61 73 65 22 69 6e 74 65 72 76 61 6c 22 3a 63 61 73 65 22 6f 6e 4c 6f 61 64 22 3a 63 61 73 65 22 73 74 61 74 65 43 68 61 6e 67 65 22 3a 63 61 73 65 22 76 69 65 77 70 6f 72 74 22 3a 59 3d 32 7d 69 66 28 22 61 63 74 69 76 61 74 65 22 21 3d 3d 58 26 26 22 65 61 63 68 43 6c 69 63 6b 22 21 3d 3d 58 26 26 22 69 6e 74 65 72 76 61 6c 22 21 3d 3d 58 26 26 22 73 74 61 74 65 43 68 61 6e 67 65 22 21 3d 3d 58 26 26 22 74 61 62 41 63 74 69 76 61 74 65 22 21 3d 3d 58 7c 7c 28 7a 3d 21 30 29 2c 21 4b 29 7b 76 61 72 20 4a 3d 5f 28 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 66 65 Data Ascii: ,V=null),"stateChange"!==X\|\|H\|\|(H=0),0!==Y)switch(X){case"interval":case"onLoad":case"stateChange":case"viewport":Y=2}if("activate"!==X&&"eachClick"!==X&&"interval"!==X&&"stateChange"!==X&&"tabActivate"!==X\|\|(z=!0),!K){var J=_(e.getElementsByClassName("fe
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 6f 75 73 65 65 6e 74 65 72 22 3d 3d 3d 58 3f 28 63 2e 5f 75 74 69 6c 2e 68 61 73 4d 6f 75 73 65 65 6e 74 65 72 3d 21 30 2c 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 29 3a 22 74 61 62 41 63 74 69 76 61 74 65 22 3d 3d 3d 58 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 77 66 2d 74 72 69 67 67 65 72 2d 61 63 74 69 76 61 74 65 64 22 29 26 26 21 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 73 29 3f 63 2e 66 65 74 63 68 28 29 3a 22 6f 6e 4c 6f 61 64 22 3d 3d 3d 58 26 26 63 2e 66 65 74 63 68 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 63 2e 64 65 73 74 72 6f 79 28 29 7d 29 2c 63 7d 72 65 74 75 72 6e 20 6f 28 74 2c 65 29 2c 68 28 74 2c 5b 7b 6b 65 79 3a 22 66 65 74 63 68 44 Data Ascii: ouseenter"===X?(c._util.hasMouseenter=!0,c.addEventListeners()):"tabActivate"===X&&e.classList.contains("wf-trigger-activated")&&!e.classList.contains(s)?c.fetch():"onLoad"===X&&c.fetch().then(function(e){e&&c.destroy()}),c}return o(t,e),h(t,[{key:"fetchD
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 73 2e 5f 75 74 69 6c 2e 74 61 72 67 65 74 45 6c 65 6d 7d 7d 2c 7b 6b 65 79 3a 22 66 65 74 63 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 72 3d 74 2e 64 69 73 61 62 6c 65 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 72 2c 61 3d 74 2e 63 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 52 65 74 72 79 43 6f 75 6e 74 2c 6f 3d 76 6f 69 64 20 30 3d 3d 3d 61 3f 30 3a 61 2c 73 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 63 3d 73 2e 65 6c 65 6d 2c 75 3d 73 2e 73 68 6f 75 6c 64 41 6c 77 61 79 73 54 72 69 67 67 65 72 2c 6c 3d 73 2e 73 75 63 63 65 73 73 43 6c Data Ascii: s._util.targetElem}},{key:"fetch",value:function(){var e=this,t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},r=t.disable,i=void 0===r\|\|r,a=t.currentSessionRetryCount,o=void 0===a?0:a,s=this._util,c=s.elem,u=s.shouldAlwaysTrigger,l=s.successCl
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 68 3f 4f 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 4f 2e 73 6c 69 63 65 28 31 29 3a 22 22 2c 61 3d 65 5b 22 68 61 6e 64 6c 65 22 2b 72 5d 2c 6f 3d 74 2e 5f 66 65 74 63 68 4d 65 74 61 2c 73 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 7b 7d 3a 6f 2c 68 3d 6e 28 74 2c 5b 22 5f 66 65 74 63 68 4d 65 74 61 22 5d 29 2c 62 3d 73 2e 64 75 72 61 74 69 6f 6e 2c 41 3d 73 2e 73 6f 75 72 63 65 2c 54 3d 76 6f 69 64 20 30 3b 69 66 28 69 26 26 28 75 7c 7c 63 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 70 2e 72 65 70 6c 61 63 65 28 22 2e 22 2c 22 22 29 29 2c 64 26 26 64 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 68 61 73 2d 77 61 66 65 72 2d 66 65 74 63 68 2d 65 72 72 6f 72 22 2c 22 77 61 66 65 72 2d 66 65 74 63 68 2d 62 6f 75 6e 64 61 72 79 2d Data Ascii: h?O[0].toUpperCase()+O.slice(1):"",a=e["handle"+r],o=t._fetchMeta,s=void 0===o?{}:o,h=n(t,["_fetchMeta"]),b=s.duration,A=s.source,T=void 0;if(i&&(u\|\|c.classList.remove(p.replace(".","")),d&&d.classList.remove("has-wafer-fetch-error","wafer-fetch-boundary-
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 6f 6e 3a 62 2c 73 6f 75 72 63 65 3a 41 2c 74 61 72 67 65 74 45 6c 65 6d 3a 54 7c 7c 53 2c 75 72 6c 3a 6a 7d 7d 29 2c 21 30 7d 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 65 2e 5f 64 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 72 3d 74 7c 7c 7b 7d 2c 6e 3d 72 2e 6d 65 73 73 61 67 65 3b 69 66 28 6a 3d 65 2e 5f 75 74 69 6c 2e 75 72 6c 2c 2b 2b 6f 2c 22 4e 6f 74 20 66 6f 75 6e 64 22 21 3d 3d 6e 26 26 62 26 26 6f 3c 62 29 72 65 74 75 72 6e 20 65 2e 5f 73 74 61 74 65 2e 73 74 61 74 75 73 3d 32 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 66 2d 73 65 73 73 69 6f 6e 2d 72 65 74 72 79 2d 63 6f 75 6e 74 65 72 22 2c 6f 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 66 65 74 63 68 28 Data Ascii: on:b,source:A,targetElem:T\|\|S,url:j}}),!0}}).catch(function(t){if(!e._destroyed){var r=t\|\|{},n=r.message;if(j=e._util.url,++o,"Not found"!==n&&b&&o<b)return e._state.status=2,c.setAttribute("data-wf-session-retry-counter",o),setTimeout(function(){e.fetch(
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 65 61 64 7c 7c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 3b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 68 65 61 64 3b 5f 28 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 7c 7c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 6e 3d 65 2e 69 6e 6e 65 72 54 65 78 74 3b 6e 26 26 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3d 3d 3d 72 26 26 28 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2c 45 28 7b 63 68 65 63 6b 50 61 67 65 46 6f 72 53 63 72 69 70 74 3a 21 30 2c 74 79 70 65 Data Ascii: ead\|\|document.getElementsByTagName("head")[0];var t=this._util.head;_(e.querySelectorAll("script")).forEach(function(e){var r=e.getAttribute("type")\|\|"text/javascript",n=e.innerText;n&&"text/javascript"===r&&(t.appendChild(e),E({checkPageForScript:!0,type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49836	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	542	OUT	GET /aaq/wf/wf-lightbox-1.10.6-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:29 UTC	853	IN	HTTP/1.1 200 OK x-amz-id-2: DwvCuOA+ZNCex17zznP72/wpWswp5i+bI9Lv+yTZoi7zgIIU3ZORJtPvm/LPrmnW2YoKBH0GJqk= x-amz-request-id: X7BM7R330XWM1YFW Date: Thu, 28 Mar 2024 15:41:04 GMT Last-Modified: Wed, 01 Mar 2023 01:43:59 GMT ETag: "69831b2f7b26bc6dd6321c8dcde85968" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: K.68hs0p5c2EOJjfXuKP9dx0XBa4hSTK Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 13914 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 32426 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 6c 69 67 68 74 62 6f 78 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 6c 69 67 68 74 62 6f 78 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-lightbox",[],t):"object"==typeof exports?exports["wafer-lightbox"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafe
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 Data Ascii: {if("function"!=typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function, not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototype
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 6e 26 26 65 28 74 2c 6e 29 2c 74 7d 7d 28 29 2c 70 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 66 3d 70 2e 62 61 73 65 2c 64 3d 70 2e 63 6f 6e 73 74 61 6e 74 73 2c 77 3d 70 2e 66 65 61 74 75 72 65 73 2c 62 3d 70 2e 75 74 69 6c 73 2c 79 3d 70 2e 57 61 66 65 72 42 61 73 65 43 6c 61 73 73 2c 67 3d 62 2e 62 69 6e 64 45 76 65 6e 74 2c 76 3d 62 2e 66 69 6e 64 41 6e 63 65 73 74 6f 72 2c 6d 3d 62 2e 67 65 74 46 6f 63 75 73 61 62 6c 65 45 6c 65 6d 73 2c 5f 3d 62 2e 67 65 74 54 65 6d 70 6c 61 74 65 43 6f 6e 74 65 6e 74 2c 43 3d 62 2e 72 65 6d 6f 76 65 54 72 61 6e 73 69 74 69 6f 6e 2c 78 3d 62 2e 73 65 74 54 69 6d 65 6f 75 74 2c 45 3d 62 2e 73 65 74 54 72 61 6e 73 69 74 69 6f 6e 2c 6b 3d 62 2e 75 6e 62 69 6e 64 45 Data Ascii: &e(t.prototype,o),n&&e(t,n),t}}(),p=window.wafer,f=p.base,d=p.constants,w=p.features,b=p.utils,y=p.WaferBaseClass,g=b.bindEvent,v=b.findAncestor,m=b.getFocusableElems,_=b.getTemplateContent,C=b.removeTransition,x=b.setTimeout,E=b.setTransition,k=b.unbindE
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 76 6f 69 64 20 30 3d 3d 3d 62 3f 30 3a 4e 75 6d 62 65 72 28 62 29 2c 6b 65 79 3a 64 2c 73 65 6c 65 63 74 6f 72 3a 61 2c 73 75 63 63 65 73 73 43 6c 61 73 73 3a 69 2c 74 61 72 67 65 74 3a 66 2c 74 72 69 67 67 65 72 3a 77 2c 77 72 61 70 70 65 72 4d 61 70 3a 63 7d 2c 6d 26 26 28 68 2e 5f 75 74 69 6c 2e 70 61 67 65 54 61 72 67 65 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6d 29 29 2c 68 2e 5f 73 74 61 74 65 3d 75 28 7b 63 6f 6e 74 65 6e 74 4f 62 73 65 72 76 65 72 3a 6e 75 6c 6c 2c 66 69 72 73 74 46 6f 63 75 73 61 62 6c 65 45 6c 65 6d 3a 6e 75 6c 6c 2c 6c 61 73 74 46 6f 63 75 73 61 62 6c 65 45 6c 65 6d 3a 6e 75 6c 6c 2c 74 6f 75 63 68 65 6e 64 59 3a 30 2c 74 6f 75 63 68 73 74 61 72 74 59 3a 30 2c 77 69 6c 6c 43 6c 6f 73 65 3a 6e Data Ascii: void 0===b?0:Number(b),key:d,selector:a,successClass:i,target:f,trigger:w,wrapperMap:c},m&&(h._util.pageTarget=document.querySelector(m)),h._state=u({contentObserver:null,firstFocusableElem:null,lastFocusableElem:null,touchendY:0,touchstartY:0,willClose:n
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 72 20 79 3d 62 3d 22 77 61 66 65 72 2d 6c 69 67 68 74 62 6f 78 2d 6c 61 62 65 6c 2d 22 2b 44 61 74 65 2e 6e 6f 77 28 29 3b 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 79 29 7d 70 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 2c 62 29 7d 73 26 26 28 70 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 6c 69 67 74 68 62 6f 78 2d 73 6f 75 72 63 65 2d 22 2b 73 29 2c 4d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 6c 69 67 74 68 62 6f 78 2d 73 6f 75 72 63 65 2d 22 2b 73 2b 22 2d 6f 70 65 6e 22 29 29 2c 70 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6d 6f 64 61 6c 22 2c 21 30 29 2c 70 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c Data Ascii: r y=b="wafer-lightbox-label-"+Date.now();d.setAttribute("id",y)}p.setAttribute("aria-labelledby",b)}s&&(p.classList.add("wafer-ligthbox-source-"+s),M.classList.add("wafer-ligthbox-source-"+s+"-open")),p.setAttribute("aria-modal",!0),p.setAttribute("role",
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 74 68 69 73 2e 5f 75 74 69 6c 2e 74 72 69 67 67 65 72 26 26 74 68 69 73 2e 6f 70 65 6e 28 29 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 54 6f 75 63 68 53 74 61 72 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 73 74 61 74 65 2e 74 6f 75 63 68 73 74 61 72 74 59 3d 65 2e 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 5b 30 5d 2e 73 63 72 65 65 6e 59 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 54 6f 75 63 68 4d 6f 76 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6f 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 77 72 61 70 70 65 72 4d 61 70 2c 6c 3d 6f 2e 65 6c 65 6d 65 6e 74 54 6f 53 63 72 6f 6c 6c 3b 69 66 28 30 3d 3d 3d 6c 2e 73 63 72 6f 6c 6c 54 6f 70 29 7b 76 61 72 20 72 3d 65 2e Data Ascii: this._util.trigger&&this.open())}},{key:"handleTouchStart",value:function(e){this._state.touchstartY=e.changedTouches[0].screenY}},{key:"handleTouchMove",value:function(e){var t=this,o=this._util.wrapperMap,l=o.elementToScroll;if(0===l.scrollTop){var r=e.
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 65 2e 62 6f 75 6e 64 61 72 79 2c 6f 3d 65 2e 65 6c 65 6d 2c 6e 3d 65 2e 74 61 72 67 65 74 2c 6c 3d 65 2e 74 65 6d 70 6c 61 74 65 54 65 78 74 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 75 74 69 6c 2e 74 65 6d 70 6c 61 74 65 54 65 78 74 3d 6c 7c 7c 6e 26 26 5f 28 28 74 26 26 76 28 6f 2c 74 29 7c 7c 4d 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 29 29 2c 74 68 69 73 2e 5f 75 74 69 6c 2e 74 65 6d 70 6c 61 74 65 54 65 78 74 7d 7d 5d 29 2c 74 7d 28 79 29 3b 41 2e 65 76 65 6e 74 73 3d 7b 63 6c 69 63 6b 3a 5b 5b 22 77 61 66 65 72 2d 6c 69 67 68 74 62 6f 78 22 2c 22 68 61 6e 64 6c 65 43 6c 69 63 6b 22 5d 5d 7d 3b 76 61 72 20 50 3d 41 2c 59 3d 4f 62 6a 65 Data Ascii: ,get:function(){var e=this._util,t=e.boundary,o=e.elem,n=e.target,l=e.templateText;return this._util.templateText=l\|\|n&&_((t&&v(o,t)\|\|M).querySelector(n)),this._util.templateText}}]),t}(y);A.events={click:[["wafer-lightbox","handleClick"]]};var P=A,Y=Obje
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 62 69 6e 64 45 76 65 6e 74 2c 58 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 62 61 73 65 2c 7a 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 63 6f 6e 74 72 6f 6c 6c 65 72 73 2e 57 61 66 65 72 42 61 73 65 43 6f 6e 74 72 6f 6c 6c 65 72 2c 47 3d 64 6f 63 75 6d 65 6e 74 2c 51 3d 47 2e 62 6f 64 79 2c 5a 3d 47 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 24 3d 22 73 63 72 6f 6c 6c 22 3d 3d 3d 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 6f 76 65 72 66 6c 6f 77 59 3f 51 3a 5a 2c 65 65 3d 76 6f 69 64 20 30 2c 74 65 3d 76 6f 69 64 20 30 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 Data Ascii: bindEvent,X=window.wafer.base,z=window.wafer.controllers.WaferBaseController,G=document,Q=G.body,Z=G.documentElement,$="scroll"===window.getComputedStyle(document.body).overflowY?Q:Z,ee=void 0,te=void 0,oe=function(e){function t(){var e=arguments.length>0
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 2c 7b 6f 76 65 72 66 6c 6f 77 3a 22 68 69 64 64 65 6e 22 7d 29 29 2c 79 2e 5f 73 74 61 74 65 2e 6c 61 73 74 53 63 72 6f 6c 6c 59 3d 65 2c 79 2e 5f 73 74 61 74 65 2e 63 75 72 72 65 6e 74 49 6e 73 74 61 6e 63 65 3d 74 68 69 73 2c 79 2e 5f 73 74 61 74 65 2e 6f 70 65 6e 3d 21 30 7d 2c 50 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c 65 53 77 69 70 65 43 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 2e 5f 63 6c 6f 73 65 28 7b 73 6f 75 72 63 65 3a 22 73 77 69 70 65 43 6c 6f 73 65 22 7d 29 7d 2c 62 2e 5f 72 65 6e 64 65 72 4c 69 67 68 74 42 6f 78 57 72 61 70 70 65 72 28 29 2c 62 2e 73 79 6e 63 28 29 2c 62 7d 72 65 74 75 72 6e 20 63 28 74 2c 65 29 2c 42 28 74 2c 5b 7b 6b 65 79 3a 22 5f 63 6c 6f 73 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: ,{overflow:"hidden"})),y._state.lastScrollY=e,y._state.currentInstance=this,y._state.open=!0},P.prototype.handleSwipeClose=function(){y._close({source:"swipeClose"})},b._renderLightBoxWrapper(),b.sync(),b}return c(t,e),B(t,[{key:"_close",value:function(){
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 65 6e 74 28 22 6c 69 67 68 74 62 6f 78 3a 63 6c 6f 73 65 22 2c 7b 65 6c 65 6d 3a 69 2c 6d 65 74 61 3a 7b 73 6f 75 72 63 65 3a 6e 2c 74 61 72 67 65 74 45 6c 65 6d 3a 66 7d 7d 29 7d 2c 70 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 5f 68 61 6e 64 6c 65 43 6c 6f 73 65 43 6c 69 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 5f 63 6c 6f 73 65 28 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 68 61 6e 64 6c 65 42 67 43 6c 6f 73 65 43 6c 69 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2e 70 72 6f 70 73 2e 77 72 61 70 70 65 72 4d 61 70 2c 6f 3d 74 2e 77 72 61 70 70 65 72 45 6c 65 6d 3b 65 2e 74 61 72 67 65 74 3d 3d 3d 6f Data Ascii: ent("lightbox:close",{elem:i,meta:{source:n,targetElem:f}})},p)}}},{key:"_handleCloseClick",value:function(e){e.preventDefault(),this._close()}},{key:"_handleBgCloseClick",value:function(e){var t=this._options.props.wrapperMap,o=t.wrapperElem;e.target===o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49834	152.199.24.48	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:28 UTC	888	OUT	GET /tag/opus.js HTTP/1.1 Host: opus.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-03-29 00:41:29 UTC	561	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 395320 Content-Security-Policy: default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline' Content-Type: application/javascript Date: Fri, 29 Mar 2024 00:41:29 GMT Etag: "2f7d675de81d319944066d9dfca13d72" Last-Modified: Tue, 19 Mar 2024 17:45:41 GMT Server: ECAcc (dcd/7D6B) Vary: Accept-Encoding x-amz-id-2: /zY9JB/3SFb5BdBr4Gv9BEsr7eRiL+FxPhP1RTY+SGvebj77HuNkwUCScEC6KAJZKMCIAPMIvLQ= x-amz-request-id: 44CMZW284WVWXZ6C X-Cache: HIT Content-Length: 8650 Connection: close
2024-03-29 00:41:29 UTC	8650	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 29 72 65 74 75 72 6e 20 74 3b 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 6d 61 74 63 68 28 2f 5b 5c 77 5d 2b 5c 2e 28 5b 5c 77 5d 2b 7c 63 6f 2e 75 6b 29 24 2f 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 22 22 7d 7d 3b 63 6f 6e 73 74 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 65 3d 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 3d 22 29 2c 6f 3d 28 6e 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 29 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2c 61 3d 30 3b 61 3c 6f 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 Data Ascii: (()=>{"use strict";var t=function(t){if(t)return t;try{return document.location.hostname.match(/[\w]+\.([\w]+\|co.uk)$/)[0]}catch(t){return""}};const n=function(t,n){for(var e="".concat(t,"="),o=(n\|\|window.document).cookie.split(";"),a=0;a<o.length;a++){va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49841	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	544	OUT	GET /aaq/wf/wf-scrollview-2.22.6-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:29 UTC	853	IN	HTTP/1.1 200 OK x-amz-id-2: tqaUuXc48vKs5bL+Tt4ziuqEhlI1ESisAHeQvF+GqSzE5r0oeBabEkp5l1UJaMv7kp7uYMf7wRA= x-amz-request-id: 2RF54GE9BHPJVYDA Date: Thu, 28 Mar 2024 14:42:32 GMT Last-Modified: Sun, 03 Mar 2024 00:45:48 GMT ETag: "aeea17ace82479b8f0c0b6583c4b49ab" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: Crn0K3Y6rSIDk6fkEnMGOzHN3fbaT5sQ Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 34717 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 35938 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 73 63 72 6f 6c 6c 76 69 65 77 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 73 63 72 6f 6c 6c 76 69 65 77 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-scrollview",[],t):"object"==typeof exports?exports["wafer-scrollview"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 65 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e Data Ascii: super() hasn't been called");return!t\|\|"object"!=typeof t&&"function"!=typeof t?e:t}function l(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function, not "+typeof t);e.prototype=Object.create(t&&t.
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 69 3d 74 2e 77 69 6e 64 6f 77 4c 69 6d 69 74 2c 73 3d 76 6f 69 64 20 30 3d 3d 3d 69 3f 35 3a 69 3b 72 28 74 68 69 73 2c 65 29 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 65 6c 65 6d 4d 61 70 70 69 6e 67 3d 6e 65 77 20 4d 61 70 2c 74 68 69 73 2e 74 61 69 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 79 63 6c 65 3d 21 31 2c 74 68 69 73 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 63 72 6f 6c 6c 49 74 65 6d 73 4c 69 6d 69 74 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 73 2f 32 29 7d 72 65 74 75 72 6e 20 64 28 65 Data Ascii: {function e(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},i=t.windowLimit,s=void 0===i?5:i;r(this,e),this.active=null,this.elemMapping=new Map,this.tail=null,this.cycle=!1,this.head=null,this.scrollItemsLimit=Math.floor(s/2)}return d(e
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 6f 6c 6c 49 74 65 6d 73 4c 69 6d 69 74 3b 69 66 28 74 68 69 73 2e 63 79 63 6c 65 29 7b 69 3c 3d 32 3f 72 3d 30 3a 69 3c 3d 33 26 26 28 72 3d 31 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 46 6f 72 77 61 72 64 28 72 2b 31 29 7d 72 65 74 75 72 6e 20 74 3c 72 3f 6e 75 6c 6c 3a 69 3e 74 2b 72 2d 31 3f 74 68 69 73 2e 67 65 74 46 6f 72 77 61 72 64 28 72 2b 31 29 3a 6e 75 6c 6c 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 45 6c 65 6d 65 6e 74 54 6f 50 72 65 70 65 6e 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 65 6c 65 6d 4d 61 70 70 69 6e 67 2e 67 65 74 28 74 68 69 73 2e 61 63 74 69 76 65 29 2c 74 3d 65 2e 67 65 74 28 22 69 6e 64 65 78 22 29 2c 69 3d 74 68 69 73 2e 65 6c 65 6d 4d 61 70 70 69 6e 67 2e 73 69 7a 65 2c Data Ascii: ollItemsLimit;if(this.cycle){i<=2?r=0:i<=3&&(r=1);return this.getForward(r+1)}return t<r?null:i>t+r-1?this.getForward(r+1):null}},{key:"getElementToPrepend",value:function(){var e=this.elemMapping.get(this.active),t=e.get("index"),i=this.elemMapping.size,
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 4d 61 70 70 69 6e 67 2e 73 69 7a 65 7d 7d 5d 29 2c 65 7d 28 29 2c 70 3d 66 2c 6d 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 69 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 69 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 72 29 26 26 28 65 5b 72 5d 3d 69 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 Data Ascii: tion(){return this.elemMapping.size}}]),e}(),p=f,m=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var i=arguments[t];for(var r in i)Object.prototype.hasOwnProperty.call(i,r)&&(e[r]=i[r])}return e},g=function(){function e(e,t){for(var i=0;i
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 5b 22 69 6e 64 65 78 22 5d 2c 4b 3d 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4b 26 26 28 65 2e 73 74 79 6c 65 2e 63 75 72 73 6f 72 3d 74 29 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 2c 74 3d 21 31 3b 72 65 74 75 72 6e 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 7d 7d 28 69 29 29 2c 74 68 69 73 2e 65 78 65 63 28 69 2e 5f 75 74 69 6c 2e 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 29 7d 2c 65 78 65 63 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 72 3d 74 68 69 73 3b 74 Data Ascii: ["index"],K="ontouchstart"in window,Q=function(e,t){K&&(e.style.cursor=t)},Z=function(){var e=[],t=!1;return{add:function(t,i){e.push(function(e){return function(){return t.call(e)}}(i)),this.exec(i._util.transitionDuration)},exec:function(i){var r=this;t
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 73 3a 45 2c 69 6e 64 69 63 61 74 6f 72 50 61 67 69 6e 61 74 69 6f 6e 3a 67 2c 69 6e 64 69 63 61 74 6f 72 73 43 75 73 74 6f 6d 43 6f 75 6e 74 3a 76 2c 69 6e 64 69 63 61 74 6f 72 54 79 70 65 3a 5f 2c 69 6e 64 69 63 61 74 6f 72 57 69 74 68 43 6f 75 6e 74 45 6c 65 6d 3a 53 2c 69 6e 64 69 63 61 74 6f 72 57 69 74 68 6f 75 74 43 6f 75 6e 74 45 6c 65 6d 3a 6b 2c 73 6e 61 70 42 65 68 61 76 69 6f 72 3a 64 2c 73 6c 69 64 65 72 45 6c 65 6d 3a 4d 28 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 73 6c 69 64 65 73 22 29 29 5b 30 5d 7c 7c 65 2c 62 65 68 61 76 69 6f 72 3a 63 2c 6e 65 78 74 42 74 6e 3a 4d 28 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 6e 65 78 74 2d 62 74 6e 22 29 29 5b 30 5d 2c 70 72 65 76 Data Ascii: s:E,indicatorPagination:g,indicatorsCustomCount:v,indicatorType:_,indicatorWithCountElem:S,indicatorWithoutCountElem:k,snapBehavior:d,sliderElem:M(e.getElementsByClassName("slides"))[0]\|\|e,behavior:c,nextBtn:M(e.getElementsByClassName("next-btn"))[0],prev
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 65 77 2d 74 64 22 29 2c 4b 3d 4e 75 6d 62 65 72 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4c 2b 22 61 75 74 6f 2d 73 77 69 74 63 68 22 29 29 7c 7c 30 2c 5a 3d 4e 75 6d 62 65 72 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4c 2b 22 61 75 74 6f 2d 73 77 69 74 63 68 2d 64 69 73 61 62 6c 65 2d 68 6f 76 65 72 22 29 29 7c 7c 30 2c 24 3d 4e 75 6d 62 65 72 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4c 2b 22 64 69 73 61 62 6c 65 2d 74 6f 75 63 68 22 29 29 7c 7c 30 2c 65 65 3d 4e 75 6d 62 65 72 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4c 2b 22 64 69 73 61 62 6c 65 2d 63 6c 69 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 22 29 29 7c 7c 30 2c 74 65 3d 4e 75 6d 62 65 72 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4c 2b 22 61 75 74 6f 2d 73 77 69 74 Data Ascii: ew-td"),K=Number(e.getAttribute(L+"auto-switch"))\|\|0,Z=Number(e.getAttribute(L+"auto-switch-disable-hover"))\|\|0,$=Number(e.getAttribute(L+"disable-touch"))\|\|0,ee=Number(e.getAttribute(L+"disable-click-navigation"))\|\|0,te=Number(e.getAttribute(L+"auto-swit
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 64 61 74 65 57 69 64 74 68 28 29 2c 58 28 61 65 2e 73 6c 69 64 65 72 45 6c 65 6d 2c 22 74 72 61 6e 73 66 6f 72 6d 22 2c 61 65 2e 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 2c 61 65 2e 74 72 61 6e 73 69 74 69 6f 6e 54 69 6d 69 6e 67 46 75 6e 63 74 69 6f 6e 29 2c 51 28 61 65 2e 73 6c 69 64 65 72 45 6c 65 6d 2c 22 2d 77 65 62 6b 69 74 2d 67 72 61 62 22 29 2c 61 65 2e 65 64 67 65 50 61 64 64 69 6e 67 50 65 72 63 65 6e 74 61 67 65 29 7b 76 61 72 20 6c 65 3d 61 65 2e 69 74 65 6d 57 69 64 74 68 2a 61 65 2e 65 64 67 65 50 61 64 64 69 6e 67 50 65 72 63 65 6e 74 61 67 65 2f 31 30 30 3b 61 65 2e 73 6c 69 64 65 72 45 6c 65 6d 2e 73 74 79 6c 65 5b 22 70 61 64 64 69 6e 67 2d 6c 65 66 74 22 5d 3d 6c 65 2b 22 70 78 22 7d 65 6c 73 65 20 61 65 2e 73 6c 69 64 65 Data Ascii: dateWidth(),X(ae.sliderElem,"transform",ae.transitionDuration,ae.transitionTimingFunction),Q(ae.sliderElem,"-webkit-grab"),ae.edgePaddingPercentage){var le=ae.itemWidth*ae.edgePaddingPercentage/100;ae.sliderElem.style["padding-left"]=le+"px"}else ae.slide
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 65 78 22 2c 22 2d 31 22 29 7d 29 3a 6e 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 29 7d 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 73 63 72 6f 6c 6c 56 69 65 77 57 69 74 68 4e 61 74 69 76 65 53 79 6e 63 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 5f 73 74 61 74 65 2e 6c 6f 63 6b 65 64 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 65 2e 73 6c 69 64 65 72 45 6c 65 6d 2c 69 3d 65 2e 69 6e 64 69 63 61 74 6f 72 49 74 65 6d 73 2c 72 3d 65 2e 70 72 65 76 42 74 6e 2c 73 3d 65 2e 6e 65 78 74 42 74 6e 3b 69 66 28 69 7c 7c 72 7c 7c 73 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 45 6c Data Ascii: ex","-1")}):n.forEach(function(e){e.removeAttribute("tabindex")})}}},{key:"scrollViewWithNativeSync",value:function(){if(!this._state.locked){var e=this._util,t=e.sliderElem,i=e.indicatorItems,r=e.prevBtn,s=e.nextBtn;if(i\|\|r\|\|s){var a=this._state.activeEl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49842	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	542	OUT	GET /aaq/wf/wf-countdown-1.2.5-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:29 UTC	815	IN	HTTP/1.1 200 OK x-amz-id-2: A2wBhH1xA8kGTDEMyZSPB159bvIzaB3ethW/VOHTZSSFjiDsABgsbwZchyBwFBdpe39gM90aLUE/3a/+vh3akA== x-amz-request-id: 89GVVTQ5FFV6ZJ0A Date: Fri, 29 Mar 2024 00:41:30 GMT Last-Modified: Sun, 13 Sep 2020 18:50:05 GMT ETag: "681d57e9e7cbef5de44544c13f8ca62e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 x-amz-version-id: CQ1lP8549yVnp28g4QLu9GcN8rB3ImgO Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 4348 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:29 UTC	779	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 63 6f 75 6e 74 64 6f 77 6e 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 63 6f 75 6e 74 64 6f 77 6e 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-countdown",[],t):"object"==typeof exports?exports["wafer-countdown"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wa
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 74 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 61 71 2f 77 66 2f 22 2c 74 28 74 2e 73 3d 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 29 7d 28 7b 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e Data Ascii: .hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,n){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function o(e,t){if(!(e instan
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 4d 61 70 3b 69 66 28 74 3e 30 29 7b 76 61 72 20 72 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2f 31 65 33 25 36 30 29 2c 6f 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2f 31 65 33 2f 36 30 25 36 30 29 2c 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2f 33 36 65 35 25 66 29 2c 73 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2f 38 36 34 65 35 29 3b 6e 2e 73 65 74 28 22 74 6f 74 61 6c 22 2c 74 29 2c 6e 2e 73 65 74 28 22 64 61 79 73 22 2c 73 29 2c 6e 2e 73 65 74 28 22 68 6f 75 72 73 22 2c 61 29 2c 6e 2e 73 65 74 28 22 6d 69 6e 75 74 65 73 22 2c 6f 29 2c 6e 2e 73 65 74 28 22 73 65 63 6f 6e 64 73 22 2c 72 29 7d 65 6c 73 65 20 6e 2e 73 65 74 28 22 74 6f 74 61 6c 22 2c 30 29 2c 6e 2e 73 65 74 28 22 64 61 79 73 22 2c 30 29 2c 6e 2e 73 65 74 28 22 68 6f 75 72 73 22 2c 30 29 2c 6e 2e Data Ascii: Map;if(t>0){var r=Math.floor(t/1e3%60),o=Math.floor(t/1e3/60%60),a=Math.floor(t/36e5%f),s=Math.floor(t/864e5);n.set("total",t),n.set("days",s),n.set("hours",a),n.set("minutes",o),n.set("seconds",r)}else n.set("total",0),n.set("days",0),n.set("hours",0),n.
2024-03-29 00:41:29 UTC	969	IN	Data Raw: 6e 74 28 22 63 6f 75 6e 74 64 6f 77 6e 3a 22 2b 6c 2c 7b 65 6c 65 6d 3a 74 2c 6d 65 74 61 3a 7b 7d 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 75 70 43 6f 75 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 76 61 72 20 72 3d 64 28 74 29 3b 6f 2e 61 64 64 42 72 65 61 6b 70 6f 69 6e 74 43 6c 61 73 73 28 72 29 2c 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6f 3d 72 2e 67 65 74 28 74 29 3b 74 3d 3d 3d 63 2e 48 4f 55 52 26 26 6e 3d 3d 3d 63 2e 48 4f 55 52 26 26 28 6f 2b 3d 72 2e 67 65 74 28 22 64 61 79 73 22 29 2a 66 29 3b 76 61 72 20 61 3d 6f 3e 3d 31 30 3f 22 22 2b 6f 3a 28 22 30 22 2b 6f 29 2e 73 6c 69 63 65 28 2d 32 29 3b 65 2e 69 6e 6e 65 72 48 54 4d Data Ascii: nt("countdown:"+l,{elem:t,meta:{}})}},{key:"setupCount",value:function(e,t,n){function r(){var r=d(t);o.addBreakpointClass(r),e.forEach(function(e,t){var o=r.get(t);t===c.HOUR&&n===c.HOUR&&(o+=r.get("days")*f);var a=o>=10?""+o:("0"+o).slice(-2);e.innerHTM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49833	23.43.243.35	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	629	OUT	GET /bidexchange.js?cid=8YHBJ3BJ0&version=12.1&dn=www.yahoo.com&ysection=main&yregion=US&ylang=en-US&ysite=fp&ydevice=desktop HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:29 UTC	954	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 672867 Content-Type: text/javascript; charset=utf-8 Set-Cookie: visitor-id=3546744890180387000V10; Expires=Wed, 25 Sep 2024 00:41:29 GMT; domain=.hb.yahoo.net; Path=/; sameSite=none; secure=true x-mnet-h: E P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Link: <https://prebid.media.net>;rel="preconnect",<https://c2shb-oao.ssp.yahoo.com>;rel="preconnect",<https://m.hb.yahoo.net>;rel="preconnect",<https://hb.yahoo.net/ucreative.php?cv=1>;rel="prefetch";as=script,<https://rtb-cache.hb.yahoo.net>;rel="preconnect",<https://hb.yahoo.net/ss/nes/player.js>;rel="prefetch";as="script" ETag: "6280861056574699233" Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Timing-Allow-Origin: * Cache-Control: max-age=1800 Expires: Fri, 29 Mar 2024 01:11:29 GMT Date: Fri, 29 Mar 2024 00:41:29 GMT Connection: close
2024-03-29 00:41:29 UTC	4	IN	Data Raw: 20 20 20 20 Data Ascii:
2024-03-29 00:41:29 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 34 37 36 34 3a 28 65 2c 74 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 74 2c 7b 51 45 3a 28 29 3d 3e 72 7d 29 3b 76 61 72 20 6e 3d 69 28 38 33 38 36 29 3b 6e 2e 65 50 2e 67 65 74 43 6f 6e 66 69 67 28 22 61 62 70 57 68 74 6c 73 74 55 72 6c 73 52 67 78 22 29 3b 63 6f 6e 73 74 20 72 3d 6e 2e 65 50 2e 67 65 74 43 6f 6e 66 69 67 28 22 41 62 70 41 63 70 74 50 72 6d 22 29 7d 2c 35 33 36 34 3a 28 65 2c 74 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 69 28 38 35 39 29 2c 72 3d 69 28 33 32 37 37 29 3b 63 6f 6e 73 74 20 73 3d 6e 65 77 20 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 74 72 61 63 6b Data Ascii: try {(()=>{var e={4764:(e,t,i)=>{"use strict";i.d(t,{QE:()=>r});var n=i(8386);n.eP.getConfig("abpWhtlstUrlsRgx");const r=n.eP.getConfig("AbpAcptPrm")},5364:(e,t,i)=>{"use strict";var n=i(859),r=i(3277);const s=new class{constructor(){this.track
2024-03-29 00:41:29 UTC	16384	IN	Data Raw: 64 3a 33 7d 29 7d 7d 67 65 74 4d 65 74 61 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 61 2e 78 5a 29 28 74 68 69 73 2e 74 61 72 67 65 74 56 69 65 77 54 69 6d 65 72 4d 61 70 2c 65 2c 33 29 7d 73 65 74 20 66 69 72 65 43 61 6c 6c 62 61 63 6b 46 6f 72 45 6c 65 6d 65 6e 74 28 65 29 7b 74 68 69 73 2e 67 65 6e 65 72 69 63 43 61 6c 6c 62 61 63 6b 46 6f 72 45 6c 65 6d 65 6e 74 73 3d 65 7d 6f 62 73 65 72 76 65 28 65 29 7b 63 6f 6e 73 74 20 74 3d 28 30 2c 6e 2e 6e 29 28 65 29 3b 73 77 69 74 63 68 28 28 30 2c 61 2e 71 48 29 28 74 68 69 73 2e 74 61 72 67 65 74 56 69 65 77 54 69 6d 65 72 4d 61 70 2c 65 29 2c 74 29 7b 63 61 73 65 20 30 3a 28 30 2c 73 2e 44 4d 29 28 74 68 69 73 2e 49 4f 46 6f 72 41 64 73 29 26 26 74 68 69 73 2e 49 4f 46 6f 72 41 64 73 2e 6f 62 73 65 72 76 65 Data Ascii: d:3})}}getMeta(e){return(0,a.xZ)(this.targetViewTimerMap,e,3)}set fireCallbackForElement(e){this.genericCallbackForElements=e}observe(e){const t=(0,n.n)(e);switch((0,a.qH)(this.targetViewTimerMap,e),t){case 0:(0,s.DM)(this.IOForAds)&&this.IOForAds.observe
2024-03-29 00:41:29 UTC	7948	IN	Data Raw: 6f 72 28 65 2c 74 29 7b 74 68 69 73 2e 6d 65 74 68 6f 64 3d 22 50 4f 53 54 22 2c 74 68 69 73 2e 68 6f 73 74 3d 72 2e 67 65 74 28 22 70 6f 67 22 29 2c 74 68 69 73 2e 6c 6f 67 54 6f 70 69 63 3d 22 22 2c 74 68 69 73 2e 64 65 66 61 75 6c 74 52 65 71 75 65 73 74 4f 70 74 69 6f 6e 73 3d 7b 6d 65 74 68 6f 64 3a 74 68 69 73 2e 6d 65 74 68 6f 64 2c 74 61 67 73 3a 5b 22 6c 6f 67 22 5d 2c 74 79 70 65 3a 22 62 65 61 63 6f 6e 22 2c 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3a 21 31 2c 77 69 74 68 46 61 6c 6c 62 61 63 6b 3a 21 30 7d 2c 74 68 69 73 2e 65 76 65 6e 74 49 64 3d 65 2c 74 68 69 73 2e 6c 6f 67 54 6f 70 69 63 3d 74 2c 74 68 69 73 2e 64 65 66 61 75 6c 74 52 65 71 75 65 73 74 4f 70 74 69 6f 6e 73 2e 74 61 67 73 2e 70 75 73 68 28 65 29 7d 75 70 64 61 74 65 52 Data Ascii: or(e,t){this.method="POST",this.host=r.get("pog"),this.logTopic="",this.defaultRequestOptions={method:this.method,tags:["log"],type:"beacon",withCredentials:!1,withFallback:!0},this.eventId=e,this.logTopic=t,this.defaultRequestOptions.tags.push(e)}updateR
2024-03-29 00:41:29 UTC	16384	IN	Data Raw: 28 30 2c 63 2e 47 29 28 6e 29 3b 28 30 2c 72 2e 44 4d 29 28 73 29 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 70 28 74 5b 65 5d 2e 70 6c 61 63 65 6d 65 6e 74 53 75 62 6d 69 74 74 65 64 2c 28 28 65 2c 74 29 3d 3e 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2e 63 6d 64 2e 70 75 73 68 28 28 28 29 3d 3e 7b 28 30 2c 6f 2e 7a 78 29 28 22 31 22 29 26 26 65 2e 73 65 74 54 61 72 67 65 74 69 6e 67 28 22 6e 6f 61 64 73 22 2c 22 31 22 29 7d 29 29 7d 28 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2e 63 6d 64 2e 70 75 73 68 28 28 28 29 3d 3e 7b 77 69 6e 64 6f 77 2e Data Ascii: (0,c.G)(n);(0,r.DM)(s)&&function(e,t,i){(function(e,t){e.forEach((e=>{p(t[e].placementSubmitted,((e,t)=>{!function(e,t,i){window.googletag.cmd.push((()=>{(0,o.zx)("1")&&e.setTargeting("noads","1")}))}(t),function(e){window.googletag.cmd.push((()=>{window.
2024-03-29 00:41:29 UTC	16384	IN	Data Raw: 50 72 65 62 69 64 52 65 71 75 65 73 74 28 65 2e 70 72 65 62 69 64 42 69 64 64 65 72 52 65 71 75 65 73 74 2c 74 29 7d 29 29 7d 67 65 74 50 72 65 62 69 64 42 69 64 64 65 72 52 65 71 75 65 73 74 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 5b 30 5d 2e 70 72 6f 76 69 64 65 72 2c 69 3d 58 2e 55 2e 67 65 74 42 69 64 64 65 72 46 72 6f 6d 43 6f 64 65 28 74 2e 69 64 2c 74 2e 61 64 61 70 74 65 72 29 3b 69 66 28 69 29 72 65 74 75 72 6e 7b 70 72 65 62 69 64 42 69 64 64 65 72 52 65 71 75 65 73 74 3a 7b 62 69 64 64 65 72 52 65 71 75 65 73 74 3a 49 28 65 2c 69 29 2c 70 72 6f 76 69 64 65 72 3a 74 2c 73 70 65 63 3a 69 7d 2c 70 72 6f 76 69 64 65 72 44 6f 6e 65 3a 28 29 3d 3e 74 68 69 73 2e 70 72 6f 76 69 64 65 72 44 6f 6e 65 28 74 2e 69 64 29 7d 7d 70 72 6f 76 69 64 65 72 44 6f Data Ascii: PrebidRequest(e.prebidBidderRequest,t)}))}getPrebidBidderRequest(e){const t=e[0].provider,i=X.U.getBidderFromCode(t.id,t.adapter);if(i)return{prebidBidderRequest:{bidderRequest:I(e,i),provider:t,spec:i},providerDone:()=>this.providerDone(t.id)}}providerDo
2024-03-29 00:41:29 UTC	7952	IN	Data Raw: 38 32 29 2c 6f 3d 69 28 31 38 39 32 29 3b 63 6f 6e 73 74 20 61 3d 22 63 6f 62 72 61 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 63 6f 6e 73 74 20 65 3d 28 30 2c 6e 2e 51 29 28 61 29 3b 69 66 28 28 30 2c 72 2e 7a 78 29 28 65 29 29 6f 2e 44 2e 66 65 74 63 68 43 6f 6e 66 69 67 28 65 29 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 65 3d 28 30 2c 6e 2e 24 29 28 61 29 3b 73 2e 6e 2e 72 65 67 69 73 74 65 72 28 65 29 2c 73 2e 6e 2e 6f 6e 28 65 2c 28 28 65 2c 74 29 3d 3e 7b 6f 2e 44 2e 66 65 74 63 68 43 6f 6e 66 69 67 28 74 29 7d 29 29 7d 7d 7d 2c 38 33 38 36 3a 28 65 2c 74 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 74 2c 7b 41 34 3a 28 29 3d 3e 67 2c 65 50 3a 28 29 3d 3e 68 2c 4e 72 3a 28 29 3d 3e 66 7d 29 3b 76 61 72 20 6e 3d 69 28 33 32 Data Ascii: 82),o=i(1892);const a="cobrand";function c(){const e=(0,n.Q)(a);if((0,r.zx)(e))o.D.fetchConfig(e);else{const e=(0,n.$)(a);s.n.register(e),s.n.on(e,((e,t)=>{o.D.fetchConfig(t)}))}}},8386:(e,t,i)=>{"use strict";i.d(t,{A4:()=>g,eP:()=>h,Nr:()=>f});var n=i(32
2024-03-29 00:41:29 UTC	16384	IN	Data Raw: 65 6e 74 61 67 65 22 3a 30 7d 2c 22 32 35 33 30 37 22 3a 7b 22 63 6c 69 65 6e 74 5f 73 65 72 76 69 6e 67 5f 70 65 72 63 65 6e 74 61 67 65 22 3a 31 30 30 7d 2c 22 32 35 33 30 38 22 3a 7b 22 63 6c 69 65 6e 74 5f 73 65 72 76 69 6e 67 5f 70 65 72 63 65 6e 74 61 67 65 22 3a 31 30 30 7d 2c 22 32 35 33 31 30 22 3a 7b 22 63 6c 69 65 6e 74 5f 73 65 72 76 69 6e 67 5f 70 65 72 63 65 6e 74 61 67 65 22 3a 31 30 30 7d 2c 22 32 35 33 31 35 22 3a 7b 22 63 6c 69 65 6e 74 5f 73 65 72 76 69 6e 67 5f 70 65 72 63 65 6e 74 61 67 65 22 3a 30 7d 2c 22 32 35 33 31 36 22 3a 7b 22 63 6c 69 65 6e 74 5f 73 65 72 76 69 6e 67 5f 70 65 72 63 65 6e 74 61 67 65 22 3a 30 7d 7d 7d 2c 22 69 73 43 6f 6e 74 72 6f 6c 22 3a 66 61 6c 73 65 7d 5d 7d 5d 7d 2c 22 41 63 63 6f 75 6e 74 49 64 22 3a 22 Data Ascii: entage":0},"25307":{"client_serving_percentage":100},"25308":{"client_serving_percentage":100},"25310":{"client_serving_percentage":100},"25315":{"client_serving_percentage":0},"25316":{"client_serving_percentage":0}}},"isControl":false}]}]},"AccountId":"
2024-03-29 00:41:29 UTC	16384	IN	Data Raw: 61 74 68 22 2c 22 76 61 6c 75 65 22 3a 22 2f 32 32 38 38 38 31 35 32 32 37 39 2f 75 73 65 73 2f 79 68 70 2f 61 74 74 2f 64 74 2f 75 73 65 73 5f 79 68 70 5f 61 74 74 5f 64 74 5f 61 73 5f 6d 69 64 5f 72 69 67 68 74 5f 62 22 7d 5d 7d 2c 22 39 35 32 33 34 31 37 32 37 22 3a 7b 22 69 64 22 3a 22 39 35 32 33 34 31 37 32 37 22 2c 22 64 69 76 22 3a 22 22 2c 22 74 61 72 67 22 3a 5b 7b 22 6b 65 79 22 3a 22 72 65 67 65 78 3a 61 64 75 6e 69 74 5f 70 61 74 68 22 2c 22 76 61 6c 75 65 22 3a 22 2f 32 32 38 38 38 31 35 32 32 37 39 2f 75 73 65 73 2f 79 68 70 2f 72 6f 73 2f 64 74 2f 75 73 65 73 5f 79 68 70 5f 72 6f 73 5f 64 74 5f 6d 69 64 5f 72 69 67 68 74 22 7d 5d 7d 7d 2c 22 44 69 73 61 62 6c 65 43 6f 6f 6b 69 65 53 79 6e 63 4f 6e 4c 6f 61 64 22 3a 22 30 22 2c 22 44 69 73 Data Ascii: ath","value":"/22888152279/uses/yhp/att/dt/uses_yhp_att_dt_as_mid_right_b"}]},"952341727":{"id":"952341727","div":"","targ":[{"key":"regex:adunit_path","value":"/22888152279/uses/yhp/ros/dt/uses_yhp_ros_dt_mid_right"}]}},"DisableCookieSyncOnLoad":"0","Dis
2024-03-29 00:41:29 UTC	7952	IN	Data Raw: 64 22 3a 22 79 5f 74 64 22 2c 22 74 65 73 74 22 3a 22 6d 6e 54 65 73 74 22 2c 22 70 62 70 22 3a 22 6d 6e 70 62 70 22 2c 22 70 64 69 22 3a 22 79 5f 64 69 22 2c 22 70 73 7a 22 3a 22 6d 6e 70 73 7a 22 2c 22 70 62 69 64 22 3a 22 6d 6e 70 62 69 64 22 2c 22 70 6c 62 22 3a 22 6d 6e 70 6c 62 22 2c 22 70 77 62 22 3a 22 6d 6e 70 77 62 22 2c 22 6f 62 70 22 3a 22 6d 6e 6f 62 70 22 2c 22 6f 73 7a 22 3a 22 6d 6e 6f 73 7a 22 2c 22 6f 6c 62 22 3a 22 6d 6e 6f 6c 62 22 2c 22 6f 77 62 22 3a 22 6d 6e 6f 77 62 22 7d 2c 22 4f 76 65 72 72 69 64 65 43 6f 6e 74 72 6f 6c 42 75 63 6b 65 74 54 61 72 67 65 74 69 6e 67 22 3a 22 22 2c 22 4f 76 65 72 72 69 64 65 50 72 6f 76 69 64 65 72 53 69 7a 65 22 3a 7b 7d 2c 22 50 61 67 65 54 6f 70 69 63 43 6f 6e 66 69 67 22 3a 7b 22 64 65 66 61 75 Data Ascii: d":"y_td","test":"mnTest","pbp":"mnpbp","pdi":"y_di","psz":"mnpsz","pbid":"mnpbid","plb":"mnplb","pwb":"mnpwb","obp":"mnobp","osz":"mnosz","olb":"mnolb","owb":"mnowb"},"OverrideControlBucketTargeting":"","OverrideProviderSize":{},"PageTopicConfig":{"defau

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49843	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	538	OUT	GET /aaq/wf/wf-benji-1.1.3-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:29 UTC	802	IN	HTTP/1.1 200 OK x-amz-id-2: gqHDRu5UrOUdGZVWr95CAE8ryZ/ByITyviNuR6yeGMzwU0+EexZWf+mggT0XqKcnjXG2eEv/IZA= x-amz-request-id: 89GZTVR2SSPGEVH7 Date: Fri, 29 Mar 2024 00:41:30 GMT Last-Modified: Tue, 17 Oct 2023 23:22:13 GMT ETag: "66dd7e9082b2f37836df08d0c25d4947" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: D6_gE0hdDgWzE0zXZDBC61nGy_dZFLNd Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 8282 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:29 UTC	792	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 62 65 6e 6a 69 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 62 65 6e 6a 69 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-benji",[],t):"object"==typeof exports?exports["wafer-benji"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 7d 2c 74 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 61 71 2f 77 66 2f 22 2c 74 28 74 2e 73 3d 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 29 7d 28 7b 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 Data Ascii: },t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,n){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function o(e,t){if(!e)throw new ReferenceError("this h
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 65 5b 72 5d 3d 6e 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 5b 5d 2c 72 3d 21 30 2c 6f 3d 21 31 2c 69 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 61 2c 73 3d 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 Data Ascii: var c=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},u=function(){function e(e,t){var n=[],r=!0,o=!1,i=void 0;try{for(var a,s=e[Symbol.itera
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 3d 76 6f 69 64 20 30 3d 3d 3d 64 3f 22 31 32 30 30 22 3a 64 2c 76 3d 70 5b 31 5d 2c 77 3d 76 6f 69 64 20 30 3d 3d 3d 76 3f 22 30 22 3a 76 2c 6a 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 79 2b 22 62 6f 75 6e 64 61 72 79 22 29 2c 6d 3d 6a 26 26 67 28 65 2c 6a 29 3b 72 65 74 75 72 6e 20 66 2e 5f 75 74 69 6c 3d 63 28 7b 62 6f 75 6e 64 61 72 79 3a 6a 2c 62 6f 75 6e 64 61 72 79 45 6c 65 6d 3a 6d 7d 2c 66 2e 5f 75 74 69 6c 2c 7b 22 62 65 6e 6a 69 2d 63 6f 6e 66 69 67 22 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 79 2b 22 62 65 6e 6a 69 2d 63 6f 6e 66 69 67 22 29 2c 62 65 6e 6a 69 50 61 67 65 43 6f 6e 74 65 78 74 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 79 2b 22 62 65 6e 6a 69 2d 70 61 67 65 2d 63 6f 6e 74 65 78 74 22 29 7c 7c 22 22 2c 62 65 6e Data Ascii: =void 0===d?"1200":d,v=p[1],w=void 0===v?"0":v,j=e.getAttribute(y+"boundary"),m=j&&g(e,j);return f._util=c({boundary:j,boundaryElem:m},f._util,{"benji-config":e.getAttribute(y+"benji-config"),benjiPageContext:e.getAttribute(y+"benji-page-context")\|\|"",ben
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 65 6e 6a 69 2d 65 72 72 6f 72 22 3a 6e 2c 6f 3d 65 2e 72 6f 6f 74 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 64 6f 63 75 6d 65 6e 74 3a 6f 2c 66 3d 65 2e 73 65 6c 65 63 74 6f 72 2c 63 3d 76 6f 69 64 20 30 3d 3d 3d 66 3f 22 2e 77 61 66 65 72 2d 62 65 6e 6a 69 22 3a 66 2c 75 3d 65 2e 73 75 63 63 65 73 73 43 6c 61 73 73 2c 6c 3d 76 6f 69 64 20 30 3d 3d 3d 75 3f 22 77 61 66 65 72 2d 62 65 6e 6a 69 2d 73 75 63 63 65 73 73 22 3a 75 2c 70 3d 65 2e 76 61 6c 69 64 61 74 65 44 65 6c 61 79 2c 64 3d 76 6f 69 64 20 30 3d 3d 3d 70 3f 32 35 3a 70 3b 61 28 74 68 69 73 2c 74 29 3b 76 61 72 20 62 3d 73 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 72 Data Ascii: enji-error":n,o=e.root,i=void 0===o?document:o,f=e.selector,c=void 0===f?".wafer-benji":f,u=e.successClass,l=void 0===u?"wafer-benji-success":u,p=e.validateDelay,d=void 0===p?25:p;a(this,t);var b=s(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,{r
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 73 73 43 6c 61 73 73 29 2c 43 2e 65 6d 69 74 57 61 66 65 72 45 76 65 6e 74 28 22 62 65 6e 6a 69 3a 73 75 63 63 65 73 73 22 2c 7b 65 6c 65 6d 3a 6e 2c 6d 65 74 61 3a 7b 64 61 74 61 3a 65 2c 69 64 3a 74 7d 7d 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 50 6f 73 69 74 69 6f 6e 46 61 69 6c 75 72 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 64 61 74 61 26 26 65 2e 64 61 74 61 2e 69 64 7c 7c 22 22 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 3b 69 66 28 6e 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 2e 67 65 74 28 6e 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 7c 7c 7b 7d 2c 6f 3d 72 2e 69 6e 73 74 61 6e 63 Data Ascii: ssClass),C.emitWaferEvent("benji:success",{elem:n,meta:{data:e,id:t}})}}},{key:"handlePositionFailure",value:function(e){var t=e.data&&e.data.id\|\|"",n=document.getElementById(t);if(n){var r=this._state.elementInstances.get(n.parentElement)\|\|{},o=r.instanc
2024-03-29 00:41:29 UTC	990	IN	Data Raw: 74 28 65 29 2c 6f 3d 6e 2e 69 6e 73 74 61 6e 63 65 2c 69 3d 7b 7d 2c 61 3d 7b 7d 2c 73 3d 7b 7d 2c 66 3d 21 31 3b 74 72 79 7b 69 66 28 21 28 69 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 6f 2e 5f 75 74 69 6c 5b 22 62 65 6e 6a 69 2d 63 6f 6e 66 69 67 22 5d 29 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 63 3d 6f 2e 5f 75 74 69 6c 2e 62 65 6e 6a 69 57 61 66 65 72 43 6f 6e 66 69 67 3b 69 66 28 63 2e 6c 65 6e 67 74 68 3e 30 26 26 28 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 63 29 2c 66 3d 73 2e 75 70 64 61 74 65 49 31 33 6e 29 29 7b 76 61 72 20 75 3d 6f 2e 5f 75 74 69 6c 2e 62 65 6e 6a 69 50 61 67 65 43 6f 6e 74 65 78 74 3b 75 2e 6c 65 6e 67 74 68 3e 30 26 26 28 61 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 75 29 29 7d 69 2e 70 6f 73 69 74 69 6f 6e 73 26 26 74 2e 6d 61 6b 65 Data Ascii: t(e),o=n.instance,i={},a={},s={},f=!1;try{if(!(i=JSON.parse(o._util["benji-config"])))return!1;var c=o._util.benjiWaferConfig;if(c.length>0&&(s=JSON.parse(c),f=s.updateI13n)){var u=o._util.benjiPageContext;u.length>0&&(a=JSON.parse(u))}i.positions&&t.make

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49844	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	547	OUT	GET /aaq/wf/wf-clipboard-copy-1.0.2-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:29 UTC	814	IN	HTTP/1.1 200 OK x-amz-id-2: yRvHuyCcDmTgLpcwbzH3Q5LUJR885syLJVlNmOxOeiwgcbLr3ThHz7DQKJDpBWVGk6fKTp3vEnJcMD/IgVawSA== x-amz-request-id: 89GXX8FVM4YCGXW1 Date: Fri, 29 Mar 2024 00:41:30 GMT Last-Modified: Mon, 24 May 2021 16:40:35 GMT ETag: "9d2a8efbe3fe9705e54df41100ea2dae" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: s6ZljWUzqa9Ss0D5hEgjXb_jGlec.wYG Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 4365 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 63 6c 69 70 62 6f 61 72 64 2d 63 6f 70 79 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 63 6c 69 70 62 6f 61 72 64 2d 63 6f 70 79 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-clipboard-copy",[],t):"object"==typeof exports?exports["wafer-clipboard-copy"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 Data Ascii: tion, not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function c(e,t){if(!(e instanceof t))throw new TypeError(
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 63 6f 70 79 2d 74 65 78 74 22 5d 2c 68 3d 5b 22 68 61 6e 64 6c 65 43 6f 70 79 22 5d 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 61 3d 6f 2e 73 65 6c 65 63 74 6f 72 3b 72 28 74 68 69 73 2c 74 29 3b 76 61 72 20 63 3d 6e 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 7b 73 65 6c 65 63 74 6f 72 3a 61 7d 2c 7b 53 54 41 54 45 5f 41 54 54 52 53 3a 62 7d 29 29 2c 69 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 Data Ascii: copy-text"],h=["handleCopy"],w=function(e){function t(e){var o=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},a=o.selector;r(this,t);var c=n(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,e,{selector:a},{STATE_ATTRS:b})),i=e.getAttribut
2024-03-29 00:41:29 UTC	465	IN	Data Raw: 65 61 3b 74 7c 7c 28 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 65 78 74 61 72 65 61 22 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 73 74 79 6c 65 2c 7b 62 6f 72 64 65 72 3a 22 6e 6f 6e 65 22 2c 62 6f 78 53 68 61 64 6f 77 3a 22 6e 6f 6e 65 22 2c 64 69 73 70 6c 61 79 3a 22 6e 6f 6e 65 22 2c 68 65 69 67 68 74 3a 22 32 65 6d 22 2c 6c 65 66 74 3a 30 2c 6f 75 74 6c 69 6e 65 3a 22 6e 6f 6e 65 22 2c 70 61 64 64 69 6e 67 3a 30 2c 70 6f 73 69 74 69 6f 6e 3a 22 66 69 78 65 64 22 2c 74 6f 70 3a 30 2c 77 69 64 74 68 3a 22 32 65 6d 22 7d 29 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 29 2c 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 2c 74 2e 76 61 6c 75 Data Ascii: ea;t\|\|(t=document.createElement("textarea"),Object.assign(t.style,{border:"none",boxShadow:"none",display:"none",height:"2em",left:0,outline:"none",padding:0,position:"fixed",top:0,width:"2em"}),document.body.appendChild(t)),t.style.display="block",t.valu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49847	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	538	OUT	GET /aaq/wf/wf-form-1.34.5-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:29 UTC	815	IN	HTTP/1.1 200 OK x-amz-id-2: wL363Ho3XCNu837yfQ7iliKIpshmhFD3B+RPqLMVPTuHFSaz55yD0kj5LBm5mruydBIywPN5qxDMA8aZfC91qQ== x-amz-request-id: 89GZVDYT30BN7HRB Date: Fri, 29 Mar 2024 00:41:30 GMT Last-Modified: Mon, 13 Nov 2023 22:30:39 GMT ETag: "94d07daa349c254b35ffcda6e54cc754" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: DBytk3Q0UWhxEEWk9lh0GV23FbLhPzJr Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 13714 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 66 6f 72 6d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 66 6f 72 6d 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-form",[],t):"object"==typeof exports?exports["wafer-form"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 2b 7b 30 3a 22 34 63 36 34 39 34 39 39 35 37 22 7d 5b 65 5d 2b 22 2e 63 68 75 6e 6b 2e 6a 73 22 3b 76 61 72 20 75 3d 73 65 74 54 69 6d 65 6f 75 74 28 72 2c 31 32 65 34 29 3b 72 65 74 75 72 6e 20 73 2e 6f 6e 65 72 72 6f 72 3d 73 2e 6f 6e 6c 6f 61 64 3d 72 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 2c 6f 7d 2c 74 2e 6d 3d 65 2c 74 2e 63 3d 6e 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 6e 29 7b 74 2e 6f 28 65 2c 72 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 74 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e Data Ascii: +{0:"4c64949957"}[e]+".chunk.js";var u=setTimeout(r,12e4);return s.onerror=s.onload=r,a.appendChild(s),o},t.m=e,t.c=n,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?fun
2024-03-29 00:41:29 UTC	681	IN	Data Raw: 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 65 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c Data Ascii: turn!t\|\|"object"!=typeof t&&"function"!=typeof t?e:t}function u(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function, not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2e 6b 65 79 2c 6e 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 72 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 72 29 2c 6e 26 26 65 28 74 2c 6e 29 2c 74 7d 7d 28 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 72 2c 6e 29 7b 6e 75 6c 6c 3d 3d 3d 74 26 26 28 74 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 3b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 72 29 3b 69 66 28 76 6f 69 64 20 30 3d Data Ascii: 1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n.key,n)}}return function(t,r,n){return r&&e(t.prototype,r),n&&e(t,n),t}}(),f=function e(t,r,n){null===t&&(t=Function.prototype);var i=Object.getOwnPropertyDescriptor(t,r);if(void 0=
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 65 73 73 2d 63 6c 61 73 73 22 29 2c 67 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 63 75 73 74 6f 6d 2d 65 76 65 6e 74 22 29 2c 79 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 66 6f 72 6d 2d 74 79 70 65 22 29 2c 5f 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 6d 6f 64 65 22 29 2c 43 3d 77 28 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 69 6e 70 75 74 22 29 29 2c 4f 3d 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 65 74 68 6f 64 22 29 7c 7c 22 67 65 74 22 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 6a 3d 77 28 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 65 6c 65 63 74 22 29 29 2c 50 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 72 65 73 75 Data Ascii: ess-class"),g=e.getAttribute(b+"custom-event"),y=e.getAttribute(b+"form-type"),_=e.getAttribute(b+"mode"),C=w(e.getElementsByTagName("input")),O=(e.getAttribute("method")\|\|"get").toUpperCase(),j=w(e.getElementsByTagName("select")),P=e.getAttribute(b+"resu
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 6e 65 72 73 28 29 2c 49 26 26 75 2e 66 6f 63 75 73 28 29 2c 22 6f 6e 4c 6f 61 64 22 3d 3d 3d 46 26 26 75 2e 73 75 62 6d 69 74 46 6f 72 6d 28 29 2c 75 7d 72 65 74 75 72 6e 20 6f 28 74 2c 65 29 2c 63 28 74 2c 5b 7b 6b 65 79 3a 22 72 65 6d 6f 76 65 49 6e 70 75 74 45 76 65 6e 74 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 75 74 69 6c 2e 69 6e 70 75 74 45 6c 65 6d 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 72 65 71 75 69 72 65 64 22 29 26 26 28 43 28 74 2c 22 69 6e 76 61 6c 69 64 22 2c 65 2e 68 61 6e 64 6c 65 49 6e 76 61 6c 69 64 49 6e 70 75 74 29 2c 43 28 74 2c 22 63 68 61 6e 67 65 22 2c 65 2e 68 61 6e 64 6c 65 49 6e 70 75 Data Ascii: ners(),I&&u.focus(),"onLoad"===F&&u.submitForm(),u}return o(t,e),c(t,[{key:"removeInputEvents",value:function(){var e=this;this._util.inputElems.forEach(function(t){t.hasAttribute("required")&&(C(t,"invalid",e.handleInvalidInput),C(t,"change",e.handleInpu
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 21 74 2e 5f 64 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 69 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 6c 70 2d 73 61 76 65 64 2d 75 72 6c 22 29 2c 61 3d 6e 5b 30 5d 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 73 3d 61 2e 77 6f 65 69 64 3b 72 65 74 75 72 6e 20 73 2b 3d 22 22 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 76 61 6c 75 65 22 2c 73 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 75 73 65 72 2d 69 6e 70 75 74 22 2c 6f 29 2c 69 3f 5f 28 69 2c 7b 62 6f 64 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 72 65 71 75 65 73 74 73 3a 7b 67 30 3a 7b 72 65 73 6f 75 72 63 65 3a 22 57 65 61 74 68 65 72 4c 6f 63 61 74 Data Ascii: .then(function(n){if(!t._destroyed){var i=e.getAttribute(b+"lp-saved-url"),a=n[0];if(!a)return e;var s=a.woeid;return s+="",e.setAttribute("data-value",s),e.setAttribute("data-user-input",o),i?_(i,{body:JSON.stringify({requests:{g0:{resource:"WeatherLocat
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 74 72 6f 79 65 64 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 73 3d 61 2e 61 63 74 69 6f 6e 2c 75 3d 61 2e 74 79 70 65 2c 6c 3d 22 2f 22 21 3d 3d 73 26 26 21 6f 2c 63 3d 22 6d 6f 64 75 6c 65 50 72 65 66 65 72 65 6e 63 65 22 3d 3d 3d 75 7c 7c 22 6d 6f 64 75 6c 65 50 72 65 66 65 72 65 6e 63 65 43 6c 65 61 72 22 3d 3d 3d 75 3b 69 66 28 21 6c 26 26 63 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 2e 65 28 30 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 72 28 22 2e 2f 73 72 63 2f 74 79 70 65 73 2f 70 72 65 66 65 72 65 6e 63 65 2e 6a 73 22 29 29 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 72 29 29 2e 63 61 74 63 68 28 72 2e 6f 65 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 Data Ascii: troyed){var a=this._util,s=a.action,u=a.type,l="/"!==s&&!o,c="modulePreference"===u\|\|"modulePreferenceClear"===u;if(!l&&c)return void new Promise(function(e){r.e(0).then(function(t){e(r("./src/types/preference.js"))}.bind(null,r)).catch(r.oe)}).then(funct
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 65 74 55 72 6c 69 66 79 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 41 2c 72 2c 4f 2c 66 29 3b 6b 26 26 28 41 3d 6b 2c 43 3d 21 31 29 7d 63 61 74 63 68 28 65 29 7b 43 3d 21 30 7d 43 26 26 28 41 3d 41 2b 28 2d 31 3d 3d 3d 41 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3f 22 3f 22 3a 22 26 22 29 2b 4f 28 72 29 29 7d 5f 28 41 2c 7b 6d 6f 64 65 3a 70 2c 63 61 63 68 65 3a 61 2c 74 69 6d 65 6f 75 74 3a 77 2c 62 6f 64 79 3a 45 2c 63 72 65 64 65 6e 74 69 61 6c 73 3a 75 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 21 74 2e 5f 64 65 73 74 72 6f 79 65 64 29 7b 69 66 28 74 2e 5f 75 74 69 6c 2e 70 65 6e 64 69 6e 67 3d 21 31 2c 67 29 7b 76 61 72 20 6e 3d 76 6f 69 64 20 30 3b 69 66 28 6d 2e 64 65 73 74 72 6f 79 28 67 29 2c 76 29 7b 76 61 72 20 69 3d 64 6f 63 75 Data Ascii: etUrlify.call(null,A,r,O,f);k&&(A=k,C=!1)}catch(e){C=!0}C&&(A=A+(-1===A.indexOf("?")?"?":"&")+O(r))}_(A,{mode:p,cache:a,timeout:w,body:E,credentials:u}).then(function(r){if(!t._destroyed){if(t._util.pending=!1,g){var n=void 0;if(m.destroy(g),v){var i=docu
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 73 2e 5f 75 74 69 6c 2e 74 72 69 67 67 65 72 26 26 74 68 69 73 2e 73 75 62 6d 69 74 46 6f 72 6d 28 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 49 6e 76 61 6c 69 64 49 6e 70 75 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 2c 72 3d 65 2e 74 61 72 67 65 74 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 72 2e 5f 5f 63 75 73 74 6f 6d 45 72 72 6f 72 29 7b 76 61 72 20 6e 3d 72 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 63 75 73 74 6f 6d 2d 65 72 72 6f 72 22 29 3b 6e 3d 6e 75 6c 6c 3d 3d 3d 6e 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 30 3a 4e 75 6d 62 65 72 28 6e 29 2c 72 2e 5f 5f 63 75 73 74 6f 6d 45 72 72 6f 72 3d 6e 7d 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 Data Ascii: s._util.trigger&&this.submitForm()}},{key:"handleInvalidInput",value:function(e){var t=this._util.elem,r=e.target;if(void 0===r.__customError){var n=r.getAttribute(b+"custom-error");n=null===n\|\|void 0===n?0:Number(n),r.__customError=n}t.classList.add("waf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49849	34.200.65.202	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	1003	OUT	GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-03-29 00:41:29 UTC	539	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:29 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC=19cw~2hk0;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 29-Mar-2025 00:41:29 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.106
2024-03-29 00:41:29 UTC	54	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 34 59 54 38 69 74 64 45 32 75 4a 6e 75 71 58 52 4b 68 37 67 53 36 5f 45 77 53 54 49 75 47 73 52 7e 41 22 7d 0d 0a Data Ascii: 30{"axid": "y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A"}
2024-03-29 00:41:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49848	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	556	OUT	GET /aaq/c/36d67ab.caas-news_web.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:29 UTC	834	IN	HTTP/1.1 200 OK x-amz-id-2: L2a/ievV2d+YhceDLbS8M7WYmDrgNr9WdOxWGu4udHxYCWr7+DLno8MEUuVc8vT+VX4Lb+tn8XOTrR9134+DiDpPA2zJMJF5 x-amz-request-id: DE45MQM5PE2VA52P Date: Fri, 29 Mar 2024 00:40:37 GMT Last-Modified: Thu, 28 Mar 2024 14:54:05 GMT ETag: "c1d5691a4bc858f13fb882109e060ef8" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: gJND71YECDjmFAH4.bgkEXXfDg2nKUIg Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 228599 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 53 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 73 6c 69 64 65 55 70 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 32 30 30 25 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 61 64 68 69 64 65 7b 30 25 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 74 6f 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 68 6f 77 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 31 30 70 78 29 7d 38 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 74 6f 7b 6f 70 61 Data Ascii: @keyframes slideUp{0%{transform:translateY(200%)}to{transform:translateY(0)}}@keyframes adhide{0%{visibility:visible}to{visibility:hidden}}@keyframes show-success-message{0%{opacity:0;transform:translateY(10px)}80%{opacity:1;transform:translateY(0)}to{opa
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 3a 66 61 6c 6c 62 61 63 6b 7d 2e 63 61 61 73 7b 66 6f 6e 74 3a 31 33 70 78 2f 31 2e 36 22 59 61 68 6f 6f 53 61 6e 73 20 56 46 22 2c 59 61 68 6f 6f 20 53 61 6e 73 2c 59 61 68 6f 6f 53 61 6e 73 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 64 69 73 70 6c 61 79 3a 66 6c 6f 77 2d 72 6f 6f 74 3b 7a 6f 6f 6d 3a 31 7d 2e 63 61 61 73 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 36 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 32 33 32 61 33 31 3b 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 6e 6f 72 6d 61 Data Ascii: :fallback}.caas{font:13px/1.6"YahooSans VF",Yahoo Sans,YahooSans,"Helvetica Neue",Helvetica,Arial,sans-serif;background:#fff;word-wrap:break-word;display:flow-root;zoom:1}.caas h1{font-size:2.46em;line-height:1.25;margin:0;color:#232a31;font-stretch:norma
2024-03-29 00:41:29 UTC	561	IN	Data Raw: 69 6e 3a 34 30 70 78 20 30 3b 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 7d 2e 63 61 61 73 2d 61 64 73 2d 73 6c 6f 74 2d 72 61 70 69 64 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 21 69 6d 70 6f 72 74 61 6e 74 3b 2a 63 6c 69 70 3a 72 65 63 74 28 31 70 78 20 31 70 78 20 31 70 78 20 31 70 78 29 3b 63 6c 69 70 3a 72 65 63 74 28 31 70 78 2c 31 70 78 2c 31 70 78 2c 31 70 78 29 3b 70 61 64 64 69 6e 67 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 31 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 61 61 73 2d Data Ascii: in:40px 0;color:#e0e4e9}.caas-ads-slot-rapid{text-decoration:none;pointer-events:none;position:absolute!important;*clip:rect(1px 1px 1px 1px);clip:rect(1px,1px,1px,1px);padding:0!important;border:0!important;height:1px!important;width:1px!important}.caas-
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 63 61 61 73 20 2e 63 61 61 73 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 61 61 73 2d 74 6f 63 2d 68 65 61 64 69 6e 67 73 20 2e 63 61 61 73 2d 74 6f 63 2d 68 65 61 64 69 6e 67 2d 65 6c 65 6d 65 6e 74 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 7d 2e 63 61 61 73 20 2e 63 61 61 73 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 61 61 73 2d 74 6f 63 2d 68 65 61 64 69 6e 67 73 20 2e 63 61 61 73 2d 74 6f 63 2d 68 65 61 64 69 6e 67 2d 65 6c 65 6d 65 6e 74 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 63 61 61 73 20 2e 63 61 61 73 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 61 61 73 2d 74 6f 63 2d 68 65 61 64 69 6e 67 2d 65 6c 65 6d 65 6e 74 2c 2e 63 61 61 73 20 2e 63 Data Ascii: caas .caas-toc-container .caas-toc-headings .caas-toc-heading-element:first-child{padding-top:0}.caas .caas-toc-container .caas-toc-headings .caas-toc-heading-element:last-child{padding-bottom:0}.caas .caas-toc-container .caas-toc-heading-element,.caas .c
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 32 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 7d 2e 63 61 61 73 20 2e 63 61 61 73 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 61 61 73 2d 74 6f 63 2d 68 65 61 64 69 6e 67 2d 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 32 33 32 61 33 31 7d 2e 63 61 61 73 20 2e 63 61 61 73 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 61 61 73 2d 74 6f 63 2d 73 75 62 68 65 61 64 69 6e 67 2d 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 35 62 36 33 36 61 7d 2e 63 61 61 73 20 2e 63 61 61 73 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 61 61 73 2d 74 6f 63 2d 68 65 61 64 69 6e 67 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 2e 63 Data Ascii: 2;-webkit-box-orient:vertical;overflow:hidden;text-overflow:ellipsis}.caas .caas-toc-container .caas-toc-heading-link{color:#232a31}.caas .caas-toc-container .caas-toc-subheading-link{color:#5b636a}.caas .caas-toc-container .caas-toc-heading-link:hover,.c
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 65 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 33 32 70 78 7d 2e 63 61 61 73 2d 62 75 74 74 6f 6e 2e 63 61 61 73 2d 62 75 74 74 6f 6e 2d 66 75 6c 6c 2d 77 69 64 74 68 2c 61 2e 63 61 61 73 2d 62 75 74 74 6f 6e 2e 63 61 61 73 2d 62 75 74 74 6f 6e 2d 66 75 6c 6c 2d 77 69 64 74 68 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 38 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 61 61 73 20 2e 69 63 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 74 6f 70 3a 2d 35 70 78 7d 2e 63 61 61 73 20 2e 69 63 6f 6e 20 73 76 67 2c 2e 63 61 61 73 20 Data Ascii: e{padding:10px 32px}.caas-button.caas-button-full-width,a.caas-button.caas-button-full-width{display:inline-block;font-size:1.18em;font-weight:500;padding:15px 0;width:100%}.caas .icon{position:relative;display:inline-block;top:-5px}.caas .icon svg,.caas
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 2d 64 61 2d 6c 6f 61 64 65 72 20 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 7d 2e 63 61 61 73 2d 69 6d 67 2d 63 6f 6e 74 61 69 6e 65 72 2e 63 61 61 73 2d 69 6d 67 2d 6c 6f 61 64 65 72 3a 62 65 66 6f 72 65 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 63 61 61 73 2d 64 61 20 2e 63 61 61 73 2d 64 61 2d 6c 6f 61 64 65 72 20 69 3a 61 66 74 65 72 2c 2e 63 61 61 73 2d 69 6d 67 2d 63 6f 6e 74 61 69 6e 65 72 2e 63 61 61 73 2d 69 6d 67 2d 6c 6f 61 64 65 72 3a 61 66 74 65 72 2c 2e 63 61 61 73 2d 73 64 61 20 2e 63 61 61 73 2d 64 61 2d 6c 6f 61 64 65 72 20 69 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: -da-loader i:before{content:"";display:block;background-color:#e0e4e9}.caas-img-container.caas-img-loader:before{height:100%}.caas-da .caas-da-loader i:after,.caas-img-container.caas-img-loader:after,.caas-sda .caas-da-loader i:after{content:"";background
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 3b 68 65 69 67 68 74 3a 34 32 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 7d 2e 63 61 61 73 2d 61 74 74 72 2d 6c 6f 67 6f 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 34 30 70 78 3b 77 69 64 74 68 3a 34 30 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 63 61 61 73 2d 61 74 74 72 2d 6c 6f 67 6f 20 2e 63 61 61 73 2d 69 6d 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 7d 2e 63 61 61 73 2d 61 74 74 72 2d 70 72 6f 76 69 64 65 72 2d 6c Data Ascii: ;height:42px;margin-right:8px}.caas-attr-logo{position:relative;margin-right:10px;display:inline-block;height:40px;width:40px;vertical-align:middle}.caas-attr-logo .caas-img{position:absolute;left:0;top:50%;transform:translateY(-50%)}.caas-attr-provider-l
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 74 74 6f 6e 2e 63 6f 6c 6c 61 70 73 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 2e 2e 2e 22 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 35 39 70 78 29 7b 2e 63 61 61 73 2d 61 74 74 72 2d 6d 65 74 61 2d 74 69 74 6c 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 2e 63 61 61 73 2d 70 68 6f 74 6f 73 65 74 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 31 64 32 32 32 38 7d 2e 63 61 61 73 2d 70 68 6f 74 6f 73 65 74 20 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 32 65 6d 7d 2e 63 61 61 73 2d 63 61 72 6f 75 73 65 6c 20 2e 64 65 73 63 72 69 70 74 69 6f 6e 2e 63 6f 6c 6c 61 70 73 65 2d 63 61 70 74 69 6f 6e 20 68 32 2c 2e 63 61 61 73 2d 70 68 6f 74 6f 73 65 74 20 2e 63 Data Ascii: tton.collapsed:before{content:"..."}@media only screen and (max-width:959px){.caas-attr-meta-title{display:none}}.caas-photoset figcaption{color:#1d2228}.caas-photoset figure{margin:0 0 2em}.caas-carousel .description.collapse-caption h2,.caas-photoset .c
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 76 70 2d 6d 65 6e 75 2d 63 6f 6e 74 72 6f 6c 73 20 2e 76 70 2d 66 75 6c 6c 73 63 72 65 65 6e 2d 62 74 6e 2c 2e 63 61 61 73 2d 79 76 69 64 65 6f 2d 77 72 61 70 70 65 72 20 2e 63 61 61 73 2d 79 76 69 64 65 6f 3a 6e 6f 74 28 2e 63 61 61 73 2d 79 76 69 64 65 6f 2d 66 75 6c 6c 2d 64 6f 63 6b 29 20 2e 76 70 2d 64 6f 63 6b 65 64 2d 6d 6f 64 65 20 2e 76 70 2d 62 6f 74 74 6f 6d 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 76 70 2d 6d 65 6e 75 2d 63 6f 6e 74 72 6f 6c 73 20 2e 76 70 2d 6d 75 6c 74 69 61 75 64 69 6f 2d 62 74 6e 2c 2e 63 61 61 73 2d 79 76 69 64 65 6f 2d 77 72 61 70 70 65 72 20 2e 63 61 61 73 2d 79 76 69 64 65 6f 3a 6e 6f 74 28 2e 63 61 61 73 2d 79 76 69 64 65 6f 2d 66 75 6c 6c 2d 64 6f 63 6b 29 20 2e 76 70 2d 64 6f 63 6b 65 64 2d 6d 6f 64 65 20 2e 76 70 2d 6e Data Ascii: vp-menu-controls .vp-fullscreen-btn,.caas-yvideo-wrapper .caas-yvideo:not(.caas-yvideo-full-dock) .vp-docked-mode .vp-bottom-container .vp-menu-controls .vp-multiaudio-btn,.caas-yvideo-wrapper .caas-yvideo:not(.caas-yvideo-full-dock) .vp-docked-mode .vp-n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49846	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	1142	OUT	POST /fp_ms/_rcv/remote?ctrl=WeatherPreviewRefresh&lang=en-US&m_id=react-wafer-weather&m_mode=json&region=US&rid=2vl5n89j0c3hk&site=fp&apptype=default&instance_id=weather&_evtSrc=deferLoad HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Content-Length: 434 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-03-29 00:41:29 UTC	434	OUT	Data Raw: 7b 22 62 75 63 6b 65 74 22 3a 22 64 72 6f 70 5f 68 65 69 6d 64 61 6c 6c 5f 68 6f 6d 65 70 61 67 65 5f 63 6f 6e 74 72 6f 6c 5f 62 75 63 6b 65 74 2c 4d 69 6d 69 63 50 72 6f 76 69 64 65 72 4c 69 73 74 76 32 2d 63 6f 70 79 2c 73 65 61 6d 6c 65 73 73 22 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 66 65 74 63 68 55 73 65 72 46 61 76 4c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 66 65 74 63 68 55 73 69 6e 67 4e 65 77 47 72 61 76 69 74 6f 6e 42 61 63 6b 65 6e 64 22 3a 66 61 6c 73 65 2c 22 67 72 69 64 4c 61 79 6f 75 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 68 65 61 64 65 72 22 3a 74 72 75 65 2c 22 70 75 72 70 6c 65 42 6c 6f 63 6b 48 65 61 64 65 72 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 75 6e 69 74 22 3a 22 46 22 2c 22 78 68 72 50 61 74 68 50 72 65 66 69 Data Ascii: {"bucket":"drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless","config":{"fetchUserFavLocation":false,"fetchUsingNewGravitonBackend":false,"gridLayoutEnabled":true,"header":true,"purpleBlockHeaderEnabled":true,"unit":"F","xhrPathPrefi
2024-03-29 00:41:29 UTC	1281	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 content-type: application/json; charset=utf-8 status-code: 200 x-app-version: 1.0.37059 x-applet-version: 1.0.37059 x-instance-id: weather x-applet-id: react-wafer-weather vary: Accept-Encoding date: Fri, 29 Mar 2024 00:41:29 GMT x-envoy-upstream-service-time: 21 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=493mf7lj0c3hp&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 32 66 66 37 0d 0a 7b 22 61 73 73 65 74 73 22 3a 7b 22 63 73 73 22 3a 5b 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 63 70 72 6f 70 73 2f 63 6f 6c 6f 72 73 5f 31 2e 31 2e 32 37 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 2d 70 72 6f 70 65 72 74 69 65 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 32 37 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 66 70 2f 63 73 73 2f 72 65 61 63 74 2d 77 61 66 65 72 2d 77 65 61 74 68 65 72 2e 57 65 61 74 68 65 72 50 72 65 76 69 65 77 52 65 66 72 65 73 68 2e 61 74 6f 6d 69 63 2e 6c 74 72 2e 32 61 32 35 31 61 30 64 64 62 33 64 37 63 34 65 63 31 33 66 34 65 33 35 65 65 33 35 64 64 Data Ascii: 2ff7{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-weather.WeatherPreviewRefresh.atomic.ltr.2a251a0ddb3d7c4ec13f4e35ee35dd
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 2e 30 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 22 6e 61 6d 65 22 3a 22 77 61 66 65 72 2d 69 6d 61 67 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 34 2e 30 22 7d 5d 7d 2c 22 64 61 74 61 22 3a 7b 7d 2c 22 68 74 6d 6c 22 3a 22 3c 64 69 76 20 69 64 3d 5c 22 67 72 69 64 2d 6c 61 79 6f 75 74 5c 22 20 63 6c 61 73 73 3d 5c 22 77 65 61 74 68 65 72 2d 63 61 72 64 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 44 28 66 29 20 41 69 28 63 29 20 4a 63 28 73 62 29 20 4d 62 28 31 34 70 78 29 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 44 28 66 29 20 41 69 28 63 29 5c 22 3e 3c 69 20 63 6c 61 73 73 3d 5c 22 48 28 31 36 70 78 29 20 42 64 65 6e 64 77 28 38 70 78 29 20 4d 65 6e 64 28 31 32 70 78 29 20 42 64 65 6e 64 73 28 73 29 20 42 64 72 73 28 32 70 78 29 20 42 64 65 6e Data Ascii: .0-modern.js","name":"wafer-image","version":"1.4.0"}]},"data":{},"html":"<div id=\"grid-layout\" class=\"weather-card\"><div class=\"D(f) Ai(c) Jc(sb) Mb(14px)\"><div class=\"D(f) Ai(c)\"><i class=\"H(16px) Bdendw(8px) Mend(12px) Bdends(s) Bdrs(2px) Bden
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 31 20 31 34 20 39 2e 34 39 73 2d 31 2e 31 32 20 32 2e 35 2d 32 2e 35 20 32 2e 35 4d 31 31 2e 35 20 31 43 36 2e 38 30 36 20 31 20 33 20 34 2e 38 30 33 20 33 20 39 2e 34 39 33 63 30 20 33 2e 39 35 37 20 35 2e 37 20 31 30 2e 39 36 37 20 37 2e 35 39 32 20 31 33 2e 30 32 2e 35 37 34 2e 36 32 35 20 31 2e 31 36 37 2e 36 32 33 20 31 2e 37 34 20 30 43 31 34 2e 31 38 20 32 30 2e 35 31 34 20 32 30 20 31 33 2e 34 38 20 32 30 20 39 2e 34 39 34 20 32 30 20 34 2e 38 30 33 20 31 36 2e 31 39 34 20 31 20 31 31 2e 35 20 31 5c 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 48 69 64 64 65 6e 5c 22 3e 56 69 65 77 20 79 6f 75 72 20 4c 6f 63 61 74 69 6f 6e 73 3c 2f 73 70 61 6e 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 66 6f 72 6d 20 63 6c 61 73 73 Data Ascii: 1 14 9.49s-1.12 2.5-2.5 2.5M11.5 1C6.806 1 3 4.803 3 9.493c0 3.957 5.7 10.967 7.592 13.02.574.625 1.167.623 1.74 0C14.18 20.514 20 13.48 20 9.494 20 4.803 16.194 1 11.5 1\"></path></svg><span class=\"Hidden\">View your Locations</span></button><form class
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 76 67 20 63 6c 61 73 73 3d 5c 22 50 65 28 6e 29 20 43 75 72 28 70 29 5c 22 20 77 69 64 74 68 3d 5c 22 31 34 5c 22 20 73 74 79 6c 65 3d 5c 22 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 66 69 6c 6c 3a 76 61 72 28 2d 2d 77 68 69 74 65 29 3b 73 74 72 6f 6b 65 3a 76 61 72 28 2d 2d 77 68 69 74 65 29 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 5c 22 20 68 65 69 67 68 74 3d 5c 22 31 34 5c 22 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 34 38 20 34 38 5c 22 20 64 61 74 61 2d 69 63 6f 6e 3d 5c 22 72 65 6d 6f 76 65 5c 22 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 34 30 20 32 32 48 38 63 2d 31 2e 31 30 34 20 30 2d 32 20 2e 38 39 36 2d 32 20 32 73 2e 38 39 36 20 32 20 32 20 32 68 33 32 63 31 2e 31 30 34 20 30 20 32 2d 2e 38 39 36 20 32 2d 32 73 2d 2e 38 39 36 Data Ascii: vg class=\"Pe(n) Cur(p)\" width=\"14\" style=\"vertical-align:top;fill:var(--white);stroke:var(--white);stroke-width:0\" height=\"14\" viewBox=\"0 0 48 48\" data-icon=\"remove\"><path d=\"M40 22H8c-1.104 0-2 .896-2 2s.896 2 2 2h32c1.104 0 2-.896 2-2s-.896
2024-03-29 00:41:29 UTC	123	IN	Data Raw: 63 2e 36 33 20 30 20 31 2e 31 34 35 2d 2e 35 31 35 20 31 2e 31 34 35 2d 31 2e 31 35 20 30 2d 2e 36 33 33 2d 2e 35 31 36 2d 31 2e 31 34 35 2d 31 2e 31 34 36 2d 31 2e 31 34 35 68 2d 32 2e 33 63 2d 2e 35 32 2d 36 2e 30 37 38 2d 35 2e 33 37 2d 31 30 2e 39 33 36 2d 31 31 2e 34 35 36 2d 31 31 2e 34 38 35 56 31 2e 30 34 35 63 30 2d 2e 36 33 33 2d 2e 35 31 36 2d 31 2e 31 34 Data Ascii: c.63 0 1.145-.515 1.145-1.15 0-.633-.516-1.145-1.146-1.145h-2.3c-.52-6.078-5.37-10.936-11.456-11.485V1.045c0-.633-.516-1.14
2024-03-29 00:41:29 UTC	842	IN	Data Raw: 37 2d 31 2e 31 35 2d 31 2e 31 34 37 7a 4d 31 34 2e 38 30 32 20 35 2e 36 32 76 32 2e 33 31 63 30 20 2e 36 33 34 2e 35 31 32 20 31 2e 31 34 36 20 31 2e 31 34 36 20 31 2e 31 34 36 2e 36 33 34 20 30 20 31 2e 31 34 38 2d 2e 35 31 32 20 31 2e 31 34 38 2d 31 2e 31 34 36 56 35 2e 36 32 63 34 2e 38 32 2e 35 33 33 20 38 2e 36 35 33 20 34 2e 33 37 20 39 2e 31 35 36 20 39 2e 31 38 33 48 32 33 2e 39 37 63 2d 2e 36 33 36 20 30 2d 31 2e 31 35 2e 35 31 33 2d 31 2e 31 35 20 31 2e 31 34 36 20 30 20 2e 36 33 35 2e 35 31 36 20 31 2e 31 34 38 20 31 2e 31 35 20 31 2e 31 34 38 68 32 2e 32 36 32 63 2d 2e 35 36 33 20 34 2e 37 34 35 2d 34 2e 33 36 20 38 2e 35 31 34 2d 39 2e 31 33 34 20 39 2e 30 34 76 2d 32 2e 31 37 63 30 2d 2e 36 33 32 2d 2e 35 31 36 2d 31 2e 31 34 36 2d 31 2e 31 Data Ascii: 7-1.15-1.147zM14.802 5.62v2.31c0 .634.512 1.146 1.146 1.146.634 0 1.148-.512 1.148-1.146V5.62c4.82.533 8.653 4.37 9.156 9.183H23.97c-.636 0-1.15.513-1.15 1.146 0 .635.516 1.148 1.15 1.148h2.262c-.563 4.745-4.36 8.514-9.134 9.04v-2.17c0-.632-.516-1.146-1.1
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 20 63 6c 61 73 73 3d 5c 22 43 75 72 28 70 29 5c 22 20 77 69 64 74 68 3d 5c 22 32 35 5c 22 20 73 74 79 6c 65 3d 5c 22 66 69 6c 6c 3a 76 61 72 28 2d 2d 73 68 61 72 6b 29 3b 73 74 72 6f 6b 65 3a 76 61 72 28 2d 2d 73 68 61 72 6b 29 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 5c 22 20 68 65 69 67 68 74 3d 5c 22 31 38 5c 22 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 34 20 32 34 5c 22 20 64 61 74 61 2d 69 63 6f 6e 3d 5c 22 73 65 61 72 63 68 5c 22 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 39 20 33 43 35 2e 36 38 36 20 33 20 33 20 35 2e 36 38 36 20 33 20 39 63 30 20 33 2e 33 31 33 20 32 2e 36 38 36 20 36 20 36 20 36 73 36 2d 32 2e 36 38 37 20 36 2d 36 63 30 2d 33 2e 33 31 34 2d 32 2e 36 38 36 2d 36 Data Ascii: class=\"Cur(p)\" width=\"25\" style=\"fill:var(--shark);stroke:var(--shark);stroke-width:0;vertical-align:bottom\" height=\"18\" viewBox=\"0 0 24 24\" data-icon=\"search\"><path d=\"M9 3C5.686 3 3 5.686 3 9c0 3.313 2.686 6 6 6s6-2.687 6-6c0-3.314-2.686-6
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 22 31 5c 22 20 64 61 74 61 2d 77 66 2d 6c 70 2d 75 72 6c 3d 5c 22 2f 74 64 76 32 5f 66 70 2f 61 70 69 2f 72 65 73 6f 75 72 63 65 2f 57 65 61 74 68 65 72 4c 6f 63 61 74 69 6f 6e 53 65 72 76 69 63 65 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3f 72 61 64 69 75 73 3d 2d 31 32 32 2e 30 31 33 25 32 43 33 37 2e 34 31 31 26 61 6d 70 3b 74 65 78 74 3d 7b 74 65 72 6d 7d 26 61 6d 70 3b 6c 61 6e 67 3d 65 6e 2d 55 53 26 61 6d 70 3b 72 65 67 69 6f 6e 3d 55 53 26 61 6d 70 3b 73 69 74 65 3d 66 70 26 61 6d 70 3b 73 73 6c 3d 31 26 61 6d 70 3b 63 72 75 6d 62 3d 56 43 70 4e 78 45 6a 46 56 50 56 5c 22 20 64 61 74 61 2d 77 66 2d 6c 70 2d 77 6f 65 69 64 3d 5c 22 31 32 37 36 37 34 34 34 5c 22 20 64 61 74 61 2d 77 66 2d 6f 6e 3d 5c 22 63 6f 6d 70 6c 65 74 65 3a 73 65 74 53 74 61 74 Data Ascii: "1\" data-wf-lp-url=\"/tdv2_fp/api/resource/WeatherLocationService.autocomplete?radius=-122.013%2C37.411&text={term}&lang=en-US&region=US&site=fp&ssl=1&crumb=VCpNxEjFVPV\" data-wf-lp-woeid=\"12767444\" data-wf-on=\"complete:setStat
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 73 65 6c 65 63 74 65 64 57 65 61 74 68 65 72 4c 6f 63 61 74 69 6f 6e 4e 61 6d 65 5c 22 3a 20 5c 22 4e 65 77 70 6f 72 74 20 4e 65 77 73 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 73 65 6c 65 63 74 65 64 57 65 61 74 68 65 72 55 75 69 64 5c 22 3a 20 5c 22 31 32 37 36 37 34 34 34 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 5c 2f 73 63 72 69 70 74 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 41 69 28 63 29 20 44 28 66 29 20 4a 63 28 73 62 29 20 50 79 28 30 29 20 50 78 28 30 29 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 44 28 66 29 20 41 69 28 63 29 Data Ascii: \"selectedWeatherLocationName\": \"Newport News\",\n \"selectedWeatherUuid\": \"12767444\"\n }\n <\/script><div class=\"Ai(c) D(f) Jc(sb) Py(0) Px(0)\"><div class=\"D(f) Ai(c)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49845	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	1126	OUT	POST /fp_ms/_rcv/remote?ctrl=GamesMini&lang=en-US&m_id=react-wafer-games&m_mode=json&region=US&rid=2vl5n89j0c3hk&site=fp&apptype=default&instance_id=games&_evtSrc=deferLoad HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Content-Length: 270 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-03-29 00:41:29 UTC	270	OUT	Data Raw: 7b 22 62 75 63 6b 65 74 22 3a 22 64 72 6f 70 5f 68 65 69 6d 64 61 6c 6c 5f 68 6f 6d 65 70 61 67 65 5f 63 6f 6e 74 72 6f 6c 5f 62 75 63 6b 65 74 2c 4d 69 6d 69 63 50 72 6f 76 69 64 65 72 4c 69 73 74 76 32 2d 63 6f 70 79 2c 73 65 61 6d 6c 65 73 73 22 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 78 68 72 50 61 74 68 50 72 65 66 69 78 22 3a 22 2f 66 70 5f 6d 73 2f 5f 72 63 76 2f 72 65 6d 6f 74 65 22 7d 2c 22 63 74 72 6c 22 3a 22 47 61 6d 65 73 4d 69 6e 69 22 2c 22 69 6e 73 74 61 6e 63 65 5f 69 64 22 3a 22 67 61 6d 65 73 22 2c 22 6d 5f 69 64 22 3a 22 72 65 61 63 74 2d 77 61 66 65 72 2d 67 61 6d 65 73 22 2c 22 6d 5f 6d 6f 64 65 22 3a 22 6a 73 6f 6e 22 2c 22 73 70 61 63 65 49 64 22 3a 32 30 32 33 35 33 38 30 37 35 2c 22 77 6f 65 69 64 22 3a 31 32 37 36 37 34 34 34 2c 22 Data Ascii: {"bucket":"drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless","config":{"xhrPathPrefix":"/fp_ms/_rcv/remote"},"ctrl":"GamesMini","instance_id":"games","m_id":"react-wafer-games","m_mode":"json","spaceId":2023538075,"woeid":12767444,"
2024-03-29 00:41:29 UTC	1277	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 content-type: application/json; charset=utf-8 status-code: 200 x-app-version: 1.0.37059 x-applet-version: 1.0.37059 x-instance-id: games x-applet-id: react-wafer-games vary: Accept-Encoding date: Fri, 29 Mar 2024 00:41:29 GMT x-envoy-upstream-service-time: 10 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=338gehdj0c3hp&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 33 64 37 37 0d 0a 7b 22 61 73 73 65 74 73 22 3a 7b 22 63 73 73 22 3a 5b 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 63 70 72 6f 70 73 2f 63 6f 6c 6f 72 73 5f 31 2e 31 2e 32 37 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 2d 70 72 6f 70 65 72 74 69 65 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 32 37 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 66 70 2f 63 73 73 2f 72 65 61 63 74 2d 77 61 66 65 72 2d 67 61 6d 65 73 2e 47 61 6d 65 73 4d 69 6e 69 2e 61 74 6f 6d 69 63 2e 6c 74 72 2e 31 33 35 31 33 35 33 63 66 38 31 32 39 30 31 32 61 36 38 36 65 35 31 39 36 30 38 38 31 32 64 35 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e Data Ascii: 3d77{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-games.GamesMini.atomic.ltr.1351353cf8129012a686e519608812d5.min.css","n
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 42 64 65 6e 64 73 28 73 29 20 42 64 72 73 28 32 70 78 29 20 42 64 65 6e 64 63 28 2d 2d 68 75 6c 6b 2d 70 61 6e 74 73 29 5c 22 3e 3c 2f 69 3e 3c 68 33 20 63 6c 61 73 73 3d 5c 22 54 64 28 6e 29 20 43 28 2d 2d 62 61 74 63 61 76 65 29 20 46 77 28 36 30 30 29 20 46 7a 28 31 34 70 78 29 20 4d 62 28 30 29 5c 22 3e 50 6c 61 79 20 67 61 6d 65 73 20 6f 6e 20 59 61 68 6f 6f 3c 2f 68 33 3e 3c 2f 64 69 76 3e 3c 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 67 61 6d 65 73 2d 74 61 62 73 2d 73 63 72 6f 6c 6c 76 69 65 77 20 77 61 66 65 72 2d 73 63 72 6f 6c 6c 76 69 65 77 20 50 6f 73 28 72 29 20 4d 78 28 2d 32 30 70 78 29 20 54 61 28 63 29 20 4f 76 28 68 29 5c 22 20 64 61 74 61 2d 77 66 2d 62 65 68 61 76 69 6f 72 3d 5c 22 6e 61 74 Data Ascii: Bdends(s) Bdrs(2px) Bdendc(--hulk-pants)\"></i><h3 class=\"Td(n) C(--batcave) Fw(600) Fz(14px) Mb(0)\">Play games on Yahoo</h3></div><div></div></div><div class=\"games-tabs-scrollview wafer-scrollview Pos(r) Mx(-20px) Ta(c) Ov(h)\" data-wf-behavior=\"nat
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 30 70 78 29 3a 6c 63 20 77 61 66 65 72 2d 66 65 74 63 68 5c 22 20 64 61 74 61 2d 79 6c 6b 3d 5c 22 69 74 63 3a 31 3b 73 65 63 3a 61 70 70 2d 67 61 6d 65 73 3b 63 70 6f 73 3a 31 3b 65 6c 6d 3a 74 61 62 3b 73 6c 6b 3a 57 6f 72 64 3b 5c 22 20 69 64 3d 5c 22 67 61 6d 65 73 2d 74 61 62 2d 31 5c 22 20 72 6f 6c 65 3d 5c 22 74 61 62 5c 22 20 64 61 74 61 2d 77 66 2d 74 61 72 67 65 74 3d 5c 22 23 67 61 6d 65 73 2d 70 61 6e 65 6c 2d 31 5c 22 20 64 61 74 61 2d 77 66 2d 74 72 69 67 67 65 72 3d 5c 22 74 61 62 41 63 74 69 76 61 74 65 5c 22 20 64 61 74 61 2d 77 66 2d 75 72 6c 3d 5c 22 2f 66 70 5f 6d 73 2f 5f 72 63 76 2f 72 65 6d 6f 74 65 5c 22 20 64 61 74 61 2d 77 66 2d 62 6f 64 79 3d 5c 22 7b 26 71 75 6f 74 3b 63 74 72 6c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 47 61 6d Data Ascii: 0px):lc wafer-fetch\" data-ylk=\"itc:1;sec:app-games;cpos:1;elm:tab;slk:Word;\" id=\"games-tab-1\" role=\"tab\" data-wf-target=\"#games-panel-1\" data-wf-trigger=\"tabActivate\" data-wf-url=\"/fp_ms/_rcv/remote\" data-wf-body=\"{"ctrl":"Gam
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 74 68 50 72 65 66 69 78 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 2f 66 70 5f 6d 73 2f 5f 72 63 76 2f 72 65 6d 6f 74 65 26 71 75 6f 74 3b 7d 7d 5c 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 45 6c 6c 20 4d 61 77 28 31 36 63 68 29 20 50 65 28 6e 29 20 44 28 62 29 20 50 79 28 31 30 70 78 29 20 46 77 28 35 30 30 29 20 46 7a 28 2d 2d 66 6f 6e 74 2d 31 31 70 78 29 20 74 61 62 41 63 74 69 76 65 5f 42 78 73 68 28 24 74 61 62 73 42 74 6e 53 68 61 64 6f 77 29 20 42 67 63 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 20 42 64 72 73 28 33 32 70 78 29 20 43 28 2d 2d 62 61 74 74 6c 65 73 68 69 70 29 20 50 78 28 31 32 70 78 29 20 74 61 62 41 63 74 69 76 65 5f 42 67 63 28 2d 2d 77 68 69 74 65 29 21 20 74 61 62 41 63 74 69 76 65 5f 43 28 2d 2d 69 6e 6b 77 65 6c 6c 29 21 Data Ascii: thPrefix":"/fp_ms/_rcv/remote"}}\"><span class=\"Ell Maw(16ch) Pe(n) D(b) Py(10px) Fw(500) Fz(--font-11px) tabActive_Bxsh($tabsBtnShadow) Bgc(--marshmallow) Bdrs(32px) C(--battleship) Px(12px) tabActive_Bgc(--white)! tabActive_C(--inkwell)!
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 6d 3a 74 61 62 3b 73 6c 6b 3a 43 61 73 69 6e 6f 3b 5c 22 20 69 64 3d 5c 22 67 61 6d 65 73 2d 74 61 62 2d 34 5c 22 20 72 6f 6c 65 3d 5c 22 74 61 62 5c 22 20 64 61 74 61 2d 77 66 2d 74 61 72 67 65 74 3d 5c 22 23 67 61 6d 65 73 2d 70 61 6e 65 6c 2d 34 5c 22 20 64 61 74 61 2d 77 66 2d 74 72 69 67 67 65 72 3d 5c 22 74 61 62 41 63 74 69 76 61 74 65 5c 22 20 64 61 74 61 2d 77 66 2d 75 72 6c 3d 5c 22 2f 66 70 5f 6d 73 2f 5f 72 63 76 2f 72 65 6d 6f 74 65 5c 22 20 64 61 74 61 2d 77 66 2d 62 6f 64 79 3d 5c 22 7b 26 71 75 6f 74 3b 63 74 72 6c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 47 61 6d 65 73 4d 69 6e 69 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6d 5f 69 64 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 72 65 61 63 74 2d 77 61 66 65 72 2d 67 61 6d 65 73 26 71 75 6f 74 3b 2c Data Ascii: m:tab;slk:Casino;\" id=\"games-tab-4\" role=\"tab\" data-wf-target=\"#games-panel-4\" data-wf-trigger=\"tabActivate\" data-wf-url=\"/fp_ms/_rcv/remote\" data-wf-body=\"{"ctrl":"GamesMini","m_id":"react-wafer-games",
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 6e 20 63 6c 61 73 73 3d 5c 22 45 6c 6c 20 4d 61 77 28 31 36 63 68 29 20 50 65 28 6e 29 20 44 28 62 29 20 50 79 28 31 30 70 78 29 20 46 77 28 35 30 30 29 20 46 7a 28 2d 2d 66 6f 6e 74 2d 31 31 70 78 29 20 74 61 62 41 63 74 69 76 65 5f 42 78 73 68 28 24 74 61 62 73 42 74 6e 53 68 61 64 6f 77 29 20 42 67 63 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 20 42 64 72 73 28 33 32 70 78 29 20 43 28 2d 2d 62 61 74 74 6c 65 73 68 69 70 29 20 50 78 28 31 32 70 78 29 20 74 61 62 41 63 74 69 76 65 5f 42 67 63 28 2d 2d 77 68 69 74 65 29 21 20 74 61 62 41 63 74 69 76 65 5f 43 28 2d 2d 69 6e 6b 77 65 6c 6c 29 21 5c 22 3e 50 75 7a 7a 6c 65 3c 2f 73 70 61 6e 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 61 67 69 6e 61 74 69 6f 6e Data Ascii: n class=\"Ell Maw(16ch) Pe(n) D(b) Py(10px) Fw(500) Fz(--font-11px) tabActive_Bxsh($tabsBtnShadow) Bgc(--marshmallow) Bdrs(32px) C(--battleship) Px(12px) tabActive_Bgc(--white)! tabActive_C(--inkwell)!\">Puzzle</span></button></div><div class=\"pagination
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 69 6c 6c 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 73 74 72 6f 6b 65 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 5c 22 20 68 65 69 67 68 74 3d 5c 22 31 30 5c 22 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 33 32 20 33 32 5c 22 20 64 61 74 61 2d 69 63 6f 6e 3d 5c 22 43 6f 72 65 41 72 72 6f 77 52 69 67 68 74 5c 22 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 37 2e 30 36 2e 36 36 35 63 2e 38 38 37 2d 2e 38 38 37 20 32 2e 33 32 34 2d 2e 38 38 37 20 33 2e 32 31 20 30 4c 32 35 2e 36 30 36 20 31 36 20 31 30 2e 32 37 20 33 31 2e 33 33 35 63 2d 2e 34 34 32 2e 34 34 33 2d 31 2e 30 32 33 2e 36 36 35 2d 31 2e 36 30 34 2e 36 36 35 73 2d 31 2e 31 36 32 2d 2e 32 32 32 2d 31 Data Ascii: ill:currentColor;stroke:currentColor;stroke-width:0;vertical-align:bottom\" height=\"10\" viewBox=\"0 0 32 32\" data-icon=\"CoreArrowRight\"><path d=\"M7.06.665c.887-.887 2.324-.887 3.21 0L25.606 16 10.27 31.335c-.442.443-1.023.665-1.604.665s-1.162-.222-1
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 6c 61 73 73 3d 5c 22 46 7a 28 31 32 70 78 29 20 46 77 28 35 30 30 29 20 4c 68 28 31 72 65 6d 29 5c 22 3e 4a 75 73 74 20 57 6f 72 64 73 3c 2f 68 34 3e 3c 61 20 63 6c 61 73 73 3d 5c 22 54 64 28 6e 29 20 54 61 28 63 29 20 50 79 28 37 70 78 29 20 57 28 33 30 25 29 20 46 77 28 35 30 30 29 20 4c 68 28 31 72 65 6d 29 20 46 7a 28 2d 2d 66 6f 6e 74 2d 31 32 70 78 29 20 42 64 72 73 28 31 38 70 78 29 20 43 28 2d 2d 77 68 69 74 65 29 20 42 67 28 24 70 6c 61 79 47 61 6d 65 73 42 74 6e 47 72 61 64 69 65 6e 74 29 20 42 78 73 68 28 24 70 6c 61 79 47 61 6d 65 73 42 74 6e 53 68 61 64 6f 77 29 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 50 6c 61 79 20 67 61 6d 65 5c 22 20 64 61 74 61 2d 69 64 3d 5c 22 4a 75 73 74 20 57 6f 72 64 73 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 Data Ascii: lass=\"Fz(12px) Fw(500) Lh(1rem)\">Just Words</h4><a class=\"Td(n) Ta(c) Py(7px) W(30%) Fw(500) Lh(1rem) Fz(--font-12px) Bdrs(18px) C(--white) Bg($playGamesBtnGradient) Bxsh($playGamesBtnShadow)\" aria-label=\"Play game\" data-id=\"Just Words\" href=\"htt
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 22 66 69 6c 6c 3a 76 61 72 28 2d 2d 62 61 74 63 61 76 65 29 3b 73 74 72 6f 6b 65 3a 76 61 72 28 2d 2d 62 61 74 63 61 76 65 29 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 5c 22 20 68 65 69 67 68 74 3d 5c 22 32 34 5c 22 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 34 38 20 34 38 5c 22 20 64 61 74 61 2d 69 63 6f 6e 3d 5c 22 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 66 69 6c 6c 5c 22 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 32 34 20 30 43 31 30 2e 38 20 30 20 30 20 31 30 2e 38 20 30 20 32 34 73 31 30 2e 38 20 32 34 20 32 34 20 32 34 20 32 34 2d 31 30 2e 38 20 32 34 2d 32 34 53 33 37 2e 32 20 30 20 32 34 20 30 7a 6d 30 20 33 37 2e 31 63 2d 31 2e 32 20 30 2d 32 2e 32 2d 31 2d 32 2e 32 2d 32 2e 32 20 30 2d Data Ascii: "fill:var(--batcave);stroke:var(--batcave);stroke-width:0;vertical-align:bottom\" height=\"24\" viewBox=\"0 0 48 48\" data-icon=\"exclamation-fill\"><path d=\"M24 0C10.8 0 0 10.8 0 24s10.8 24 24 24 24-10.8 24-24S37.2 0 24 0zm0 37.1c-1.2 0-2.2-1-2.2-2.2 0-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49851	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	542	OUT	GET /aaq/wf/wf-native-da-1.0.5-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:29 UTC	803	IN	HTTP/1.1 200 OK x-amz-id-2: qDTubnSt72kp7JGTVo7p2QVjgWmjpjDEjHvphWBjlcveefFeGvzDoaRp/KAr7zdpO0HlGC1ztAU= x-amz-request-id: 89GR2JBPPE1YN42D Date: Fri, 29 Mar 2024 00:41:30 GMT Last-Modified: Wed, 13 Mar 2024 00:20:57 GMT ETag: "b29975904d91fe6ff597a7fd5a315391" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 078ylwgkz5Ax5V37JvikKo6D_ggB.CfO Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 11230 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 6e 61 74 69 76 65 2d 64 61 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 6e 61 74 69 76 65 2d 64 61 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-native-da",[],t):"object"==typeof exports?exports["wafer-native-da"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wa
2024-03-29 00:41:29 UTC	561	IN	Data Raw: 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 Data Ascii: eof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 66 3d 4f 62 6a 65 63 74 Data Ascii: , not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}Object.defineProperty(t,"__esModule",{value:!0});var f=Object
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 69 3d 72 2e 6e 61 74 69 76 65 44 61 43 6f 6e 66 69 67 2c 61 3d 72 2e 65 72 72 6f 72 43 6c 61 73 73 2c 73 3d 72 2e 73 65 6c 65 63 74 6f 72 2c 63 3d 72 2e 73 75 63 63 65 73 73 43 6c 61 73 73 3b 6e 28 74 68 69 73 2c 74 29 3b 76 61 72 20 75 3d 6f 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 7b 65 72 72 6f 72 43 6c 61 73 73 3a 61 2c 73 65 6c 65 63 74 6f 72 3a 73 2c 73 75 63 63 65 73 73 43 6c 61 73 73 3a 63 7d 2c 7b 53 54 41 54 45 5f 41 54 54 52 53 3a 5f 7d 29 29 2c 76 3d 62 28 65 2e 67 65 74 45 Data Ascii: ength>1&&void 0!==arguments[1]?arguments[1]:{},i=r.nativeDaConfig,a=r.errorClass,s=r.selector,c=r.successClass;n(this,t);var u=o(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,e,{errorClass:a,selector:s,successClass:c},{STATE_ATTRS:_})),v=b(e.getE
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 6e 65 77 20 45 72 72 6f 72 28 22 69 64 20 69 73 20 6d 69 73 73 69 6e 67 22 29 29 3b 76 61 72 20 73 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 63 3d 73 2e 65 6c 65 6d 2c 6c 3d 73 2e 73 75 63 63 65 73 73 43 6c 61 73 73 3b 69 66 28 63 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 6c 29 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 21 30 29 3b 76 61 72 20 75 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 76 3d 75 2e 63 6f 6e 66 69 67 2c 68 3d 75 2e 65 72 72 6f 72 43 6c 61 73 73 2c 67 3d 75 2e 6e 61 74 69 76 65 44 61 43 6f 6e 66 69 67 2c 70 3d 76 6f 69 64 20 30 3d 3d 3d 67 3f 7b 7d 3a 67 2c 79 3d 75 2e 74 61 72 67 65 74 45 6c 65 6d 2c 62 3d 75 2e 74 69 6d 65 6f 75 74 2c 5f 3d 70 2e 75 72 6c 3b 72 65 Data Ascii: omise.reject(new Error("id is missing"));var s=this._util,c=s.elem,l=s.successClass;if(c.classList.contains(l))return Promise.resolve(!0);var u=this._util,v=u.config,h=u.errorClass,g=u.nativeDaConfig,p=void 0===g?{}:g,y=u.targetElem,b=u.timeout,_=p.url;re
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 7d 29 2c 76 2e 65 6e 61 62 6c 65 54 61 62 6f 6f 6c 61 41 64 73 26 26 6f 29 7b 76 61 72 20 68 3d 77 69 6e 64 6f 77 2e 62 65 6e 6a 69 3b 68 26 26 68 2e 72 65 6e 64 65 72 28 4a 53 4f 4e 2e 70 61 72 73 65 28 6f 29 29 7d 72 65 74 75 72 6e 21 30 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 74 2e 63 6c 65 61 72 46 65 74 63 68 49 6e 50 72 6f 67 72 65 73 73 28 6e 29 2c 64 2e 65 6d 69 74 57 61 66 65 72 45 76 65 6e 74 28 22 6e 61 74 69 76 65 44 61 3a 22 2b 69 2b 22 3a 65 72 72 6f 72 22 2c 7b 65 6c 65 6d 3a 63 2c 6d 65 74 61 3a 7b 75 72 6c 3a 5f 2c 69 64 3a 61 7d 2c 73 74 61 63 6b 3a 72 2e 73 74 61 63 6b 7c 7c 72 2e 6d 65 73 73 61 67 65 7d 29 2c 63 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 6e 61 Data Ascii: }),v.enableTaboolaAds&&o){var h=window.benji;h&&h.render(JSON.parse(o))}return!0}).catch(function(r){return t.clearFetchInProgress(n),d.emitWaferEvent("nativeDa:"+i+":error",{elem:c,meta:{url:_,id:a},stack:r.stack\|\|r.message}),c.classList.remove("wafer-na
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 6e 29 26 26 28 65 5b 6e 5d 3d 72 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c Data Ascii: ction(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},E=function(){function e(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurabl
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 77 61 66 65 72 2d 6e 61 74 69 76 65 2d 64 61 2d 63 6f 6e 66 69 67 22 29 29 2c 68 3d 73 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 72 6f 6f 74 3a 69 2c 73 65 6c 65 63 74 6f 72 3a 63 2c 70 72 6f 70 73 3a 7b 6e 61 74 69 76 65 44 61 43 6f 6e 66 69 67 3a 64 2c 65 72 72 6f 72 43 6c 61 73 73 3a 6e 2c 73 65 6c 65 63 74 6f 72 3a 63 2c 73 75 63 63 65 73 73 43 6c 61 73 73 3a 6c 7d 2c 57 61 66 65 72 43 6c 61 73 73 3a 6a 7d 29 29 3b 72 65 74 75 72 6e 20 68 2e 5f 76 61 6c 69 64 61 74 65 57 69 74 68 54 68 72 6f 74 74 6c 65 3d 56 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 Data Ascii: cument.getElementById("wafer-native-da-config")),h=s(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,{root:i,selector:c,props:{nativeDaConfig:d,errorClass:n,selector:c,successClass:l},WaferClass:j}));return h._validateWithThrottle=V(function(){for(
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 28 73 29 3b 76 61 72 20 54 3d 73 2b 22 4e 61 74 69 76 65 44 61 50 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 65 78 74 22 2c 41 3d 4e 2e 5f 73 74 61 74 65 5b 54 5d 3b 52 3d 52 7c 7c 77 69 6e 64 6f 77 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 65 3b 76 61 72 20 46 3d 52 26 26 52 2e 67 65 74 52 61 70 69 64 41 74 74 72 69 62 75 74 65 28 22 73 70 61 63 65 69 64 22 29 2c 45 3d 7b 69 74 65 6d 73 3a 6f 2c 6e 61 74 69 76 65 44 61 50 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 65 78 74 3a 41 7d 3b 72 65 74 75 72 6e 20 46 26 26 28 45 2e 73 70 61 63 65 69 64 3d 46 29 2c 6b 28 61 2c 7b 63 61 63 68 65 3a 30 2c 62 6f 64 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 53 28 7b 7d 2c 69 7c 7c 7b 7d 2c 7b 63 6f 6e 66 69 67 3a 45 7d 29 29 2c 74 69 6d 65 6f 75 74 3a 38 65 33 7d 29 2e Data Ascii: (s);var T=s+"NativeDaPaginationContext",A=N._state[T];R=R\|\|window.rapidInstance;var F=R&&R.getRapidAttribute("spaceid"),E={items:o,nativeDaPaginationContext:A};return F&&(E.spaceid=F),k(a,{cache:0,body:JSON.stringify(S({},i\|\|{},{config:E})),timeout:8e3}).
2024-03-29 00:41:29 UTC	269	IN	Data Raw: 74 63 68 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 26 26 73 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 73 2e 72 65 70 6c 61 63 65 28 22 2e 22 2c 22 22 29 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 6f 6e 4c 6f 61 64 22 3a 6e 2e 66 65 74 63 68 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 26 26 73 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 73 2e 72 65 70 6c 61 63 65 28 22 2e 22 2c 22 22 29 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 7d 7d 29 7d 7d 5d 29 2c 74 7d 28 4d 29 2c 58 3d 42 3b 74 2e 64 65 66 61 75 6c 74 3d 6e 65 77 20 58 28 7b 73 65 6c 65 63 74 6f 72 3a 22 77 61 66 65 72 2d 6e 61 74 69 Data Ascii: tch().then(function(t){t&&s&&e.classList.remove(s.replace(".",""))}).catch(function(){});break;case"onLoad":n.fetch().then(function(t){t&&s&&e.classList.remove(s.replace(".",""))}).catch(function(){})}})}}]),t}(M),X=B;t.default=new X({selector:"wafer-nati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49852	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	539	OUT	GET /aaq/wf/wf-action-1.8.1-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:29 UTC	803	IN	HTTP/1.1 200 OK x-amz-id-2: WK4z1T/3WTxC7YFEO6TscHjyn3L+AkFq2r16Rlay6nzmZ5Cd/vVV8QZ0yD+VgvBogRAU867ZA/8= x-amz-request-id: 89GGGJDKVEATKA2N Date: Fri, 29 Mar 2024 00:41:30 GMT Last-Modified: Thu, 21 Dec 2023 17:55:26 GMT ETag: "4443a60b3d3645610c9e65b7cc9f15bb" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: wiQ3AdVTneuswkykDVtSm3aaY9QhtZW9 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 13778 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 61 63 74 69 6f 6e 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 61 63 74 69 6f 6e 22 5d 3d 65 28 29 3a 28 74 2e 77 61 66 65 72 3d 74 2e 77 61 66 65 72 7c 7c 7b 7d 2c 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-action",[],e):"object"==typeof exports?exports["wafer-action"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 65 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a Data Ascii: unction"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function, not "+typeof e);t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,enumerable:!1,writable:!0,configurable:!0}}),e&&(Object.setPrototypeOf?Obj
2024-03-29 00:41:29 UTC	693	IN	Data Raw: 6e 61 6c 6c 79 7b 69 66 28 69 29 74 68 72 6f 77 20 6f 7d 7d 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 69 6e 20 4f 62 6a 65 63 74 28 65 29 29 72 65 74 75 72 6e 20 74 28 65 2c 72 29 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 Data Ascii: nally{if(i)throw o}}return r}return function(e,r){if(Array.isArray(e))return e;if(Symbol.iterator in Object(e))return t(e,r);throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),f=function(){function t(t,e){for(var r=0;r<e.lengt
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 57 5f 4d 4f 52 45 3a 22 53 48 4f 57 5f 4c 45 53 53 22 2c 53 48 4f 57 5f 4c 45 53 53 3a 22 53 48 4f 57 5f 4d 4f 52 45 22 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 61 3d 72 2e 61 70 70 49 64 2c 6e 3d 72 2e 61 63 74 69 6f 6e 48 6f 73 74 2c 73 3d 72 2e 62 6f 6f 6b 6d 61 72 6b 41 63 74 69 6f 6e 48 6f 73 74 2c 63 3d 72 2e 63 72 75 6d 62 2c 75 3d 72 2e 69 64 2c 66 3d 72 2e 6e 61 6d 65 2c 6d 3d 72 2e 70 72 6f 76 69 64 65 72 42 72 61 6e 64 50 72 6f 70 65 72 74 79 2c 62 3d 72 2e 73 65 6c 65 63 74 6f 72 2c 68 3d 72 2e 73 75 62 54 Data Ascii: W_MORE:"SHOW_LESS",SHOW_LESS:"SHOW_MORE"},P=function(t){function e(t){var r=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},a=r.appId,n=r.actionHost,s=r.bookmarkActionHost,c=r.crumb,u=r.id,f=r.name,m=r.providerBrandProperty,b=r.selector,h=r.subT
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 26 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 47 29 2c 5a 3d 7b 66 6f 6c 6c 6f 77 3a 6e 2b 22 61 70 69 2f 76 33 2f 74 6f 70 69 63 73 3f 61 70 70 49 64 3d 22 2b 61 2c 72 65 61 63 74 69 6f 6e 73 3a 6e 2b 22 61 70 69 2f 75 73 65 72 2f 76 31 2f 64 65 63 6c 61 72 65 64 2f 72 65 61 63 74 69 6f 6e 73 2f 43 4f 4e 54 45 4e 54 2f 50 52 45 46 45 52 45 4e 43 45 3f 61 70 70 49 64 3d 22 2b 61 7d 2c 24 3d 77 7c 7c 5a 5b 5f 5d 7c 7c 5a 5b 54 5d 2c 74 74 3d 4d 26 26 45 28 74 2c 4d 29 3b 72 65 74 75 72 6e 20 76 2e 5f 75 74 69 6c 3d 6c 28 7b 7d 2c 76 2e 5f 75 74 69 6c 2c 7b 61 63 74 69 6f 6e 45 72 72 6f 72 54 65 6d 70 6c 61 74 65 3a 4b 2c 61 63 74 69 6f 6e 48 6f 73 74 3a 6e 2c 61 63 74 69 6f 6e 4f 66 66 54 65 6d 70 6c 61 74 65 3a 56 2c 61 63 74 Data Ascii: &document.getElementById(G),Z={follow:n+"api/v3/topics?appId="+a,reactions:n+"api/user/v1/declared/reactions/CONTENT/PREFERENCE?appId="+a},$=w\|\|Z[_]\|\|Z[T],tt=M&&E(t,M);return v._util=l({},v._util,{actionErrorTemplate:K,actionHost:n,actionOffTemplate:V,act
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 22 29 2c 28 73 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 75 29 2c 6c 26 26 5f 28 75 2c 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 75 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 73 61 70 70 65 61 72 2d 73 74 61 72 74 22 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 75 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 73 61 70 70 65 61 72 2d 65 6e 64 22 29 2c 75 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 75 29 7d 2c 6e 29 7d 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 2c 6e 26 26 28 75 2e 63 6c 61 73 73 4c 69 73 74 Data Ascii: "),(s\|\|document.body).appendChild(u),l&&_(u,"click",function(t){t.preventDefault(),u.classList.add("animation-disappear-start"),setTimeout(function(){u.classList.add("animation-disappear-end"),u.parentNode.removeChild(u)},n)},{passive:!1}),n&&(u.classList
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 7b 76 61 72 20 79 3d 49 5b 6c 5d 3b 74 68 69 73 2e 73 65 74 4f 70 70 6f 73 69 74 65 41 63 74 69 6f 6e 53 74 61 74 75 73 28 21 31 2c 74 68 69 73 2e 5f 75 74 69 6c 2e 6d 61 70 70 69 6e 67 49 64 2e 72 65 70 6c 61 63 65 28 6c 2c 79 29 29 2c 79 26 26 28 6d 2e 72 65 6d 6f 76 65 3d 5b 7b 69 74 65 6d 49 64 3a 6e 2c 72 65 61 63 74 69 6f 6e 73 3a 5b 79 5d 7d 5d 29 7d 62 3d 7b 22 58 2d 43 53 52 46 2d 54 6f 6b 65 6e 22 3a 74 7d 7d 65 6c 73 65 22 62 6f 6f 6b 6d 61 72 6b 22 3d 3d 3d 6c 3f 28 22 44 45 4c 45 54 45 22 3d 3d 3d 64 3f 70 3d 6f 2b 22 61 70 69 2f 76 31 2f 75 73 65 72 2f 62 6f 6f 6b 6d 61 72 6b 73 2f 22 2b 73 2b 22 2f 22 2b 6e 2b 22 3f 61 70 70 49 64 3d 22 2b 72 3a 28 70 3d 6f 2b 22 61 70 69 2f 76 31 2f 75 73 65 72 2f 62 6f 6f 6b 6d 61 72 6b 73 2f 22 2b 73 2b Data Ascii: {var y=I[l];this.setOppositeActionStatus(!1,this._util.mappingId.replace(l,y)),y&&(m.remove=[{itemId:n,reactions:[y]}])}b={"X-CSRF-Token":t}}else"bookmark"===l?("DELETE"===d?p=o+"api/v1/user/bookmarks/"+s+"/"+n+"?appId="+r:(p=o+"api/v1/user/bookmarks/"+s+
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 6c 2e 74 79 70 65 3b 69 66 28 74 29 7b 76 61 72 20 61 3d 74 2e 63 72 75 6d 62 3b 61 26 26 28 53 5b 72 5d 3d 61 29 2c 74 68 69 73 2e 5f 75 74 69 6c 3d 6c 28 7b 7d 2c 74 68 69 73 2e 5f 75 74 69 6c 2c 74 29 7d 76 61 72 20 69 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 6f 3d 69 2e 65 6c 65 6d 2c 6e 3d 69 2e 62 6f 75 6e 64 61 72 79 45 6c 65 6d 2c 73 3d 69 2e 6e 61 6d 65 2c 63 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 6f 6e 53 74 61 74 75 73 3b 74 68 69 73 2e 5f 73 74 61 74 65 2e 69 6e 50 72 6f 67 72 65 73 73 3d 21 30 2c 6e 26 26 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 63 74 69 6f 6e 2d 69 6e 2d 70 72 6f 67 72 65 73 73 22 29 2c 63 3f 74 68 69 73 2e 73 65 74 41 63 74 69 6f 6e 53 74 61 74 75 73 28 21 31 29 3a 74 68 69 73 2e 73 65 Data Ascii: l.type;if(t){var a=t.crumb;a&&(S[r]=a),this._util=l({},this._util,t)}var i=this._util,o=i.elem,n=i.boundaryElem,s=i.name,c=this._state.actionStatus;this._state.inProgress=!0,n&&n.classList.add("wafer-action-in-progress"),c?this.setActionStatus(!1):this.se
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 63 74 69 6f 6e 2d 62 6f 75 6e 64 61 72 79 2d 65 72 72 6f 72 22 2c 22 77 61 66 65 72 2d 61 63 74 69 6f 6e 2d 69 6e 2d 70 72 6f 67 72 65 73 73 22 29 29 2c 65 2e 72 65 6e 64 65 72 41 63 74 69 6f 6e 54 65 6d 70 6c 61 74 65 28 7b 74 79 70 65 3a 22 73 75 63 63 65 73 73 22 7d 29 2c 65 2e 5f 73 74 61 74 65 2e 69 6e 50 72 6f 67 72 65 73 73 3d 21 31 2c 65 2e 64 69 64 43 6f 6d 70 6c 65 74 65 28 6e 75 6c 6c 2c 79 29 2c 62 2e 65 6d 69 74 57 61 66 65 72 45 76 65 6e 74 28 22 61 63 74 69 6f 6e 3a 73 75 63 63 65 73 73 22 2c 7b 65 6c 65 6d 3a 6f 2c 6d 65 74 61 3a 7b 7d 7d 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 5f 73 74 61 74 65 2e 69 6e 50 72 6f 67 72 65 73 73 3d 21 31 2c 6e 26 26 28 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 Data Ascii: ction-boundary-error","wafer-action-in-progress")),e.renderActionTemplate({type:"success"}),e._state.inProgress=!1,e.didComplete(null,y),b.emitWaferEvent("action:success",{elem:o,meta:{}})}).catch(function(){e._state.inProgress=!1,n&&(n.classList.remove("
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 72 3d 74 2e 72 6f 6f 74 2c 61 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 64 6f 63 75 6d 65 6e 74 3a 72 2c 69 3d 74 2e 73 65 6c 65 63 74 6f 72 3b 73 28 74 68 69 73 2c 65 29 3b 76 61 72 20 6f 3d 4e 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 77 61 66 65 72 2d 61 63 74 69 6f 6e 2d 63 6f 6e 66 69 67 22 29 29 2c 6e 3d 6f 2e 61 63 74 69 6f 6e 48 6f 73 74 2c 75 3d 6f 2e 61 70 70 49 64 2c 6c 3d 6f 2e 62 6f 6f 6b 6d 61 72 6b 41 63 74 69 6f 6e 48 6f 73 74 2c 70 3d 6f 2e 63 72 75 6d 62 2c 66 3d 6f 2e 70 72 6f 76 69 64 65 72 42 72 61 6e 64 50 72 6f 70 65 72 74 79 2c 64 3d 63 28 74 68 69 73 2c 28 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 Data Ascii: 0!==arguments[0]?arguments[0]:{},r=t.root,a=void 0===r?document:r,i=t.selector;s(this,e);var o=N(document.getElementById("wafer-action-config")),n=o.actionHost,u=o.appId,l=o.bookmarkActionHost,p=o.crumb,f=o.providerBrandProperty,d=c(this,(e.__proto__\|\|Ob

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49853	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	541	OUT	GET /aaq/wf/wf-template-1.4.3-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:29 UTC	884	IN	HTTP/1.1 200 OK x-amz-id-2: 85PussSn5uZpVpRIdeYez/YT3J14oAVKJWYQmipcLxu0qooMzuKe/WU9zbsFLhvTJpjfULk1vf5F10VPSte03B14TWT0ri6GmkJYmbNdxwo= x-amz-request-id: 9ZBS9904N45SXM50 Date: Thu, 28 Mar 2024 18:32:56 GMT Last-Modified: Wed, 21 Sep 2022 02:22:21 GMT ETag: "85070595d47a7cc86af31833110dc18a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: h9L3Y9Rw_EkQ1yH8NskMO9BjqcI4jexa Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 7907 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 22114 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 74 65 6d 70 6c 61 74 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 74 65 6d 70 6c 61 74 65 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-template",[],t):"object"==typeof exports?exports["wafer-template"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafe
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 Data Ascii: t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function i(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a cla
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 70 74 6f 72 28 74 2c 72 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6f 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 65 28 61 2c 72 2c 6e 29 7d 69 66 28 22 76 61 6c 75 65 22 69 6e 20 6f 29 72 65 74 75 72 6e 20 6f 2e 76 61 6c 75 65 3b 76 61 72 20 69 3d 6f 2e 67 65 74 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 69 29 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 6e 29 7d 2c 70 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 64 3d 70 2e 62 61 73 65 2c 76 3d 70 2e 63 6f 6e 73 74 61 6e 74 73 2c 6d 3d 70 2e 57 61 66 65 72 42 61 73 65 43 6c 61 73 73 2c 77 3d 70 2e 75 74 69 6c 73 2c 79 3d 77 2e 67 65 74 54 65 6d 70 6c 61 74 65 43 6f 6e 74 65 6e 74 2c 68 3d 77 Data Ascii: ptor(t,r);if(void 0===o){var a=Object.getPrototypeOf(t);return null===a?void 0:e(a,r,n)}if("value"in o)return o.value;var i=o.get;if(void 0!==i)return i.call(n)},p=window.wafer,d=p.base,v=p.constants,m=p.WaferBaseClass,w=p.utils,y=w.getTemplateContent,h=w
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 4c 69 73 74 65 6e 65 72 73 28 29 2c 66 7d 72 65 74 75 72 6e 20 61 28 74 2c 65 29 2c 75 28 74 2c 5b 7b 6b 65 79 3a 22 72 65 6e 64 65 72 54 65 6d 70 6c 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 6e 3d 72 2e 61 6c 6c 6f 77 52 65 72 65 6e 64 65 72 2c 6f 3d 72 2e 65 6c 65 6d 2c 61 3d 72 2e 73 75 63 63 65 73 73 43 6c 61 73 73 2c 69 3d 72 2e 74 61 72 67 65 74 53 65 6c 65 63 74 6f 72 2c 73 3d 72 2e 74 65 6d 70 6c 61 74 65 54 65 78 74 2c 6c 3d 72 2e 74 65 6d 70 6c 61 74 65 49 64 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 72 2c 63 29 7b 76 61 72 20 75 3d 69 3f 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 69 29 3a 6f 3b 6f Data Ascii: Listeners(),f}return a(t,e),u(t,[{key:"renderTemplate",value:function(e){var r=this._util,n=r.allowRerender,o=r.elem,a=r.successClass,i=r.targetSelector,s=r.templateText,l=r.templateId;return new Promise(function(r,c){var u=i?document.querySelector(i):o;o
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 66 65 72 2e 6f 6e 28 72 2c 65 2e 6f 6e 57 61 66 65 72 45 76 65 6e 74 29 3b 61 26 26 66 28 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 65 29 2e 63 61 6c 6c 28 65 29 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6c 69 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 2d 31 21 3d 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 76 65 6e 74 73 2e 69 6e 64 65 78 4f 66 28 22 63 6c 69 63 6b 22 29 26 26 74 68 69 73 2e 72 65 6e 64 65 72 54 65 6d 70 6c 61 74 65 28 22 63 6c 69 63 6b 22 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 6f 6e 57 Data Ascii: fer.on(r,e.onWaferEvent);a&&f(t.prototype.__proto__\|\|Object.getPrototypeOf(t.prototype),"addEventListeners",e).call(e)})}},{key:"click",value:function(){-1!==this._util.events.indexOf("click")&&this.renderTemplate("click").catch(function(e){})}},{key:"onW
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 74 65 72 22 5d 5d 2c 6d 6f 75 73 65 6c 65 61 76 65 3a 5b 5b 22 5f 73 65 6c 66 22 2c 22 6d 6f 75 73 65 6c 65 61 76 65 22 5d 5d 7d 3b 76 61 72 20 54 3d 4f 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2e 6b 65 79 2c 6e 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 72 Data Ascii: ter"]],mouseleave:[["_self","mouseleave"]]};var T=O,k=function(){function e(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n.key,n)}}return function(t,r,n){r
2024-03-29 00:41:29 UTC	107	IN	Data Raw: 6d 70 6c 61 74 65 28 22 76 69 65 77 70 6f 72 74 22 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 7d 29 7d 29 7d 7d 5d 29 2c 74 7d 28 57 29 2c 41 3d 52 3b 74 2e 64 65 66 61 75 6c 74 3d 6e 65 77 20 41 28 7b 73 65 6c 65 63 74 6f 72 3a 22 2e 77 61 66 65 72 2d 74 65 6d 70 6c 61 74 65 22 7d 29 7d 7d 29 7d 29 3b Data Ascii: mplate("viewport").catch(function(e){})})}}]),t}(W),A=R;t.default=new A({selector:".wafer-template"})}})});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49856	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	537	OUT	GET /aaq/wf/wf-menu-1.3.0-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:29 UTC	852	IN	HTTP/1.1 200 OK x-amz-id-2: RhlqMUu3RBEFxK8qXU/gHzXQ0B6tINjcM+UjBNTmBVEf0LLPUANqtU3X8hYdIuhQaDfQMTFiCvI= x-amz-request-id: XM3N81YX1CMDCB5R Date: Thu, 28 Mar 2024 15:13:54 GMT Last-Modified: Tue, 14 Nov 2023 00:39:45 GMT ETag: "76aeb54211fca21ec7f4f9a39b1d88d1" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: BhLpL.WQZsmgJZIKchhrGPJ9SR5h0N22 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 8333 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 34056 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 6d 65 6e 75 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 6d 65 6e 75 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-menu",[],t):"object"==typeof exports?exports["wafer-menu"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 Data Ascii: ype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a func
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 28 76 6f 69 64 20 30 3d 3d 3d 6f 29 7b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 65 28 69 2c 6e 2c 72 29 7d 69 66 28 22 76 61 6c 75 65 22 69 6e 20 6f 29 72 65 74 75 72 6e 20 6f 2e 76 61 6c 75 65 3b 76 61 72 20 61 3d 6f 2e 67 65 74 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 29 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 72 29 7d 2c 76 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 70 3d 76 2e 62 61 73 65 2c 6d 3d 76 2e 63 6f 6e 73 74 61 6e 74 73 2c 68 3d 76 2e 57 61 66 65 72 42 61 73 65 43 6c 61 73 73 2c 64 3d 76 2e 75 74 69 6c 73 2c 79 3d 64 2e 63 6f 6e 76 65 72 74 4e 6f 64 65 4c 69 73 74 54 6f 41 72 72 61 79 2c 62 3d 6d 2e 41 54 54 52 5f 50 52 Data Ascii: (void 0===o){var i=Object.getPrototypeOf(t);return null===i?void 0:e(i,n,r)}if("value"in o)return o.value;var a=o.get;if(void 0!==a)return a.call(r)},v=window.wafer,p=v.base,m=v.constants,h=v.WaferBaseClass,d=v.utils,y=d.convertNodeListToArray,b=m.ATTR_PR
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 69 2e 69 64 3b 70 26 26 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 22 2c 70 29 3b 76 61 72 20 6d 3d 73 2e 69 64 3b 72 65 74 75 72 6e 20 6d 26 26 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 2c 6d 29 2c 6e 7d 72 65 74 75 72 6e 20 69 28 74 2c 65 29 2c 63 28 74 2c 5b 7b 6b 65 79 3a 22 6f 70 65 6e 4d 65 6e 75 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2c 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 6e 3d 74 2e 61 63 74 69 76 65 43 6c 61 73 73 2c 72 3d 74 2e 65 6c 65 6d 2c 6f 3d Data Ascii: i.id;p&&s.setAttribute("aria-controls",p);var m=s.id;return m&&i.setAttribute("aria-labelledby",m),n}return i(t,e),c(t,[{key:"openMenu",value:function(){var e=arguments.length>0&&void 0!==arguments[0]&&arguments[0],t=this._util,n=t.activeClass,r=t.elem,o=
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 6d 65 6e 75 43 6c 69 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 6e 3d 74 2e 6f 70 74 69 6f 6e 73 45 6c 65 6d 2c 72 3d 74 2e 63 6c 6f 73 65 4f 6e 53 65 6c 65 63 74 2c 6f 3d 65 2e 65 76 65 6e 74 54 61 72 67 65 74 3b 79 28 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 6d 65 6e 75 2d 69 74 65 6d 2d 61 63 74 69 76 65 22 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e Data Ascii: rototype.__proto__\|\|Object.getPrototypeOf(t.prototype),"addEventListeners",this).call(this)}},{key:"menuClick",value:function(e){var t=this._util,n=t.optionsElem,r=t.closeOnSelect,o=e.eventTarget;y(n.getElementsByClassName("menu-item-active")).forEach(fun
2024-03-29 00:41:29 UTC	1300	IN	Data Raw: 45 6c 65 6d 3d 72 2c 72 26 26 72 2e 66 6f 63 75 73 28 29 7d 7d 2c 7b 6b 65 79 3a 22 6d 6f 75 73 65 4f 76 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 29 7b 74 68 69 73 2e 5f 75 74 69 6c 2e 73 68 6f 75 6c 64 41 63 74 69 76 61 74 65 4f 6e 48 6f 76 65 72 26 26 74 68 69 73 2e 6f 70 65 6e 4d 65 6e 75 28 21 30 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 6d 6f 75 73 65 4c 65 61 76 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 29 7b 74 68 69 73 2e 5f 75 74 69 6c 2e 73 68 6f 75 6c 64 41 63 74 69 76 61 74 65 4f 6e 48 6f 76 65 72 26 26 74 68 69 73 2e 63 6c 6f 73 65 4d 65 6e 75 28 29 7d 7d 7d 5d 29 2c 74 7d 28 68 Data Ascii: Elem=r,r&&r.focus()}},{key:"mouseOver",value:function(e){if(!this._state.active){this._util.shouldActivateOnHover&&this.openMenu(!0)}}},{key:"mouseLeave",value:function(e){if(this._state.active){this._util.shouldActivateOnHover&&this.closeMenu()}}}]),t}(h
2024-03-29 00:41:29 UTC	533	IN	Data Raw: 6f 74 3a 69 2c 73 65 6c 65 63 74 6f 72 3a 75 2c 57 61 66 65 72 43 6c 61 73 73 3a 45 7d 29 29 2c 63 3d 6c 3b 72 65 74 75 72 6e 20 45 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 4f 74 68 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 2c 74 3d 63 2e 5f 73 74 61 74 65 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 2c 6e 3d 21 30 2c 72 3d 21 31 2c 6f 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 69 2c 61 3d 74 2e 65 6e 74 72 69 65 73 28 29 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 6e 3d 28 69 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 6e 3d 21 30 29 7b 76 61 72 20 73 3d 69 2e 76 61 6c 75 65 2c 75 3d 6a 28 73 2c 32 29 2c 6c 3d 75 5b 30 5d 2c 66 3d Data Ascii: ot:i,selector:u,WaferClass:E})),c=l;return E.prototype.closeOthers=function(){var e=this._util.elem,t=c._state.elementInstances,n=!0,r=!1,o=void 0;try{for(var i,a=t.entries()[Symbol.iterator]();!(n=(i=a.next()).done);n=!0){var s=i.value,u=j(s,2),l=u[0],f=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49857	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	1615	OUT	GET /caas/content/article/?uuid=d045bf6b-f631-471e-85f5-f96a61504456,747d213d-feeb-344b-9f11-46ff213b038f,5b9c2182-9890-3c45-9adc-de7f18290b6a,3a1dbd93-3944-31c4-9897-57e5492bdc58,51d79ed4-e44e-374e-933d-c1e0adc2ae91,ddb65e10-dda4-3026-b3ea-45ba16328ad9,dd5e065f-7870-3aac-8d1c-ff5e94237f9a&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=2vl5n89j0c3hk HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-03-29 00:41:30 UTC	1273	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-credentials: true access-control-allow-methods: GET, OPTIONS access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept content-type: application/json; charset=utf-8 content-length: 347071 etag: W/"54bbf-kCznUqquuRNQ2yMqAgoxL6L/8Xo" vary: Accept-Encoding date: Fri, 29 Mar 2024 00:41:29 GMT x-envoy-upstream-service-time: 72 server: ATS Age: 3 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.pnr.ouryahoo.com https://pnr.ouryahoo.com https://.search.aol.com https://.search.huffpost.com https://.onesearch.com https://.verizonmedia.com https://.publishing.oath.com https://.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=1b6q32tj0c3hp&partner=; X-Frame-Options: SAMEORIGIN
2024-03-29 00:41:30 UTC	242	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 6e 6f 2d 72 65 66 65 72 72 65 72 2d 77 68 65 6e 2d 64 6f 77 6e 67 72 61 64 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Referrer-Policy: no-referrer-when-downgradeConnection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 70 61 72 74 6e 65 72 44 61 74 61 22 3a 7b 22 61 64 4d 65 74 61 22 3a 7b 22 68 61 73 68 74 61 67 22 3a 22 6e 65 77 73 3b 73 6f 63 63 65 72 3b 73 70 6f 72 74 73 22 2c 22 69 73 53 75 70 70 6c 79 53 65 67 6d 65 6e 74 22 3a 22 66 61 6c 73 65 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 72 73 22 3a 22 6c 6d 73 69 64 3a 61 30 37 37 30 30 30 30 30 30 44 41 66 4d 75 41 41 4c 3b 72 65 76 73 70 3a 75 73 2e 73 70 6f 72 74 73 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 6c 70 73 74 61 69 64 3a 64 30 34 35 62 66 36 62 2d 66 36 33 31 2d 34 37 31 65 2d 38 35 66 35 2d 66 39 36 61 36 31 35 30 34 34 35 36 3b 70 74 3a 63 6f 6e 74 65 6e 74 3b 70 64 3a 6d 6f 64 61 6c 3b 76 65 72 Data Ascii: {"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"news;soccer;sports","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a077000000DAfMuAAL;revsp:us.sports.yahoo.com;lpstaid:d045bf6b-f631-471e-85f5-f96a61504456;pt:content;pd:modal;ver
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 3a 66 61 6c 73 65 2c 22 68 61 73 45 6d 62 65 64 41 74 45 6e 64 22 3a 66 61 6c 73 65 2c 22 68 61 73 59 61 68 6f 6f 56 69 64 65 6f 22 3a 66 61 6c 73 65 2c 22 69 73 4c 6f 6e 67 41 72 74 69 63 6c 65 22 3a 66 61 6c 73 65 2c 22 70 6f 74 65 6e 74 69 61 6c 53 6c 6f 74 73 22 3a 30 2c 22 6f 75 74 73 74 72 65 61 6d 41 64 50 6f 73 69 74 69 6f 6e 22 3a 2d 31 2c 22 72 65 61 64 4d 6f 72 65 50 6f 73 69 74 69 6f 6e 22 3a 2d 31 2c 22 74 6f 74 61 6c 50 61 72 61 67 72 61 70 68 73 22 3a 30 7d 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 73 74 6f 72 79 22 2c 22 65 64 69 74 6f 72 69 61 6c 50 69 63 6b 73 4c 69 73 74 22 3a 22 22 2c 22 65 6e 74 69 74 69 65 73 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 57 49 4b 49 49 44 3a 4d 65 67 61 6e 5f 52 61 70 69 6e 6f 65 22 2c 22 6c 61 62 65 6c Data Ascii: :false,"hasEmbedAtEnd":false,"hasYahooVideo":false,"isLongArticle":false,"potentialSlots":0,"outstreamAdPosition":-1,"readMorePosition":-1,"totalParagraphs":0},"contentType":"story","editorialPicksList":"","entities":[{"term":"WIKIID:Megan_Rapinoe","label
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 79 5f 49 6d 61 67 65 73 22 2c 22 6c 61 62 65 6c 22 3a 22 47 65 74 74 79 20 49 6d 61 67 65 73 22 2c 22 63 61 70 41 62 74 53 63 6f 72 65 22 3a 22 30 2e 39 31 33 22 2c 22 6d 65 74 61 44 61 74 61 22 3a 5b 7b 22 76 69 73 69 62 6c 65 22 3a 22 66 61 6c 73 65 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 37 31 37 2c 22 65 6e 64 63 68 61 72 22 3a 37 32 38 2c 22 73 70 65 63 69 61 6c 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 2c 22 69 6e 73 74 61 6e 63 65 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 7d 2c 7b 22 74 65 72 6d 22 3a 22 57 49 4b 49 49 44 3a 50 61 72 69 73 5f 53 61 69 6e 74 2d 47 65 72 6d 61 69 6e 5f 46 2e 43 2e 22 2c 22 6c 61 62 65 6c 22 3a 22 50 61 72 69 73 20 53 61 69 6e 74 2d 47 65 72 6d 61 69 6e 22 2c 22 63 61 70 41 62 74 53 63 6f 72 65 22 3a 22 30 2e Data Ascii: y_Images","label":"Getty Images","capAbtScore":"0.913","metaData":[{"visible":"false"}],"startchar":717,"endchar":728,"specialParentTags":[],"instanceParentTags":[]},{"term":"WIKIID:Paris_Saint-Germain_F.C.","label":"Paris Saint-Germain","capAbtScore":"0.
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 49 6d 6d 65 72 73 69 76 65 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 4f 72 69 67 69 6e 61 6c 43 6f 6e 74 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 50 65 72 73 6f 6e 61 6c 46 69 6e 61 6e 63 65 41 72 74 69 63 6c 65 22 3a 66 61 6c 73 65 2c 22 69 73 53 70 6f 6e 73 6f 72 65 64 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 4d 65 67 61 6e 20 52 61 70 69 6e 6f 65 2c 20 4b 6f 72 62 69 6e 20 41 6c 62 65 72 74 2c 20 41 63 68 69 6c 6c 65 73 20 69 6e 6a 75 72 79 2c 20 55 53 57 4e 54 2c 20 47 65 74 74 79 20 49 6d 61 67 65 73 2c 20 50 61 72 69 73 20 53 61 69 6e 74 2d 47 65 72 6d 61 69 6e 2c 20 66 61 72 65 77 65 6c 6c 20 67 61 6d 65 22 2c 22 6d 65 74 61 22 3a 7b 7d 2c 22 6d 6f 64 Data Ascii: ntent":false,"isImmersiveContent":false,"isOriginalContent":true,"isPersonalFinanceArticle":false,"isSponsoredContent":false,"keywords":"Megan Rapinoe, Korbin Albert, Achilles injury, USWNT, Getty Images, Paris Saint-Germain, farewell game","meta":{},"mod
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 2d 34 66 62 31 2d 62 39 63 31 2d 30 62 34 30 62 64 38 64 34 61 38 31 22 7d 2c 22 74 65 78 74 22 3a 22 4d 65 67 61 6e 20 52 61 70 69 6e 6f 65 22 2c 22 74 79 70 65 22 3a 22 50 45 52 53 4f 4e 22 7d 2c 7b 22 63 61 6e 6f 6e 69 63 61 6c 49 64 22 3a 22 4b 6f 72 62 69 6e 5f 41 6c 62 65 72 74 22 2c 22 63 61 6e 6f 6e 69 63 61 6c 54 79 70 65 22 3a 22 77 69 6b 69 5f 69 64 22 2c 22 73 65 63 6f 6e 64 61 72 79 49 64 73 22 3a 7b 22 77 69 6b 69 5f 69 64 22 3a 22 4b 6f 72 62 69 6e 5f 41 6c 62 65 72 74 22 2c 22 79 6b 5f 69 64 22 3a 22 34 30 63 66 36 62 33 31 2d 66 62 32 63 2d 34 66 33 62 2d 38 38 65 30 2d 39 66 66 66 33 31 61 63 63 39 65 30 22 7d 2c 22 74 65 78 74 22 3a 22 4b 6f 72 62 69 6e 20 41 6c 62 65 72 74 22 2c 22 74 79 70 65 22 3a 22 50 45 52 53 4f 4e 22 7d 5d 2c 22 Data Ascii: -4fb1-b9c1-0b40bd8d4a81"},"text":"Megan Rapinoe","type":"PERSON"},{"canonicalId":"Korbin_Albert","canonicalType":"wiki_id","secondaryIds":{"wiki_id":"Korbin_Albert","yk_id":"40cf6b31-fb2c-4f3b-88e0-9fff31acc9e0"},"text":"Korbin Albert","type":"PERSON"}],"
2024-03-29 00:41:30 UTC	1214	IN	Data Raw: 43 2e 2c 53 6f 63 69 61 6c 5f 6d 65 64 69 61 22 2c 22 78 72 61 79 4d 65 74 61 22 3a 5b 7b 22 74 79 70 65 22 3a 22 77 69 6b 69 22 2c 22 69 64 22 3a 22 4d 65 67 61 6e 5f 52 61 70 69 6e 6f 65 22 2c 22 73 75 62 54 79 70 65 22 3a 22 41 74 68 6c 65 74 65 22 2c 22 77 69 6b 69 43 61 74 65 67 6f 72 79 22 3a 22 50 45 52 53 4f 4e 22 2c 22 6c 6f 6e 67 4e 61 6d 65 22 3a 22 4d 65 67 61 6e 20 52 61 70 69 6e 6f 65 22 2c 22 73 68 6f 72 74 4e 61 6d 65 22 3a 22 4d 65 67 61 6e 20 52 61 70 69 6e 6f 65 22 2c 22 73 74 61 72 74 63 68 61 72 22 3a 35 34 38 2c 22 65 6e 64 63 68 61 72 22 3a 35 36 30 2c 22 69 6e 73 74 61 6e 63 65 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 22 66 69 67 63 61 70 74 69 6f 6e 22 5d 2c 22 6e 6f 74 61 62 6c 65 46 6f 72 22 3a 5b 22 41 6d 65 72 69 63 61 6e 20 73 Data Ascii: C.,Social_media","xrayMeta":[{"type":"wiki","id":"Megan_Rapinoe","subType":"Athlete","wikiCategory":"PERSON","longName":"Megan Rapinoe","shortName":"Megan Rapinoe","startchar":548,"endchar":560,"instanceParentTags":["figcaption"],"notableFor":["American s
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 73 73 3d 5c 22 63 61 61 73 20 63 61 61 73 2d 63 63 20 66 72 6f 6e 74 70 61 67 65 20 65 6e 61 62 6c 65 45 56 50 6c 61 79 65 72 20 65 6e 61 62 6c 65 4f 76 65 72 72 69 64 65 53 70 61 63 65 49 64 20 63 6f 6e 74 65 6e 74 46 65 65 64 62 61 63 6b 45 6e 61 62 6c 65 64 20 65 6e 61 62 6c 65 41 64 46 65 65 64 62 61 63 6b 56 32 20 65 6e 61 62 6c 65 49 6e 41 72 74 69 63 6c 65 41 64 20 65 6e 61 62 6c 65 4f 70 69 6e 69 6f 6e 4c 61 62 65 6c 20 65 6e 61 62 6c 65 53 69 6e 67 6c 65 53 6c 6f 74 74 69 6e 67 20 65 6e 61 62 6c 65 56 69 64 65 6f 44 6f 63 6b 69 6e 67 20 6f 75 74 53 74 72 65 61 6d 20 73 68 6f 77 43 6f 6d 6d 65 6e 74 73 49 63 6f 6e 57 69 74 68 44 79 6e 61 6d 69 63 43 6f 75 6e 74 20 65 6e 61 62 6c 65 43 6f 6d 6d 65 6e 74 73 43 6f 75 6e 74 49 6e 56 69 65 77 43 6f 6d Data Ascii: ss=\"caas caas-cc frontpage enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 enableInArticleAd enableOpinionLabel enableSingleSlotting enableVideoDocking outStream showCommentsIconWithDynamicCount enableCommentsCountInViewCom
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 62 6c 65 20 66 6f 72 20 73 63 72 65 65 6e 20 72 65 61 64 65 72 20 75 73 65 72 73 5c 22 7d 27 20 64 61 74 61 2d 6c 61 6e 67 3d 65 6e 2d 55 53 20 64 61 74 61 2d 74 7a 3d 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 20 64 61 74 61 2d 70 61 72 61 6d 73 3d 27 7b 5c 22 66 65 61 74 75 72 65 73 5c 22 3a 7b 5c 22 65 6e 61 62 6c 65 45 56 50 6c 61 79 65 72 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 4f 76 65 72 72 69 64 65 53 70 61 63 65 49 64 5c 22 3a 74 72 75 65 2c 5c 22 63 6f 6e 74 65 6e 74 46 65 65 64 62 61 63 6b 45 6e 61 62 6c 65 64 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 41 64 46 65 65 64 62 61 63 6b 56 32 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 49 6e 41 72 74 69 63 6c 65 41 64 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 4f 70 69 6e Data Ascii: ble for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\"features\":{\"enableEVPlayer\":true,\"enableOverrideSpaceId\":true,\"contentFeedbackEnabled\":true,\"enableAdFeedbackV2\":true,\"enableInArticleAd\":true,\"enableOpin
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 61 73 73 3d 63 61 61 73 2d 6c 6f 67 6f 3e 3c 61 20 63 6c 61 73 73 3d 5c 22 6c 69 6e 6b 20 72 61 70 69 64 2d 6e 6f 63 6c 69 63 6b 2d 72 65 73 70 20 63 61 61 73 2d 61 74 74 72 2d 70 72 6f 76 69 64 65 72 2d 6c 6f 67 6f 5c 22 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 73 70 6f 72 74 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 20 20 64 61 74 61 2d 79 6c 6b 3d 5c 22 73 65 63 3a 6c 6f 67 6f 2d 70 72 6f 76 69 64 65 72 3b 65 6c 6d 3a 6c 6f 67 6f 3b 73 6c 6b 3a 59 61 68 6f 6f 20 53 70 6f 72 74 73 3b 69 74 63 3a 30 3b 67 3a 5c 22 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 63 61 61 73 2d 69 6d 67 20 61 6c 74 3d 5c 22 59 61 68 6f 6f 20 53 70 6f 72 74 73 5c 22 20 73 72 63 3d 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 6e 79 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 63 74 38 Data Ascii: ass=caas-logo><a class=\"link rapid-noclick-resp caas-attr-provider-logo\" href=https://sports.yahoo.com/ data-ylk=\"sec:logo-provider;elm:logo;slk:Yahoo Sports;itc:0;g:\"><img class=caas-img alt=\"Yahoo Sports\" src=https://s.yimg.com/ny/api/res/1.2/ct8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49858	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	1726	OUT	GET /caas/content/article/?uuid=742c2e0f-6948-3d4f-9b25-8519b485868c,4a1da1fc-247f-3458-9f80-595e9ebabd07,315ec9d5-2c30-3dd6-91e7-283df7c28d1a,bdfa16b4-1c8c-446f-b3d6-5774a1e6188c,9bcd113d-71df-4a3d-a934-a61254bdc0e4,4a9adca9-cd26-384b-87f2-3372b00ad06a,4abbeabc-fcfd-44a3-b6d9-63a5da05c452,029f5683-400d-494c-b56e-55f216472a39,79932e4b-67c6-4356-b79b-5ee7902e8a91,cffc80bc-7ebd-4f76-ae5a-5f9a3328558f&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=2vl5n89j0c3hk HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-03-29 00:41:30 UTC	1273	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-credentials: true access-control-allow-methods: GET, OPTIONS access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept content-type: application/json; charset=utf-8 content-length: 638654 etag: W/"9bebe-7dB0jWOk2uAVZg38f6oUylkiJ8w" vary: Accept-Encoding date: Fri, 29 Mar 2024 00:41:29 GMT x-envoy-upstream-service-time: 87 server: ATS Age: 3 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.pnr.ouryahoo.com https://pnr.ouryahoo.com https://.search.aol.com https://.search.huffpost.com https://.onesearch.com https://.verizonmedia.com https://.publishing.oath.com https://.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=05b7sm9j0c3hp&partner=; X-Frame-Options: SAMEORIGIN
2024-03-29 00:41:30 UTC	242	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 6e 6f 2d 72 65 66 65 72 72 65 72 2d 77 68 65 6e 2d 64 6f 77 6e 67 72 61 64 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Referrer-Policy: no-referrer-when-downgradeConnection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 70 61 72 74 6e 65 72 44 61 74 61 22 3a 7b 22 61 64 4d 65 74 61 22 3a 7b 22 68 61 73 68 74 61 67 22 3a 22 79 73 63 61 6d 61 72 63 68 3b 63 6f 6c 6c 65 67 65 62 61 73 6b 65 74 62 61 6c 6c 3b 62 61 73 6b 65 74 62 61 6c 6c 3b 73 70 6f 72 74 73 22 2c 22 69 73 53 75 70 70 6c 79 53 65 67 6d 65 6e 74 22 3a 22 66 61 6c 73 65 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 72 73 22 3a 22 6c 6d 73 69 64 3a 61 30 61 30 57 30 30 30 30 30 4d 73 4c 59 4b 51 41 33 3b 72 65 76 73 70 3a 75 73 61 5f 74 6f 64 61 79 5f 73 70 6f 72 74 73 5f 61 72 74 69 63 6c 65 73 5f 35 35 38 3b 6c 70 73 74 61 69 64 3a 37 34 32 63 32 65 30 66 2d 36 39 34 38 2d 33 64 34 66 2d 39 62 32 35 Data Ascii: {"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"yscamarch;collegebasketball;basketball;sports","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0a0W00000MsLYKQA3;revsp:usa_today_sports_articles_558;lpstaid:742c2e0f-6948-3d4f-9b25
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 2c 22 72 65 61 64 4d 6f 72 65 50 6f 73 69 74 69 6f 6e 22 3a 2d 31 2c 22 74 6f 74 61 6c 50 61 72 61 67 72 61 70 68 73 22 3a 30 7d 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 73 74 6f 72 79 22 2c 22 65 64 69 74 6f 72 69 61 6c 50 69 63 6b 73 4c 69 73 74 22 3a 22 22 2c 22 65 6e 74 69 74 69 65 73 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 22 2c 22 6c 61 62 65 6c 22 3a 22 4e 43 41 41 20 54 6f 75 72 6e 61 6d 65 6e 74 22 2c 22 63 61 70 41 62 74 53 63 6f 72 65 22 3a 22 30 2e 39 31 31 22 2c 22 6d 65 74 61 44 61 74 61 22 3a 5b 7b 22 76 69 73 69 62 6c 65 22 3a 22 66 61 6c 73 65 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 31 31 38 2c 22 65 6e 64 63 68 61 72 22 3a 31 33 32 2c 22 73 70 65 63 69 61 6c 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 22 61 22 5d 2c 22 69 6e 73 74 Data Ascii: ,"readMorePosition":-1,"totalParagraphs":0},"contentType":"story","editorialPicksList":"","entities":[{"term":"","label":"NCAA Tournament","capAbtScore":"0.911","metaData":[{"visible":"false"}],"startchar":118,"endchar":132,"specialParentTags":["a"],"inst
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 74 73 5f 74 65 61 6d 22 2c 22 73 70 6f 72 74 73 5f 75 73 5f 65 6e 5f 75 73 5f 61 62 73 6f 6c 75 74 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 70 6f 72 74 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6e 63 61 61 62 2f 74 65 61 6d 73 2f 6e 2d 63 61 72 6f 6c 69 6e 61 2f 22 2c 22 72 65 73 6f 6c 75 74 69 6f 6e 2e 73 70 6f 72 74 73 49 64 22 3a 22 6e 63 61 61 62 2e 74 2e 34 31 33 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 37 37 32 2c 22 65 6e 64 63 68 61 72 22 3a 37 38 35 2c 22 73 70 65 63 69 61 6c 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 22 61 22 5d 2c 22 69 6e 73 74 61 6e 63 65 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 7d 2c 7b 22 74 65 72 6d 22 3a 22 22 2c 22 6c 61 62 65 6c 22 3a 22 74 6f 75 72 6e 61 6d 65 6e 74 20 74 65 61 6d 73 22 2c 22 63 61 70 41 62 74 Data Ascii: ts_team","sports_us_en_us_absolute_url":"https://sports.yahoo.com/ncaab/teams/n-carolina/","resolution.sportsId":"ncaab.t.413"}],"startchar":772,"endchar":785,"specialParentTags":["a"],"instanceParentTags":[]},{"term":"","label":"tournament teams","capAbt
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 72 6c 22 3a 22 2f 6e 63 61 61 62 2f 70 6c 61 79 65 72 73 2f 31 35 33 39 30 36 22 2c 22 73 70 6f 72 74 73 2e 55 53 2e 65 6e 2d 55 53 2e 65 6e 74 69 74 79 5f 74 79 70 65 22 3a 22 73 70 6f 72 74 73 5f 70 6c 61 79 65 72 22 2c 22 73 70 6f 72 74 73 5f 75 73 5f 65 6e 5f 75 73 5f 61 62 73 6f 6c 75 74 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 70 6f 72 74 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6e 63 61 61 62 2f 70 6c 61 79 65 72 73 2f 31 35 33 39 30 36 2f 22 2c 22 72 65 73 6f 6c 75 74 69 6f 6e 2e 73 70 6f 72 74 73 49 64 22 3a 22 6e 63 61 61 62 2e 70 2e 31 35 33 39 30 36 22 2c 22 72 65 73 6f 6c 75 74 69 6f 6e 2e 73 70 6f 72 74 73 54 65 61 6d 49 64 22 3a 22 6e 63 61 61 62 2e 74 2e 34 31 33 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 32 37 33 30 2c 22 65 6e Data Ascii: rl":"/ncaab/players/153906","sports.US.en-US.entity_type":"sports_player","sports_us_en_us_absolute_url":"https://sports.yahoo.com/ncaab/players/153906/","resolution.sportsId":"ncaab.p.153906","resolution.sportsTeamId":"ncaab.t.413"}],"startchar":2730,"en
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 72 65 22 3a 22 30 2e 36 34 37 22 2c 22 72 65 73 6f 6c 75 74 69 6f 6e 2e 73 70 6f 72 74 73 55 72 6c 22 3a 22 2f 6e 63 61 61 62 2f 74 65 61 6d 73 2f 76 69 72 67 69 6e 69 61 2f 22 2c 22 73 70 6f 72 74 73 2e 55 53 2e 65 6e 2d 55 53 2e 65 6e 74 69 74 79 5f 74 79 70 65 22 3a 22 73 70 6f 72 74 73 5f 74 65 61 6d 22 2c 22 73 70 6f 72 74 73 5f 75 73 5f 65 6e 5f 75 73 5f 61 62 73 6f 6c 75 74 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 70 6f 72 74 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6e 63 61 61 62 2f 74 65 61 6d 73 2f 76 69 72 67 69 6e 69 61 2f 22 2c 22 72 65 73 6f 6c 75 74 69 6f 6e 2e 73 70 6f 72 74 73 49 64 22 3a 22 6e 63 61 61 62 2e 74 2e 36 31 38 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 33 31 31 2c 22 65 6e 64 63 68 61 72 22 3a 33 31 38 2c 22 73 70 Data Ascii: re":"0.647","resolution.sportsUrl":"/ncaab/teams/virginia/","sports.US.en-US.entity_type":"sports_team","sports_us_en_us_absolute_url":"https://sports.yahoo.com/ncaab/teams/virginia/","resolution.sportsId":"ncaab.t.618"}],"startchar":311,"endchar":318,"sp
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 6f 75 72 6e 61 6d 65 6e 74 2c 20 42 72 61 64 20 42 72 6f 77 6e 65 6c 6c 2c 20 54 68 65 20 41 43 43 2c 20 43 6c 65 6d 73 6f 6e 2c 20 4e 6f 72 74 68 20 43 61 72 6f 6c 69 6e 61 2c 20 74 6f 75 72 6e 61 6d 65 6e 74 20 74 65 61 6d 73 2c 20 43 6f 6c 6f 72 61 64 6f 20 53 74 61 74 65 2c 20 41 72 6d 61 6e 64 6f 20 42 61 63 6f 74 2c 20 50 4a 20 48 61 6c 6c 2c 20 41 6c 61 62 61 6d 61 2c 20 56 69 72 67 69 6e 69 61 22 2c 22 6d 65 74 61 22 3a 7b 22 70 6c 61 79 65 72 22 3a 7b 22 74 79 70 65 22 3a 22 76 69 64 65 6f 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 70 6f 72 74 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6d 65 6e 73 2d 73 77 65 65 74 2d 31 36 2d 68 65 61 64 6c 69 6e 65 73 2d 72 65 64 2d 31 38 34 32 35 31 33 30 34 2e 68 74 6d 6c 3f 66 6f 72 6d 61 74 3d 65 6d 62 Data Ascii: ournament, Brad Brownell, The ACC, Clemson, North Carolina, tournament teams, Colorado State, Armando Bacot, PJ Hall, Alabama, Virginia","meta":{"player":{"type":"video","url":"https://sports.yahoo.com/mens-sweet-16-headlines-red-184251304.html?format=emb
2024-03-29 00:41:30 UTC	996	IN	Data Raw: 33 31 39 38 31 63 37 65 39 61 63 64 66 32 62 64 36 63 22 2c 22 77 69 64 74 68 22 3a 31 32 30 30 2c 22 68 65 69 67 68 74 22 3a 38 30 30 7d 2c 22 73 68 6f 77 45 64 69 74 6f 72 69 61 6c 50 69 63 6b 73 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 66 61 6c 73 65 2c 22 73 6c 69 63 6b 54 68 75 6d 62 6e 61 69 6c 22 3a 7b 7d 2c 22 73 70 61 63 65 49 64 22 3a 22 31 31 39 37 37 39 32 34 34 36 22 2c 22 73 70 6f 6e 73 6f 72 65 64 43 6f 6e 74 65 6e 74 22 3a 74 72 75 65 2c 22 73 75 6d 6d 61 72 79 22 3a 22 54 68 65 20 41 43 43 20 77 61 73 6e 27 74 20 76 69 65 77 65 64 20 61 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 62 65 74 74 65 72 20 63 6f 6e 66 65 72 65 6e 63 65 73 20 74 68 69 73 20 73 65 61 73 6f 6e 2e 20 4e 6f 77 2c 20 69 74 20 68 61 73 20 74 68 65 20 6d 6f 73 74 20 74 65 61 Data Ascii: 31981c7e9acdf2bd6c","width":1200,"height":800},"showEditorialPicksPlaceholder":false,"slickThumbnail":{},"spaceId":"1197792446","sponsoredContent":true,"summary":"The ACC wasn't viewed as one of the better conferences this season. Now, it has the most tea
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 22 69 6e 73 74 61 6e 63 65 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 22 61 22 5d 2c 22 6e 6f 74 61 62 6c 65 46 6f 72 22 3a 5b 22 41 6d 65 72 69 63 61 6e 20 62 61 73 6b 65 74 62 61 6c 6c 20 70 6c 61 79 65 72 22 5d 2c 22 73 70 6f 72 74 73 50 6c 61 79 65 72 49 64 22 3a 5b 22 6e 63 61 61 62 2e 70 2e 31 35 33 39 30 36 22 5d 2c 22 73 70 6f 72 74 73 4c 65 61 67 75 65 49 64 22 3a 5b 22 6e 63 61 61 62 22 5d 2c 22 73 65 6f 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 73 70 6f 72 74 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6e 63 61 61 62 2f 70 6c 61 79 65 72 73 2f 31 35 33 39 30 36 22 7d 5d 2c 22 79 63 74 73 22 3a 22 30 30 31 30 30 30 30 30 31 2c 30 30 31 30 30 30 30 31 32 2c 30 30 31 30 30 31 30 37 36 2c 30 30 31 30 30 30 30 30 31 2c 30 30 31 30 30 30 30 31 32 2c 30 30 31 Data Ascii: "instanceParentTags":["a"],"notableFor":["American basketball player"],"sportsPlayerId":["ncaab.p.153906"],"sportsLeagueId":["ncaab"],"seoLink":"https://sports.yahoo.com/ncaab/players/153906"}],"ycts":"001000001,001000012,001001076,001000001,001000012,001
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 50 44 41 54 45 5c 22 3a 5c 22 6e 65 77 20 75 70 64 61 74 65 5c 22 2c 5c 22 4e 45 57 5f 55 50 44 41 54 45 53 5c 22 3a 5c 22 6e 65 77 20 75 70 64 61 74 65 73 5c 22 2c 5c 22 4a 55 53 54 5f 4e 4f 57 5c 22 3a 5c 22 4a 75 73 74 20 6e 6f 77 5c 22 2c 5c 22 52 45 4c 4f 41 44 5c 22 3a 5c 22 43 6c 69 63 6b 20 74 6f 20 72 65 6c 6f 61 64 20 77 69 74 68 20 6c 61 74 65 73 74 20 75 70 64 61 74 65 5c 22 2c 5c 22 53 45 45 20 7b 30 7d 20 4d 4f 52 45 5c 22 3a 5c 22 53 65 65 20 7b 30 7d 20 6d 6f 72 65 5c 22 2c 5c 22 53 45 45 5f 4c 45 53 53 5c 22 3a 5c 22 53 65 65 20 6c 65 73 73 5c 22 2c 5c 22 53 45 45 5f 4d 4f 52 45 5c 22 3a 5c 22 53 65 65 20 6d 6f 72 65 5c 22 2c 5c 22 53 48 4f 57 5f 4d 4f 52 45 5c 22 3a 5c 22 53 68 6f 77 20 6d 6f 72 65 20 75 70 64 61 74 65 73 5c 22 2c 5c 22 Data Ascii: PDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49850	52.24.220.218	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	1068	OUT	GET /bid/yoo/adslot/13885/?pa=1 HTTP/1.1 Host: west-bid-gps.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-03-29 00:41:30 UTC	1451	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:29 GMT Content-Type: text/html;charset=utf-8 Content-Length: 4036 Connection: close Access-Control-Allow-Origin: * X-Allow-Fledge: true Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" Public-Key-Pins-Report-Only: max-age=2592000; pin-sha256="2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY="; pin-sha256="2oALgLKofTmeZvoZ1y/fSZg7R9jPMix8eVA6DH4o/q8="; pin-sha256="Gtk3r1evlBrs0hG3fm3VoM19daHexDWP//OCmeeMr5M="; pin-sha256="I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg="; pin-sha256="SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4="; pin-sha256="UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4="; pin-sha256="Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM="; pin-sha256="dolnbtzEBnELx/9lOEQ22e6OZO/QNb6VSSX2XHA3E7A="; pin-sha256="i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY="; pin-sha256="iduNzFNKpwYZ3se/XV+hXcbUonlLw09QPa6AYUwpu4M="; pin-sha256="lnsM2T/O9/J84sJFdnrpsFp3awZJ+ZZbYpCWhGloaHI="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc="; includeSubdomains; report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-hpkp-report-only"
2024-03-29 00:41:30 UTC	4036	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 28 28 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 72 75 6e 20 3d 20 28 29 20 3d 3e 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6f 72 69 67 69 6e 20 3d 20 22 68 74 74 70 73 3a 2f 2f 70 61 2e 79 62 70 2e 79 61 68 6f 6f 2e 63 6f 6d 22 3b 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 69 6e 74 65 72 65 73 74 47 72 6f 75 70 73 20 3d 20 5b 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 3a 20 22 32 39 32 31 31 33 31 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 77 6e 65 72 3a 20 60 24 7b 6f 72 69 67 69 6e 7d 60 2c 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: <!doctype html><html lang="en"><body> <script> (() => { const run = () => { const origin = "https://pa.ybp.yahoo.com"; const interestGroups = [{ name: "2921131", owner: `${origin}`,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49863	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	1726	OUT	GET /caas/content/article/?uuid=9667f626-9602-3f80-8f31-6786323de4e0,9a8d4713-ce83-455a-b9a5-930026b49ca3,cd680bf4-4be7-3e46-aa91-62baac020327,48379597-0675-38b3-9e93-2179864043a5,e7dab064-a495-3430-b19f-a75550693a12,e15a82c8-6454-39a6-831a-b18adf614afe,ef86a629-1eb8-4e0f-845e-22934adc8a31,2f3e0630-3b39-4af5-9229-793976190a44,9c59bff8-7554-4369-8a9c-59e768feaff6,52221875-54c2-37ef-8de3-d700cefb20e7&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback&rid=2vl5n89j0c3hk HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-03-29 00:41:30 UTC	1274	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-credentials: true access-control-allow-methods: GET, OPTIONS access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept content-type: application/json; charset=utf-8 content-length: 588253 etag: W/"8f9dd-Gt2ErVGaThg4Jdqc1DIp7q5Ch10" vary: Accept-Encoding date: Fri, 29 Mar 2024 00:41:30 GMT x-envoy-upstream-service-time: 127 server: ATS Age: 0 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.pnr.ouryahoo.com https://pnr.ouryahoo.com https://.search.aol.com https://.search.huffpost.com https://.onesearch.com https://.verizonmedia.com https://.publishing.oath.com https://.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=74vta8hj0c3hq&partner=; X-Frame-Options: SAMEORIGIN
2024-03-29 00:41:30 UTC	242	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 6e 6f 2d 72 65 66 65 72 72 65 72 2d 77 68 65 6e 2d 64 6f 77 6e 67 72 61 64 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Referrer-Policy: no-referrer-when-downgradeConnection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 70 61 72 74 6e 65 72 44 61 74 61 22 3a 7b 22 61 64 4d 65 74 61 22 3a 7b 22 68 61 73 68 74 61 67 22 3a 22 6e 65 77 73 3b 63 75 6c 74 75 72 65 3b 63 72 69 6d 65 3b 6c 65 67 61 6c 6d 61 74 74 65 72 73 22 2c 22 69 73 53 75 70 70 6c 79 53 65 67 6d 65 6e 74 22 3a 22 66 61 6c 73 65 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 72 73 22 3a 22 6c 6d 73 69 64 3a 61 30 37 37 30 30 30 30 30 30 32 47 5a 35 69 41 41 47 3b 72 65 76 73 70 3a 72 65 75 74 65 72 73 2d 66 69 6e 61 6e 63 65 2e 63 6f 6d 3b 6c 70 73 74 61 69 64 3a 39 36 36 37 66 36 32 36 2d 39 36 30 32 2d 33 66 38 30 2d 38 66 33 31 2d 36 37 38 36 33 32 33 64 65 34 65 30 3b 70 74 3a 63 6f 6e 74 65 6e 74 Data Ascii: {"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"news;culture;crime;legalmatters","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0770000002GZ5iAAG;revsp:reuters-finance.com;lpstaid:9667f626-9602-3f80-8f31-6786323de4e0;pt:content
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 69 63 6b 73 4c 69 73 74 22 3a 22 22 2c 22 65 6e 74 69 74 69 65 73 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 57 49 4b 49 49 44 3a 46 54 58 22 2c 22 6c 61 62 65 6c 22 3a 22 46 54 58 22 2c 22 63 61 70 41 62 74 53 63 6f 72 65 22 3a 22 30 2e 39 32 37 22 2c 22 6d 65 74 61 44 61 74 61 22 3a 5b 7b 22 76 69 73 69 62 6c 65 22 3a 22 66 61 6c 73 65 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 34 33 2c 22 65 6e 64 63 68 61 72 22 3a 34 35 2c 22 73 70 65 63 69 61 6c 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 2c 22 69 6e 73 74 61 6e 63 65 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 7d 2c 7b 22 74 65 72 6d 22 3a 22 57 49 4b 49 49 44 3a 54 65 6c 65 67 72 61 6d 5f 25 32 38 73 6f 66 74 77 61 72 65 25 32 39 22 2c 22 6c 61 62 65 6c 22 3a 22 54 65 6c 65 67 72 61 6d 22 2c 22 63 61 70 Data Ascii: icksList":"","entities":[{"term":"WIKIID:FTX","label":"FTX","capAbtScore":"0.927","metaData":[{"visible":"false"}],"startchar":43,"endchar":45,"specialParentTags":[],"instanceParentTags":[]},{"term":"WIKIID:Telegram_%28software%29","label":"Telegram","cap
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 22 3a 22 43 72 69 6d 65 20 26 20 4a 75 73 74 69 63 65 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 59 43 54 3a 30 30 31 30 30 30 37 38 30 22 2c 22 73 63 6f 72 65 22 3a 22 30 2e 38 32 32 38 35 37 22 2c 22 6c 61 62 65 6c 22 3a 22 53 6f 63 69 65 74 79 20 26 20 43 75 6c 74 75 72 65 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 59 43 54 3a 30 30 31 30 30 30 31 36 36 22 2c 22 73 63 6f 72 65 22 3a 22 30 2e 36 32 39 38 37 22 2c 22 6c 61 62 65 6c 22 3a 22 43 6f 6d 70 61 6e 79 20 4c 65 67 61 6c 20 26 20 4c 61 77 20 4d 61 74 74 65 72 73 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 59 43 54 3a 30 30 31 30 30 30 31 32 36 22 2c 22 73 63 6f 72 65 22 3a 22 31 2e 30 22 2c 22 6c 61 62 65 6c 22 3a 22 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 59 43 54 3a 30 30 31 30 30 30 33 32 33 22 2c 22 73 63 6f 72 65 22 Data Ascii: ":"Crime & Justice"},{"term":"YCT:001000780","score":"0.822857","label":"Society & Culture"},{"term":"YCT:001000166","score":"0.62987","label":"Company Legal & Law Matters"},{"term":"YCT:001000126","score":"1.0","label":""},{"term":"YCT:001000323","score"
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 69 67 69 6e 61 6c 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 50 65 72 73 6f 6e 61 6c 46 69 6e 61 6e 63 65 41 72 74 69 63 6c 65 22 3a 66 61 6c 73 65 2c 22 69 73 53 70 6f 6e 73 6f 72 65 64 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 46 54 58 2c 20 54 65 6c 65 67 72 61 6d 2c 20 73 65 6e 74 65 6e 63 65 2c 20 53 61 6d 20 42 61 6e 6b 6d 61 6e 2d 46 72 69 65 64 2c 20 75 6e 73 75 73 70 65 63 74 69 6e 67 20 63 75 73 74 6f 6d 65 72 73 2c 20 74 68 65 20 73 65 6e 74 65 6e 63 65 2c 20 42 61 6e 6b 6d 61 6e 2d 46 72 69 65 64 22 2c 22 6d 65 74 61 22 3a 7b 22 70 6c 61 79 65 72 22 3a 7b 22 74 79 70 65 22 3a 22 76 69 64 65 6f 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 66 69 6e 61 6e 63 65 2e 79 61 68 6f 6f 2e 63 6f 6d Data Ascii: iginalContent":false,"isPersonalFinanceArticle":false,"isSponsoredContent":false,"keywords":"FTX, Telegram, sentence, Sam Bankman-Fried, unsuspecting customers, the sentence, Bankman-Fried","meta":{"player":{"type":"video","url":"https://finance.yahoo.com
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 69 65 73 22 3a 5b 7b 22 63 61 6e 6f 6e 69 63 61 6c 49 64 22 3a 22 44 69 73 61 70 70 6f 69 6e 74 6d 65 6e 74 22 2c 22 63 61 6e 6f 6e 69 63 61 6c 54 79 70 65 22 3a 22 77 69 6b 69 5f 69 64 22 2c 22 73 65 63 6f 6e 64 61 72 79 49 64 73 22 3a 7b 22 77 69 6b 69 5f 69 64 22 3a 22 44 69 73 61 70 70 6f 69 6e 74 6d 65 6e 74 22 2c 22 79 6b 5f 69 64 22 3a 22 36 64 66 33 36 39 34 34 2d 32 65 38 63 2d 34 30 63 31 2d 61 37 35 63 2d 38 33 64 32 61 36 39 36 61 38 33 62 22 7d 2c 22 74 65 78 74 22 3a 22 64 69 73 61 70 70 6f 69 6e 74 6d 65 6e 74 22 2c 22 74 79 70 65 22 3a 22 43 4f 4e 43 45 50 54 22 7d 2c 7b 22 63 61 6e 6f 6e 69 63 61 6c 49 64 22 3a 22 41 6e 67 65 72 22 2c 22 63 61 6e 6f 6e 69 63 61 6c 54 79 70 65 22 3a 22 77 69 6b 69 5f 69 64 22 2c 22 73 65 63 6f 6e 64 61 72 Data Ascii: ies":[{"canonicalId":"Disappointment","canonicalType":"wiki_id","secondaryIds":{"wiki_id":"Disappointment","yk_id":"6df36944-2e8c-40c1-a75c-83d2a696a83b"},"text":"disappointment","type":"CONCEPT"},{"canonicalId":"Anger","canonicalType":"wiki_id","secondar
2024-03-29 00:41:30 UTC	327	IN	Data Raw: 20 76 69 63 74 69 6d 73 20 77 68 6f 20 68 6f 70 65 64 20 66 6f 72 20 73 74 69 66 66 65 72 20 73 65 6e 74 65 6e 63 65 22 2c 22 74 70 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 74 79 70 65 22 3a 22 73 74 6f 72 79 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 66 69 6e 61 6e 63 65 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6e 65 77 73 2f 66 72 75 73 74 72 61 74 69 6f 6e 2d 62 61 6e 6b 6d 61 6e 2d 66 72 69 65 64 73 2d 76 69 63 74 69 6d 73 2d 68 6f 70 65 64 2d 31 38 34 30 33 34 31 39 35 2e 68 74 6d 6c 22 2c 22 75 75 69 64 22 3a 22 39 36 36 37 66 36 32 36 2d 39 36 30 32 2d 33 66 38 30 2d 38 66 33 31 2d 36 37 38 36 33 32 33 64 65 34 65 30 22 2c 22 76 69 64 65 6f 50 6f 73 69 74 69 6f 6e 22 3a 22 22 2c 22 77 69 6b 69 69 64 73 22 3a 22 46 54 58 2c 54 65 6c 65 67 72 61 Data Ascii: victims who hoped for stiffer sentence","tpConsent":true,"type":"story","url":"https://finance.yahoo.com/news/frustration-bankman-frieds-victims-hoped-184034195.html","uuid":"9667f626-9602-3f80-8f31-6786323de4e0","videoPosition":"","wikiids":"FTX,Telegra
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 30 30 36 36 37 2c 30 30 31 30 30 30 37 38 30 2c 30 30 31 30 30 30 31 36 36 2c 30 30 31 30 30 30 31 32 36 2c 30 30 31 30 30 30 33 32 33 2c 30 30 31 30 30 30 32 39 38 2c 30 30 31 30 30 30 36 39 34 22 2c 22 68 61 73 59 61 68 6f 6f 56 69 64 65 6f 22 3a 74 72 75 65 2c 22 63 6f 6d 6d 65 6e 74 53 65 63 74 69 6f 6e 49 64 22 3a 35 36 36 38 31 35 31 2c 22 68 6f 6d 65 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 66 69 6e 61 6e 63 65 2f 6e 65 77 73 2f 66 72 75 73 74 72 61 74 69 6f 6e 2d 62 61 6e 6b 6d 61 6e 2d 66 72 69 65 64 73 2d 76 69 63 74 69 6d 73 2d 68 6f 70 65 64 2d 31 38 34 30 33 34 31 39 35 2e 68 74 6d 6c 22 7d 7d 2c 22 6d 6f 64 75 6c 65 73 22 3a 7b 7d 2c 22 6d 61 72 6b 75 70 22 3a 22 3c 64 69 76 20 63 6c 61 Data Ascii: 00667,001000780,001000166,001000126,001000323,001000298,001000694","hasYahooVideo":true,"commentSectionId":5668151,"homepageUrl":"https://www.yahoo.com/finance/news/frustration-bankman-frieds-victims-hoped-184034195.html"}},"modules":{},"markup":"<div cla
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 65 65 20 6c 65 73 73 5c 22 2c 5c 22 53 45 45 5f 4d 4f 52 45 5c 22 3a 5c 22 53 65 65 20 6d 6f 72 65 5c 22 2c 5c 22 53 48 4f 57 5f 4d 4f 52 45 5c 22 3a 5c 22 53 68 6f 77 20 6d 6f 72 65 20 75 70 64 61 74 65 73 5c 22 2c 5c 22 54 4f 44 41 59 5c 22 3a 5c 22 54 6f 64 61 79 5c 22 2c 5c 22 54 52 59 5f 41 47 41 49 4e 5c 22 3a 5c 22 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 54 72 79 20 61 67 61 69 6e 5c 22 2c 5c 22 55 50 44 41 54 45 53 5c 22 3a 5c 22 75 70 64 61 74 65 73 5c 22 2c 5c 22 56 49 44 45 4f 5f 41 31 31 59 5f 44 49 53 41 42 4c 45 5f 46 55 4c 4c 53 43 52 45 45 4e 5c 22 3a 5c 22 46 75 6c 6c 20 53 63 72 65 65 6e 2c 20 62 75 74 74 6f 6e 2c 20 64 69 73 61 62 6c 65 64 2c 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 6e 6f 74 20 61 76 61 69 6c 61 Data Ascii: ee less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not availa
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 63 72 6f 6c 6c 4d 61 72 67 69 6e 54 6f 70 5c 22 3a 2d 37 32 7d 7d 27 20 64 61 74 61 2d 73 70 61 63 65 2d 69 64 3d 31 31 39 37 37 39 32 34 34 36 20 69 64 3d 63 61 61 73 2d 61 72 74 2d 39 36 36 37 66 36 32 36 2d 39 36 30 32 2d 33 66 38 30 2d 38 66 33 31 2d 36 37 38 36 33 32 33 64 65 34 65 30 3e 3c 61 72 74 69 63 6c 65 20 74 61 62 69 6e 64 65 78 3d 2d 31 20 63 6c 61 73 73 3d 63 61 61 73 2d 63 6f 6e 74 61 69 6e 65 72 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 63 61 61 73 2d 6c 65 61 64 2d 68 65 61 64 65 72 2d 39 36 36 37 66 36 32 36 2d 39 36 30 32 2d 33 66 38 30 2d 38 66 33 31 2d 36 37 38 36 33 32 33 64 65 34 65 30 3e 3c 68 65 61 64 65 72 20 63 6c 61 73 73 3d 63 61 61 73 2d 68 65 61 64 65 72 3e 3c 21 2d 2d 46 23 66 5f 34 2d 2d 3e 3c 64 69 76 20 63 6c Data Ascii: crollMarginTop\":-72}}' data-space-id=1197792446 id=caas-art-9667f626-9602-3f80-8f31-6786323de4e0><article tabindex=-1 class=caas-container aria-labelledby=caas-lead-header-9667f626-9602-3f80-8f31-6786323de4e0><header class=caas-header>...F#f_4--><div cl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49864	34.200.65.202	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	1069	OUT	GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC=19cw~2hk0; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A
2024-03-29 00:41:30 UTC	551	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:30 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2hk0:19e0~2hk0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 29-Mar-2025 00:41:30 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.106
2024-03-29 00:41:30 UTC	71	IN	Data Raw: 33 63 0d 0a 7b 22 61 78 69 64 22 3a 20 22 65 53 31 69 63 30 5a 33 4e 6d 74 77 52 54 4a 31 52 57 78 5a 4e 47 56 43 55 55 6f 35 65 6a 42 73 5a 53 35 30 63 6d 6c 32 4c 6d 4a 71 63 33 35 42 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 3c{"axid": "eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49865	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	553	OUT	GET /aaq/cprops/colors_1.1.27.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:30 UTC	825	IN	HTTP/1.1 200 OK x-amz-id-2: Xv1/2mPhpu0iGGb7EVvW5F4PykW5UvkNasxa4ThzhmVarpDGETBWoJJapcgknmqfoF6d8BJQ6+mcRrALyAYP2g== x-amz-request-id: 0QJ274TPTYNW36WP Date: Fri, 29 Mar 2024 00:35:55 GMT Last-Modified: Tue, 10 Jan 2023 00:56:08 GMT ETag: "14b81b9d43cc8eb81ae45eebbaae258c" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: NXuB5LUlzqQuAXf127xyo2NVNfa.SWqk Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 6179 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 336 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 3a 72 6f 6f 74 2c 68 74 6d 6c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 64 61 72 6b 5d 20 5b 64 61 74 61 2d 6d 61 69 6e 74 61 69 6e 2d 63 6f 6c 6f 72 5d 2c 68 74 6d 6c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 2d 65 6e 61 62 6c 65 64 5d 20 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 6c 69 67 68 74 5d 2c 68 74 6d 6c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 2d 65 6e 61 62 6c 65 64 5d 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 62 61 72 62 69 65 3a 23 66 38 30 65 35 64 3b 2d 2d 62 61 72 6e 65 79 3a 23 63 63 30 30 38 63 3b 2d 2d 62 61 74 63 61 76 65 3a 23 32 33 32 61 33 31 3b 2d 2d 62 61 74 74 6c 65 73 68 69 70 3a 23 35 62 36 33 36 61 3b 2d 2d 62 6c 61 63 6b 3a 23 30 30 30 Data Ascii: :root,html[data-color-scheme=dark] [data-maintain-color],html[data-color-theme-enabled] [data-color-scheme=light],html[data-color-theme-enabled][data-color-scheme=light]{--barbie:#f80e5d;--barney:#cc008c;--batcave:#232a31;--battleship:#5b636a;--black:#000
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 61 74 69 6f 6e 2d 31 3a 30 20 31 70 78 20 30 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 29 2c 31 29 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 32 3a 30 20 30 20 31 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 31 29 2c 30 20 32 70 78 20 34 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 30 38 29 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 33 3a 30 20 30 20 31 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 30 38 29 2c 30 20 34 70 78 20 38 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 31 29 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 34 3a 30 20 30 20 32 70 78 20 72 67 62 61 28 76 61 72 28 2d Data Ascii: ation-1:0 1px 0 rgba(var(--rgb-dirty-seagull),1);--elevation-2:0 0 1px rgba(var(--rgb-black),0.1),0 2px 4px rgba(var(--rgb-black),0.08);--elevation-3:0 0 1px rgba(var(--rgb-black),0.08),0 4px 8px rgba(var(--rgb-black),0.1);--elevation-4:0 0 2px rgba(var(-
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 72 67 62 2d 77 68 69 74 65 3a 32 39 2c 33 34 2c 34 30 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 31 3a 30 20 31 70 78 20 30 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 31 29 2c 30 20 30 20 31 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 38 35 29 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 32 3a 30 20 30 20 31 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 39 29 2c 30 20 32 70 78 20 34 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 39 32 29 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 33 3a 30 20 30 20 31 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 39 32 29 2c 30 20 34 70 78 20 38 70 78 20 72 67 62 61 28 76 Data Ascii: rgb-white:29,34,40;--elevation-1:0 1px 0 rgba(var(--rgb-black),1),0 0 1px rgba(var(--rgb-black),0.85);--elevation-2:0 0 1px rgba(var(--rgb-black),0.9),0 2px 4px rgba(var(--rgb-black),0.92);--elevation-3:0 0 1px rgba(var(--rgb-black),0.92),0 4px 8px rgba(v
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 35 3b 2d 2d 72 67 62 2d 67 72 65 79 2d 68 61 69 72 3a 34 34 2c 35 34 2c 36 33 3b 2d 2d 72 67 62 2d 69 6e 6b 77 65 6c 6c 3a 32 35 35 2c 32 35 35 2c 32 35 35 3b 2d 2d 72 67 62 2d 77 68 69 74 65 3a 32 39 2c 33 34 2c 34 30 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 31 3a 30 20 31 70 78 20 30 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 31 29 2c 30 20 30 20 31 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 38 35 29 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 32 3a 30 20 30 20 31 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 39 29 2c 30 20 32 70 78 20 34 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 39 32 29 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e Data Ascii: 5;--rgb-grey-hair:44,54,63;--rgb-inkwell:255,255,255;--rgb-white:29,34,40;--elevation-1:0 1px 0 rgba(var(--rgb-black),1),0 0 1px rgba(var(--rgb-black),0.85);--elevation-2:0 0 1px rgba(var(--rgb-black),0.9),0 2px 4px rgba(var(--rgb-black),0.92);--elevation
2024-03-29 00:41:30 UTC	979	IN	Data Raw: 65 70 73 3a 23 37 64 63 62 66 66 3b 2d 2d 70 6c 61 79 64 6f 68 3a 23 32 31 64 38 37 64 3b 2d 2d 72 61 6d 6f 6e 65 73 3a 23 32 63 33 36 33 66 3b 2d 2d 73 61 70 70 68 69 72 65 3a 23 32 66 30 30 36 30 3b 2d 2d 73 63 6f 6f 74 65 72 3a 23 30 30 36 33 65 62 3b 2d 2d 73 65 61 2d 66 6f 61 6d 3a 23 31 31 64 33 63 64 3b 2d 2d 73 68 61 72 6b 3a 23 38 32 38 61 39 33 3b 2d 2d 73 6b 79 3a 23 31 32 61 39 66 66 3b 2d 2d 73 6d 75 72 66 65 74 74 65 3a 23 31 38 38 66 66 66 3b 2d 2d 73 6f 6c 6f 2d 63 75 70 3a 23 65 62 30 66 32 39 3b 2d 2d 73 70 69 72 75 6c 69 6e 61 3a 23 30 30 39 63 39 34 3b 2d 2d 73 74 61 72 66 69 73 68 3a 23 37 37 35 39 66 66 3b 2d 2d 73 77 65 64 69 73 68 2d 66 69 73 68 3a 23 66 66 33 33 33 61 3b 2d 2d 74 68 61 6e 6f 73 3a 23 39 30 37 63 66 66 3b 2d 2d 74 Data Ascii: eps:#7dcbff;--playdoh:#21d87d;--ramones:#2c363f;--sapphire:#2f0060;--scooter:#0063eb;--sea-foam:#11d3cd;--shark:#828a93;--sky:#12a9ff;--smurfette:#188fff;--solo-cup:#eb0f29;--spirulina:#009c94;--starfish:#7759ff;--swedish-fish:#ff333a;--thanos:#907cff;--t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49867	34.200.65.202	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:29 UTC	857	OUT	GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC=19cw~2hk0; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A
2024-03-29 00:41:30 UTC	433	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:30 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=19cw~2hk0;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 29-Mar-2025 00:41:30 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.106
2024-03-29 00:41:30 UTC	54	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 34 59 54 38 69 74 64 45 32 75 4a 6e 75 71 58 52 4b 68 37 67 53 36 5f 45 77 53 54 49 75 47 73 52 7e 41 22 7d 0d 0a Data Ascii: 30{"axid": "y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A"}
2024-03-29 00:41:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49868	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	611	OUT	GET /aaq/fp/css/react-wafer-games.GamesMini.atomic.ltr.1351353cf8129012a686e519608812d5.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:30 UTC	814	IN	HTTP/1.1 200 OK x-amz-id-2: tGDFbzXPMLpuMShCrQRj/5oK91sWYiW8pneTkyqv1sFfLm2SOXCqZMNP+N2ZA94744D4TQUc0No= x-amz-request-id: JJTW7BAW8AFRY2RZ Date: Thu, 28 Mar 2024 22:20:01 GMT Last-Modified: Fri, 12 Jan 2024 19:43:45 GMT ETag: "1351353cf8129012a686e519608812d5" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: ouej.hM6TZKpwbSW135hA50L0uFHUa4v Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 7971 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 8490 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 23 61 74 6f 6d 69 63 20 2e 41 69 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 2d 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 5c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 5c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 35 66 38 66 61 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 65 6e 64 63 5c 28 2d 2d 68 75 6c 6b 2d 70 61 6e 74 73 5c 29 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f Data Ascii: #atomic .Ai$c${align-items:center}#atomic .Bdc$--dirty-seagull${border-color:#e0e4e9;border-color:var(--dirty-seagull)}#atomic .Bdc$--marshmallow${border-color:#f5f8fa;border-color:var(--marshmallow)}#atomic .Bdendc$--hulk-pants${border-right-colo
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 61 64 69 75 73 3a 31 30 30 25 7d 23 61 74 6f 6d 69 63 20 2e 42 67 5c 28 5c 24 70 6c 61 79 47 61 6d 65 73 42 74 6e 47 72 61 64 69 65 6e 74 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 2e 34 33 64 65 67 2c 23 39 34 34 31 46 46 20 2d 32 2e 37 33 25 2c 23 37 46 34 37 46 46 20 36 31 2e 35 39 25 2c 23 36 37 32 34 46 35 20 39 39 2e 37 25 29 7d 2e 61 63 74 69 76 65 3e 2e 61 63 74 69 76 65 5c 3e 42 67 63 5c 28 2d 2d 62 61 74 63 61 76 65 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 33 32 61 33 31 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 74 63 61 76 65 29 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 Data Ascii: adius:100%}#atomic .Bg$\$playGamesBtnGradient${background:linear-gradient(90.43deg,#9441FF -2.73%,#7F47FF 61.59%,#6724F5 99.7%)}.active>.active\>Bgc$--batcave${background-color:#232a31!important;background-color:var(--batcave)!important}#atomic .Bgc\(
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 67 72 61 70 65 2d 6a 65 6c 6c 79 5c 29 5c 21 7b 63 6f 6c 6f 72 3a 23 36 30 30 31 64 32 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 67 72 61 70 65 2d 6a 65 6c 6c 79 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 61 62 41 63 74 69 76 65 20 2e 74 61 62 41 63 74 69 76 65 5f 43 5c 28 2d 2d 69 6e 6b 77 65 6c 6c 5c 29 5c 21 7b 63 6f 6c 6f 72 3a 23 31 64 32 32 32 38 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 69 6e 6b 77 65 6c 6c 29 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 43 75 72 5c 28 70 5c 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 44 5c 28 62 5c 29 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 23 61 74 6f 6d 69 63 20 2e 44 5c 28 66 5c 29 7b 64 69 73 70 6c 61 79 Data Ascii: grape-jelly\)\!{color:#6001d2!important;color:var(--grape-jelly)!important}.tabActive .tabActive_C$--inkwell$\!{color:#1d2228!important;color:var(--inkwell)!important}#atomic .Cur$p${cursor:pointer}#atomic .D$b${display:block}#atomic .D$f${display
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 31 38 70 78 7d 2e 61 63 74 69 76 65 3e 2e 61 63 74 69 76 65 5c 3e 48 5c 28 38 70 78 5c 29 7b 68 65 69 67 68 74 3a 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 31 30 30 5c 25 5c 29 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 31 32 70 78 5c 29 7b 68 65 69 67 68 74 3a 31 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 31 36 70 78 5c 29 7b 68 65 69 67 68 74 3a 31 36 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 32 35 5c 25 5c 29 7b 68 65 69 67 68 74 3a 32 35 25 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 32 39 30 70 78 5c 29 7b 68 65 69 67 68 74 3a 32 39 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 33 30 70 78 5c 29 7b 68 65 69 67 68 74 3a 33 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 34 30 5c Data Ascii: 18px}.active>.active\>H$8px${height:8px!important}#atomic .H$100\%${height:100%}#atomic .H$12px${height:12px}#atomic .H$16px${height:16px}#atomic .H$25\%${height:25%}#atomic .H$290px${height:290px}#atomic .H$30px${height:30px}#atomic .H\(40\
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 78 5c 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 34 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 62 5c 28 32 34 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 62 5c 28 32 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 62 5c 28 33 32 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 62 5c 28 34 30 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 35 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 61 77 5c 28 31 36 63 68 5c 29 7b 6d 61 78 2d 77 69 64 74 68 3a 31 36 63 68 7d 23 61 74 Data Ascii: x\){margin-bottom:14px}#atomic .Mb$24px${margin-bottom:24px}#atomic .Mb$2px${margin-bottom:2px}#atomic .Mb$32px${margin-bottom:32px}#atomic .Mb$40px${margin-bottom:40px}#atomic .Mstart$5px${margin-left:5px}#atomic .Maw$16ch${max-width:16ch}#at
2024-03-29 00:41:30 UTC	1026	IN	Data Raw: 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 50 65 5c 28 6e 5c 29 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 23 61 74 6f 6d 69 63 20 2e 50 6f 73 5c 28 61 5c 29 2c 2e 53 74 72 65 74 63 68 65 64 42 6f 78 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 23 61 74 6f 6d 69 63 20 2e 50 6f 73 5c 28 72 5c 29 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 61 74 6f 6d 69 63 20 2e 54 61 5c 28 63 5c 29 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 54 61 5c 28 65 5c 29 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 65 6e 64 7d 23 61 74 6f 6d 69 63 20 2e 54 61 5c 28 73 5c 29 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 73 74 61 72 74 7d 23 61 74 6f 6d 69 63 20 2e 54 64 5c 28 6e 5c 29 7b 74 65 78 74 2d Data Ascii: mportant}#atomic .Pe$n${pointer-events:none}#atomic .Pos$a$,.StretchedBox{position:absolute}#atomic .Pos$r${position:relative}#atomic .Ta$c${text-align:center}#atomic .Ta$e${text-align:end}#atomic .Ta$s${text-align:start}#atomic .Td$n${text-
2024-03-29 00:41:30 UTC	445	IN	Data Raw: 2e 70 72 65 76 2d 62 74 6e 5c 3a 64 69 5f 46 69 6c 6c 5c 28 2d 2d 70 65 62 62 6c 65 5c 29 7b 66 69 6c 6c 3a 23 63 37 63 64 64 32 21 69 6d 70 6f 72 74 61 6e 74 3b 66 69 6c 6c 3a 76 61 72 28 2d 2d 70 65 62 62 6c 65 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 45 6c 6c 3a 61 66 74 65 72 2c 61 5b 63 6c 61 73 73 2a 3d 4c 69 6e 65 43 6c 61 6d 70 5d 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 2e 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 3b 68 65 69 67 68 74 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 30 7d 2e 45 6c 6c 7b 68 79 70 68 65 6e 73 3a 6e 6f 6e 65 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 7d 5b 63 6c 61 73 73 2a 3d 4c 69 6e 65 43 6c 61 6d 70 5d 7b 64 Data Ascii: .prev-btn\:di_Fill$--pebble${fill:#c7cdd2!important;fill:var(--pebble)!important}.Ell:after,a[class=LineClamp]:after{content:".";font-size:0;height:0;visibility:hidden;width:0}.Ell{hyphens:none;max-width:100%;text-overflow:ellipsis}[class=LineClamp]{d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49869	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	1114	OUT	POST /fp_ms/_rcv/remote?ctrl=NativeAd&m_id=react-wafer-nativeAd&rid=2vl5n89j0c3hk&m_mode=json&designtype=default HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Content-Length: 967 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A
2024-03-29 00:41:30 UTC	967	OUT	Data Raw: 7b 22 62 75 63 6b 65 74 22 3a 22 64 72 6f 70 5f 68 65 69 6d 64 61 6c 6c 5f 68 6f 6d 65 70 61 67 65 5f 63 6f 6e 74 72 6f 6c 5f 62 75 63 6b 65 74 2c 4d 69 6d 69 63 50 72 6f 76 69 64 65 72 4c 69 73 74 76 32 2d 63 6f 70 79 2c 73 65 61 6d 6c 65 73 73 22 2c 22 63 74 72 6c 22 3a 22 4e 61 74 69 76 65 41 64 22 2c 22 64 65 76 69 63 65 22 3a 22 64 65 73 6b 74 6f 70 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 5f 69 64 22 3a 22 72 65 61 63 74 2d 77 61 66 65 72 2d 6e 61 74 69 76 65 41 64 22 2c 22 6d 5f 6d 6f 64 65 22 3a 22 6a 73 6f 6e 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 73 69 74 65 22 3a 22 66 70 22 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 64 61 74 61 59 6c 6b 53 74 72 22 3a 22 62 70 6f Data Ascii: {"bucket":"drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless","ctrl":"NativeAd","device":"desktop","lang":"en-US","m_id":"react-wafer-nativeAd","m_mode":"json","region":"US","site":"fp","config":{"items":[{"config":{"dataYlkStr":"bpo
2024-03-29 00:41:30 UTC	1259	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 content-type: application/json; charset=utf-8 status-code: 200 x-app-version: 1.0.37059 x-applet-version: 1.0.37059 x-applet-id: react-wafer-nativeAd vary: Accept-Encoding date: Fri, 29 Mar 2024 00:41:30 GMT x-envoy-upstream-service-time: 211 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=7ppbo69j0c3hq&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 65 32 37 39 0d 0a 7b 22 61 73 73 65 74 73 22 3a 7b 22 63 73 73 22 3a 5b 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 63 70 72 6f 70 73 2f 63 6f 6c 6f 72 73 5f 31 2e 31 2e 32 37 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 2d 70 72 6f 70 65 72 74 69 65 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 32 37 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 66 70 2f 63 73 73 2f 72 65 61 63 74 2d 77 61 66 65 72 2d 6e 61 74 69 76 65 41 64 2e 4e 61 74 69 76 65 41 64 2e 61 74 6f 6d 69 63 2e 6c 74 72 2e 37 62 65 65 32 64 64 62 61 35 30 37 63 36 39 65 37 35 66 33 32 64 63 63 63 63 39 37 65 33 37 66 2e 6d 69 6e 2e 63 73 73 22 2c Data Ascii: e279{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-nativeAd.NativeAd.atomic.ltr.7bee2ddba507c69e75f32dcccc97e37f.min.css",
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 61 61 73 2d 31 2e 33 36 2e 32 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 22 6e 61 6d 65 22 3a 22 77 61 66 65 72 2d 63 61 61 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 33 36 2e 32 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6e 61 74 69 76 65 2d 64 61 2d 31 2e 30 2e 35 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 22 6e 61 6d 65 22 3a 22 77 61 66 65 72 2d 6e 61 74 69 76 65 2d 64 61 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 2e 35 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 62 65 6e 6a 69 2d 31 2e 31 2e 33 2d 6d 6f 64 65 72 Data Ascii: ","value":"/aaq/wf/wf-caas-1.36.2-modern.js","name":"wafer-caas","version":"1.36.2"},{"location":"bottom","value":"/aaq/wf/wf-native-da-1.0.5-modern.js","name":"wafer-native-da","version":"1.0.5"},{"location":"bottom","value":"/aaq/wf/wf-benji-1.1.3-moder
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 4b 77 72 7a 48 7a 73 50 6c 77 38 51 39 51 78 6e 61 70 4b 30 73 5a 54 59 70 34 65 4a 4c 63 66 56 32 61 63 55 2d 51 31 2d 76 70 2d 46 6d 5a 48 6b 76 58 46 4b 49 37 47 5f 70 4d 31 2d 6e 66 4e 53 53 57 7a 4e 67 35 78 73 70 6c 42 62 54 6e 42 65 39 55 5a 63 46 30 6a 53 4c 38 54 59 68 7a 67 6d 73 51 73 37 73 4a 6c 5a 67 55 72 76 45 72 5a 4d 6d 4f 31 4b 71 4b 4d 34 43 4a 4b 38 58 47 49 47 33 77 42 36 5f 79 63 50 47 46 5f 73 70 50 62 65 4a 6f 79 6b 78 43 54 79 43 76 6a 53 65 59 53 55 6c 4b 37 42 54 42 6e 64 31 58 6d 67 72 38 68 42 71 66 63 64 65 6f 68 47 77 6a 36 4d 62 58 52 6a 58 30 73 55 79 4e 71 71 52 45 69 4f 4c 5f 4c 5a 42 77 5f 51 58 55 6e 70 4d 62 34 45 4f 32 38 30 67 63 39 76 54 6f 6a 61 75 6a 45 49 55 66 49 57 70 74 47 74 34 4e 72 46 4e 49 36 6b 77 4b 5a Data Ascii: KwrzHzsPlw8Q9QxnapK0sZTYp4eJLcfV2acU-Q1-vp-FmZHkvXFKI7G_pM1-nfNSSWzNg5xsplBbTnBe9UZcF0jSL8TYhzgmsQs7sJlZgUrvErZMmO1KqKM4CJK8XGIG3wB6_ycPGF_spPbeJoykxCTyCvjSeYSUlK7BTBnd1Xmgr8hBqfcdeohGwj6MbXRjX0sUyNqqREiOL_LZBw_QXUnpMb4EO280gc9vTojaujEIUfIWptGt4NrFNI6kwKZ
2024-03-29 00:41:30 UTC	1291	IN	Data Raw: 72 30 55 48 48 78 77 70 65 6e 5f 68 72 73 5f 77 4a 70 57 67 38 74 34 62 44 79 68 61 59 5f 37 71 51 52 39 57 57 31 6b 2d 6c 5a 59 47 6d 5f 73 42 6f 64 5a 32 62 61 70 41 6d 2d 35 74 39 56 6b 74 49 2d 31 44 79 30 68 41 36 62 59 32 66 64 42 37 69 76 38 48 48 39 62 4e 78 65 33 30 69 63 78 41 33 47 74 4a 61 46 5a 68 77 46 67 32 42 78 67 36 6b 50 63 33 39 67 30 39 67 56 2d 6b 64 54 68 5f 6a 6f 32 4b 69 38 48 64 68 4d 49 66 36 34 69 61 6f 45 7a 5a 54 44 55 6e 76 63 62 38 49 57 55 31 49 64 61 45 38 79 72 37 33 42 78 76 6b 4e 79 64 61 2d 41 70 77 47 61 70 5f 6d 37 6f 51 53 68 39 77 4a 44 49 6e 65 46 68 39 70 32 5a 72 69 58 63 30 74 61 37 43 4c 77 7a 75 69 6e 2d 73 69 51 4a 30 49 46 57 76 31 57 4b 68 62 74 51 30 4b 51 33 68 79 5f 73 63 31 31 45 66 61 54 31 37 58 7a Data Ascii: r0UHHxwpen_hrs_wJpWg8t4bDyhaY_7qQR9WW1k-lZYGm_sBodZ2bapAm-5t9VktI-1Dy0hA6bY2fdB7iv8HH9bNxe30icxA3GtJaFZhwFg2Bxg6kPc39g09gV-kdTh_jo2Ki8HdhMIf64iaoEzZTDUnvcb8IWU1IdaE8yr73BxvkNyda-ApwGap_m7oQSh9wJDIneFh9p2ZriXc0ta7CLwzuin-siQJ0IFWv1WKhbtQ0KQ3hy_sc11EfaT17Xz
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 61 6b 72 7a 35 7a 62 76 6b 4c 45 6c 6c 46 4d 50 6e 43 75 2d 67 41 47 64 62 75 37 6b 57 36 65 73 5a 32 37 33 36 64 54 78 78 51 5a 68 58 44 6e 66 77 55 50 72 6f 58 2d 70 31 63 38 7a 38 47 71 5f 72 62 41 59 66 4c 52 2d 79 62 6a 4a 36 64 45 62 64 70 69 65 5f 51 6c 74 6b 34 42 69 42 6d 57 59 47 62 5f 5a 6c 64 7a 37 47 38 64 55 4b 72 49 36 59 5f 79 69 45 46 43 58 31 46 74 55 57 74 75 30 77 5f 49 31 58 6c 33 34 4b 34 65 46 33 5a 5a 70 69 76 52 64 78 6e 59 41 69 31 69 35 55 6a 70 4b 44 53 77 4a 61 5f 44 6e 51 4c 58 55 66 51 38 34 54 44 77 68 62 56 51 39 42 31 34 48 58 35 67 39 55 32 34 52 70 38 77 4b 67 53 5a 6f 61 49 5f 57 2d 4f 69 7a 49 73 47 51 72 5f 44 32 55 38 4e 55 4f 5f 6c 4e 58 39 57 30 46 69 65 56 35 68 6f 31 46 67 6b 52 73 59 30 41 36 32 58 4d 70 4c 4e Data Ascii: akrz5zbvkLEllFMPnCu-gAGdbu7kW6esZ2736dTxxQZhXDnfwUProX-p1c8z8Gq_rbAYfLR-ybjJ6dEbdpie_Qltk4BiBmWYGb_Zldz7G8dUKrI6Y_yiEFCX1FtUWtu0w_I1Xl34K4eF3ZZpivRdxnYAi1i5UjpKDSwJa_DnQLXUfQ84TDwhbVQ9B14HX5g9U24Rp8wKgSZoaI_W-OizIsGQr_D2U8NUO_lNX9W0FieV5ho1FgkRsY0A62XMpLN
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 37 6b 32 33 79 43 31 4b 67 4a 4b 6a 41 67 4b 50 4f 6d 6f 30 5f 69 32 6c 31 65 4a 53 74 5a 79 6b 56 76 38 4b 6d 46 52 38 38 4d 63 4b 69 36 61 44 47 47 63 4e 78 51 77 57 32 49 6e 37 30 4b 47 70 4c 77 45 59 32 66 59 42 61 6a 49 41 47 6c 74 5f 35 79 66 4e 42 70 56 47 47 6e 4a 78 68 37 49 4c 49 38 5a 6f 66 76 6f 79 6f 46 36 68 76 32 59 33 74 30 26 61 6d 70 3b 61 70 3d 32 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 50 6f 73 28 72 29 20 73 68 6f 77 2d 74 68 65 6e 2d 68 69 64 65 2d 61 64 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 44 28 6e 29 20 44 28 66 29 20 68 69 64 65 2d 61 64 5f 44 28 6e 29 5c 22 3e 3c 61 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 5c 22 74 72 75 65 5c 22 20 74 61 62 69 6e 64 65 78 3d 5c 22 2d 31 5c 22 20 63 6c 61 73 73 3d 5c 22 4d 65 6e 64 28 Data Ascii: 7k23yC1KgJKjAgKPOmo0_i2l1eJStZykVv8KmFR88McKi6aDGGcNxQwW2In70KGpLwEY2fYBajIAGlt_5yfNBpVGGnJxh7ILI8ZofvoyoF6hv2Y3t0&ap=2\"><div class=\"Pos(r) show-then-hide-ad-confirmation_D(n) D(f) hide-ad_D(n)\"><a aria-hidden=\"true\" tabindex=\"-1\" class=\"Mend(
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 51 4a 46 44 66 74 39 48 53 4a 50 63 6c 6d 36 56 55 52 42 62 64 53 6d 68 59 46 47 57 56 4e 6f 48 6e 79 66 71 76 66 35 34 59 68 7a 71 59 70 5a 72 47 4d 6e 41 4c 51 73 5a 61 57 5f 59 37 6f 45 47 69 7a 38 4d 32 41 4a 63 46 5f 46 46 4e 65 5f 79 76 71 41 75 75 5a 32 50 6d 45 66 65 43 65 73 4a 6c 43 31 49 2d 61 41 4f 6d 74 5f 79 4b 4d 30 74 31 48 65 77 57 76 50 56 77 54 69 77 75 36 2d 53 4d 37 69 64 48 36 75 49 6a 73 46 49 33 73 59 58 61 35 79 76 43 6e 73 62 50 42 61 54 6e 6a 37 52 49 4e 50 64 4e 55 43 64 4d 47 33 4b 52 38 6e 79 73 39 4d 2d 78 74 66 5f 65 76 4e 65 6e 76 41 4e 49 73 48 6f 39 52 34 43 78 69 45 71 5a 55 58 48 65 73 6f 4f 5f 61 61 76 78 76 43 71 73 5f 39 4f 47 6e 78 70 6a 5a 73 64 6f 34 4b 64 4b 36 31 4a 6b 56 4a 67 65 4f 35 53 6f 53 67 2d 34 64 55 Data Ascii: QJFDft9HSJPclm6VURBbdSmhYFGWVNoHnyfqvf54YhzqYpZrGMnALQsZaW_Y7oEGiz8M2AJcF_FFNe_yvqAuuZ2PmEfeCesJlC1I-aAOmt_yKM0t1HewWvPVwTiwu6-SM7idH6uIjsFI3sYXa5yvCnsbPBaTnj7RINPdNUCdMG3KR8nys9M-xtf_evNenvANIsHo9R4CxiEqZUXHesoO_aavxvCqs_9OGnxpjZsdo4KdK61JkVJgeO5SoSg-4dU
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 6d 69 6e 4a 58 59 34 53 44 6e 4d 52 42 63 52 62 37 42 44 61 45 41 57 75 6f 6e 57 66 6b 6c 48 62 44 6c 53 79 71 68 55 64 4f 74 68 59 52 49 32 32 6c 39 44 48 4d 54 57 38 33 6d 38 6a 58 37 4b 42 49 59 6f 61 77 48 77 47 57 75 2d 67 48 6f 42 6b 61 73 64 67 63 58 61 78 45 6a 30 65 66 4f 4c 44 43 69 2d 73 73 4e 59 53 36 6d 58 61 70 65 31 4b 43 55 6a 31 35 69 47 76 31 79 79 38 46 70 5f 52 4b 43 55 66 44 6e 79 49 51 55 42 76 65 30 30 44 46 5a 6c 53 4d 65 53 45 5f 4d 30 6b 6f 78 4a 51 34 42 49 76 48 6c 30 7a 69 4c 55 32 68 7a 4e 35 31 47 6b 4d 30 43 39 4e 5a 52 6c 61 2d 4f 39 4f 44 5a 32 37 5f 69 66 42 71 4e 5a 46 35 79 36 61 47 45 69 73 78 6c 4c 39 67 35 35 68 6c 62 61 4f 6f 6d 4f 4a 38 67 38 6a 78 79 57 5a 56 6a 71 36 59 47 55 74 6c 4c 56 6b 56 47 55 4e 4c 63 41 Data Ascii: minJXY4SDnMRBcRb7BDaEAWuonWfklHbDlSyqhUdOthYRI22l9DHMTW83m8jX7KBIYoawHwGWu-gHoBkasdgcXaxEj0efOLDCi-ssNYS6mXape1KCUj15iGv1yy8Fp_RKCUfDnyIQUBve00DFZlSMeSE_M0koxJQ4BIvHl0ziLU2hzN51GkM0C9NZRla-O9ODZ27_ifBqNZF5y6aGEisxlL9g55hlbaOomOJ8g8jxyWZVjq6YGUtlLVkVGUNLcA
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 55 58 72 6d 73 53 46 4e 2d 72 6a 55 53 37 4b 67 68 52 64 62 44 4b 78 68 57 59 7a 79 76 57 44 74 63 6d 2d 68 56 63 66 44 44 74 66 66 78 62 51 4d 48 56 4d 62 48 45 58 5f 43 41 35 47 68 33 33 41 41 62 61 37 6a 2d 34 78 42 2d 30 5f 6e 6b 67 32 75 67 4e 50 5a 6f 48 67 4a 36 46 69 6f 4c 42 4d 2d 4b 68 4c 54 6e 33 5f 4e 51 38 6e 31 6c 62 30 6c 72 56 6a 41 34 6c 4e 35 5f 4b 48 5f 62 76 64 72 4a 4b 57 44 76 55 52 62 6e 52 72 57 33 33 67 41 65 63 31 4a 47 53 71 6f 38 51 4c 35 56 36 67 56 65 6b 4b 54 79 76 76 4b 6a 5a 32 36 4f 73 69 72 4a 61 78 7a 71 30 79 4b 39 51 36 6d 66 5f 37 38 38 6f 44 62 61 6c 35 42 42 6d 2d 52 74 68 4a 49 58 73 66 6d 6a 74 37 44 65 31 57 30 53 67 67 63 54 62 72 4c 74 6a 70 4c 48 72 56 4f 5a 6a 52 35 43 6c 32 2d 55 4b 47 50 4d 57 32 77 73 70 Data Ascii: UXrmsSFN-rjUS7KghRdbDKxhWYzyvWDtcm-hVcfDDtffxbQMHVMbHEX_CA5Gh33AAba7j-4xB-0_nkg2ugNPZoHgJ6FioLBM-KhLTn3_NQ8n1lb0lrVjA4lN5_KH_bvdrJKWDvURbnRrW33gAec1JGSqo8QL5V6gVekKTyvvKjZ26OsirJaxzq0yK9Q6mf_788oDbal5BBm-RthJIXsfmjt7De1W0SggcTbrLtjpLHrVOZjR5Cl2-UKGPMW2wsp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49855	23.43.243.35	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	720	OUT	GET /ucreative.php?cv=1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10
2024-03-29 00:41:30 UTC	342	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 7668 Content-Type: application/javascript x-mnet-hl2: E Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Cache-Control: max-age=432000 Expires: Wed, 03 Apr 2024 00:41:30 GMT Date: Fri, 29 Mar 2024 00:41:30 GMT Connection: close
2024-03-29 00:41:30 UTC	3251	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 69 73 53 65 74 28 76 61 6c 29 20 7b 0a 20 20 20 20 73 77 69 74 63 68 20 28 74 79 70 65 6f 66 20 76 61 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 22 73 74 72 69 6e 67 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 61 6c 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 26 26 20 76 61 6c 20 21 3d 3d 20 22 22 20 26 26 20 76 61 6c 20 21 3d 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 61 6c 20 21 3d 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 Data Ascii: function isSet(val) { switch (typeof val) { case "string": return val !== undefined && val !== "" && val !== null; case "object": return val !== null; case "number": case "boolean": r
2024-03-29 00:41:30 UTC	4417	IN	Data Raw: 69 6e 67 50 61 72 61 6d 73 2e 63 72 69 64 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 75 63 74 69 6f 6e 49 64 3a 20 68 62 54 61 72 67 65 74 69 6e 67 50 61 72 61 6d 73 2e 61 75 63 74 69 6f 6e 49 64 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 69 64 64 65 72 3a 20 68 62 54 61 72 67 65 74 69 6e 67 50 61 72 61 6d 73 2e 62 69 64 64 65 72 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 73 45 78 74 65 72 6e 61 6c 3a 20 68 62 54 61 72 67 65 74 69 6e 67 50 61 72 61 6d 73 2e 69 73 45 78 74 65 72 6e 61 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 73 50 6d 70 3a 20 68 62 54 61 72 67 65 74 69 6e 67 50 61 72 61 6d 73 2e 69 73 50 6d 70 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 75 73 74 6f 6d 4f 62 6a 3a 20 68 62 43 75 73 74 6f 6d 50 61 72 61 6d 73 0a 20 20 20 20 20 Data Ascii: ingParams.crid, auctionId: hbTargetingParams.auctionId, bidder: hbTargetingParams.bidder, isExternal: hbTargetingParams.isExternal, isPmp: hbTargetingParams.isPmp, customObj: hbCustomParams

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49870	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	597	OUT	GET /aaq/fp/css/react-wafer-games.games-mini.cdd5050ba6288df47182412e30e482a4.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:30 UTC	838	IN	HTTP/1.1 200 OK x-amz-id-2: 5/DAeu0MfQRK9onTt24p3oaC/FqH+4Ek4uUbAmlA33rHbtmKAI4sWL/taRPWBig9l7CJcgqot2k= x-amz-request-id: G9B9WZZK9ZNM0D2J Date: Wed, 27 Mar 2024 15:29:31 GMT Last-Modified: Mon, 18 Dec 2023 23:21:02 GMT ETag: "cdd5050ba6288df47182412e30e482a4" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: W6wjlexzsuoIk3RVZ4XUZ6EnDTuHcXns Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 175 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 119520 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:30 UTC	175	IN	Data Raw: 2e 67 61 6d 65 73 2d 74 61 62 73 2d 73 63 72 6f 6c 6c 76 69 65 77 20 2e 70 72 65 76 2d 62 74 6e 5b 64 69 73 61 62 6c 65 64 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 61 74 6f 6d 69 63 20 2e 67 61 6d 65 73 2d 74 61 62 73 3e 62 75 74 74 6f 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 7d 2e 67 61 6d 65 73 2d 74 61 62 73 2d 73 63 72 6f 6c 6c 76 69 65 77 20 2e 73 6c 69 64 65 73 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d Data Ascii: .games-tabs-scrollview .prev-btn[disabled]{display:none}#atomic .games-tabs>button:last-child{margin-right:10px}.games-tabs-scrollview .slides::-webkit-scrollbar{display:none}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49854	23.43.243.35	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	718	OUT	GET /ss/nes/player.js HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10
2024-03-29 00:41:30 UTC	373	IN	HTTP/1.1 200 OK Content-Length: 277102 Content-Type: text/javascript; charset=utf-8 ETag: "18194833761013202741" Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Pragma: max-age=604800 Cache-Control: max-age=1800 Expires: Fri, 29 Mar 2024 01:11:30 GMT Date: Fri, 29 Mar 2024 00:41:30 GMT Connection: close
2024-03-29 00:41:30 UTC	3329	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-03-29 00:41:30 UTC	16384	IN	Data Raw: 6e 2e 63 73 73 2c 69 3d 6e 2e 6d 65 64 69 61 2c 6f 3d 6e 2e 73 6f 75 72 63 65 4d 61 70 3b 69 66 28 69 3f 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 65 64 69 61 22 2c 69 29 3a 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 6d 65 64 69 61 22 29 2c 6f 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 74 6f 61 26 26 28 72 2b 3d 22 5c 6e 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 62 61 73 65 36 34 2c 22 2e 63 6f 6e 63 61 74 28 62 74 6f 61 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6f 29 29 29 29 2c 22 20 2a 2f 22 29 29 2c 65 2e 73 74 79 6c 65 53 68 65 Data Ascii: n.css,i=n.media,o=n.sourceMap;if(i?e.setAttribute("media",i):e.removeAttribute("media"),o&&"undefined"!=typeof btoa&&(r+="\n/# sourceMappingURL=data:application/json;base64,".concat(btoa(unescape(encodeURIComponent(JSON.stringify(o))))," /")),e.styleShe
2024-03-29 00:41:30 UTC	16384	IN	Data Raw: 65 2e 70 72 6f 74 6f 74 79 70 65 2c 56 3d 4e 5b 45 5d 7c 7c 4e 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 7c 7c 66 26 26 4e 5b 66 5d 2c 55 3d 21 62 26 26 56 7c 7c 4c 28 66 29 2c 44 3d 22 41 72 72 61 79 22 3d 3d 74 26 26 4e 2e 65 6e 74 72 69 65 73 7c 7c 56 3b 69 66 28 44 26 26 28 53 3d 6c 28 44 2e 63 61 6c 6c 28 6e 65 77 20 65 29 29 29 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 26 26 53 2e 6e 65 78 74 26 26 28 6f 7c 7c 6c 28 53 29 3d 3d 3d 41 7c 7c 28 75 3f 75 28 53 2c 41 29 3a 73 28 53 5b 45 5d 29 7c 7c 68 28 53 2c 45 2c 54 29 29 2c 64 28 53 2c 52 2c 21 30 2c 21 30 29 2c 6f 26 26 28 76 5b 52 5d 3d 54 29 29 2c 79 26 26 66 3d 3d 6b 26 26 56 26 26 56 2e 6e 61 6d 65 21 3d 3d 6b 26 26 28 21 6f 26 26 67 3f 70 28 4e 2c 22 6e 61 6d 65 22 2c 6b 29 3a Data Ascii: e.prototype,V=N[E]\|\|N["@@iterator"]\|\|f&&N[f],U=!b&&V\|\|L(f),D="Array"==t&&N.entries\|\|V;if(D&&(S=l(D.call(new e)))!==Object.prototype&&S.next&&(o\|\|l(S)===A\|\|(u?u(S,A):s(S[E])\|\|h(S,E,T)),d(S,R,!0,!0),o&&(v[R]=T)),y&&f==k&&V&&V.name!==k&&(!o&&g?p(N,"name",k):
2024-03-29 00:41:30 UTC	4623	IN	Data Raw: 63 6c 6f 73 65 28 29 2c 65 2e 46 29 3a 68 28 72 29 3b 66 6f 72 28 76 61 72 20 6e 3d 61 2e 6c 65 6e 67 74 68 3b 6e 2d 2d 3b 29 64 65 6c 65 74 65 20 66 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5b 6e 5d 5d 3b 72 65 74 75 72 6e 20 66 28 29 7d 3b 73 5b 75 5d 3d 21 30 2c 65 2e 65 78 70 6f 72 74 73 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 65 3f 28 64 2e 70 72 6f 74 6f 74 79 70 65 3d 69 28 65 29 2c 6e 3d 6e 65 77 20 64 2c 64 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 2c 6e 5b 75 5d 3d 65 29 3a 6e 3d 66 28 29 2c 76 6f 69 64 20 30 3d 3d 3d 74 3f 6e 3a 6f 2e 66 28 6e 2c 74 29 7d 7d 2c 36 30 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 Data Ascii: close(),e.F):h(r);for(var n=a.length;n--;)delete f.prototype[a[n]];return f()};s[u]=!0,e.exports=Object.create\|\|function(e,t){var n;return null!==e?(d.prototype=i(e),n=new d,d.prototype=null,n[u]=e):n=f(),void 0===t?n:o.f(n,t)}},6048:function(e,t,n){var r
2024-03-29 00:41:30 UTC	16384	IN	Data Raw: 6e 28 29 7b 7d 29 29 7d 29 29 7d 2c 32 36 32 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 33 30 37 30 29 2e 66 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 20 69 6e 20 65 7c 7c 72 28 65 2c 6e 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 5b 6e 5d 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 5b 6e 5d 3d 65 7d 7d 29 7d 7d 2c 38 35 37 32 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 74 61 69 6c 3d 6e 75 6c 6c 7d 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: n(){}))}))},2626:function(e,t,n){var r=n(3070).f;e.exports=function(e,t,n){n in e\|\|r(e,n,{configurable:!0,get:function(){return t[n]},set:function(e){t[n]=e}})}},8572:function(e){var t=function(){this.head=null,this.tail=null};t.prototype={add:function(e)
2024-03-29 00:41:30 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 31 3f 30 3a 62 28 54 28 65 29 29 2c 6e 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 75 28 45 2c 6e 29 26 26 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 79 28 6e 29 7d 29 29 3f 6c 28 4f 62 6a 65 63 74 28 74 29 2c 6e 2c 78 29 3a 74 7d 2c 49 3d 72 3f 66 28 62 29 3a 22 4d 41 58 5f 56 41 4c 55 45 2c 4d 49 4e 5f 56 41 4c 55 45 2c 4e 61 4e 2c 4e 45 47 41 54 49 56 45 5f 49 4e 46 49 4e 49 54 59 2c 50 4f 53 49 54 49 56 45 5f 49 4e 46 49 4e 49 54 59 2c 45 50 53 49 4c 4f 4e 2c 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 2c 4d 49 4e 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 2c 69 73 46 69 6e 69 74 65 2c 69 73 49 6e 74 65 67 65 72 2c 69 73 4e 61 4e 2c 69 73 53 61 66 65 49 6e 74 Data Ascii: nction(e){var t=arguments.length<1?0:b(T(e)),n=this;return u(E,n)&&h((function(){y(n)}))?l(Object(t),n,x):t},I=r?f(b):"MAX_VALUE,MIN_VALUE,NaN,NEGATIVE_INFINITY,POSITIVE_INFINITY,EPSILON,MAX_SAFE_INTEGER,MIN_SAFE_INTEGER,isFinite,isInteger,isNaN,isSafeInt
2024-03-29 00:41:30 UTC	7952	IN	Data Raw: 69 70 74 69 6f 6e 29 29 7b 76 61 72 20 76 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 31 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 76 6f 69 64 20 30 3a 75 28 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 2c 74 3d 6c 28 66 2c 74 68 69 73 29 3f 6e 65 77 20 68 28 65 29 3a 76 6f 69 64 20 30 3d 3d 3d 65 3f 68 28 29 3a 68 28 65 29 3b 72 65 74 75 72 6e 22 22 3d 3d 3d 65 26 26 28 76 5b 74 5d 3d 21 30 29 2c 74 7d 3b 70 28 6d 2c 68 29 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 3d 66 2c 66 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6d 3b 76 61 72 20 79 3d 22 53 79 6d 62 6f 6c 28 74 65 73 74 29 22 3d 3d 53 74 72 69 6e 67 28 68 28 22 74 65 73 74 22 29 29 2c 67 3d 61 28 66 2e 74 6f Data Ascii: iption)){var v={},m=function(){var e=arguments.length<1\|\|void 0===arguments[0]?void 0:u(arguments[0]),t=l(f,this)?new h(e):void 0===e?h():h(e);return""===e&&(v[t]=!0),t};p(m,h),m.prototype=f,f.constructor=m;var y="Symbol(test)"==String(h("test")),g=a(f.to
2024-03-29 00:41:30 UTC	16384	IN	Data Raw: 55 41 41 41 3b 41 41 39 42 46 3b 41 41 69 43 41 3b 45 41 43 45 2c 6b 42 41 41 41 3b 45 41 43 41 2c 6b 42 41 41 41 3b 45 41 43 41 2c 53 41 41 41 3b 45 41 43 41 2c 53 41 41 41 3b 45 41 43 41 2c 36 42 41 41 41 3b 41 41 2f 42 46 3b 41 41 6b 43 41 3b 3b 3b 3b 45 41 49 45 2c 71 42 41 41 41 3b 41 41 68 43 46 3b 41 41 6d 43 41 3b 45 41 43 45 2c 6b 42 41 41 41 3b 45 41 43 41 2c 65 41 41 41 3b 45 41 43 41 2c 6b 42 41 41 41 3b 45 41 43 41 2c 57 41 41 41 3b 45 41 43 41 2c 59 41 41 41 3b 45 41 43 41 2c 53 41 41 41 3b 41 41 6a 43 46 3b 41 41 6f 43 41 3b 45 41 43 45 2c 51 41 41 41 3b 45 41 43 41 2c 4d 41 41 41 3b 45 41 43 41 2c 6b 42 41 41 41 3b 45 41 43 41 2c 65 41 41 41 3b 45 41 43 41 2c 57 41 41 41 3b 45 41 43 41 2c 59 41 41 41 3b 45 41 43 41 2c 79 42 41 41 41 3b 45 Data Ascii: UAAA;AA9BF;AAiCA;EACE,kBAAA;EACA,kBAAA;EACA,SAAA;EACA,SAAA;EACA,6BAAA;AA/BF;AAkCA;;;;EAIE,qBAAA;AAhCF;AAmCA;EACE,kBAAA;EACA,eAAA;EACA,kBAAA;EACA,WAAA;EACA,YAAA;EACA,SAAA;AAjCF;AAoCA;EACE,QAAA;EACA,MAAA;EACA,kBAAA;EACA,eAAA;EACA,WAAA;EACA,YAAA;EACA,yBAAA;E
2024-03-29 00:41:30 UTC	16384	IN	Data Raw: 65 72 73 3d 6e 65 77 20 64 28 74 2e 68 65 61 64 65 72 73 29 2c 74 68 69 73 2e 75 72 6c 3d 74 2e 75 72 6c 7c 7c 22 22 2c 74 68 69 73 2e 5f 69 6e 69 74 42 6f 64 79 28 65 29 7d 67 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 67 28 74 68 69 73 2c 7b 62 6f 64 79 3a 74 68 69 73 2e 5f 62 6f 64 79 49 6e 69 74 7d 29 7d 2c 6d 2e 63 61 6c 6c 28 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 6d 2e 63 61 6c 6c 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 74 68 69 73 2e 5f 62 6f 64 79 49 6e 69 74 2c 7b 73 74 61 74 75 73 3a 74 68 69 73 2e 73 74 61 74 75 73 2c 73 74 61 74 75 73 54 65 78 Data Ascii: ers=new d(t.headers),this.url=t.url\|\|"",this._initBody(e)}g.prototype.clone=function(){return new g(this,{body:this._bodyInit})},m.call(g.prototype),m.call(b.prototype),b.prototype.clone=function(){return new b(this._bodyInit,{status:this.status,statusTex
2024-03-29 00:41:30 UTC	7952	IN	Data Raw: 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 26 26 28 69 3d 69 2e 72 65 70 6c 61 63 65 28 41 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 29 29 29 3b 76 61 72 20 62 3d 2f 5c 5b 50 41 47 45 55 52 4c 5c 5d 2f 67 69 3b 62 2e 74 65 73 74 28 69 29 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 26 26 28 69 3d 69 2e 72 65 70 6c 61 63 65 28 62 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 29 29 3b 76 61 72 20 45 3d 2f 5c 5b 50 4c 41 59 45 52 43 41 50 41 42 49 4c 49 54 49 45 53 5c 5d 2f 67 69 3b 45 2e 74 65 73 74 28 69 29 26 26 28 69 3d 69 2e 72 65 70 6c 61 63 65 28 45 2c 22 73 6b Data Ascii: ocation.hostname&&(i=i.replace(A,encodeURIComponent(window.location.hostname)));var b=/\[PAGEURL\]/gi;b.test(i)&&window.location.href&&(i=i.replace(b,encodeURIComponent(window.location.href)));var E=/\[PLAYERCAPABILITIES\]/gi;E.test(i)&&(i=i.replace(E,"sk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49871	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	908	OUT	GET /fp_ms/_rcv/remote?ctrl=GamesMini&lang=en-US&m_id=react-wafer-games&m_mode=json&region=US&rid=2vl5n89j0c3hk&site=fp&apptype=default&instance_id=games&_evtSrc=deferLoad HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A
2024-03-29 00:41:30 UTC	1300	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-frame-options: SAMEORIGIN content-type: application/json; charset=utf-8 status-code: 200 x-app-version: 1.0.37059 x-applet-version: 1.0.37059 x-instance-id: games x-applet-id: react-wafer-games vary: Accept-Encoding date: Fri, 29 Mar 2024 00:41:30 GMT x-envoy-upstream-service-time: 16 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0 Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.pnr.ouryahoo.com https://pnr.ouryahoo.com https://.search.aol.com https://.search.huffpost.com https://.onesearch.com https://.verizonmedia.com https://.publishing.oath.com https://.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=4vk98jpj0c3hq&partner=;
2024-03-29 00:41:30 UTC	225	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Transfer-Encoding: chunkedConnection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 33 64 37 37 0d 0a 7b 22 61 73 73 65 74 73 22 3a 7b 22 63 73 73 22 3a 5b 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 63 70 72 6f 70 73 2f 63 6f 6c 6f 72 73 5f 31 2e 31 2e 32 37 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 2d 70 72 6f 70 65 72 74 69 65 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 32 37 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 66 70 2f 63 73 73 2f 72 65 61 63 74 2d 77 61 66 65 72 2d 67 61 6d 65 73 2e 47 61 6d 65 73 4d 69 6e 69 2e 61 74 6f 6d 69 63 2e 6c 74 72 2e 31 33 35 31 33 35 33 63 66 38 31 32 39 30 31 32 61 36 38 36 65 35 31 39 36 30 38 38 31 32 64 35 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e Data Ascii: 3d77{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-games.GamesMini.atomic.ltr.1351353cf8129012a686e519608812d5.min.css","n
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 42 64 65 6e 64 73 28 73 29 20 42 64 72 73 28 32 70 78 29 20 42 64 65 6e 64 63 28 2d 2d 68 75 6c 6b 2d 70 61 6e 74 73 29 5c 22 3e 3c 2f 69 3e 3c 68 33 20 63 6c 61 73 73 3d 5c 22 54 64 28 6e 29 20 43 28 2d 2d 62 61 74 63 61 76 65 29 20 46 77 28 36 30 30 29 20 46 7a 28 31 34 70 78 29 20 4d 62 28 30 29 5c 22 3e 50 6c 61 79 20 67 61 6d 65 73 20 6f 6e 20 59 61 68 6f 6f 3c 2f 68 33 3e 3c 2f 64 69 76 3e 3c 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 67 61 6d 65 73 2d 74 61 62 73 2d 73 63 72 6f 6c 6c 76 69 65 77 20 77 61 66 65 72 2d 73 63 72 6f 6c 6c 76 69 65 77 20 50 6f 73 28 72 29 20 4d 78 28 2d 32 30 70 78 29 20 54 61 28 63 29 20 4f 76 28 68 29 5c 22 20 64 61 74 61 2d 77 66 2d 62 65 68 61 76 69 6f 72 3d 5c 22 6e 61 74 Data Ascii: Bdends(s) Bdrs(2px) Bdendc(--hulk-pants)\"></i><h3 class=\"Td(n) C(--batcave) Fw(600) Fz(14px) Mb(0)\">Play games on Yahoo</h3></div><div></div></div><div class=\"games-tabs-scrollview wafer-scrollview Pos(r) Mx(-20px) Ta(c) Ov(h)\" data-wf-behavior=\"nat
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 30 70 78 29 3a 6c 63 20 77 61 66 65 72 2d 66 65 74 63 68 5c 22 20 64 61 74 61 2d 79 6c 6b 3d 5c 22 69 74 63 3a 31 3b 73 65 63 3a 61 70 70 2d 67 61 6d 65 73 3b 63 70 6f 73 3a 31 3b 65 6c 6d 3a 74 61 62 3b 73 6c 6b 3a 57 6f 72 64 3b 5c 22 20 69 64 3d 5c 22 67 61 6d 65 73 2d 74 61 62 2d 31 5c 22 20 72 6f 6c 65 3d 5c 22 74 61 62 5c 22 20 64 61 74 61 2d 77 66 2d 74 61 72 67 65 74 3d 5c 22 23 67 61 6d 65 73 2d 70 61 6e 65 6c 2d 31 5c 22 20 64 61 74 61 2d 77 66 2d 74 72 69 67 67 65 72 3d 5c 22 74 61 62 41 63 74 69 76 61 74 65 5c 22 20 64 61 74 61 2d 77 66 2d 75 72 6c 3d 5c 22 2f 66 70 5f 6d 73 2f 5f 72 63 76 2f 72 65 6d 6f 74 65 5c 22 20 64 61 74 61 2d 77 66 2d 62 6f 64 79 3d 5c 22 7b 26 71 75 6f 74 3b 63 74 72 6c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 47 61 6d Data Ascii: 0px):lc wafer-fetch\" data-ylk=\"itc:1;sec:app-games;cpos:1;elm:tab;slk:Word;\" id=\"games-tab-1\" role=\"tab\" data-wf-target=\"#games-panel-1\" data-wf-trigger=\"tabActivate\" data-wf-url=\"/fp_ms/_rcv/remote\" data-wf-body=\"{"ctrl":"Gam
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 74 68 50 72 65 66 69 78 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 2f 66 70 5f 6d 73 2f 5f 72 63 76 2f 72 65 6d 6f 74 65 26 71 75 6f 74 3b 7d 7d 5c 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 45 6c 6c 20 4d 61 77 28 31 36 63 68 29 20 50 65 28 6e 29 20 44 28 62 29 20 50 79 28 31 30 70 78 29 20 46 77 28 35 30 30 29 20 46 7a 28 2d 2d 66 6f 6e 74 2d 31 31 70 78 29 20 74 61 62 41 63 74 69 76 65 5f 42 78 73 68 28 24 74 61 62 73 42 74 6e 53 68 61 64 6f 77 29 20 42 67 63 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 20 42 64 72 73 28 33 32 70 78 29 20 43 28 2d 2d 62 61 74 74 6c 65 73 68 69 70 29 20 50 78 28 31 32 70 78 29 20 74 61 62 41 63 74 69 76 65 5f 42 67 63 28 2d 2d 77 68 69 74 65 29 21 20 74 61 62 41 63 74 69 76 65 5f 43 28 2d 2d 69 6e 6b 77 65 6c 6c 29 21 Data Ascii: thPrefix":"/fp_ms/_rcv/remote"}}\"><span class=\"Ell Maw(16ch) Pe(n) D(b) Py(10px) Fw(500) Fz(--font-11px) tabActive_Bxsh($tabsBtnShadow) Bgc(--marshmallow) Bdrs(32px) C(--battleship) Px(12px) tabActive_Bgc(--white)! tabActive_C(--inkwell)!
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 6d 3a 74 61 62 3b 73 6c 6b 3a 43 61 73 69 6e 6f 3b 5c 22 20 69 64 3d 5c 22 67 61 6d 65 73 2d 74 61 62 2d 34 5c 22 20 72 6f 6c 65 3d 5c 22 74 61 62 5c 22 20 64 61 74 61 2d 77 66 2d 74 61 72 67 65 74 3d 5c 22 23 67 61 6d 65 73 2d 70 61 6e 65 6c 2d 34 5c 22 20 64 61 74 61 2d 77 66 2d 74 72 69 67 67 65 72 3d 5c 22 74 61 62 41 63 74 69 76 61 74 65 5c 22 20 64 61 74 61 2d 77 66 2d 75 72 6c 3d 5c 22 2f 66 70 5f 6d 73 2f 5f 72 63 76 2f 72 65 6d 6f 74 65 5c 22 20 64 61 74 61 2d 77 66 2d 62 6f 64 79 3d 5c 22 7b 26 71 75 6f 74 3b 63 74 72 6c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 47 61 6d 65 73 4d 69 6e 69 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6d 5f 69 64 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 72 65 61 63 74 2d 77 61 66 65 72 2d 67 61 6d 65 73 26 71 75 6f 74 3b 2c Data Ascii: m:tab;slk:Casino;\" id=\"games-tab-4\" role=\"tab\" data-wf-target=\"#games-panel-4\" data-wf-trigger=\"tabActivate\" data-wf-url=\"/fp_ms/_rcv/remote\" data-wf-body=\"{"ctrl":"GamesMini","m_id":"react-wafer-games",
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 6e 20 63 6c 61 73 73 3d 5c 22 45 6c 6c 20 4d 61 77 28 31 36 63 68 29 20 50 65 28 6e 29 20 44 28 62 29 20 50 79 28 31 30 70 78 29 20 46 77 28 35 30 30 29 20 46 7a 28 2d 2d 66 6f 6e 74 2d 31 31 70 78 29 20 74 61 62 41 63 74 69 76 65 5f 42 78 73 68 28 24 74 61 62 73 42 74 6e 53 68 61 64 6f 77 29 20 42 67 63 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 20 42 64 72 73 28 33 32 70 78 29 20 43 28 2d 2d 62 61 74 74 6c 65 73 68 69 70 29 20 50 78 28 31 32 70 78 29 20 74 61 62 41 63 74 69 76 65 5f 42 67 63 28 2d 2d 77 68 69 74 65 29 21 20 74 61 62 41 63 74 69 76 65 5f 43 28 2d 2d 69 6e 6b 77 65 6c 6c 29 21 5c 22 3e 50 75 7a 7a 6c 65 3c 2f 73 70 61 6e 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 61 67 69 6e 61 74 69 6f 6e Data Ascii: n class=\"Ell Maw(16ch) Pe(n) D(b) Py(10px) Fw(500) Fz(--font-11px) tabActive_Bxsh($tabsBtnShadow) Bgc(--marshmallow) Bdrs(32px) C(--battleship) Px(12px) tabActive_Bgc(--white)! tabActive_C(--inkwell)!\">Puzzle</span></button></div><div class=\"pagination
2024-03-29 00:41:30 UTC	952	IN	Data Raw: 69 6c 6c 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 73 74 72 6f 6b 65 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 5c 22 20 68 65 69 67 68 74 3d 5c 22 31 30 5c 22 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 33 32 20 33 32 5c 22 20 64 61 74 61 2d 69 63 6f 6e 3d 5c 22 43 6f 72 65 41 72 72 6f 77 52 69 67 68 74 5c 22 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 37 2e 30 36 2e 36 36 35 63 2e 38 38 37 2d 2e 38 38 37 20 32 2e 33 32 34 2d 2e 38 38 37 20 33 2e 32 31 20 30 4c 32 35 2e 36 30 36 20 31 36 20 31 30 2e 32 37 20 33 31 2e 33 33 35 63 2d 2e 34 34 32 2e 34 34 33 2d 31 2e 30 32 33 2e 36 36 35 2d 31 2e 36 30 34 2e 36 36 35 73 2d 31 2e 31 36 32 2d 2e 32 32 32 2d 31 Data Ascii: ill:currentColor;stroke:currentColor;stroke-width:0;vertical-align:bottom\" height=\"10\" viewBox=\"0 0 32 32\" data-icon=\"CoreArrowRight\"><path d=\"M7.06.665c.887-.887 2.324-.887 3.21 0L25.606 16 10.27 31.335c-.442.443-1.023.665-1.604.665s-1.162-.222-1
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 6d 65 2d 4a 75 73 74 20 57 6f 72 64 73 3b 73 75 62 73 65 63 3a 66 65 61 74 75 72 65 64 3b 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 50 6f 73 28 72 29 20 50 74 28 37 30 25 29 20 50 65 28 6e 29 5c 22 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 5c 22 42 64 72 73 28 38 70 78 29 20 53 74 72 65 74 63 68 65 64 42 6f 78 20 48 28 31 30 30 25 29 20 57 28 31 30 30 25 29 20 77 61 66 65 72 2d 69 6d 67 5c 22 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 67 2f 69 6d 61 67 65 73 2f 73 70 61 63 65 62 61 6c 6c 2e 67 69 66 5c 22 20 64 61 74 61 2d 77 66 2d 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 70 76 2f 67 61 6d 65 73 2f 69 6d 61 67 65 73 2f 4a 75 73 74 57 6f 72 64 73 5f 53 70 72 69 6e 67 5f 36 30 30 78 34 30 Data Ascii: me-Just Words;subsec:featured;\"><div class=\"Pos(r) Pt(70%) Pe(n)\"><img class=\"Bdrs(8px) StretchedBox H(100%) W(100%) wafer-img\" src=\"https://s.yimg.com/g/images/spaceball.gif\" data-wf-src=\"https://s.yimg.com/pv/games/images/JustWords_Spring_600x40
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 64 69 76 20 63 6c 61 73 73 3d 5c 22 42 67 63 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 20 57 28 34 38 25 29 20 48 28 34 30 25 29 20 4d 62 28 31 30 70 78 29 5c 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 42 67 63 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 20 57 28 34 38 25 29 20 48 28 34 30 25 29 20 4d 62 28 31 30 70 78 29 5c 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 42 67 63 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 20 57 28 31 30 30 25 29 20 48 28 33 30 70 78 29 5c 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 61 66 65 72 2d 66 65 74 63 68 2d 74 61 72 67 65 74 2d 65 72 72 6f 72 5f 44 28 66 29 20 44 28 6e 29 20 46 6c 64 28 63 29 20 41 69 28 63 29 20 4a 63 28 63 29 20 46 Data Ascii: div class=\"Bgc(--marshmallow) W(48%) H(40%) Mb(10px)\"></div><div class=\"Bgc(--marshmallow) W(48%) H(40%) Mb(10px)\"></div><div class=\"Bgc(--marshmallow) W(100%) H(30px)\"></div></div><div class=\"wafer-fetch-target-error_D(f) D(n) Fld(c) Ai(c) Jc(c) F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49872	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	924	OUT	GET /fp_ms/_rcv/remote?ctrl=WeatherPreviewRefresh&lang=en-US&m_id=react-wafer-weather&m_mode=json&region=US&rid=2vl5n89j0c3hk&site=fp&apptype=default&instance_id=weather&_evtSrc=deferLoad HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A
2024-03-29 00:41:30 UTC	617	IN	HTTP/1.1 500 Internal Server Error referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-frame-options: SAMEORIGIN content-type: text/html; charset=utf-8 status-code: 500 x-app-version: 1.0.37059 x-applet-version: 1.0.37059 x-instance-id: weather x-applet-id: react-wafer-weather content-length: 29 etag: W/"1d-q1sx13HKBSxZd8ReLeWy82ipklI" date: Fri, 29 Mar 2024 00:41:30 GMT x-envoy-upstream-service-time: 10 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* X-Bypass-Ssl-Transform: 1 Age: 0
2024-03-29 00:41:30 UTC	962	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 62 75 69 6c 74 62 79 67 69 72 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 72 69 76 61 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 65 6e 67 61 64 67 65 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 69 6e 74 68 65 6b 6e 6f 77 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 75 74 6f 62 6c 6f 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 74 65 63 68 63 72 75 6e 63 68 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6f 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 75 66 66 69 6e 67 74 6f 6e 70 6f 73 74 2e 63 Data Ascii: Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://*.huffingtonpost.c
2024-03-29 00:41:30 UTC	29	IN	Data Raw: 6c 61 74 20 61 6e 64 20 6c 6f 6e 67 20 6f 72 20 77 6f 65 69 64 20 6d 69 73 73 69 6e 67 Data Ascii: lat and long or woeid missing

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49873	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	625	OUT	GET /aaq/fp/css/react-wafer-weather.WeatherPreviewRefresh.atomic.ltr.2a251a0ddb3d7c4ec13f4e35ee35dd2b.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:30 UTC	788	IN	HTTP/1.1 200 OK x-amz-id-2: xiBvBJbI29CRoiHvvg5GZNG6iRc9vmjz4LVv57JcRKOFTeuN9+d5xtdyyU71ASRF1LRFnDBB/Bk= x-amz-request-id: 6E4CTB2ESRKY4EM0 Date: Fri, 29 Mar 2024 00:41:31 GMT Last-Modified: Fri, 15 Dec 2023 14:53:19 GMT ETag: "2a251a0ddb3d7c4ec13f4e35ee35dd2b" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: kLRcmlvLyRbY_VAaft68F.xlsYWQ5D50 Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 5570 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 23 61 74 6f 6d 69 63 20 2e 41 69 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 2d 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 5c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 2d 2d 70 65 62 62 6c 65 5c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 37 63 64 64 32 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 65 62 62 6c 65 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 74 5c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 42 64 74 63 5c 28 2d Data Ascii: #atomic .Ai$c${align-items:center}#atomic .Bdc$--dirty-seagull${border-color:#e0e4e9;border-color:var(--dirty-seagull)}#atomic .Bdc$--pebble${border-color:#c7cdd2;border-color:var(--pebble)}#atomic .Bdc$t${border-color:transparent}#atomic .Bdtc\(-
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 7d 23 61 74 6f 6d 69 63 20 2e 42 78 7a 5c 28 62 62 5c 29 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 23 61 74 6f 6d 69 63 20 2e 42 78 73 68 5c 28 6e 5c 29 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 62 61 74 63 61 76 65 5c 29 7b 63 6f 6c 6f 72 3a 23 32 33 32 61 33 31 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 74 63 61 76 65 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 62 6c 61 63 6b 5c 29 2c 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 62 6c 61 63 6b 5c 29 5c 3a 5c 3a 70 68 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 6c 61 63 6b 29 7d 23 61 74 6f 6d 69 63 20 Data Ascii: d-repeat:no-repeat}#atomic .Bxz$bb${box-sizing:border-box}#atomic .Bxsh$n${box-shadow:none}#atomic .C$--batcave${color:#232a31;color:var(--batcave)}#atomic .C$--black$,#atomic .C$--black$\:\:ph::placeholder{color:#000;color:var(--black)}#atomic
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 32 30 30 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 32 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 35 30 30 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 36 30 30 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 31 32 70 78 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 31 33 70 78 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 31 34 70 78 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 31 65 6d 5c Data Ascii: stify-content:space-between}#atomic .Fw$200${font-weight:200}#atomic .Fw$500${font-weight:500}#atomic .Fw$600${font-weight:600}#atomic .Fz$12px${font-size:12px}#atomic .Fz$13px${font-size:13px}#atomic .Fz$14px${font-size:14px}#atomic .Fz\(1em\
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 5c 29 7b 70 61 64 64 69 6e 67 3a 30 7d 23 61 74 6f 6d 69 63 20 2e 50 5c 28 32 30 70 78 5c 29 7b 70 61 64 64 69 6e 67 3a 32 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 5c 28 38 70 78 5c 29 7b 70 61 64 64 69 6e 67 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 78 5c 28 30 5c 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 23 61 74 6f 6d 69 63 20 2e 50 78 5c 28 30 5c 2e 34 65 6d 5c 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 34 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 34 65 6d 7d 23 61 74 6f 6d 69 63 20 2e 50 78 5c 28 31 30 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 78 5c 28 32 30 70 Data Ascii: \){padding:0}#atomic .P$20px${padding:20px}#atomic .P$8px${padding:8px}#atomic .Px$0${padding-left:0;padding-right:0}#atomic .Px$0\.4em${padding-left:.4em;padding-right:.4em}#atomic .Px$10px${padding-left:10px;padding-right:10px}#atomic .Px\(20p
2024-03-29 00:41:30 UTC	370	IN	Data Raw: 31 7d 23 61 74 6f 6d 69 63 20 2e 5a 5c 28 31 30 5c 29 7b 7a 2d 69 6e 64 65 78 3a 31 30 7d 2e 48 69 64 64 65 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6c 69 70 3a 72 65 63 74 28 31 70 78 2c 31 70 78 2c 31 70 78 2c 31 70 78 29 3b 62 6f 72 64 65 72 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 31 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 53 74 72 65 74 63 68 65 64 42 6f 78 7b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 Data Ascii: 1}#atomic .Z$10${z-index:10}.Hidden{position:absolute!important;clip:rect(1px,1px,1px,1px);border:0!important;height:1px!important;overflow:hidden;padding:0!important;width:1px!important}.StretchedBox{bottom:0;left:0;right:0;top:0}@media screen and (max

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49874	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	603	OUT	GET /aaq/fp/css/react-wafer-weather.common.desktop.a03361886464b469acd3a16cfbd022ed.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:30 UTC	800	IN	HTTP/1.1 200 OK x-amz-id-2: kl+xUURVGVLJOMs0O4aMxSbbCPhjvpHJ0qiAJUAG29QrsI8+FzM/h722+4GLJD2QW3pu9fNsfyv8Mml42XhxEw== x-amz-request-id: 6E4DWK7T7GF9BSDR Date: Fri, 29 Mar 2024 00:41:31 GMT Last-Modified: Wed, 03 Aug 2022 09:53:05 GMT ETag: "a03361886464b469acd3a16cfbd022ed" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: vYBRHK1nkH1zZI3a6Ga3.sb6tkLNfuQZ Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 3735 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 74 72 61 Data Ascii: @-webkit-keyframes spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}@keyframes spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(360deg);tra
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 64 65 72 2d 77 69 64 74 68 3a 30 20 30 20 31 70 78 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 63 6f 6f 74 65 72 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 36 70 78 20 36 70 78 20 30 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 73 61 76 65 64 2d 69 74 65 6d 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 Data Ascii: der-width:0 0 1px;color:var(--scooter);line-height:18px;overflow:hidden;padding:6px 6px 6px 0;text-overflow:ellipsis;white-space:nowrap}.wafer-autocomplete-saved-item{white-space:normal;display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-alig
2024-03-29 00:41:30 UTC	1135	IN	Data Raw: 6e 20 2e 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 2d 77 72 61 70 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 23 6c 6f 63 6b 65 72 57 65 61 74 68 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 73 75 67 67 65 73 74 69 6f 6e 73 20 2e 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 69 74 65 6d 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 36 70 78 7d 23 67 72 69 64 2d 6c 61 79 6f 75 74 20 2e 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 69 74 65 6d 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 74 63 61 76 65 29 3b 62 6f 72 64 65 72 3a 30 Data Ascii: n .wafer-autocomplete-item{display:flex;flex-wrap:no-wrap;justify-content:space-between}#lockerWeather-autocomplete-suggestions .wafer-autocomplete-item{padding-top:6px;padding-bottom:6px}#grid-layout .wafer-autocomplete-item{color:var(--batcave);border:0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49875	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	585	OUT	GET /aaq/fp/js/react-wafer-stream.custom.modern.1ed4fe71b1fc647ddbf37a7050944309.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:30 UTC	802	IN	HTTP/1.1 200 OK x-amz-id-2: WhX/8RzDA2N/Z90W2IYe94OCo9l5NY0QCdnWkBKnK7YiV0luJO/9mA0xrfSRs2gUYpJbKqxRp5k= x-amz-request-id: 6E4FHSH0YF3AMX4D Date: Fri, 29 Mar 2024 00:41:31 GMT Last-Modified: Sat, 02 Dec 2023 00:17:32 GMT ETag: "1ed4fe71b1fc647ddbf37a7050944309" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: xy7lqotFC.zmCqihzzE4iOckpJX.wEX6 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 8254 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 77 69 6e 64 6f 77 2e 77 61 66 65 72 26 26 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 72 65 61 64 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 73 68 6f 77 2d 64 72 61 77 65 72 22 2c 74 3d 6e 75 6c 6c 2c 61 3d 6e 75 6c 6c 2c 72 3d 22 77 61 66 65 72 2d 66 65 74 63 68 2d 65 72 72 6f 72 22 2c 69 3d 22 77 61 66 65 72 2d 66 65 74 63 68 2d 63 6f 6d 70 6c 65 74 65 22 2c 6e 3d 22 73 74 72 65 61 6d 2d 72 65 6c 61 74 65 64 2d 64 72 61 77 65 72 22 2c 6f 3d 22 53 74 72 65 61 6d 52 65 6c 61 74 65 64 22 2c 73 3d 22 72 65 61 63 74 2d 77 61 66 65 72 2d 73 74 72 65 61 6d 22 2c 63 3d 22 6a 73 6f 6e 22 2c 64 3d 22 77 61 66 65 72 2d 66 65 74 63 68 22 2c 6c 3d 22 73 74 72 65 61 6d 2d 75 75 69 64 2d 6c 69 73 74 22 2c 75 3d 5b 5d 2c 77 3d 64 6f 63 75 6d 65 6e 74 2e Data Ascii: window.wafer&&window.wafer.ready((function(){var e="show-drawer",t=null,a=null,r="wafer-fetch-error",i="wafer-fetch-complete",n="stream-related-drawer",o="StreamRelated",s="react-wafer-stream",c="json",d="wafer-fetch",l="stream-uuid-list",u=[],w=document.
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 52 65 61 64 65 72 2d 6f 70 65 6e 22 29 2c 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 62 61 73 65 2e 6c 6f 63 6b 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 4d 61 69 6e 56 69 65 77 22 29 29 2c 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 28 30 2c 30 29 29 2c 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 73 74 72 65 61 6d 2d 62 61 74 63 68 2d 66 65 74 63 68 22 29 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 6a 73 2d 64 69 73 70 6c 61 79 2d 63 61 72 64 20 75 6e 70 72 6f 63 65 73 73 65 64 2d 64 69 73 70 6c 61 79 2d 63 61 72 64 22 29 3b 61 2e 6c 65 6e 67 74 68 26 26 Data Ascii: Element.classList.add("Reader-open"),window.wafer.base.lock(document.getElementById("MainView")),window.scrollTo(0,0)),t.classList.contains("stream-batch-fetch")){var a=document.getElementsByClassName("js-display-card unprocessed-display-card");a.length&&
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 77 69 6e 64 6f 77 2e 44 41 52 4c 41 2e 61 64 64 50 6f 73 28 6f 29 3b 76 61 72 20 73 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 44 41 52 4c 41 2e 52 65 73 70 6f 6e 73 65 28 22 52 45 53 45 52 56 45 4d 4f 4d 45 4e 54 53 22 2c 7b 7d 29 3b 69 3d 75 6e 65 73 63 61 70 65 28 69 29 2c 73 2e 61 64 64 28 22 52 45 53 45 52 56 45 4d 4f 4d 45 4e 54 53 22 2c 69 29 2c 77 69 6e 64 6f 77 2e 44 41 52 4c 41 2e 72 65 6e 64 65 72 28 73 29 7d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 4c 28 29 7b 41 2e 63 6f 6e 76 65 72 74 4e 6f 64 65 4c 69 73 74 54 6f 41 72 72 61 79 28 77 29 2e 66 69 6c 74 65 72 28 28 65 3d 3e 21 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 69 6e 69 74 2d 76 69 73 69 74 65 64 22 29 29 29 2e 66 6f 72 45 61 63 68 28 28 6c 3d 3e 7b 6c 2e 63 6c 61 73 73 4c Data Ascii: window.DARLA.addPos(o);var s=new window.DARLA.Response("RESERVEMOMENTS",{});i=unescape(i),s.add("RESERVEMOMENTS",i),window.DARLA.render(s)}}};function L(){A.convertNodeListToArray(w).filter((e=>!e.classList.contains("init-visited"))).forEach((l=>{l.classL
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 72 20 70 3d 53 28 29 2c 76 3d 77 69 6e 64 6f 77 2e 59 41 48 4f 4f 26 26 77 69 6e 64 6f 77 2e 59 41 48 4f 4f 2e 63 6f 6e 74 65 78 74 7c 7c 7b 7d 2c 4c 3d 7b 63 6f 6e 66 69 67 3a 7b 6c 65 61 64 49 74 65 6d 55 75 69 64 3a 67 7c 7c 66 7d 2c 63 74 72 6c 3a 6f 2c 6c 61 6e 67 3a 76 2e 6c 61 6e 67 2c 6d 5f 69 64 3a 73 2c 6d 5f 6d 6f 64 65 3a 63 2c 72 65 67 69 6f 6e 3a 76 2e 72 65 67 69 6f 6e 2c 73 69 74 65 3a 76 2e 73 69 74 65 7d 3b 63 6f 6e 73 74 20 6e 3d 76 2e 70 61 72 74 6e 65 72 2c 6c 3d 7b 64 65 64 75 70 55 75 69 64 73 3a 70 2e 64 65 64 75 70 55 75 69 64 73 2e 6a 6f 69 6e 28 22 2c 22 29 2c 75 75 69 64 3a 66 7d 3b 76 61 72 20 45 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 66 67 22 29 3b 69 66 28 45 29 7b 76 61 72 20 68 3d 6d 2e 67 65 Data Ascii: r p=S(),v=window.YAHOO&&window.YAHOO.context\|\|{},L={config:{leadItemUuid:g\|\|f},ctrl:o,lang:v.lang,m_id:s,m_mode:c,region:v.region,site:v.site};const n=v.partner,l={dedupUuids:p.dedupUuids.join(","),uuid:f};var E=a.getAttribute("data-cfg");if(E){var h=m.ge
2024-03-29 00:41:30 UTC	152	IN	Data Raw: 26 41 2e 63 6f 6e 76 65 72 74 4e 6f 64 65 4c 69 73 74 54 6f 41 72 72 61 79 28 4c 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 67 26 26 65 3f 70 28 65 29 3a 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 7d 29 29 7d 29 29 7d 69 66 28 77 26 26 77 2e 6c 65 6e 67 74 68 29 7b 4c 28 29 3b 76 61 72 20 45 2c 68 2c 79 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 63 72 6f 6c 6c 61 62 Data Ascii: &A.convertNodeListToArray(L).forEach((function(e){g&&e?p(e):e.style.display="none"}))}))}if(w&&w.length){L();var E,h,y=document.getElementById("scrollab
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 6c 65 2d 73 6d 61 64 22 29 2c 4e 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 63 72 6f 6c 6c 61 62 6c 65 2d 76 69 64 65 6f 22 29 2c 52 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 2c 62 3d 7b 7d 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 28 65 3d 28 65 3d 28 65 3d 28 65 3d 28 65 3d 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5c 24 5c 28 56 5f 41 55 54 4f 50 4c 41 59 45 44 5c 29 2f 2c 21 31 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 24 5c 28 56 5f 50 4c 41 59 45 52 5f 57 49 44 54 48 5c 29 2f 2c 79 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 29 2e 72 65 70 6c 61 63 65 28 Data Ascii: le-smad"),N=document.getElementById("scrollable-video"),R=window.innerHeight\|\|document.documentElement.clientHeight,b={},q=function(e){return e&&(e=(e=(e=(e=(e=(e=e.replace(/\$$V_AUTOPLAYED$/,!1)).replace(/\$$V_PLAYER_WIDTH$/,y.clientHeight)).replace(
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 6f 72 3a 21 31 7d 29 2c 62 2e 71 75 61 72 74 69 6c 65 41 63 74 69 6f 6e 55 72 6c 35 30 3d 6e 75 6c 6c 29 3a 61 3e 3d 32 35 26 26 62 2e 71 75 61 72 74 69 6c 65 41 63 74 69 6f 6e 55 72 6c 32 35 3f 28 41 2e 66 69 72 65 42 65 61 63 6f 6e 28 71 28 62 2e 71 75 61 72 74 69 6c 65 41 63 74 69 6f 6e 55 72 6c 32 35 29 2c 7b 75 73 65 4e 61 76 69 67 61 74 6f 72 3a 21 31 7d 29 2c 62 2e 71 75 61 72 74 69 6c 65 41 63 74 69 6f 6e 55 72 6c 32 35 3d 6e 75 6c 6c 29 3a 61 3e 3d 35 26 26 62 2e 73 74 61 72 74 41 63 74 69 6f 6e 55 72 6c 26 26 28 41 2e 66 69 72 65 42 65 61 63 6f 6e 28 71 28 62 2e 73 74 61 72 74 41 63 74 69 6f 6e 55 72 6c 29 2c 7b 75 73 65 4e 61 76 69 67 61 74 6f 72 3a 21 31 7d 29 2c 62 2e 73 74 61 72 74 41 63 74 69 6f 6e 55 72 6c 3d 6e 75 6c 6c 29 7d 7d 29 2c 31 Data Ascii: or:!1}),b.quartileActionUrl50=null):a>=25&&b.quartileActionUrl25?(A.fireBeacon(q(b.quartileActionUrl25),{useNavigator:!1}),b.quartileActionUrl25=null):a>=5&&b.startActionUrl&&(A.fireBeacon(q(b.startActionUrl),{useNavigator:!1}),b.startActionUrl=null)}}),1
2024-03-29 00:41:30 UTC	302	IN	Data Raw: 6f 6e 28 65 29 7b 69 66 28 65 26 26 65 2e 6d 65 74 61 26 26 65 2e 65 6c 65 6d 29 7b 76 61 72 20 74 3d 65 2e 65 6c 65 6d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 66 2d 74 6f 67 67 6c 65 2d 74 61 72 67 65 74 22 29 3b 22 73 68 6f 77 2d 64 72 61 77 65 72 22 3d 3d 3d 65 2e 6d 65 74 61 2e 63 6c 61 73 73 4e 61 6d 65 26 26 77 26 26 77 2e 6c 65 6e 67 74 68 26 26 41 2e 63 6f 6e 76 65 72 74 4e 6f 64 65 4c 69 73 74 54 6f 41 72 72 61 79 28 77 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 76 61 72 20 61 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 29 2c 72 3d 61 26 26 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 64 72 61 77 65 72 2d 66 65 74 63 68 2d 74 61 72 67 65 74 22 29 5b 30 5d 3b 73 65 74 54 69 6d 65 Data Ascii: on(e){if(e&&e.meta&&e.elem){var t=e.elem.getAttribute("data-wf-toggle-target");"show-drawer"===e.meta.className&&w&&w.length&&A.convertNodeListToArray(w).forEach((e=>{var a=e.querySelector(t),r=a&&a.getElementsByClassName("drawer-fetch-target")[0];setTime

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49876	34.200.65.202	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	869	OUT	GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A; IDSYNC="19cw~2hk0:19e0~2hk0"
2024-03-29 00:41:30 UTC	445	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:30 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2hk0:19e0~2hk0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 29-Mar-2025 00:41:30 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.106
2024-03-29 00:41:30 UTC	66	IN	Data Raw: 33 63 0d 0a 7b 22 61 78 69 64 22 3a 20 22 65 53 31 69 63 30 5a 33 4e 6d 74 77 52 54 4a 31 52 57 78 5a 4e 47 56 43 55 55 6f 35 65 6a 42 73 5a 53 35 30 63 6d 6c 32 4c 6d 4a 71 63 33 35 42 22 7d 0d 0a Data Ascii: 3c{"axid": "eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B"}
2024-03-29 00:41:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49879	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	539	OUT	GET /aaq/wf/wf-loader-2.7.4-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:30 UTC	803	IN	HTTP/1.1 200 OK x-amz-id-2: WiGvOTMYV9glNkM0ZP5moMf0umb0WQ/Wf4OguXZgxBgUSa8K6XBNYMxVugTmaXAM/dkTa/c0xik= x-amz-request-id: 6E4946CTBVZA2QHA Date: Fri, 29 Mar 2024 00:41:31 GMT Last-Modified: Wed, 27 Mar 2024 16:25:40 GMT ETag: "178d61ff0bb36cb5b243261543be4479" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: txfdr5mjXufgqRastPoSEHw0iESO2pNZ Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 11896 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 6c 6f 61 64 65 72 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 6c 6f 61 64 65 72 22 5d 3d 65 28 29 3a 28 61 2e 77 61 66 65 72 3d 61 2e 77 61 66 65 72 7c 7c 7b 7d 2c 61 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 61 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(a,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-loader",[],e):"object"==typeof exports?exports["wafer-loader"]=e():(a.wafer=a.wafer\|\|{},a.wafer.wafers=a.wafer.wafers\|\|
2024-03-29 00:41:30 UTC	138	IN	Data Raw: 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 63 74 69 6f 6e 2d 31 2e 38 2e 31 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 63 74 69 6f 6e 2d 31 2e 38 2e 31 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 33 31 2e 38 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 Data Ascii: :"/aaq/wf/wf-action-1.8.1.js",raw:"/aaq/wf/wf-action-1.8.1.raw.js"}},"wafer-autocomplete":{meta:{version:"1.31.8"},modern:{min:"/aaq/wf/wf
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 31 2e 33 31 2e 38 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 31 2e 33 31 2e 38 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 31 2e 33 31 2e 38 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 31 2e 33 31 2e 38 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 62 65 61 63 6f 6e 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 33 2e 34 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 62 65 61 63 6f 6e 2d 31 2e 33 2e 34 2d Data Ascii: -autocomplete-1.31.8-modern.js",raw:"/aaq/wf/wf-autocomplete-1.31.8-modern.raw.js"},default:{min:"/aaq/wf/wf-autocomplete-1.31.8.js",raw:"/aaq/wf/wf-autocomplete-1.31.8.raw.js"}},"wafer-beacon":{meta:{version:"1.3.4"},modern:{min:"/aaq/wf/wf-beacon-1.3.4-
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6f 72 65 2d 31 2e 36 35 2e 30 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6f 72 65 2d 31 2e 36 35 2e 30 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6f 72 65 2d 31 2e 36 35 2e 30 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6f 72 65 2d 31 2e 36 35 2e 30 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 63 6f 75 6e 74 64 6f 77 6e 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 32 2e 35 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6f 75 6e 74 64 6f 77 6e 2d 31 2e 32 2e 35 2d 6d Data Ascii: },modern:{min:"/aaq/wf/wf-core-1.65.0-modern.js",raw:"/aaq/wf/wf-core-1.65.0-modern.raw.js"},default:{min:"/aaq/wf/wf-core-1.65.0.js",raw:"/aaq/wf/wf-core-1.65.0.raw.js"}},"wafer-countdown":{meta:{version:"1.2.5"},modern:{min:"/aaq/wf/wf-countdown-1.2.5-m
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 6c 76 69 65 77 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 32 2e 31 30 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 65 78 70 65 72 69 6d 65 6e 74 2d 73 63 72 6f 6c 6c 76 69 65 77 2d 31 2e 32 2e 31 30 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 65 78 70 65 72 69 6d 65 6e 74 2d 73 63 72 6f 6c 6c 76 69 65 77 2d 31 2e 32 2e 31 30 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 65 78 70 65 72 69 6d 65 6e 74 2d 73 63 72 6f 6c 6c 76 69 65 77 2d 31 2e 32 2e 31 30 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 65 78 70 65 72 69 6d 65 6e 74 2d 73 63 72 6f 6c 6c 76 69 65 77 2d 31 2e Data Ascii: lview":{meta:{version:"1.2.10"},modern:{min:"/aaq/wf/wf-experiment-scrollview-1.2.10-modern.js",raw:"/aaq/wf/wf-experiment-scrollview-1.2.10-modern.raw.js"},default:{min:"/aaq/wf/wf-experiment-scrollview-1.2.10.js",raw:"/aaq/wf/wf-experiment-scrollview-1.
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 65 2d 31 2e 34 2e 30 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 69 6d 61 67 65 2d 31 2e 34 2e 30 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 6c 69 67 68 74 62 6f 78 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 31 30 2e 36 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6c 69 67 68 74 62 6f 78 2d 31 2e 31 30 2e 36 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6c 69 67 68 74 62 6f 78 2d 31 2e 31 30 2e 36 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6c 69 67 68 74 62 6f 78 2d 31 2e 31 30 2e 36 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6c 69 67 Data Ascii: e-1.4.0.js",raw:"/aaq/wf/wf-image-1.4.0.raw.js"}},"wafer-lightbox":{meta:{version:"1.10.6"},modern:{min:"/aaq/wf/wf-lightbox-1.10.6-modern.js",raw:"/aaq/wf/wf-lightbox-1.10.6-modern.raw.js"},default:{min:"/aaq/wf/wf-lightbox-1.10.6.js",raw:"/aaq/wf/wf-lig
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6e 61 74 69 76 65 2d 64 61 2d 31 2e 30 2e 35 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 70 72 6f 67 72 65 73 73 2d 6c 6f 61 64 65 72 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 32 2e 31 30 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 70 72 6f 67 72 65 73 73 2d 6c 6f 61 64 65 72 2d 31 2e 32 2e 31 30 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 70 72 6f 67 72 65 73 73 2d 6c 6f 61 64 65 72 2d 31 2e 32 2e 31 30 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 70 72 6f 67 72 65 73 73 2d 6c 6f 61 64 65 72 2d 31 2e 32 2e 31 30 2e 6a 73 22 2c 72 61 77 Data Ascii: "/aaq/wf/wf-native-da-1.0.5.raw.js"}},"wafer-progress-loader":{meta:{version:"1.2.10"},modern:{min:"/aaq/wf/wf-progress-loader-1.2.10-modern.js",raw:"/aaq/wf/wf-progress-loader-1.2.10-modern.raw.js"},default:{min:"/aaq/wf/wf-progress-loader-1.2.10.js",raw
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 65 6d 70 6c 61 74 65 2d 31 2e 34 2e 33 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 65 6d 70 6c 61 74 65 2d 31 2e 34 2e 33 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 74 65 78 74 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 32 2e 30 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 65 78 74 2d 31 2e 32 2e 30 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 65 78 74 2d 31 2e 32 2e 30 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 65 78 74 2d 31 2e 32 Data Ascii: n.raw.js"},default:{min:"/aaq/wf/wf-template-1.4.3.js",raw:"/aaq/wf/wf-template-1.4.3.raw.js"}},"wafer-text":{meta:{version:"1.2.0"},modern:{min:"/aaq/wf/wf-text-1.2.0-modern.js",raw:"/aaq/wf/wf-text-1.2.0-modern.raw.js"},default:{min:"/aaq/wf/wf-text-1.2
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 76 69 64 65 6f 2d 33 2e 31 2e 32 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 76 69 64 65 6f 2d 33 2e 31 2e 32 2e 72 61 77 2e 6a 73 22 7d 7d 7d 7d 2c 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 65 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 66 3d 66 75 6e 63 Data Ascii: video-3.1.2.js",raw:"/aaq/wf/wf-video-3.1.2.raw.js"}}}},"./src/entry.js":function(a,e,r){"use strict";function w(a,e){if(!(a instanceof e))throw new TypeError("Cannot call a class as a function")}Object.defineProperty(e,"__esModule",{value:!0});var f=func
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 6e 20 66 28 61 2c 5b 7b 6b 65 79 3a 22 6c 6f 61 64 57 61 66 65 72 73 46 6f 72 57 72 61 70 70 65 72 45 6c 65 6d 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 72 3d 5b 5d 3b 6a 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 77 29 7b 76 61 72 20 66 3d 6c 5b 77 5d 7c 7c 77 2c 6f 3d 77 2e 72 65 70 6c 61 63 65 28 22 77 61 66 65 72 22 2c 22 77 66 22 29 2c 6e 3d 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 5b 30 5d 3b 69 66 28 6e 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 73 63 72 69 70 74 5b 73 72 63 2a 3d 22 77 66 2f 27 2b 6f 2b 27 22 5d 27 29 7c 7c 65 2e 5f 6c 6f 61 64 57 61 66 65 72 73 46 6f 72 45 6c Data Ascii: n f(a,[{key:"loadWafersForWrapperElem",value:function(a){var e=this,r=[];j.forEach(function(w){var f=l[w]\|\|w,o=w.replace("wafer","wf"),n=a.getElementsByClassName(f)[0];if(n){return void(document.querySelector('script[src*="wf/'+o+'"]')\|\|e._loadWafersForEl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49877	34.200.65.202	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	1136	OUT	GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2hk0:19e0~2hk0"; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B
2024-03-29 00:41:30 UTC	561	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:30 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2hk0:19e0~2hk0:19e7~2hk0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 29-Mar-2025 00:41:30 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.106
2024-03-29 00:41:30 UTC	54	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 57 71 62 76 79 52 4e 45 32 75 4c 71 62 37 75 48 2e 42 71 41 33 59 4d 49 42 32 34 61 6c 6f 4b 4d 7e 41 22 7d 0d 0a Data Ascii: 30{"axid": "y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A"}
2024-03-29 00:41:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49878	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	534	OUT	GET /manifest_desktop_us.json HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:30 UTC	1214	IN	HTTP/1.1 200 OK x-amz-id-2: p9HDMF2+FFeops3KL03k8+t3Nmv36id7wksIXOARVr/0e6P5W/kw0KagQXEhH3p965/JKJIReao= x-amz-request-id: J2Q86W4RXN873KCR Date: Wed, 27 Mar 2024 15:33:56 GMT Last-Modified: Wed, 13 Mar 2024 21:58:53 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=259200, public x-amz-version-id: vZgLPvPnQHjEbm5tJ6GJuyZeuumwfYYB Accept-Ranges: bytes Content-Type: application/json Server: ATS Content-Length: 2146 Referrer-Policy: no-referrer-when-downgrade Vary: Origin ATS-Carp-Promotion: 1 Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=7c2tqilj08f34&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Etag: "9faf9f0af03805fd10e24fd7a54ca611" Age: 119254 Connection: close
2024-03-29 00:41:30 UTC	178	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 7b 0a 20 20 20 20 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 20 22 23 66 66 66 66 66 66 22 2c 0a 20 20 20 20 22 64 69 73 70 6c 61 79 22 3a 20 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 0a 20 20 20 20 22 67 63 6d 5f 75 73 65 72 5f 76 69 73 69 62 6c 65 5f 6f 6e 6c 79 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 34 38 78 34 38 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 30 39 30 36 32 30 31 38 2f 6d 61 6e 69 66 65 73 74 2f 79 61 68 6f 6f 5f 69 6e 73 74 61 6c 6c 5f 34 38 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: { "background_color": "#ffffff", "display": "standalone", "gcm_user_visible_only": true, "icons": [ { "sizes": "48x48", "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_48.png",
2024-03-29 00:41:30 UTC	846	IN	Data Raw: 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 33 38 34 78 33 38 34 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 30 39 30 36 32 30 31 38 2f 6d 61 6e 69 66 65 73 74 2f 79 61 68 6f 6f 5f 69 6e 73 74 61 6c 6c 5f 33 38 34 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 35 31 32 78 35 31 32 22 2c 0a 20 20 20 20 20 20 Data Ascii: "type": "image/png" }, { "sizes": "384x384", "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_384.png", "type": "image/png" }, { "sizes": "512x512",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49880	3.162.125.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	489	OUT	GET /.well-known/interest-group/permissions/?origin=https%3A%2F%2Fwest-bid-gps.ybp.yahoo.com HTTP/1.1 Host: pa.ybp.yahoo.com Connection: keep-alive Accept: application/json Origin: https://west-bid-gps.ybp.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:30 UTC	450	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 65 Connection: close Server: awselb/2.0 Date: Thu, 28 Mar 2024 15:21:19 GMT X-Cache: Hit from cloudfront Via: 1.1 af08bb104c29fffb75d24691c869c256.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 X-Amz-Cf-Id: 6rsJYv7jjzJxryC8kdtmVWIdM9iWOh48cMvf6FeClPygkC9Fm7KNXA== Age: 33611 Ad-Auction-Allowed: true X-Allow-FLEDGE: true Access-Control-Allow-Origin: *
2024-03-29 00:41:30 UTC	65	IN	Data Raw: 7b 0a 20 20 22 6a 6f 69 6e 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 22 3a 20 74 72 75 65 2c 0a 20 20 22 6c 65 61 76 65 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 22 3a 20 74 72 75 65 0a 7d Data Ascii: { "joinAdInterestGroup": true, "leaveAdInterestGroup": true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49881	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	539	OUT	GET /aaq/wf/wf-sticky-1.2.6-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:30 UTC	852	IN	HTTP/1.1 200 OK x-amz-id-2: Wu1BP8oBc9NechZZUutp6mZV6lRiF2nr/1oCpPco5x3sXvKslTy3xBx8fDLt2zHMIXk+vy/00uU= x-amz-request-id: X7BRX7C42KK499B3 Date: Thu, 28 Mar 2024 15:41:04 GMT Last-Modified: Fri, 26 Jan 2024 23:41:32 GMT ETag: "446c3635a0812f8c988a5e9ca3fc96a2" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: wePfh.HucUka1ChhR.5WzprFG1GPno6V Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 8787 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 32427 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 73 74 69 63 6b 79 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 73 74 69 63 6b 79 22 5d 3d 65 28 29 3a 28 74 2e 77 61 66 65 72 3d 74 2e 77 61 66 65 72 7c 7c 7b 7d 2c 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-sticky",[],e):"object"==typeof exports?exports["wafer-sticky"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 65 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a Data Ascii: unction"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function, not "+typeof e);t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,enumerable:!1,writable:!0,configurable:!0}}),e&&(Object.setPrototypeOf?Obj
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 6e 61 6c 6c 79 7b 69 66 28 72 29 74 68 72 6f 77 20 6e 7d 7d 72 65 74 75 72 6e 20 6f 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 69 6e 20 4f 62 6a 65 63 74 28 65 29 29 72 65 74 75 72 6e 20 74 28 65 2c 6f 29 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 65 2e 6c 65 6e 67 74 Data Ascii: nally{if(r)throw n}}return o}return function(e,o){if(Array.isArray(e))return e;if(Symbol.iterator in Object(e))return t(e,o);throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),y=function(){function t(t,e){for(var o=0;o<e.lengt
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 73 6e 61 6d 65 3a 67 2c 65 6c 65 6d 3a 74 2c 74 61 72 67 65 74 45 6c 65 6d 3a 6c 26 26 28 61 26 26 6d 28 74 2c 61 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6c 29 7c 7c 74 2c 6f 66 66 73 65 74 42 6f 74 74 6f 6d 3a 76 6f 69 64 20 30 21 3d 3d 62 26 26 62 2c 6f 66 66 73 65 74 4c 65 66 74 3a 76 6f 69 64 20 30 21 3d 3d 76 26 26 76 2c 6f 66 66 73 65 74 52 69 67 68 74 3a 76 6f 69 64 20 30 21 3d 3d 68 26 26 68 2c 6f 66 66 73 65 74 54 6f 70 3a 76 6f 69 64 20 30 21 3d 3d 64 26 26 64 2c 73 74 69 63 6b 79 50 6f 73 69 74 69 6f 6e 3a 63 7d 29 3b 76 61 72 20 6b 3d 73 2e 5f 75 74 69 6c 2e 74 61 72 67 65 74 45 6c 65 6d 2c 5f 3d 6b 2e 73 74 79 6c 65 2c 4f 3d 5f 2e 62 6f 74 74 6f 6d 2c 53 3d 5f 2e 6c 65 66 74 2c 6a 3d 5f Data Ascii: sname:g,elem:t,targetElem:l&&(a&&m(t,a)\|\|document.body).querySelector(l)\|\|t,offsetBottom:void 0!==b&&b,offsetLeft:void 0!==v&&v,offsetRight:void 0!==h&&h,offsetTop:void 0!==d&&d,stickyPosition:c});var k=s._util.targetElem,_=k.style,O=_.bottom,S=_.left,j=_
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 6f 74 79 70 65 29 2c 22 64 65 73 74 72 6f 79 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 53 74 69 63 6b 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 72 65 73 69 7a 65 22 3d 3d 3d 74 2c 6f 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 69 73 53 74 69 63 6b 79 3b 69 66 28 65 7c 7c 21 6f 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 6e 3d 72 2e 62 6f 64 79 43 6c 61 73 73 6e 61 6d 65 2c 73 3d 72 2e 65 6c 65 6d 2c 61 3d 72 2e 6f 66 66 73 65 74 4c 65 66 74 2c 6c 3d 72 2e 6f 66 66 73 65 74 52 69 67 68 74 2c 63 3d 72 2e 6f 66 66 73 65 74 54 6f 70 2c 66 3d 72 2e 73 74 69 63 6b 79 50 6f 73 69 74 69 6f 6e 2c 75 3d 72 2e 74 61 72 67 65 74 45 6c 65 6d 2c 79 3d 7b 7d 3b 69 66 28 6f Data Ascii: otype),"destroy",this).call(this)}},{key:"addSticky",value:function(t){var e="resize"===t,o=this._state.isSticky;if(e\|\|!o){var r=this._util,n=r.bodyClassname,s=r.elem,a=r.offsetLeft,l=r.offsetRight,c=r.offsetTop,f=r.stickyPosition,u=r.targetElem,y={};if(o
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 73 74 61 74 65 2e 69 73 53 74 69 63 6b 79 3d 21 31 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 6f 2e 73 74 79 6c 65 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 70 72 65 76 69 6f 75 73 50 6f 73 69 74 69 6f 6e 56 61 6c 75 65 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6e 66 69 67 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 65 3d 74 2e 6f 66 66 73 65 74 42 6f 74 74 6f 6d 2c 6f 3d 74 2e 6f 66 66 73 65 74 54 6f 70 2c 69 3d 74 2e 73 74 69 63 6b 79 41 6c 6c 6f 77 65 64 2c 72 3d 74 2e 74 61 72 67 65 74 45 6c 65 6d 3b 72 65 74 75 72 6e 7b 69 73 53 74 69 63 6b 79 3a 74 68 69 73 2e 5f 73 74 61 74 65 2e 69 73 53 74 69 63 6b 79 2c 6f 66 66 73 65 74 42 6f 74 74 6f 6d 3a 65 2c 6f 66 66 73 65 74 54 6f 70 3a 6f 2c 73 74 69 Data Ascii: state.isSticky=!1,Object.assign(o.style,this._state.previousPositionValue)}}},{key:"config",get:function(){var t=this._util,e=t.offsetBottom,o=t.offsetTop,i=t.stickyAllowed,r=t.targetElem;return{isSticky:this._state.isSticky,offsetBottom:e,offsetTop:o,sti
2024-03-29 00:41:30 UTC	987	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 73 74 61 74 65 2c 65 3d 74 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 2c 6f 3d 74 2e 6d 6f 75 6e 74 65 64 3b 30 21 3d 3d 65 2e 73 69 7a 65 26 26 21 6f 26 26 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 6d 6f 75 6e 74 65 64 3d 21 30 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 53 65 6c 66 53 74 69 63 6b 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 69 66 28 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 2b 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 3e 74 2b 65 2e 5f 73 74 61 74 65 2e 74 61 72 67 65 74 45 6c 65 6d 4f 66 66 73 65 74 54 6f 70 29 72 65 74 75 72 6e 20 76 6f 69 64 20 65 2e 61 64 64 53 74 69 63 6b 79 28 6f 29 3b 65 2e 72 65 6d 6f 76 Data Ascii: nction(){var t=this._state,e=t.elementInstances,o=t.mounted;0!==e.size&&!o&&(this._state.mounted=!0)}},{key:"handleSelfSticky",value:function(t,e,o){if(window.pageYOffset+window.innerHeight>t+e._state.targetElemOffsetTop)return void e.addSticky(o);e.remov

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49882	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	541	OUT	GET /aaq/c/640b7a3.caas-news_web.min.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:30 UTC	866	IN	HTTP/1.1 200 OK x-amz-id-2: v1Yel+sPpIvmSOg4N2qZ2rr6q/zGSGWsJnGC+iP5T8q+OfRLEf2bZeucZGC5Esxovd3QQEgcHsB+yPIXRAsDyw== x-amz-request-id: 33DX5WCRX37D16Z0 Date: Thu, 28 Mar 2024 17:27:55 GMT Last-Modified: Thu, 28 Mar 2024 14:54:07 GMT ETag: "5b1926a6ba098899b9dc2cb92629661e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: wBEkOq.s1y0I7mhWdMl8s3MPPmcODcCG Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 119457 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 26016 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 3d 74 28 29 3a 65 2e 43 41 41 53 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 73 2c 6f 2c 61 3d 7b 22 2e 2f 6e 6f 64 65 5f 6d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS",[],t):"object"==typeof exports?exports.CAAS=t():e.CAAS=t()}(self,(function(){return function(){var e,t,s,o,a={"./node_m
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 2e 73 65 6c 65 63 74 6f 72 29 3b 66 6f 72 28 6c 65 74 20 6f 3d 73 2e 6c 65 6e 67 74 68 3b 6f 2d 2d 3b 74 2e 75 6e 73 68 69 66 74 28 73 5b 6f 5d 29 29 3b 72 65 74 75 72 6e 20 74 2e 66 69 6c 74 65 72 28 28 74 3d 3e 21 28 30 2c 6f 2e 68 61 73 43 6c 61 73 73 29 28 74 2c 65 2e 73 75 63 63 65 73 73 43 6c 61 73 73 29 29 29 7d 28 65 2e 6f 70 74 69 6f 6e 73 29 2c 74 2e 63 6f 75 6e 74 3d 74 2e 65 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 74 2e 64 65 73 74 72 6f 79 65 64 29 7b 63 6f 6e 73 74 7b 61 64 64 54 6f 75 63 68 4d 6f 76 65 4c 69 73 74 65 6e 65 72 3a 73 2c 63 6f 6e 74 61 69 6e 65 72 3a 61 7d 3d 65 2e 6f 70 74 69 6f 6e 73 3b 74 2e 64 65 73 74 72 6f 79 65 64 3d 21 31 2c 61 26 26 28 30 2c 6f 2e 65 61 63 68 29 28 61 2c 28 Data Ascii: SelectorAll(e.selector);for(let o=s.length;o--;t.unshift(s[o]));return t.filter((t=>!(0,o.hasClass)(t,e.successClass)))}(e.options),t.count=t.elements.length,t.destroyed){const{addTouchMoveListener:s,container:a}=e.options;t.destroyed=!1,a&&(0,o.each)(a,(
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 65 26 26 28 30 2c 6f 2e 67 65 74 41 74 74 72 29 28 65 2c 22 64 61 74 61 2d 64 61 72 6b 2d 73 72 63 22 29 7c 7c 28 30 2c 6f 2e 67 65 74 41 74 74 72 29 28 65 2c 6c 29 7c 7c 28 30 2c 6f 2e 67 65 74 41 74 74 72 29 28 65 2c 73 2e 73 72 63 29 3b 69 66 28 74 29 7b 63 6f 6e 73 74 20 61 3d 74 2e 73 70 6c 69 74 28 73 2e 73 65 70 61 72 61 74 6f 72 29 2c 69 3d 61 5b 6e 26 26 61 2e 6c 65 6e 67 74 68 3e 31 3f 31 3a 30 5d 2c 6c 3d 28 30 2c 6f 2e 67 65 74 41 74 74 72 29 28 65 2c 73 2e 73 72 63 73 65 74 29 2c 63 3d 72 28 65 2c 22 69 6d 67 22 29 2c 6d 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 68 3d 6d 26 26 72 28 6d 2c 22 70 69 63 74 75 72 65 22 29 3b 69 66 28 63 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 2e 73 72 63 29 7b 6c 65 74 20 74 3d 64 3f 65 3a 6e 65 77 20 49 6d 61 67 65 Data Ascii: e&&(0,o.getAttr)(e,"data-dark-src")\|\|(0,o.getAttr)(e,l)\|\|(0,o.getAttr)(e,s.src);if(t){const a=t.split(s.separator),i=a[n&&a.length>1?1:0],l=(0,o.getAttr)(e,s.srcset),c=r(e,"img"),m=e.parentNode,h=m&&r(m,"picture");if(c\|\|void 0===e.src){let t=d?e:new Image
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 2c 73 2e 64 65 73 74 72 6f 79 65 64 3d 21 30 2c 74 2e 6f 70 74 69 6f 6e 73 3d 65 7c 7c 7b 7d 2c 74 2e 6f 70 74 69 6f 6e 73 2e 61 64 64 54 6f 75 63 68 4d 6f 76 65 4c 69 73 74 65 6e 65 72 3d 74 2e 6f 70 74 69 6f 6e 73 2e 61 64 64 54 6f 75 63 68 4d 6f 76 65 4c 69 73 74 65 6e 65 72 7c 7c 21 31 2c 74 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 3d 21 21 74 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 26 26 74 2e 6f 70 74 69 6f 6e 73 2e 72 6f 6f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 60 2e 24 7b 74 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 7d 60 29 2c 74 2e 6f 70 74 69 6f 6e 73 2e 65 72 72 6f 72 3d 74 2e 6f 70 74 69 6f 6e 73 2e 65 72 72 6f 72 7c 7c 21 31 2c 74 2e 6f 70 74 69 6f 6e 73 Data Ascii: ,s.destroyed=!0,t.options=e\|\|{},t.options.addTouchMoveListener=t.options.addTouchMoveListener\|\|!1,t.options.container=!!t.options.containerClass&&t.options.root.querySelectorAll(`.${t.options.containerClass}`),t.options.error=t.options.error\|\|!1,t.options
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 6f 76 65 4c 69 73 74 65 6e 65 72 3a 65 2c 70 65 6e 64 69 6e 67 43 6c 61 73 73 3a 61 7d 3d 74 2e 6f 70 74 69 6f 6e 73 3b 74 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 26 26 28 30 2c 6f 2e 65 61 63 68 29 28 74 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 2c 28 65 3d 3e 7b 28 30 2c 6f 2e 75 6e 62 69 6e 64 45 76 65 6e 74 29 28 65 2c 22 73 63 72 6f 6c 6c 22 2c 73 2e 76 61 6c 69 64 61 74 65 44 29 7d 29 29 3b 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 73 2e 63 6f 75 6e 74 3b 74 2b 2b 29 7b 63 6f 6e 73 74 20 65 3d 73 2e 65 6c 65 6d 65 6e 74 73 5b 74 5d 3b 28 30 2c 6f 2e 72 65 6d 6f 76 65 43 6c 61 73 73 29 28 65 2c 61 29 7d 28 30 2c 6f 2e 75 6e 62 69 6e 64 45 76 65 6e 74 29 28 77 69 6e 64 6f 77 2c 22 73 63 72 6f 6c 6c 22 2c 73 2e 76 61 6c 69 64 Data Ascii: oveListener:e,pendingClass:a}=t.options;t.options.container&&(0,o.each)(t.options.container,(e=>{(0,o.unbindEvent)(e,"scroll",s.validateD)}));for(let t=0;t<s.count;t++){const e=s.elements[t];(0,o.removeClass)(e,a)}(0,o.unbindEvent)(window,"scroll",s.valid
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 75 65 3a 21 30 7d 29 2c 74 2e 76 69 73 69 62 69 6c 69 74 79 4d 65 74 61 3d 74 2e 75 6e 62 69 6e 64 45 76 65 6e 74 3d 74 2e 74 68 72 6f 74 74 6c 65 3d 74 2e 73 65 74 41 74 74 72 73 3d 74 2e 73 65 74 41 74 74 72 3d 74 2e 72 65 73 75 6d 65 49 66 72 61 6d 65 3d 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 3d 74 2e 72 65 6d 6f 76 65 41 74 74 72 3d 74 2e 72 65 61 64 79 3d 74 2e 70 61 72 73 65 55 72 6c 3d 74 2e 6c 6f 61 64 53 63 72 69 70 74 53 79 6e 63 3d 74 2e 6c 6f 61 64 43 53 53 53 79 6e 63 3d 74 2e 6c 61 7a 79 4c 6f 61 64 4f 6e 63 65 4f 6e 6c 79 3d 74 2e 69 73 4e 6f 64 65 4e 61 6d 65 3d 74 2e 68 61 73 43 6c 61 73 73 3d 74 2e 68 61 6e 64 6c 65 53 6f 75 72 63 65 73 3d 74 2e 68 61 6e 64 6c 65 53 6f 75 72 63 65 3d 74 2e 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 3d 74 Data Ascii: ue:!0}),t.visibilityMeta=t.unbindEvent=t.throttle=t.setAttrs=t.setAttr=t.resumeIframe=t.removeClass=t.removeAttr=t.ready=t.parseUrl=t.loadScriptSync=t.loadCSSSync=t.lazyLoadOnceOnly=t.isNodeName=t.hasClass=t.handleSources=t.handleSource=t.getQueryString=t
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 26 26 28 73 3d 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 74 29 29 2c 73 7d 3b 74 2e 74 68 72 6f 74 74 6c 65 3d 28 65 2c 74 2c 73 29 3d 3e 7b 6c 65 74 20 6f 3d 30 3b 72 65 74 75 72 6e 28 2e 2e 2e 61 29 3d 3e 7b 63 6f 6e 73 74 20 69 3d 2b 6e 65 77 20 44 61 74 65 3b 69 2d 6f 3c 74 7c 7c 28 6f 3d 69 2c 65 2e 61 70 70 6c 79 28 73 2c 61 29 29 7d 7d 3b 74 2e 64 65 62 6f 75 6e 63 65 3d 28 65 2c 74 2c 73 29 3d 3e 7b 6c 65 74 20 6f 3b 72 65 74 75 72 6e 28 2e 2e 2e 61 29 3d 3e 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6f 29 2c 6f 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 28 Data Ascii: .getComputedStyle&&(s=document.defaultView.getComputedStyle(e,null).getPropertyValue(t)),s};t.throttle=(e,t,s)=>{let o=0;return(...a)=>{const i=+new Date;i-o<t\|\|(o=i,e.apply(s,a))}};t.debounce=(e,t,s)=>{let o;return(...a)=>{clearTimeout(o),o=setTimeout(((
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 65 61 64 79 53 74 61 74 65 3f 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 65 2c 7b 63 61 70 74 75 72 65 3a 21 31 2c 70 61 73 73 69 76 65 3a 21 30 7d 29 3a 65 28 29 7d 3b 63 6f 6e 73 74 20 68 3d 28 65 2c 74 3d 28 28 29 3d 3e 7b 7d 29 2c 73 2c 6f 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 61 3d 30 29 3d 3e 7b 69 66 28 73 26 26 64 28 77 69 6e 64 6f 77 2c 73 2e 73 70 6c 69 74 28 22 2e 22 29 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 28 29 3b 63 6f 6e 73 74 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 2e 73 72 63 3d 65 2c 69 2e 74 79 70 65 3d 6f 2c 69 2e 61 73 79 6e 63 3d 21 30 2c 69 2e 64 Data Ascii: eadyState?document.addEventListener("DOMContentLoaded",e,{capture:!1,passive:!0}):e()};const h=(e,t=(()=>{}),s,o="text/javascript",a=0)=>{if(s&&d(window,s.split(".")))return void t();const i=document.createElement("script");i.src=e,i.type=o,i.async=!0,i.d
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 74 20 73 3d 30 3b 69 66 28 74 29 69 66 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 29 74 72 79 7b 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 65 29 7c 7c 28 73 3d 22 62 63 6e 5f 75 6e 73 75 63 63 65 73 73 66 75 6c 22 29 7d 63 61 74 63 68 28 6f 29 7b 73 3d 22 62 63 6e 5f 65 72 72 6f 72 22 7d 65 6c 73 65 20 73 3d 22 62 63 6e 5f 75 6e 73 75 70 70 6f 72 74 65 64 22 3b 65 6c 73 65 20 73 3d 22 62 63 6e 5f 75 73 65 69 6d 67 22 3b 69 66 28 73 29 7b 65 3d 65 2b 28 2d 31 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3f 22 3f 22 3a 22 26 22 29 2b 28 6e 65 77 20 44 61 74 65 Data Ascii: t s=0;if(t)if(window.navigator&&"function"==typeof window.navigator.sendBeacon)try{window.navigator.sendBeacon(e)\|\|(s="bcn_unsuccessful")}catch(o){s="bcn_error"}else s="bcn_unsupported";else s="bcn_useimg";if(s){e=e+(-1===e.indexOf("?")?"?":"&")+(new Date
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 20 73 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 6d 6f 7a 48 69 64 64 65 6e 21 3d 3d 73 3f 28 74 3d 22 6d 6f 7a 48 69 64 64 65 6e 22 2c 65 3d 22 6d 6f 7a 22 2b 65 29 3a 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 6d 73 48 69 64 64 65 6e 21 3d 3d 73 3f 28 74 3d 22 6d 73 48 69 64 64 65 6e 22 2c 65 3d 22 6d 73 22 2b 65 29 3a 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 77 65 62 6b 69 74 48 69 64 64 65 6e 21 3d 3d 73 26 26 28 74 3d 22 77 65 62 6b 69 74 48 69 64 64 65 6e 22 2c 65 3d 22 77 65 62 6b 69 74 22 2b 65 29 2c 7b 68 69 64 64 65 6e 3a 74 2c 76 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 3a 65 7d 7d 29 28 29 7d 2c 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 76 7a 6d 69 2f 77 Data Ascii: s="undefined";return typeof document.mozHidden!==s?(t="mozHidden",e="moz"+e):typeof document.msHidden!==s?(t="msHidden",e="ms"+e):typeof document.webkitHidden!==s&&(t="webkitHidden",e="webkit"+e),{hidden:t,visibilityChange:e}})()},"./node_modules/@vzmi/w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49886	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	615	OUT	GET /dv/static/siteApp/img/privacy-choice-control.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:30 UTC	746	IN	HTTP/1.1 200 OK x-amz-id-2: mCgZ4LwruOvLNf++/VrL+RUjxf8cdwT4a7zYX87ymueeE6zssiewIQbW0g+hPc03zVviofQeyxE= x-amz-request-id: 0FV89VHNX1DEBY5B Date: Thu, 28 Mar 2024 23:23:55 GMT Last-Modified: Thu, 17 Nov 2022 01:21:46 GMT ETag: "08e7e42d20a324381d05381b43bd496c" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 7324 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 4656 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a2 00 00 00 52 08 06 00 00 00 d7 60 0f 02 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 04 f4 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 65 64 61 32 62 33 66 61 63 2c 20 32 30 32 31 2f 31 31 2f 31 37 2d 31 37 3a 32 33 3a 31 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 Data Ascii: PNGIHDRR`pHYs%%IR$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e cf e9 a3 bb 00 00 17 4e 49 44 41 54 78 9c ed 9d 79 7c 54 e5 b9 c7 bf e7 9c 99 6c 33 93 84 6c 04 b2 12 f6 35 a0 48 ed d5 5a ab 9f aa 95 ba 5e 2a ea 6d 6f 17 6b ad 75 6b 6f dd 17 14 05 04 6a b5 ad 7a 6d 5d ae b7 b6 2e 88 4b af 16 ac 6c a2 2c 2a 8b 20 90 40 16 96 00 01 12 96 90 64 26 cb cc 59 ee 1f 6f 26 c9 4c 26 99 33 99 99 6c e4 fb f9 44 c3 39 ef 39 e7 9d 33 bf bc ef fb 3c ef f3 bc af 64 18 06 83 0c d2 db c8 bd 5d 81 41 06 01 b0 00 4c bd b5 ae b7 eb 91 04 8c 07 d2 81 64 20 0d 48 05 6c 80 04 0c 36 db e1 a3 00 4d 40 1d 70 1c 38 05 9c 06 f6 03 e5 bd 57 2d d8 fe 42 a2 10 62 2f 31 02 b8 04 98 00 9c 05 4c 44 08 72 b0 95 ee 39 9a 81 4a 60 33 50 0a 6c 00 3e 03 1a 7b ba 22 3d Data Ascii: x:xmpmeta> <?xpacket end="r"?>NIDATxy\|Tl3l5HZ^mokukojzm].Kl, @d&Yo&L&3lD993<d]ALd Hl6M@p8W-Bb/1LDr9J`3Pl>{"=
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: c2 9d cf bb 78 6f 83 87 91 c3 e5 48 5b fb c3 80 ff 42 c4 ab fa d0 99 10 7f 09 e4 b4 3f 20 49 a2 f9 1e 93 ad 30 e7 87 f1 11 ad 5d 6f 71 f8 84 ce 75 f3 5d 7c 5e ac 62 51 24 54 cd e0 86 0b 63 f8 db 7d e1 bb a1 b6 95 ab d8 e2 cc bb 6d 0e 1d d7 b9 74 ba 95 57 ef f6 0d 62 9a 94 a7 b0 7a b1 83 8b ee ad 67 cf 21 9d 71 11 10 a3 d5 02 25 87 75 b2 d3 65 fe f9 84 9d 61 29 6d 4d 9f 23 1e 5e bd db 46 43 b3 8b 35 db 3d 64 a7 85 36 b4 30 c1 1d 08 03 b8 a9 fd c1 ce 5e f7 2f fd 0f 48 40 75 8d ce ed 57 c6 92 e2 e8 ff c3 ef c6 66 b8 7a ae 93 2d a5 2a d3 46 29 4c 1e 21 33 a5 40 e1 cd e5 cd 3c f4 6a 78 49 6c 55 a7 0d b6 ed d5 4c bf 27 dd 10 61 72 3f ba 38 26 e0 f9 a1 43 24 56 2f 76 90 9b 2e b3 e7 90 1e 56 37 6d b5 08 43 33 2b 45 66 d5 22 5f 11 b6 e7 c6 8b 62 d0 74 d0 22 ef ff Data Ascii: xoH[B? I0]oqu]\|^bQ$Tc}mtWbzg!q%uea)mM#^FC5=d60^/H@uWfz-*F)L!3@<jxIlUL'ar?8&C$V/v.V7mC3+Ef"_bt"
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: b4 d1 62 3e bc 17 a2 c8 e3 10 f3 cf ad 42 4c 43 ac d6 ea 83 b3 d1 60 44 a6 dc a5 07 be 2f 32 ef 8d 26 5e 5c de cc e4 11 1d 03 0e ac 16 28 3d ac 53 38 42 61 c9 43 41 97 e8 31 4d 45 b5 ce 9e 83 5a 58 16 b7 3f 5e 83 a1 b0 40 e1 3d 93 62 1c 93 2d 33 2e 27 78 93 7c c3 82 96 96 b0 e5 1d f5 62 26 c3 50 68 13 62 0a 30 c4 bf 84 47 25 2c c7 6e 6f f0 bf 2b dc 3c fa 5a 23 e3 72 94 0e 09 ed de 74 d7 d4 44 89 77 e7 d8 23 ea 17 fd a2 58 6d 75 01 45 12 6f 4b e5 1d 33 9a 11 63 30 ae 5f e0 62 c9 a7 6e a6 8e ec 95 ee d8 9f 44 68 13 e2 70 5a 94 d9 1e 4d 07 5b 14 9c d8 6f ad 75 73 c5 1c 27 17 de 53 cf 6f 5f 6c e4 e8 a9 c8 bc 89 95 5f 79 f8 d5 73 0d e4 0f 95 49 88 f5 5d d6 4e 51 a0 aa c6 40 d3 60 e9 c3 36 72 33 22 db ca 6f 29 13 fd 7f 34 fe 6c 5b c7 8c 23 84 18 cd 8c 19 3b e3 Data Ascii: b>BLC`D/2&^\(=S8BaCA1MEZX?^@=b-3.'x\|b&Phb0G%,no+<Z#rtDw#XmuEoK3c0_bnDhpZM[ous'So_l_ysI]NQ@`6r3"o)4l[#;
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 9a f3 7a 26 9a 7c fb 5e 8d a3 a7 f4 88 8f 0f 85 a1 a5 33 3e 57 e6 e3 85 76 e2 4d 24 4e 5e 31 c7 c9 f2 4d 1e 0a 0b 14 0a 0b 14 56 6f 33 27 c6 24 9b 30 60 26 f6 8e 18 d7 23 7a 63 1f 21 ee 23 c0 ba c7 49 09 12 7b 8f e8 d4 37 44 c7 37 91 e2 90 58 f6 b8 c8 2a 2b 3d 1c a0 9b 56 21 3f 43 e6 60 95 4e 45 95 4e 4e 9a d4 c1 57 08 50 74 40 e3 de eb e2 b8 fd ca 9e 4b 77 dd 50 a4 e2 d1 8c 88 1a 43 de 96 70 6c 8e cc 9a 45 0e 92 4d 38 c9 af 98 e3 e4 a3 cd 42 84 ba 26 7c bf 53 0a 14 56 6d f3 70 cd 63 ce a0 d7 7b c5 38 29 5f a1 f8 60 8f 8a b1 c8 fb 8b ff 10 7b b3 7f c9 c4 04 89 d2 4a 8d f5 45 11 5a eb 22 00 39 19 22 9c 3d 23 59 a6 ac 13 6b 7a 88 43 4c dd 05 f2 15 ee dc af 71 c3 45 31 2c 0c c1 c1 1b 09 be de ab 31 c4 1e b9 65 39 ac 8a 68 09 c7 79 45 68 66 4c 38 df c5 b2 2f Data Ascii: z&\|^3>WvM$N^1MVo3'$0`&#zc!#I{7D7X*+=V!?C`NENNWPt@KwPCplEM8B&\|SVmpc{8)_`{JEZ"9"=#YkzCLqE1,1e9hyEhfL8/
2024-03-29 00:41:30 UTC	824	IN	Data Raw: a4 c6 d9 c7 32 71 a2 44 a3 db e0 eb 7d 1a a9 89 d1 cb d6 1b a0 1c 00 7e dd 55 01 33 fd cb 7f 23 8c 17 1f 3c 9a 08 d3 2a a9 d4 b8 fa 31 67 b4 d6 5a ee 53 ec dc af 51 56 a9 99 5a 67 70 10 1f 6e 06 ba 9c 0d 31 3b d0 f9 05 01 52 09 3c 2a 4c cc 53 d8 54 a2 f1 9d 7b ea a9 75 0d ec 76 62 7d 91 d8 f2 36 5a d1 d8 03 94 f9 c0 aa 60 85 cc be d2 93 c0 75 81 4e a8 1a 4c cc 93 f9 aa 5c 63 c6 9d f5 ec 39 34 70 9b c6 6d e5 1a 71 31 83 dd 72 08 ac 04 1e 36 53 30 94 bf ed 35 c0 0f 02 9d 50 35 98 90 2b 73 b2 4e e7 9b 77 d5 f3 e2 f2 e8 cf 49 f7 34 87 4f e8 6c 2d 8d 4e 34 f6 00 65 0b 70 99 d9 c2 a1 76 32 ef 00 3f 0e 74 c2 a3 89 99 97 d4 44 89 5b fe e0 e2 8a 39 4e 0e 04 48 7c ea af 6c 2d d3 42 da 3b e5 0c a7 08 f8 16 60 5a 00 dd 19 ed bc 46 27 62 54 35 91 07 31 6d b4 c2 a7 3b Data Ascii: 2qD}~U3#<1gZSQVZgpn1;R<LST{uvb}6Z`uNL\c94pmq1r6S05P5+sNwI4Ol-N4epv2?tD[9NH\|l-B;`ZF'bT51m;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49888	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	613	OUT	GET /aaq/fp/css/react-wafer-nativeAd.NativeAd.atomic.ltr.7bee2ddba507c69e75f32dcccc97e37f.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:30 UTC	847	IN	HTTP/1.1 200 OK x-amz-id-2: hjB+sGWsTLhXOQDJGrnIPG/W2pby0Lu3B1egz65SLFK02gonT3jbq/OGWjyqMCMyWIUutn5iVd/YxCS/ieaORATCc5kiRsEq739Nxw8o0MY= x-amz-request-id: NMYYAE6QSGXPDXK9 Date: Thu, 28 Mar 2024 23:49:42 GMT Last-Modified: Tue, 26 Mar 2024 17:37:57 GMT ETag: "7bee2ddba507c69e75f32dcccc97e37f" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: hWipBzEgdyJ68FJi8Ys8GqEkFvaQrryc Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 29474 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 3109 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:30 UTC	424	IN	Data Raw: 23 61 74 6f 6d 69 63 20 2e 41 69 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 41 63 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 41 73 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 63 65 6e 74 65 72 7d 2e 61 63 74 69 76 65 20 2e 61 63 74 69 76 65 5f 41 6e 69 6d 64 75 72 5c 28 35 30 30 30 6d 73 5c 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 35 73 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 63 74 69 76 65 20 2e 61 63 74 69 76 65 5f 41 6e 69 6d 6e 5c 28 5c 24 63 61 72 6f 75 73 65 6c 41 6e 69 6d 61 74 69 6f 6e 4e 61 6d 65 5c 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 6c 69 64 65 21 69 6d 70 6f 72 74 61 6e 74 7d Data Ascii: #atomic .Ai$c${align-items:center}#atomic .Ac$c${align-content:center}#atomic .As$c${align-self:center}.active .active_Animdur$5000ms${animation-duration:5s!important}.active .active_Animn$\$carouselAnimationName${animation-name:slide!important}
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 65 5c 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 70 6c 61 79 2d 73 74 61 74 65 3a 69 6e 69 74 69 61 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 61 72 6f 75 73 65 6c 2d 61 64 2d 73 63 72 6f 6c 6c 76 69 65 77 2d 77 69 74 68 2d 69 6e 64 69 63 61 74 6f 72 73 3a 68 6f 76 65 72 20 2e 63 61 72 6f 75 73 65 6c 2d 61 64 2d 73 63 72 6f 6c 6c 76 69 65 77 2d 77 69 74 68 2d 69 6e 64 69 63 61 74 6f 72 73 5c 3a 68 5f 41 6e 69 6d 70 73 5c 28 70 5c 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 70 6c 61 79 2d 73 74 61 74 65 3a 70 61 75 73 65 64 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 41 72 5c 28 5c 24 72 65 63 74 61 6e 6c 67 65 41 73 70 65 63 74 52 61 74 69 6f 5c 29 7b 61 73 70 65 63 74 2d 72 61 74 69 6f 3a 31 2e 39 32 7d 23 61 74 6f 6d 69 63 20 2e 42 64 5c 28 30 5c 29 2c Data Ascii: e\){animation-play-state:initial!important}.carousel-ad-scrollview-with-indicators:hover .carousel-ad-scrollview-with-indicators\:h_Animps$p${animation-play-state:paused!important}#atomic .Ar$\$rectanlgeAspectRatio${aspect-ratio:1.92}#atomic .Bd$0$,
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 7d 23 61 74 6f 6d 69 63 20 2e 42 64 77 5c 28 74 5c 29 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 74 68 69 6e 7d 23 61 74 6f 6d 69 63 20 2e 42 64 74 77 5c 28 32 70 78 5c 29 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 65 6e 64 77 5c 28 31 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 3a 31 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 65 6e 64 77 5c 28 32 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 3a 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 31 30 70 78 5c 29 2c 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 31 30 70 78 5c 29 5c 3a 5c 3a 62 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e Data Ascii: }#atomic .Bdw$t${border-width:thin}#atomic .Bdtw$2px${border-top-width:2px}#atomic .Bdendw$1px${border-right-width:1px}#atomic .Bdendw$2px${border-right-width:2px}#atomic .Bdrs$10px$,#atomic .Bdrs$10px$\:\:b:before{border-radius:10px}#atomic .
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 5c 29 5c 3a 68 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 66 70 2d 61 6c 70 68 61 2d 30 35 29 7d 23 61 74 6f 6d 69 63 20 2e 42 67 5c 28 2d 2d 66 70 2d 62 6c 61 63 6b 2d 31 30 5c 29 5c 3a 61 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 66 70 2d 62 6c 61 63 6b 2d 31 30 29 7d 23 61 74 6f 6d 69 63 20 2e 42 67 69 5c 28 66 6c 61 73 68 53 61 6c 65 41 63 74 69 76 65 42 61 63 6b 67 72 6f 75 6e 64 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 23 46 46 43 37 30 30 2c 23 46 46 34 44 35 32 29 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 5c 23 32 64 33 35 33 65 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 64 33 Data Ascii: \)\:h:hover{background:var(--fp-alpha-05)}#atomic .Bg$--fp-black-10$\:a:active{background:var(--fp-black-10)}#atomic .Bgi$flashSaleActiveBackground${background-image:linear-gradient(90deg,#FFC700,#FF4D52)}#atomic .Bgc$\#2d353e${background-color:#2d3
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 72 28 2d 2d 73 70 69 72 75 6c 69 6e 61 29 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 2d 2d 77 68 69 74 65 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 68 69 74 65 29 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 2d 2d 79 62 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 79 62 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 74 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 5c 23 31 38 38 66 66 66 5c 2e 30 38 5c 29 5c 3a 68 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f Data Ascii: r(--spirulina)}#atomic .Bgc$--white${background-color:#fff;background-color:var(--white)}#atomic .Bgc$--yb-marshmallow${background-color:var(--yb-marshmallow)}#atomic .Bgc$t${background-color:transparent}#atomic .Bgc$\#188fff\.08$\:h:hover{backgro
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 20 31 36 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 34 29 7d 2e 61 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 61 64 2d 63 6f 6e 74 65 6e 74 5c 3a 68 5f 43 5c 28 5c 24 73 74 72 65 61 6d 42 72 61 6e 64 48 6f 76 65 72 43 6c 61 73 73 5c 29 7b 63 6f 6c 6f 72 3a 23 37 65 31 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 75 6c 6b 2d 70 61 6e 74 73 29 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 5c 23 66 66 33 30 30 38 5c 29 7b 63 6f 6c 6f 72 3a 23 66 66 33 30 30 38 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 5c 24 63 5f 69 63 6f 6e 5c 29 7b 63 6f 6c 6f 72 3a 23 63 30 63 33 63 61 7d 23 61 74 6f 6d 69 63 20 2e 43 Data Ascii: 16px rgba(0,0,0,.2);box-shadow:var(--elevation-4)}.ad-content:hover .ad-content\:h_C$\$streamBrandHoverClass${color:#7e1fff!important;color:var(--hulk-pants)!important}#atomic .C$\#ff3008${color:#ff3008}#atomic .C$\$c_icon${color:#c0c3ca}#atomic .C
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 77 68 69 74 65 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 5c 24 73 74 72 65 61 6d 42 72 61 6e 64 48 6f 76 65 72 43 6c 61 73 73 5c 29 5c 3a 66 76 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2c 23 61 74 6f 6d 69 63 20 2e 43 5c 28 5c 24 73 74 72 65 61 6d 42 72 61 6e 64 48 6f 76 65 72 43 6c 61 73 73 5c 29 5c 3a 68 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 37 65 31 66 66 66 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 75 6c 6b 2d 70 61 6e 74 73 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 66 70 2d 61 6c 70 68 61 2d 37 30 5c 29 5c 3a 68 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 70 2d 61 6c 70 68 61 2d 37 30 29 7d 2e 77 61 66 65 72 2d 63 6f 75 6e 74 64 6f 77 6e 2d 65 78 70 69 72 65 64 20 2e 77 61 66 65 72 2d 63 6f 75 6e 74 64 6f 77 6e 2d 65 78 70 69 Data Ascii: white}#atomic .C$\$streamBrandHoverClass$\:fv:focus-visible,#atomic .C$\$streamBrandHoverClass$\:h:hover{color:#7e1fff;color:var(--hulk-pants)}#atomic .C$--fp-alpha-70$\:h:hover{color:var(--fp-alpha-70)}.wafer-countdown-expired .wafer-countdown-expi
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 2e 73 68 6f 77 2d 74 68 65 6e 2d 68 69 64 65 2d 61 64 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 2e 73 68 6f 77 2d 74 68 65 6e 2d 68 69 64 65 2d 61 64 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 44 5c 28 6e 5c 29 2c 2e 77 61 66 65 72 2d 61 63 74 69 6f 6e 2d 69 73 2d 74 72 75 65 20 2e 77 61 66 65 72 2d 61 63 74 69 6f 6e 2d 69 73 2d 74 72 75 65 5f 44 5c 28 6e 5c 29 2c 2e 77 61 66 65 72 2d 63 6f 75 6e 74 64 6f 77 6e 2d 65 78 70 69 72 65 64 20 2e 77 61 66 65 72 2d 63 6f 75 6e 74 64 6f 77 6e 2d 65 78 70 69 72 65 64 5f 44 5c 28 6e 5c 29 2c 2e 77 61 66 65 72 2d 63 6f 75 6e 74 64 6f 77 6e 2d 6c 65 73 73 74 68 61 6e 31 68 20 2e 77 61 66 65 72 2d 63 6f 75 6e 74 64 6f 77 6e 2d 6c 65 73 73 74 68 61 6e 31 68 5f 44 5c 28 6e 5c 29 2c 2e 77 61 66 65 72 2d 63 6f 75 6e 74 64 Data Ascii: .show-then-hide-ad-confirmation .show-then-hide-ad-confirmation_D$n$,.wafer-action-is-true .wafer-action-is-true_D$n$,.wafer-countdown-expired .wafer-countdown-expired_D$n$,.wafer-countdown-lessthan1h .wafer-countdown-lessthan1h_D$n$,.wafer-countd
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 73 74 5f 4f 72 5c 28 32 5c 29 7b 6f 72 64 65 72 3a 32 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 4a 63 5c 28 63 5c 29 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 4a 63 5c 28 73 61 5c 29 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 61 72 6f 75 6e 64 7d 23 61 74 6f 6d 69 63 20 2e 4a 63 5c 28 73 62 5c 29 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 23 61 74 6f 6d 69 63 20 2e 46 78 77 5c 28 77 5c 29 7b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 23 61 74 6f 6d 69 63 20 2e 46 6c 5c 28 65 6e 64 5c 29 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 23 61 74 6f 6d 69 63 20 2e 46 6c 5c 28 73 74 61 72 74 5c 29 7b 66 6c 6f 61 74 3a Data Ascii: st_Or$2${order:2!important}#atomic .Jc$c${justify-content:center}#atomic .Jc$sa${justify-content:space-around}#atomic .Jc$sb${justify-content:space-between}#atomic .Fxw$w${flex-wrap:wrap}#atomic .Fl$end${float:right}#atomic .Fl$start${float:
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 65 69 67 68 74 3a 31 30 30 25 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 31 31 5c 2e 35 70 78 5c 29 2d 2d 6d 69 6e 33 32 30 7b 68 65 69 67 68 74 3a 31 31 2e 35 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 31 32 70 78 5c 29 7b 68 65 69 67 68 74 3a 31 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 31 33 70 78 5c 29 7b 68 65 69 67 68 74 3a 31 33 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 31 34 30 70 78 5c 29 7b 68 65 69 67 68 74 3a 31 34 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 31 36 70 78 5c 29 7b 68 65 69 67 68 74 3a 31 36 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 31 38 70 78 5c 29 7b 68 65 69 67 68 74 3a 31 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 31 70 78 5c 29 7b 68 65 69 67 68 74 3a 31 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 32 30 Data Ascii: eight:100%}#atomic .H$11\.5px$--min320{height:11.5px}#atomic .H$12px${height:12px}#atomic .H$13px${height:13px}#atomic .H$140px${height:140px}#atomic .H$16px${height:16px}#atomic .H$18px${height:18px}#atomic .H$1px${height:1px}#atomic .H\(20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49885	3.226.25.25	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	715	OUT	GET /idex/did-004f/any?duid=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q&gdpr=0&did=did-004f&cd=.com&resolve=nonId&resolve=index&resolve=magnite&resolve=pubmatic HTTP/1.1 Host: idx.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:30 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:30 GMT Content-Type: application/json Content-Length: 169 Connection: close trace-id: 732b321d42f7ac22 Vary: Origin Expires: Sat, 30 Mar 2024 00:41:30 GMT Set-Cookie: lidid=3efb4240-3aa8-40ba-98d0-0783f915886a; Max-Age=63072000; Expires=Sun, 29 Mar 2026 00:41:30 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 3 Cache-Control: max-age=86399, private Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Credentials: true
2024-03-29 00:41:30 UTC	169	IN	Data Raw: 7b 22 6e 6f 6e 49 64 22 3a 22 76 4e 5f 52 69 6b 5a 77 68 6f 5a 57 78 54 4d 70 66 4a 42 63 44 63 54 38 52 57 61 66 4c 31 39 54 36 4c 61 75 48 41 22 2c 22 69 6e 64 65 78 22 3a 22 5a 51 6a 59 72 66 2e 31 44 30 73 68 4f 57 52 52 52 6b 39 30 39 51 41 41 26 31 30 30 38 22 2c 22 6d 61 67 6e 69 74 65 22 3a 22 4c 4d 50 49 30 4c 4c 42 2d 31 39 2d 4a 53 4f 36 22 2c 22 70 75 62 6d 61 74 69 63 22 3a 22 38 44 44 45 34 39 31 41 2d 33 31 41 36 2d 34 41 35 42 2d 39 45 31 31 2d 44 34 39 36 39 42 34 33 46 39 37 42 22 7d Data Ascii: {"nonId":"vN_RikZwhoZWxTMpfJBcDcT8RWafL19T6LauHA","index":"ZQjYrf.1D0shOWRRRk909QAA&1008","magnite":"LMPI0LLB-19-JSO6","pubmatic":"8DDE491A-31A6-4A5B-9E11-D4969B43F97B"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49889	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	763	OUT	GET /uu/api/res/1.2/zfAlXE4gXTPcZHRxD2dicQ--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/495c67a0-ed60-11ee-bbdf-e84806c4f88e.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:30 UTC	1290	IN	HTTP/1.1 200 OK Content-Length: 81314 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 444719919102274071108771966721167519666,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="495c67a0-ed60-11ee-bbdf-e84806c4f88e.webp" Edge-Cache-Tag: 444719919102274071108771966721167519666,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Etag: "ff76e493abb1795309adedcb5408033f" Last-Modified: Fri, 29 Mar 2024 00:07:13 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=700,height=420,bytes=81314,owidth=4019,oheight=2679,obytes=2642233,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 6481a0a9a987071686ef6489bcca822b Accept-Ranges: bytes Date: Fri, 29 Mar 2024 00:07:25 GMT X-Served-By: cache-iad-kiad7000148-IAD X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1711670844.197110,VS0,VE942 Age: 2047 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 6481a0a9a987071686ef6489bcca822b cld_by: cache-iad-kiad7000148-IAD cld_latency: 942 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1
2024-03-29 00:41:30 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 52 49 46 46 9a 3d 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 bb 02 00 a3 01 00 49 43 43 50 48 0c 00 00 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: RIFF=WEBPVP8X ICCPHHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 01 e1 01 e9 01 f2 01 fa 02 03 02 0c 02 14 02 1d 02 26 02 2f 02 38 02 41 02 4b 02 54 02 5d 02 67 02 71 02 7a 02 84 02 8e 02 98 02 a2 02 ac 02 b6 02 c1 02 cb 02 d5 02 e0 02 eb 02 f5 03 00 03 0b 03 16 03 21 03 2d 03 38 03 43 03 4f 03 5a 03 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 Data Ascii: &/8AKT]gqz!-8COZfr~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 78 cc 79 2a 79 89 79 e7 7a 46 7a a5 7b 04 7b 63 7b c2 7c 21 7c 81 7c e1 7d 41 7d a1 7e 01 7e 62 7e c2 7f 23 7f 84 7f e5 80 47 80 a8 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 33 89 99 89 fe 8a 64 8a ca 8b 30 8b 96 8b fc 8c 63 8c ca 8d 31 8d 98 8d ff 8e 66 8e ce 8f 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac Data Ascii: xy*yyzFz{{c{\|!\|\|}A}~~b~#Gk0WGr;i3d0c1f6n?zM _4uL$hBd@iG&vV8nR7u\
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: c2 fc ab 62 69 86 9f 76 86 e3 ff bd 01 c9 39 5b 65 1a 5b 5c 4e 73 e4 8b ce b3 87 fd 25 7c 14 eb bb 7d 99 df 31 59 3d 56 75 00 cb c1 55 3f 93 11 bf c6 e8 4b 0f cd da e9 50 6e b2 ad b3 f6 22 63 74 49 9a 80 d4 e9 b5 18 98 ad 61 e9 a9 4c 5a 8c 01 e6 75 2d b0 d4 da 87 64 6a 98 f1 41 b4 cf 50 c5 49 af 3b 57 ba d4 45 d9 c0 99 1c d9 d0 90 87 bd 13 ba a4 55 92 b6 8a ff 32 45 49 e8 fa e6 3d 76 c3 7a 42 37 7e 6d 16 d8 d2 d7 40 40 87 f1 0b 08 fd de c2 e9 cb 6e 45 3b 20 0d 3a 29 a9 7f 97 a1 c1 ff 7c 52 5f 58 27 ce f4 07 ea ae 08 f5 7e e4 7a 1c 33 3d 4d 7f 47 ec 73 a5 7f dc 54 73 ee ca 09 a6 04 ed 58 f9 72 d4 9c 3c 00 da ca c0 6c 1d 2f fa 90 be ed 37 09 73 55 69 f8 ce aa f5 1c 47 de 80 dd 7a d3 1f c0 4c 65 95 77 6b 89 df ad a1 c9 8c be 3c dd ca ce 58 6b 6d c5 b3 27 b4 Data Ascii: biv9[e[\Ns%\|}1Y=VuU?KPn"ctIaLZu-djAPI;WEU2EI=vzB7~m@@nE; :)\|R_X'~z3=MGsTsXr<l/7sUiGzLewk<Xkm'
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 5c a6 41 3e 12 96 7f 5d 7a e7 ad 83 38 fa 71 93 3f 1c 93 17 32 57 86 3d 8e 1d e2 25 73 01 bf 60 94 ff 1a dd 5a 5e 07 ce 10 ee ff 5f 81 84 13 8d a0 de cc 6c db c3 ce 90 b5 4a 5d 23 a5 7a 38 73 23 3f c1 29 11 86 3a 27 47 68 7a 89 ed ed 89 98 df 28 de 68 f6 d7 cd 9c 76 ff bc c0 45 61 bb 5e e5 3d 2f fb 5e 44 b8 d2 b1 a8 fa 26 ac 91 91 08 c3 74 41 fe 9a 3b de 9c 70 66 4e 2b dd 8c 0d e5 7b 89 d8 df d4 b9 84 33 fc 05 ce c9 da 11 f1 c9 50 d2 1c 95 4a 2f 7b e0 20 8b c9 2d 6a a1 ac af 5d 3a 56 bb 5e db d8 2d d1 71 2c 5c 11 7f de a2 0f d3 fc 9d 90 38 56 09 58 d8 c5 c6 62 08 74 77 7d 0a 9b 30 0e 08 0a d7 dd bc aa 53 36 a9 be 4d 03 5d 9b 68 5d ac 98 52 6a 9a a0 37 2a b3 8b 99 5c 6f de 99 ab e3 1a 8f 22 72 f5 15 d5 f2 99 3a d5 a5 ce 59 d0 a1 12 54 48 7b dc b6 45 7b 3b Data Ascii: \A>]z8q?2W=%s`Z^_lJ]#z8s#?):'Ghz(hvEa^=/^D&tA;pfN+{3PJ/{ -j]:V^-q,\8VXbtw}0S6M]h]Rj7*\o"r:YTH{E{;
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 34 9c 9e 0d e3 4b ed 6a 38 6b 19 c9 27 96 c4 df 5e 89 c6 51 32 9d 5b d0 c1 85 14 25 3a 8e 41 d6 97 49 5a f3 57 d0 d3 58 0a e1 c3 1c 48 2d 6a 82 93 8c 88 d9 b9 69 f3 66 11 ba c4 0c 81 33 43 ee 0c 47 e9 43 ae 71 67 6a b1 a2 bd 5f b1 c7 39 21 40 e5 34 4f e1 cf 3b cc 0a 82 a3 df 1a 2e f0 f4 75 e3 4a 59 c6 2e e2 2f 4d 1c 46 f6 2e 81 80 8a 94 a5 c9 47 2a 50 1b e8 4a 60 64 51 26 c6 e9 10 ed ce 41 f3 15 4b 9c d0 3b 40 13 c5 35 95 bc e6 27 2e 28 fb af 9d 31 c7 47 3a 07 ee 6a 7e 45 5a 8b 0d c6 80 2c 71 ec 7f 93 80 12 4e d5 71 f5 2b 6f 87 b4 71 84 6f 13 1f 89 56 2d 03 9f 34 97 6a 6e 8a 1d 35 ae a8 00 9a 52 59 41 70 28 c6 4a 4b f3 88 6c e2 3a 37 02 a5 8e aa ac 9e ad 1d cf 1b 1e 4d 3e df f0 a6 b1 03 b0 b8 9d f0 2d c5 ab a1 8f ff f9 a8 b5 a4 f4 77 96 2e b3 c9 b5 72 04 Data Ascii: 4Kj8k'^Q2[%:AIZWXH-jif3CGCqgj_9!@4O;.uJY./MF.G*PJ`dQ&AK;@5'.(1G:j~EZ,qNq+oqoV-4jn5RYAp(JKl:7M>-w.r
2024-03-29 00:41:30 UTC	1300	IN	Data Raw: 63 be 30 fe a2 c0 3e b5 de af 07 fc 96 eb 6b b1 75 40 e1 19 19 17 1c f2 be 92 a5 40 84 79 9a 1d 99 7d 25 30 db 78 84 24 70 53 43 ef 17 f4 87 de ed 5f f2 ef 01 a8 6a c8 7b 40 f2 d5 6b 3a a8 fb 65 49 ee 02 4c 8c c8 16 55 45 d8 98 2d 6e 45 64 69 2d af 28 60 64 2e 9b c9 f3 9a bb 29 dc 46 17 ce cf 7d 94 65 a2 7e e3 50 87 b1 8d c3 07 ef ea 01 8f 7c 58 3d de 9c cc 33 57 a1 19 10 12 37 d0 20 fa 7b 07 13 08 22 22 da 27 2b 02 49 7a f9 0f 42 f8 dd 27 3a 73 39 2e 30 56 bd 31 d9 87 85 7f 4d 26 f2 34 28 4f fe 0c 8a 1e 7a 9e f1 19 4a 23 dc 99 2c 35 41 c6 05 9d f9 6a 06 6e 1f ec a9 14 45 c6 a8 47 42 2b 03 8b 25 2e 92 55 27 e7 90 ff b1 6b f3 77 db 90 6b b5 32 d1 4c c9 07 0b be 12 55 5c 9d a4 42 7d 61 66 1b 2e a6 96 59 97 55 02 f2 da 42 82 30 c4 dc 50 d4 08 82 e2 12 16 a5 Data Ascii: c0>ku@@y}%0x$pSC_j{@k:eILUE-nEdi-(`d.)F}e~P\|X=3W7 {""'+IzB':s9.0V1M&4(OzJ#,5AjnEGB+%.U'kwk2LU\B}af.YUB0P
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: eb fe c5 3b 3a 20 ca 99 30 7b b1 9c c6 bb be 70 11 c4 82 34 a6 96 4d d0 03 dc bb e6 06 bc cf 1b fe 61 ab ef 18 f0 e7 cd 6b 92 4b 20 78 47 4c b2 54 5e 18 f6 b7 3d 88 05 ed 34 6f b9 1d b2 29 d5 3f 9d 10 05 35 35 b3 07 72 5a dc 0f 08 25 3c ee b2 d2 5d 44 b5 9b 7b f4 8f 87 43 10 91 79 1e 12 5b c9 35 4c 28 c4 ce 7e e9 79 fa 33 6e 59 8d ae c3 0b d2 e5 61 97 5b d6 ef eb 5a f5 89 d3 d3 16 5a df 29 cd 5d 2e c5 e0 77 ac 68 86 8a 58 37 fb a6 a6 e8 e8 16 1c ed 4f ad 33 9e 82 0f c0 88 39 7f b8 01 e3 d7 3d 7d c6 55 26 9f a8 5f 56 38 68 09 6e 91 60 d3 78 cc 49 d5 f5 3b 95 40 21 df 60 f0 99 02 a6 b8 8d 8d 11 ff a8 1c d8 bc a5 d7 5f 2a 95 b0 5d c1 47 3d b7 54 79 f3 0c 91 8f b0 37 bd 73 2d 0c 8d b7 be b7 46 34 6e 7f 4c c8 60 51 ec 73 e7 1e af 93 cd 81 b4 55 6b bb 0a 33 bf Data Ascii: ;: 0{p4MakK xGLT^=4o)?55rZ%<]D{Cy[5L(~y3nYa[ZZ)].whX7O39=}U&_V8hn`xI;@!`_*]G=Ty7s-F4nL`QsUk3
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 70 65 40 bd 3c 9b d9 b1 25 94 c7 a3 68 41 7c ac c4 e5 8c 72 95 e4 24 17 cf 07 b7 5c e7 53 35 2f 85 af dd c0 10 6d 8b 36 53 9e 6f 62 fc 90 64 08 b4 44 3a 4b 5f 02 c5 08 41 f7 4d e0 ec 87 92 b9 18 8b a1 c4 02 30 1d 25 78 9a 3c cf ab 74 f6 2f a0 32 d9 ca 61 dc e0 18 ca 43 8d d1 d4 6a c6 ae 42 8e 40 75 d0 d0 07 73 06 53 19 7e bc 3b 09 e5 fe b9 19 f2 24 45 73 ad dc e3 19 8c f1 02 91 ae a9 6c 75 28 4e 10 ae 27 71 d0 0a db c8 05 31 38 4c c1 26 be 3b bf 58 c0 18 00 69 39 b9 af e9 26 11 a0 6e db 0f 92 1d 46 b5 bb cd 01 49 54 a6 4c 84 7e da e5 6b 79 45 aa a3 73 27 08 f6 88 55 fb d3 36 0c 77 31 49 c9 a3 69 9d 0b a3 5a 07 12 fa 7d 5a e8 6d cb 1f 26 1e 91 a0 88 9f 61 f9 44 b5 94 12 c6 64 58 4b 0e 38 c9 15 1a a1 9b da cc bf f1 e7 95 b8 17 66 13 10 24 c2 fc 79 ac 6d 2b Data Ascii: pe@<%hA\|r$\S5/m6SobdD:K_AM0%x<t/2aCjB@usS~;$Eslu(N'q18L&;Xi9&nFITL~kyEs'U6w1IiZ}Zm&aDdXK8f$ym+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49890	34.200.65.202	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	1188	OUT	GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2hk0:19e0~2hk0:19e7~2hk0"; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A
2024-03-29 00:41:30 UTC	571	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:30 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 29-Mar-2025 00:41:30 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.106
2024-03-29 00:41:30 UTC	54	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 67 69 4a 63 61 71 6c 45 32 75 4b 75 36 5a 30 37 72 6c 39 41 32 6d 74 77 6d 47 53 4f 54 42 4c 5a 7e 41 22 7d 0d 0a Data Ascii: 30{"axid": "y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A"}
2024-03-29 00:41:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49891	34.200.65.202	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	976	OUT	GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2hk0:19e0~2hk0:19e7~2hk0"; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A
2024-03-29 00:41:30 UTC	455	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:30 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2hk0:19e0~2hk0:19e7~2hk0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 29-Mar-2025 00:41:30 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.106
2024-03-29 00:41:30 UTC	54	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 57 71 62 76 79 52 4e 45 32 75 4c 71 62 37 75 48 2e 42 71 41 33 59 4d 49 42 32 34 61 6c 6f 4b 4d 7e 41 22 7d 0d 0a Data Ascii: 30{"axid": "y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A"}
2024-03-29 00:41:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49883	23.43.243.35	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	678	OUT	GET /ss/nes/dfs?itype=YHB&type=1&cid=8YHBJ3BJ0&dn=www.yahoo.com&cc=US&ugd=desktop&callback=window.advBidxc.pf_rtd&algo=exploitation HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10
2024-03-29 00:41:31 UTC	362	IN	HTTP/1.1 200 OK Content-Type: text/javascript timing-allow-origin: * Expires: Fri, 29 Mar 2024 00:41:31 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:31 GMT Content-Length: 11020 Connection: close Strict-Transport-Security: max-age=604800 Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-29 00:41:31 UTC	11020	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 76 42 69 64 78 63 2e 70 66 5f 72 74 64 28 7b 22 73 63 68 65 6d 61 22 3a 7b 22 64 65 6c 69 6d 69 74 65 72 22 3a 22 7c 22 2c 22 66 69 65 6c 64 73 22 3a 5b 22 63 72 69 64 22 2c 22 64 66 70 44 69 76 22 2c 22 70 76 69 64 22 5d 7d 2c 22 76 61 6c 75 65 73 22 3a 7b 22 38 37 37 37 36 37 31 38 32 7c 2a 7c 32 35 30 31 34 22 3a 30 2c 22 31 34 35 30 33 36 34 33 30 7c 2a 7c 2a 22 3a 30 2e 33 2c 22 37 38 30 34 37 32 37 33 33 7c 2a 7c 32 35 30 31 34 22 3a 30 2c 22 32 35 38 36 38 38 36 30 30 7c 2a 7c 32 35 33 31 30 22 3a 30 2e 33 2c 22 32 31 37 30 36 33 37 33 34 7c 2a 7c 32 35 30 31 34 22 3a 30 2c 22 37 32 38 39 33 36 38 30 37 7c 2a 7c 2a 22 3a 30 2e 33 2c 22 33 32 35 37 37 34 35 34 35 7c 2a 7c 2a 22 3a 30 2e 33 2c 22 35 33 33 31 32 36 37 30 35 Data Ascii: window.advBidxc.pf_rtd({"schema":{"delimiter":"\|","fields":["crid","dfpDiv","pvid"]},"values":{"877767182\|\|25014":0,"145036430\|\|":0.3,"780472733\|\|25014":0,"258688600\|\|25310":0.3,"217063734\|\|25014":0,"728936807\|\|":0.3,"325774545\|\|":0.3,"533126705

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49884	23.43.243.35	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	604	OUT	GET /tcb.js?&cb=window.advBidxc.multiBidTemplatefetch&v=1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10
2024-03-29 00:41:31 UTC	346	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 50 Content-Type: text/javascript; charset=utf-8 X-MNET-H: E Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Cache-Control: max-age=172800 Expires: Sun, 31 Mar 2024 00:41:31 GMT Date: Fri, 29 Mar 2024 00:41:31 GMT Connection: close
2024-03-29 00:41:31 UTC	50	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 76 42 69 64 78 63 2e 6d 75 6c 74 69 42 69 64 54 65 6d 70 6c 61 74 65 66 65 74 63 68 28 7b 22 5f 22 3a 22 27 27 22 7d 29 3b Data Ascii: window.advBidxc.multiBidTemplatefetch({"_":"''"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49893	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	763	OUT	GET /uu/api/res/1.2/YR.7.XGIlIiS7.K_UjfdhA--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/d0833af0-ed4d-11ee-bdbe-cca2e24df743.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:31 UTC	1297	IN	HTTP/1.1 200 OK Content-Length: 73188 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 296746532157632283267262690971143825730,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="d0833af0-ed4d-11ee-bdbe-cca2e24df743.webp" Edge-Cache-Tag: 296746532157632283267262690971143825730,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Etag: "87bb7ca478ec69aaa27a14f2d9067024" Last-Modified: Thu, 28 Mar 2024 21:55:54 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=700,height=420,bytes=73188,owidth=4680,oheight=2628,obytes=1025935,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: fb4e1668386c34c719fe3fd4d93f9797 Accept-Ranges: bytes Date: Thu, 28 Mar 2024 21:55:54 GMT X-Served-By: cache-lga21943-LGA X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1711662954.528836,VS0,VE1245 Age: 9938 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: fb4e1668386c34c719fe3fd4d93f9797 cld_by: cache-lga21943-LGA cld_latency: 1245 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-03-29 00:41:31 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 52 49 46 46 dc 1d 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 bb 02 00 a3 01 00 49 43 43 50 30 02 00 00 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 cf 00 06 00 03 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: RIFFWEBPVP8X ICCP00ADBEmntrRGB XYZ acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 54 ce 41 a9 d5 b2 9f ef 6d 17 a8 54 a9 c7 ce 2a bd 2c 8c 99 7b ae 1f c9 d0 97 d9 6d be 6e 8c ef 05 4c c0 1d 9d 1b 9b 8a 1b f8 22 e2 85 29 7b bf 72 5d 2f f7 7a 87 e3 97 42 3f 9f 35 86 db 4b c3 e4 7d 0a 85 73 4e 42 da d1 0f 2a 6a 76 2d 4f e6 fd c4 ec 33 f9 b7 7f f6 d4 55 92 9a c4 0e fc f9 2b 14 df 04 47 b1 ca c0 eb 1b 85 0e 3a 73 98 23 79 af 2e 84 ba 89 30 4b e2 f6 47 58 41 dd 07 5d 65 b8 d1 b2 9b 24 f9 b6 56 8c b3 f6 fc 33 56 96 8f ca 33 49 3d af d4 3c ea f9 25 ad 92 38 9e ab 33 ce e3 65 14 8a ef f7 05 f9 2d 3f 1e 5b 4d 75 df 4d 2a 9e 66 41 cb 04 f9 62 bf 30 6a d3 33 dd 71 b4 17 2a 7e 1e 1f 0e d7 bf 28 1f c8 8a ba 58 2d 68 3b fb 8a 20 b1 29 d7 48 a5 06 63 2b d0 5e 7a 20 2c 75 9d df 9b 0f 68 9e 2e 60 72 2d e9 e4 87 6e 81 a5 2d ba 8a 97 01 af 13 20 e0 be 10 Data Ascii: TAmT,{mnL"){r]/zB?5K}sNBjv-O3U+G:s#y.0KGXA]e$V3V3I=<%83e-?[MuMfAb0j3q~(X-h; )Hc+^z ,uh.`r-n-
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: df ec 04 9a 53 1c ad e2 de 09 2c 5a 53 2d 03 56 1b 83 a2 ed cd d9 7e 92 6e ed ec 12 ab ee 14 de c9 48 d4 b8 08 ba 63 d3 4c 25 42 89 5d 8d d8 61 8c 93 b7 1d f0 ae 2a 97 34 fe 32 57 61 6f a2 1b 4c b3 92 95 61 81 a0 84 1b d4 0d d5 04 ec 82 e7 2c 4a 60 c5 b5 f3 22 af 24 1b d0 b0 1b 39 56 59 c0 3b e1 38 8c 2a f5 9d 1c 63 a8 91 03 42 bb 2d 37 cb b8 b5 03 01 86 fe 59 48 73 c6 b1 a8 f0 97 6a 75 84 2d c6 89 fe 0f ad d7 ec 70 68 ff 64 7c ae 0a 29 85 29 63 c0 3d 50 6d bf d0 8f aa 29 fd ad ad a0 ce 87 fe 59 52 26 55 ee 00 37 00 f8 c5 86 52 cb 50 68 64 74 d4 94 db e3 e0 18 e2 c2 62 5d 8d fd 70 6e 42 3a 2e 3b 61 7e c5 e8 2f 97 04 47 4d b5 76 d9 2a 72 bb 03 89 3e 9b 52 f0 5d e5 ac be a0 f9 c5 95 e7 54 38 c5 b1 ad b8 a0 fa 95 47 26 36 97 b7 6c 54 62 09 1a cf 14 1a 39 9b Data Ascii: S,ZS-V~nHcL%B]a42WaoLa,J`"$9VY;8cB-7YHsju-phd\|))c=Pm)YR&U7RPhdtb]pnB:.;a~/GMv*r>R]T8G&6lTb9
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: c9 de ad 83 80 b4 1a df 50 87 09 cc 21 0d 3d 31 11 57 00 3e 76 04 18 1a c5 7b a1 fd 8f 1c e4 5f 34 d8 53 f2 c7 89 a7 7c f9 b2 bb 43 2c 6d a6 7d c0 34 76 c6 84 7e 06 4e ea 9e 67 e3 29 38 89 c2 64 f4 ca 7d d1 2f 5b ea 5e 37 75 71 78 35 53 44 53 b9 ee 3a 28 89 f3 65 1c a3 00 49 3c 1b d3 07 ef 85 b3 99 25 fe 3c 8a d3 73 ff f6 2f 95 7e 85 f4 40 d7 f5 0a 66 cb ab fc 00 ae 6c 60 7b 42 9b 44 6b 21 eb 1c 5e 95 26 18 b2 09 54 21 0b 77 65 a7 6c 67 c3 1c d3 00 4b 7d 08 45 88 d4 22 e0 b6 f0 4f c2 f6 7e 4c 18 d4 50 2d d3 70 a6 e2 cf 13 4b f8 27 26 21 6d db 4c 7a 0b e8 61 4d 10 ed 26 7f 39 7f 25 c6 c7 64 16 13 f7 b3 f3 12 c5 8c 1a eb 8e d3 56 d7 de 7b 83 a5 74 5f 92 28 cf ba 67 90 f3 4d 08 d6 81 67 bd 2a d9 9a 9a 00 b7 23 26 4a eb e0 e8 d4 b9 94 00 d7 b6 1d 94 1f 6e b7 Data Ascii: P!=1W>v{_4S\|C,m}4v~Ng)8d}/[^7uqx5SDS:(eI<%<s/~@fl`{BDk!^&T!welgK}E"O~LP-pK'&!mLzaM&9%dV{t_(gMg*#&Jn
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 9b 26 20 39 e8 48 68 b6 7a 7e 46 b8 e5 52 94 8e 62 a9 f9 70 4b a6 7e 0b 15 6a 39 7a 02 a4 3b 4a ea cb bf a3 a8 53 b1 c9 4c fb 41 38 1a 23 ff c8 83 22 eb 27 14 20 ee 5f 15 9d bc 04 f0 d7 23 e3 0c 52 8d cf 0f 84 c4 97 40 9a 95 1b b2 94 36 76 5f 14 e9 eb 44 c2 30 ee 9c 55 10 38 5b ec bb b0 19 99 3f 38 ce 93 71 fe 1c 5d ec 0a 35 6b ec 28 af 4d 75 ca 48 59 9a 00 d0 81 0c 83 5f e9 48 44 2b e8 ee 5a 72 aa 65 1d d6 ff eb 3c 12 16 4d cd d3 04 f1 47 2a 28 e6 2b 0a 3b eb 61 b6 7a 2d 7f a7 4e eb 57 5a f7 78 97 6f f2 eb bf c3 ea 11 f1 d3 e5 1b 07 f8 50 17 82 59 5a 64 b9 9f 47 01 dd e0 29 25 59 1d 1f e6 b9 e1 f4 63 6c 64 c7 68 42 f5 4b c5 50 89 25 62 ba 01 61 30 68 62 f8 c3 04 aa 2f 95 5c 68 d7 fc 92 02 c0 a6 70 a1 d5 ca 73 6b f7 5e 84 5e ff 32 4e 25 85 a0 d2 5a d6 ec Data Ascii: & 9Hhz~FRbpK~j9z;JSLA8#"' _#R@6v_D0U8[?8q]5k(MuHY_HD+Zre<MG*(+;az-NWZxoPYZdG)%YcldhBKP%ba0hb/\hpsk^^2N%Z
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 8b 88 ac d8 82 13 73 a6 f4 8f db 3b 4e bc b0 49 a9 a6 6d af 5d f0 22 56 06 ca fb 0c ac ac cb dd 17 78 15 c4 6f f3 4a a7 d6 fa ab 41 6e ab b7 e1 af b2 3d 78 59 2c a1 e7 9b 5f 6e 04 6a d8 f7 41 fd 2a 18 f6 59 4b 2a bf 65 67 1d 3e d4 76 57 b9 3a 8f 01 48 c9 32 cc a8 55 2c b8 0c ff 8b 99 0b c3 e6 0b 70 ec f5 96 11 c3 57 d4 0a 65 59 45 82 33 3b 2c d3 8e 8a 29 fe a1 5b 24 bc 3d 46 db ef 53 bf 23 ff 55 25 9b bd 13 d4 e6 6a 45 a9 bf 72 f7 55 6a 91 a7 e7 6c 82 78 06 b2 fc 21 27 ca ab 13 4f 7a 5c b5 81 9c bb 10 bd 58 84 21 01 a9 40 65 ff 3a 32 c2 c1 f2 6a b6 95 93 d0 b1 47 c0 31 1d 8c aa ae 5c b8 fc 21 84 d7 b5 d3 66 3b fe fb 6e db 8a 12 bd a4 21 db b3 aa 4f 87 2b 71 6a ed e1 40 a5 f4 0b a3 cb 64 11 ef ae 6a 49 19 e6 6d e5 74 1c 3a d3 df 68 20 54 25 f2 0b 8c 47 2e Data Ascii: s;NIm]"VxoJAn=xY,_njAYKeg>vW:H2U,pWeYE3;,)[$=FS#U%jErUjlx!'Oz\X!@e:2jG1\!f;n!O+qj@djImt:h T%G.
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: d0 19 ba 8f 39 ce ed 30 36 cb 32 ea 00 00 fe ff fd a1 3c 37 1f 65 ed 01 50 80 f0 3a 11 b9 fe f2 35 bf f2 2c 3d 01 a5 f1 34 80 04 50 ea 71 94 ae 07 f8 03 6e 00 e5 05 15 d6 22 54 bb a6 d0 da 92 04 81 cb f9 38 ec 63 d7 fe 26 d0 09 0a ad a9 52 35 ad bc c7 00 52 5d 0c e6 ec 01 7c 05 a1 af fa 0d 22 8c 83 40 f2 79 b8 1f 14 a3 44 52 00 5c 66 e1 3d 0d 83 2b 0b c1 5f d2 82 a1 bc 04 58 b5 7a ba a4 42 8e cb b8 83 a9 32 0c cd 2f 56 f8 f9 ed 75 07 53 e2 ba 43 19 4e f9 3b 7f 10 21 f8 f4 2b 69 bc ac c9 f6 b3 90 ec cf a9 3c 30 c0 3a 6a c6 e8 b8 b2 79 12 ab aa bf 83 c5 3e d1 dd b2 23 53 ef b0 9e 7a 06 38 f2 d5 94 21 23 f7 cb e0 1f 3f 20 00 41 34 9d a9 0a b8 f0 a8 ee 07 1a 69 ca b7 3e d5 3e 6c 48 62 12 f9 3b ac b4 81 69 5d a7 bb 64 30 22 6e f8 01 00 b6 da 3a e1 e0 eb e8 3b Data Ascii: 9062<7eP:5,=4Pqn"T8c&R5R]\|"@yDR\f=+_XzB2/VuSCN;!+i<0:jy>#Sz8!#? A4i>>lHb;i]d0"n:;
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 81 ff 2e fe 67 6a 76 11 97 ef 63 f8 63 9d dc 6c 55 74 2c bd 1f 0c 55 dc 69 94 20 ae ef 99 eb ca 2a 8c 9f 82 d7 e9 31 16 ad 0d e1 4b 24 dc 0d 3b da df 76 78 22 3e 76 2a 0d d3 8c 90 bb 61 ce c3 ef 3a d0 3d 1f 00 33 0b 75 3e 3e 0a 4b 2f fb 78 00 cd b9 a0 c9 97 0c ff ca 80 6a ab 8d a3 35 25 13 97 fd 82 e0 6f fe b8 f3 45 d0 65 96 9e b1 d4 63 da 39 f8 8b 86 1b 50 06 57 f8 c0 9a 39 40 00 1e 10 b9 4c da 23 b2 54 ae f2 fd cb 25 a7 85 d2 5f f2 0e 09 53 e9 97 db 64 46 8d 78 27 1c 46 60 6a 99 c5 c8 b2 ce 4b a5 21 43 b3 57 67 03 5f d7 9b 80 82 7b 57 34 27 89 55 fa 41 4d 52 7e e9 3f 22 03 20 8f e7 a9 cd fa 5a e3 bf 85 97 3c 27 4a c2 cd c3 a7 f0 4b fd 41 45 92 aa 04 80 bf d6 69 f1 e8 a9 a1 1b 54 2a c3 fe 87 2b 97 fc ba 48 74 d0 bd 7d a6 99 1e 38 6d ce 0f fa 0f c7 e4 d9 Data Ascii: .gjvcclUt,Ui 1K$;vx">va:=3u>>K/xj5%oEec9PW9@L#T%_SdFx'F`jK!CWg_{W4'UAMR~?" Z<'JKAEiT*+Ht}8m
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: c6 9f 32 4a 5c 63 86 c5 eb f8 e4 33 9f c5 81 b9 54 17 81 ea 50 07 38 f9 68 56 c5 0d b3 02 97 5d 48 e0 f1 13 59 4c 48 f3 b8 eb 6a f9 3b 07 88 42 d4 c2 78 61 d2 d7 ab 58 29 cb 56 9b 05 14 67 a8 66 5d ac 7b 7b f2 4e eb 36 af 38 68 3e f7 23 f7 9b 26 9a 6c ad a6 a7 85 6b 1d 0d 75 64 2b b2 47 36 83 80 cf 53 c7 99 0a 83 08 08 5c 07 80 0d 18 d8 de 8d fa 33 6f 36 ef ba f1 da 70 05 96 74 c6 89 da 10 15 28 f2 34 a3 f5 e4 ca c3 cd 62 e4 34 b4 d7 5e 78 f4 37 b3 6d 22 1f fb 15 e7 33 8e 3f 1d ed 58 6a 1f d6 31 c2 5f cf c1 e1 57 cc dd 8d d3 5f 21 e8 43 12 33 55 9f 9d fd 12 04 82 b3 7a 08 bc 87 e1 08 57 bf 20 f7 96 f8 48 ad 20 13 a0 70 9d 4c 86 ed ed c9 c7 36 3d 04 11 1a 31 27 5e 05 25 71 38 4c 67 a6 16 80 1a 2c b1 65 24 f3 1d c0 3a 1a d6 35 48 ab cc dc 98 41 75 6a 6e 59 Data Ascii: 2J\c3TP8hV]HYLHj;BxaX)Vgf]{{N68h>#&lkud+G6S\3o6pt(4b4^x7m"3?Xj1_W_!C3UzW H pL6=1'^%q8Lg,e$:5HAujnY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49894	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	1070	OUT	GET /fp_ms/_rcv/remote?ctrl=NativeAd&m_id=react-wafer-nativeAd&rid=2vl5n89j0c3hk&m_mode=json&designtype=default HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; YHB__li_dcdm_c=.com; YHB__lc2_fpi=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q; YHB__lc2_fpi_meta=%7B%22w%22%3A1711672890010%7D; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A
2024-03-29 00:41:31 UTC	576	IN	HTTP/1.1 500 Internal Server Error referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-frame-options: SAMEORIGIN content-type: text/html; charset=utf-8 x-app-version: 1.0.37059 x-applet-version: 1.0.37059 x-applet-id: react-wafer-nativeAd content-length: 17 etag: W/"11-9VbgaIcEenVDneJO0QQdjtlpjgE" date: Fri, 29 Mar 2024 00:41:31 GMT x-envoy-upstream-service-time: 10 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* X-Bypass-Ssl-Transform: 1 Age: 0
2024-03-29 00:41:31 UTC	962	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 62 75 69 6c 74 62 79 67 69 72 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 72 69 76 61 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 65 6e 67 61 64 67 65 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 69 6e 74 68 65 6b 6e 6f 77 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 75 74 6f 62 6c 6f 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 74 65 63 68 63 72 75 6e 63 68 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6f 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 75 66 66 69 6e 67 74 6f 6e 70 6f 73 74 2e 63 Data Ascii: Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://*.huffingtonpost.c
2024-03-29 00:41:31 UTC	17	IN	Data Raw: 4d 69 73 73 69 6e 67 20 61 64 73 20 61 72 72 61 79 Data Ascii: Missing ads array

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49895	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	589	OUT	GET /g/images/spaceball.gif HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:31 UTC	837	IN	HTTP/1.1 200 OK x-amz-id-2: zk64actFTGj80zrp9sKPSoWgzHcvqwxMhiDs9AefZEGMn3APvVOFZ4LL2VRjIuc0ZvjJgoHqf+g= x-amz-request-id: 9CGSK6AN7ZA6C8PT Date: Thu, 28 Mar 2024 01:56:19 GMT Last-Modified: Wed, 24 Feb 2021 23:21:03 GMT ETag: "325472601571f31e1bf00674c368d335" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: KAUQOG5o0gBSJgl4c2JS9bVGo5z87pfq Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 43 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 81913 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49887	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:30 UTC	974	OUT	GET /checksync.php?cid=8YHBJ3BJ0&cs=1&cv=37&hb=1&vsSync=1&prvid=25014%2C25082%2C25113%2C25307%2C25308%2C25309%2C25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=0&usp_consent=1&uspstring=1YNN&axid_e=&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10
2024-03-29 00:41:31 UTC	368	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 21390 Content-Type: text/html; charset=UTF-8 x-mnet-hl2: E Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Expires: Fri, 29 Mar 2024 00:41:31 GMT Cache-Control: max-age=0, no-cache Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:31 GMT Connection: close
2024-03-29 00:41:31 UTC	214	IN	Data Raw: 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 7b 0a 76 61 72 20 63 6f 6f 6b 69 65 53 79 6e 63 43 6f 6e 66 69 67 20 3d 20 7b 22 64 61 74 61 6c 65 6e 22 3a 32 36 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 76 73 43 6b 22 3a 22 76 69 73 69 74 6f 72 2d 69 64 22 2c 22 76 73 44 61 43 6b 22 3a 22 64 61 74 61 22 2c 22 73 65 70 56 61 6c 22 3a 22 7c 22 2c 22 73 65 70 54 69 6d 65 22 3a 22 2a 22 2c 22 73 65 70 43 73 22 3a 22 7e 7e 22 2c 22 76 73 44 61 54 69 6d 65 22 3a 31 35 35 35 32 30 30 30 2c 22 63 63 22 3a 22 Data Ascii: <html> <head></head> <body> <script type="text/javascript">try{var cookieSyncConfig = {"datalen":26,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":15552000,"cc":"
2024-03-29 00:41:31 UTC	16384	IN	Data Raw: 55 53 22 2c 22 7a 6f 6e 65 22 3a 22 20 65 20 22 2c 22 63 6f 63 22 3a 22 4e 41 22 7d 2c 22 63 73 22 3a 22 31 22 2c 22 6c 6f 6f 6b 75 70 22 3a 5b 5d 2c 22 75 73 73 79 6e 63 6d 61 70 22 3a 7b 22 64 69 73 61 62 6c 65 22 3a 5b 5d 7d 2c 22 68 61 73 53 61 6d 65 53 69 74 65 53 75 70 70 6f 72 74 22 3a 22 31 22 2c 22 63 73 44 65 6c 53 53 22 3a 74 72 75 65 2c 22 62 61 74 63 68 22 3a 7b 22 67 47 72 6f 75 70 73 22 3a 5b 22 61 70 78 22 2c 22 63 73 6d 22 2c 22 70 70 74 22 2c 22 72 62 63 6e 22 2c 22 73 6f 6e 22 2c 22 62 64 74 22 2c 22 63 6f 6e 22 2c 22 6f 70 78 22 2c 22 74 6c 78 22 2c 22 6d 6d 61 22 2c 22 63 31 78 22 2c 22 79 73 22 2c 22 73 6f 76 22 2c 22 66 62 22 2c 22 72 31 22 2c 22 67 22 2c 22 70 62 22 2c 22 64 78 75 22 2c 22 72 6b 74 22 2c 22 74 72 78 22 2c 22 77 64 Data Ascii: US","zone":" e ","coc":"NA"},"cs":"1","lookup":[],"ussyncmap":{"disable":[]},"hasSameSiteSupport":"1","csDelSS":true,"batch":{"gGroups":["apx","csm","ppt","rbcn","son","bdt","con","opx","tlx","mma","c1x","ys","sov","fb","r1","g","pb","dxu","rkt","trx","wd
2024-03-29 00:41:31 UTC	4792	IN	Data Raw: 41 78 69 64 45 28 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 72 2c 6e 29 7b 76 61 72 20 61 3d 74 2e 72 65 71 75 69 72 65 28 22 72 75 62 69 63 6f 6e 22 29 3b 72 65 74 75 72 6e 22 72 62 63 6e 22 3d 3d 3d 6e 26 26 61 26 26 65 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 2e 73 65 74 43 75 73 74 6f 6d 53 63 72 69 70 74 50 61 72 61 6d 73 29 26 26 28 72 3d 61 2e 73 65 74 43 75 73 74 6f 6d 53 63 72 69 70 74 50 61 72 61 6d 73 28 72 29 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 76 61 72 20 61 2c 69 3d 74 2e 67 65 74 41 41 58 43 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 28 29 7c 7c 22 22 2c 6f 3d 50 2e 73 65 70 43 73 3b 65 2e 65 61 63 68 28 43 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 2e 68 61 73 56 61 6c 69 64 50 72 6f 76 69 64 65 72 43 6f 6f 6b 69 65 28 74 Data Ascii: AxidE()))}function g(r,n){var a=t.require("rubicon");return"rbcn"===n&&a&&e.isFunction(a.setCustomScriptParams)&&(r=a.setCustomScriptParams(r)),r}function f(){var a,i=t.getAAXCookieSyncUrl()\|\|"",o=P.sepCs;e.each(C,function(t){if(n.hasValidProviderCookie(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49896	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:31 UTC	763	OUT	GET /uu/api/res/1.2/zPFVjTF552.HVRCqQnZP9w--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/47289480-ed5c-11ee-9afb-f52c7d0d9bf8.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:31 UTC	1288	IN	HTTP/1.1 200 OK Content-Length: 13914 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 295516029420979051046241713907668877452,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="47289480-ed5c-11ee-9afb-f52c7d0d9bf8.webp" Edge-Cache-Tag: 295516029420979051046241713907668877452,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "6411cdfa1d161f28b2c0820e58ffe582" Expiration: expiry-date="Wed, 25 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 28 Mar 2024 23:39:30 GMT Server: ATS Surrogate-Reporting: width=536,height=284,bytes=13914,owidth=5174,oheight=3449,obytes=13822731,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 28 Mar 2024 23:40:21 GMT X-Served-By: cache-iad-kiad7000160-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711669221.169983,VS0,VE1 Age: 3670 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-iad-kiad7000160-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1
2024-03-29 00:41:31 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 52 49 46 46 52 36 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 17 02 00 1b 01 00 49 43 43 50 48 0c 00 00 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: RIFFR6WEBPVP8X ICCPHHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 01 e1 01 e9 01 f2 01 fa 02 03 02 0c 02 14 02 1d 02 26 02 2f 02 38 02 41 02 4b 02 54 02 5d 02 67 02 71 02 7a 02 84 02 8e 02 98 02 a2 02 ac 02 b6 02 c1 02 cb 02 d5 02 e0 02 eb 02 f5 03 00 03 0b 03 16 03 21 03 2d 03 38 03 43 03 4f 03 5a 03 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 Data Ascii: &/8AKT]gqz!-8COZfr~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 78 cc 79 2a 79 89 79 e7 7a 46 7a a5 7b 04 7b 63 7b c2 7c 21 7c 81 7c e1 7d 41 7d a1 7e 01 7e 62 7e c2 7f 23 7f 84 7f e5 80 47 80 a8 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 33 89 99 89 fe 8a 64 8a ca 8b 30 8b 96 8b fc 8c 63 8c ca 8d 31 8d 98 8d ff 8e 66 8e ce 8f 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac Data Ascii: xy*yyzFz{{c{\|!\|\|}A}~~b~#Gk0WGr;i3d0c1f6n?zM _4uL$hBd@iG&vV8nR7u\
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: fc 55 e0 6d 9d af 89 84 4c 8d 71 a7 97 a9 45 73 23 fc 5f 2c 2a cd 54 34 b0 16 9d 62 e0 69 f2 80 95 d2 1c 13 0f 04 f2 4f a3 69 08 e5 c7 34 31 94 b7 e6 a9 1b 0e 89 93 5d 7c 74 43 9c 28 f3 a3 5c 43 46 51 b3 7f 73 96 89 66 cb 54 97 cd e6 bc bb d0 8c ca 5d e9 8a fe b4 46 39 83 13 5c 8f fc cc 0d 14 a7 c0 09 0a 86 1d 5d 1d 4b 83 82 8c 4c 55 9e 0c 40 f4 9c 74 8c b0 32 cf 71 88 91 73 52 96 23 f1 93 8e ea c5 36 c5 97 14 3b 66 af 57 a1 e6 fd ab 57 9b 7f d9 0f 32 73 13 e6 6b ca af 6a e4 72 f7 6f 84 cf 65 c3 41 88 af 6c ab 70 42 e9 d2 46 8f ac a6 7e cb 0e dc ec 49 f9 69 30 af 0c 1e 19 64 33 3a f1 57 5c 96 97 ea 99 0f 50 74 9b 50 89 48 fc e3 4b 9a 18 ef 6a 07 68 af 1e 16 94 da 82 1c 03 38 03 ea 1a 17 a8 cd f9 54 10 e1 d9 f2 92 dc ac 01 b4 17 cf 17 f7 aa ba c2 39 d4 0a Data Ascii: UmLqEs#_,*T4biOi41]\|tC(\CFQsfT]F9\]KLU@t2qsR#6;fWW2skjroeAlpBF~Ii0d3:W\PtPHKjh8T9
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 63 e6 6e 4f 08 71 64 89 4c b4 b4 1d de b2 86 0c 1e e2 24 bb 5d f8 23 67 62 51 e2 94 05 af 9c 9e f9 70 0d b9 6b 3e 95 00 79 0b 95 40 ad 94 77 81 6c d5 20 3f 1c 4b ae ba 34 05 51 98 f1 6c dd 82 2f b8 e4 bb 2c c5 e8 67 b9 19 bd b0 d2 a1 e8 92 56 1d 38 ab f0 91 64 11 75 07 94 ed 81 cc 09 0f 32 4a bf bd cb 41 6c 99 fa e9 48 5f ed d9 aa c0 66 3b 70 34 b2 7e 8b 6c 10 a2 f2 d5 ed 9a f9 a4 77 24 40 43 86 37 66 e6 b7 db 93 53 9f 65 fd ca 96 7d 4c a6 a4 57 42 5e 87 82 ff 0f 1c 43 6e b6 f2 2b 31 22 19 e6 50 cc 53 fd e9 99 1f 0a ca 80 fc d5 0f 50 44 a9 cb 04 dd a1 1d b3 54 d6 ee ce 50 99 b0 75 2f d5 65 98 1e 3f 53 10 31 1f fe d0 9e cf a0 97 78 68 eb d5 ac a2 82 63 1d b7 16 27 02 a1 8f c3 65 ff 44 f1 cc 4e e3 28 91 45 c9 db ea b3 10 68 cd 3e a4 dc ba 95 55 cc ec b0 4a Data Ascii: cnOqdL$]#gbQpk>y@wl ?K4Ql/,gV8du2JAlH_f;p4~lw$@C7fSe}LWB^Cn+1"PSPDTPu/e?S1xhc'eDN(Eh>UJ
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: fb 1e 9a cc df c4 69 59 71 80 16 c8 b3 d5 d1 21 c5 ac 07 8b 6a f0 9e c8 10 37 a0 a9 18 8c 98 2f 0b 5b 39 12 9b b5 6e 25 86 db 8b 70 de ce 08 f2 aa 5a ee e6 28 a3 93 ec 72 9a 80 d0 27 66 b6 c6 e3 3e f1 43 a7 99 b7 8f f8 34 7a a3 af 31 83 0a 56 82 32 53 f0 4d f7 f5 c8 95 07 08 3f ce 8c 3c bd d1 1a 76 e1 d1 11 1d e5 8d a0 af 3a 81 02 a4 5c 99 11 00 30 8b 77 ba 19 4e a0 31 25 5f db b2 fb a5 89 25 68 c1 e2 d3 12 dd 22 5b da 54 a9 b2 a2 7b 4d e0 35 1c c6 03 eb 78 b5 45 96 2a e1 01 1d ff d5 a3 7d 07 76 0b a5 75 d5 1e c7 7e bb 9f 99 13 2f 10 2e 13 e1 c2 53 46 4b 9b 6a 2d d4 7f 3b b7 00 df b3 f0 2d 89 f8 9e cd 3c aa 1a b0 28 69 79 65 12 03 62 f2 86 7a 14 16 e7 04 74 d6 a1 77 56 67 c8 1c 74 6b 93 da 1d 9e 72 31 1d c2 7b 0a a5 ff 4b 41 bc d9 03 45 da b9 45 2c d5 92 Data Ascii: iYq!j7/[9n%pZ(r'f>C4z1V2SM?<v:\0wN1%_%h"[T{M5xE*}vu~/.SFKj-;-<(iyebztwVgtkr1{KAEE,
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: aa 76 a1 b2 72 50 87 ea fb 56 fc 40 43 5c 8e 01 f9 93 9f 41 40 90 1e 76 bb 76 ec b7 50 be 31 ec 16 05 77 b5 97 bb 03 0c d1 44 b2 9e 94 00 93 21 34 d3 02 d9 a5 1e 7b 51 31 5b 9e 27 57 ea 1f a0 9e 6a 59 86 2b 86 e1 02 8a 05 67 95 33 c4 9b a5 1f 84 df 93 0b ca 3a be 12 ff e9 cf b1 cd 70 83 69 c6 94 82 43 44 9a 75 56 9b 3d aa f1 65 19 c0 44 c6 04 5f c8 92 a4 ea 1d 55 db 87 13 6f c2 23 1e b7 3f 8b e3 61 46 28 31 1b f3 5c 63 62 da a2 96 56 ad 10 7a 06 18 eb 97 bd 33 e9 d3 76 06 79 6a 0a b4 49 cb 8c 3b e7 04 63 37 1a df 7b cc 77 83 03 28 c2 21 27 5b 92 3d a4 aa f0 5c 8e e7 4d 79 ee 51 47 4e 80 9d df 8d a4 94 83 9e 7f 78 62 ee d0 2f 28 35 af 60 31 7b cc 54 89 d9 4e 8c 30 5d 39 47 be 81 71 42 a4 c4 44 97 10 5b 21 8d 8b 8a 8d 8d b8 fb 0f 55 19 1d 28 f7 47 e6 c6 fa Data Ascii: vrPV@C\A@vvP1wD!4{Q1['WjY+g3:piCDuV=eD_Uo#?aF(1\cbVz3vyjI;c7{w(!'[=\MyQGNxb/(5`1{TN0]9GqBD[!U(G
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: bd 8d e0 a0 f3 3c 9d 7a 3a 42 43 f0 64 49 e7 0b c5 95 5f 11 43 53 f0 b5 50 7e 6c 3a 50 0d 6a dc d8 28 a3 73 2c b0 d4 70 12 1d 01 23 12 bf 00 49 44 94 9b e7 85 70 6e ae 7b da 68 9a f0 17 69 c1 87 48 26 0c 37 bb d9 ee 3e 9e 66 cf 0f 24 82 37 21 2c a4 df 2f 1c 41 cf 76 62 29 28 ee 98 cc f0 a4 fc 53 1c 0d 26 e5 98 d3 e7 63 53 61 3e cc 28 e9 3a ff 1f b0 00 81 48 a0 e7 c3 71 65 d9 f2 dc 89 90 b5 a8 d2 7d 29 1d 27 19 b8 9c 06 e4 30 ee 9b d2 f8 c0 b7 a3 24 27 35 ff be 06 76 08 6e 72 44 4a 1a 89 78 3d 88 64 63 ca 14 eb 8e c5 c7 98 ab de 0f f6 6b a6 9e 4a bc 47 a4 84 12 7f 58 7d 92 cb 06 72 a0 4e 8e ac dd 45 5d ca 54 4b a0 6f c2 f2 74 1d 01 e9 30 27 8f eb b8 66 ea 63 54 86 23 06 37 72 44 ea b3 85 c8 54 de 99 7c 94 54 cc 2c 79 a8 6a 9f 20 7d 45 df 56 b3 64 41 ab 19 Data Ascii: <z:BCdI_CSP~l:Pj(s,p#IDpn{hiH&7>f$7!,/Avb)(S&cSa>(:Hqe})'0$'5vnrDJx=dckJGX}rNE]TKot0'fcT#7rDT\|T,yj }EVdA
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: a1 ac 11 22 03 4d 51 c0 db ec 93 54 63 11 fa d1 3d 02 f7 a3 6b ec 30 fc c9 a3 46 10 4a 16 7e b4 b8 9c d1 1e a3 62 ec fa d2 c1 e9 ce 32 26 e2 1e ad 54 47 e4 0f b6 18 fd fe d4 25 f0 30 29 5a bc 66 70 83 59 eb 36 ff 48 68 27 b0 5b bc fa 85 ec a0 b5 7e 14 5c f5 ce d2 5a 7c 97 ab c7 7b 0b 5d c8 d1 6d b9 c6 5b 65 8b d2 e4 cf 85 43 25 10 23 69 77 58 8c 90 3f 06 a5 8a bd f8 08 1e 76 f3 db 8e 4d c0 41 17 4f 26 56 c2 65 da f8 2f 58 45 5e 80 04 a3 e0 23 69 d6 7a d7 92 f2 06 8a 70 aa 1c c2 d2 5a ab 10 e4 05 c3 fb a6 e1 16 b9 b9 f3 83 28 9a 34 87 dd 78 a9 14 00 41 ae 14 a1 c8 cc 99 4b 51 4c f1 ef 08 7e ab b4 ca 70 4b a5 a7 c4 7d 15 82 ef d2 1e 61 12 02 8b 3c ec 28 2b ed 41 54 75 a8 85 fe 0e 83 40 48 9e a2 ee a8 a0 7a 61 02 ad ce d5 bb 32 0c e6 0f c5 3d b8 bf 9e d9 d4 Data Ascii: "MQTc=k0FJ~b2&TG%0)ZfpY6Hh'[~\Z\|{]m[eC%#iwX?vMAO&Ve/XE^#izpZ(4xAKQL~pK}a<(+ATu@Hza2=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49897	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:31 UTC	382	OUT	GET /dv/static/siteApp/img/privacy-choice-control.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:31 UTC	746	IN	HTTP/1.1 200 OK x-amz-id-2: +ZAQZksivEnm/zsiAP1bx0mu6oGgmiVZEJDWlOnHs5ZYj0ioZcOA6hlMbZ78GNsGuOBvNCur+nc= x-amz-request-id: 0AD11JPV828X1YY9 Date: Thu, 28 Mar 2024 22:23:02 GMT Last-Modified: Thu, 17 Nov 2022 01:21:46 GMT ETag: "08e7e42d20a324381d05381b43bd496c" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 7324 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 8310 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a2 00 00 00 52 08 06 00 00 00 d7 60 0f 02 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 04 f4 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 65 64 61 32 62 33 66 61 63 2c 20 32 30 32 31 2f 31 31 2f 31 37 2d 31 37 3a 32 33 3a 31 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 Data Ascii: PNGIHDRR`pHYs%%IR$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e cf e9 a3 bb 00 00 17 4e 49 44 41 54 78 9c ed 9d 79 7c 54 e5 b9 c7 bf e7 9c 99 6c 33 93 84 6c 04 b2 12 f6 35 a0 48 ed d5 5a ab 9f aa 95 ba 5e 2a ea 6d 6f 17 6b ad 75 6b 6f dd 17 14 05 04 6a b5 ad 7a 6d 5d ae b7 b6 2e 88 4b af 16 ac 6c a2 2c 2a 8b 20 90 40 16 96 00 01 12 96 90 64 26 cb cc 59 ee 1f 6f 26 c9 4c 26 99 33 99 99 6c e4 fb f9 44 c3 39 ef 39 e7 9d 33 bf bc ef fb 3c ef f3 bc af 64 18 06 83 0c d2 db c8 bd 5d 81 41 06 01 b0 00 4c bd b5 ae b7 eb 91 04 8c 07 d2 81 64 20 0d 48 05 6c 80 04 0c 36 db e1 a3 00 4d 40 1d 70 1c 38 05 9c 06 f6 03 e5 bd 57 2d d8 fe 42 a2 10 62 2f 31 02 b8 04 98 00 9c 05 4c 44 08 72 b0 95 ee 39 9a 81 4a 60 33 50 0a 6c 00 3e 03 1a 7b ba 22 3d Data Ascii: x:xmpmeta> <?xpacket end="r"?>NIDATxy\|Tl3l5HZ^mokukojzm].Kl, @d&Yo&L&3lD993<d]ALd Hl6M@p8W-Bb/1LDr9J`3Pl>{"=
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: c2 9d cf bb 78 6f 83 87 91 c3 e5 48 5b fb c3 80 ff 42 c4 ab fa d0 99 10 7f 09 e4 b4 3f 20 49 a2 f9 1e 93 ad 30 e7 87 f1 11 ad 5d 6f 71 f8 84 ce 75 f3 5d 7c 5e ac 62 51 24 54 cd e0 86 0b 63 f8 db 7d e1 bb a1 b6 95 ab d8 e2 cc bb 6d 0e 1d d7 b9 74 ba 95 57 ef f6 0d 62 9a 94 a7 b0 7a b1 83 8b ee ad 67 cf 21 9d 71 11 10 a3 d5 02 25 87 75 b2 d3 65 fe f9 84 9d 61 29 6d 4d 9f 23 1e 5e bd db 46 43 b3 8b 35 db 3d 64 a7 85 36 b4 30 c1 1d 08 03 b8 a9 fd c1 ce 5e f7 2f fd 0f 48 40 75 8d ce ed 57 c6 92 e2 e8 ff c3 ef c6 66 b8 7a ae 93 2d a5 2a d3 46 29 4c 1e 21 33 a5 40 e1 cd e5 cd 3c f4 6a 78 49 6c 55 a7 0d b6 ed d5 4c bf 27 dd 10 61 72 3f ba 38 26 e0 f9 a1 43 24 56 2f 76 90 9b 2e b3 e7 90 1e 56 37 6d b5 08 43 33 2b 45 66 d5 22 5f 11 b6 e7 c6 8b 62 d0 74 d0 22 ef ff Data Ascii: xoH[B? I0]oqu]\|^bQ$Tc}mtWbzg!q%uea)mM#^FC5=d60^/H@uWfz-*F)L!3@<jxIlUL'ar?8&C$V/v.V7mC3+Ef"_bt"
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: b4 d1 62 3e bc 17 a2 c8 e3 10 f3 cf ad 42 4c 43 ac d6 ea 83 b3 d1 60 44 a6 dc a5 07 be 2f 32 ef 8d 26 5e 5c de cc e4 11 1d 03 0e ac 16 28 3d ac 53 38 42 61 c9 43 41 97 e8 31 4d 45 b5 ce 9e 83 5a 58 16 b7 3f 5e 83 a1 b0 40 e1 3d 93 62 1c 93 2d 33 2e 27 78 93 7c c3 82 96 96 b0 e5 1d f5 62 26 c3 50 68 13 62 0a 30 c4 bf 84 47 25 2c c7 6e 6f f0 bf 2b dc 3c fa 5a 23 e3 72 94 0e 09 ed de 74 d7 d4 44 89 77 e7 d8 23 ea 17 fd a2 58 6d 75 01 45 12 6f 4b e5 1d 33 9a 11 63 30 ae 5f e0 62 c9 a7 6e a6 8e ec 95 ee d8 9f 44 68 13 e2 70 5a 94 d9 1e 4d 07 5b 14 9c d8 6f ad 75 73 c5 1c 27 17 de 53 cf 6f 5f 6c e4 e8 a9 c8 bc 89 95 5f 79 f8 d5 73 0d e4 0f 95 49 88 f5 5d d6 4e 51 a0 aa c6 40 d3 60 e9 c3 36 72 33 22 db ca 6f 29 13 fd 7f 34 fe 6c 5b c7 8c 23 84 18 cd 8c 19 3b e3 Data Ascii: b>BLC`D/2&^\(=S8BaCA1MEZX?^@=b-3.'x\|b&Phb0G%,no+<Z#rtDw#XmuEoK3c0_bnDhpZM[ous'So_l_ysI]NQ@`6r3"o)4l[#;
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 9a f3 7a 26 9a 7c fb 5e 8d a3 a7 f4 88 8f 0f 85 a1 a5 33 3e 57 e6 e3 85 76 e2 4d 24 4e 5e 31 c7 c9 f2 4d 1e 0a 0b 14 0a 0b 14 56 6f 33 27 c6 24 9b 30 60 26 f6 8e 18 d7 23 7a 63 1f 21 ee 23 c0 ba c7 49 09 12 7b 8f e8 d4 37 44 c7 37 91 e2 90 58 f6 b8 c8 2a 2b 3d 1c a0 9b 56 21 3f 43 e6 60 95 4e 45 95 4e 4e 9a d4 c1 57 08 50 74 40 e3 de eb e2 b8 fd ca 9e 4b 77 dd 50 a4 e2 d1 8c 88 1a 43 de 96 70 6c 8e cc 9a 45 0e 92 4d 38 c9 af 98 e3 e4 a3 cd 42 84 ba 26 7c bf 53 0a 14 56 6d f3 70 cd 63 ce a0 d7 7b c5 38 29 5f a1 f8 60 8f 8a b1 c8 fb 8b ff 10 7b b3 7f c9 c4 04 89 d2 4a 8d f5 45 11 5a eb 22 00 39 19 22 9c 3d 23 59 a6 ac 13 6b 7a 88 43 4c dd 05 f2 15 ee dc af 71 c3 45 31 2c 0c c1 c1 1b 09 be de ab 31 c4 1e b9 65 39 ac 8a 68 09 c7 79 45 68 66 4c 38 df c5 b2 2f Data Ascii: z&\|^3>WvM$N^1MVo3'$0`&#zc!#I{7D7X*+=V!?C`NENNWPt@KwPCplEM8B&\|SVmpc{8)_`{JEZ"9"=#YkzCLqE1,1e9hyEhfL8/
2024-03-29 00:41:31 UTC	824	IN	Data Raw: a4 c6 d9 c7 32 71 a2 44 a3 db e0 eb 7d 1a a9 89 d1 cb d6 1b a0 1c 00 7e dd 55 01 33 fd cb 7f 23 8c 17 1f 3c 9a 08 d3 2a a9 d4 b8 fa 31 67 b4 d6 5a ee 53 ec dc af 51 56 a9 99 5a 67 70 10 1f 6e 06 ba 9c 0d 31 3b d0 f9 05 01 52 09 3c 2a 4c cc 53 d8 54 a2 f1 9d 7b ea a9 75 0d ec 76 62 7d 91 d8 f2 36 5a d1 d8 03 94 f9 c0 aa 60 85 cc be d2 93 c0 75 81 4e a8 1a 4c cc 93 f9 aa 5c 63 c6 9d f5 ec 39 34 70 9b c6 6d e5 1a 71 31 83 dd 72 08 ac 04 1e 36 53 30 94 bf ed 35 c0 0f 02 9d 50 35 98 90 2b 73 b2 4e e7 9b 77 d5 f3 e2 f2 e8 cf 49 f7 34 87 4f e8 6c 2d 8d 4e 34 f6 00 65 0b 70 99 d9 c2 a1 76 32 ef 00 3f 0e 74 c2 a3 89 99 97 d4 44 89 5b fe e0 e2 8a 39 4e 0e 04 48 7c ea af 6c 2d d3 42 da 3b e5 0c a7 08 f8 16 60 5a 00 dd 19 ed bc 46 27 62 54 35 91 07 31 6d b4 c2 a7 3b Data Ascii: 2qD}~U3#<1gZSQVZgpn1;R<LST{uvb}6Z`uNL\c94pmq1r6S05P5+sNwI4Ol-N4epv2?tD[9NH\|l-B;`ZF'bT51m;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49900	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:31 UTC	752	OUT	GET /uu/api/res/1.2/3URZTH5jLXm7RJvuzhGpyg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/usa_today_news_641/ae7e9fe306293a79dd7ba40f181e26cf.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:31 UTC	1285	IN	HTTP/1.1 200 OK Content-Length: 11314 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 438247443201403264965780023803913537909,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="ae7e9fe306293a79dd7ba40f181e26cf.webp" Edge-Cache-Tag: 438247443201403264965780023803913537909,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "044a692182a19aa9f6913484ab641e87" Last-Modified: Thu, 28 Mar 2024 22:19:41 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=11314,owidth=8256,oheight=5504,obytes=5902600,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 66a954d0d342195bc38da47129375c1f Accept-Ranges: bytes Date: Thu, 28 Mar 2024 22:22:01 GMT X-Served-By: cache-lga21940-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711664522.601343,VS0,VE1 Age: 8370 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 66a954d0d342195bc38da47129375c1f cld_by: cache-lga21940-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-03-29 00:41:31 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 52 49 46 46 2a 2c 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 17 02 00 1b 01 00 49 43 43 50 0c 02 00 00 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: RIFF*,WEBPVP8X ICCPlcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 6d fb 6e 70 a0 c7 fe 68 e0 a6 c3 e3 02 c7 bf a1 36 bc e0 8c ad 50 8a d1 55 8a 6b 57 91 4b 38 a6 34 48 91 e0 6a 55 4d 2c fc dc d1 11 30 33 5e 37 27 c3 af e3 b9 ec 4f 47 70 95 28 af 1b d0 a6 55 54 60 28 83 81 a4 b1 1b f8 2b 02 65 67 3c 57 c8 f3 d6 08 1a 13 f0 e6 be 3a db 9f 35 ae 21 ae 00 b5 13 8f 48 6e 59 c8 f0 e7 9b eb 75 95 73 d5 b0 06 ee 67 d8 a6 4c 17 1e 23 fa 12 34 07 cb 60 06 9d 6a 15 f4 fa 4b a9 68 06 38 7a 6d 83 bf bc a0 6d 00 cc 28 37 b6 dd ac 40 c2 20 f0 4d 76 06 51 3c 45 d2 a5 aa d2 62 8a 3a 01 14 1a 3c c2 c3 ea 4c 47 c4 f4 2a 44 1d 32 bf 8d a0 e3 bc 22 10 c3 7a f0 05 a7 a5 08 f2 f2 06 f4 0d 55 fc 36 34 0f 2b ae a4 b9 00 50 13 5c 6d d1 4e 18 9c f6 8b 85 5d 0a 92 a9 cb d8 8b 64 d9 b7 61 cd c8 c8 3f 97 49 ac b9 5e 6a 55 a9 74 38 cd 56 3b f8 dc 29 Data Ascii: mnph6PUkWK84HjUM,03^7'OGp(UT`(+eg<W:5!HnYusgL#4`jKh8zmm(7@ MvQ<Eb:<LG*D2"zU64+P\mN]da?I^jUt8V;)
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 09 4e 9e 13 d1 48 60 bf ef f8 fc 2b ce 6d 06 09 fd af 4e 7b 5d 1b 98 9e d6 90 c6 62 06 65 f3 4e 21 ac c1 00 b6 93 35 a2 ba ad 8f 28 0a 28 03 8a ea 5c 68 10 4b 0c 24 11 6b 1a c5 f9 e9 be b5 aa 51 01 fd 20 e6 60 c3 a0 ca 62 6d cb 04 8f df 84 a7 07 cb 9b ca fe 20 92 d7 40 bf 94 bd ba 26 63 43 16 fc fe 8b 7d 9a 6f 3a df 8e 01 4e c7 b8 d0 1d d7 c8 00 00 fe fc 97 77 79 94 ac 75 a9 67 f7 13 ee a6 cc 37 bf 8f f5 9d bd 75 75 85 95 d1 1a b4 49 55 41 6f 9b cd 5b 59 5c 13 d7 15 dd aa f9 fd fc 49 7b 9b e3 29 5b 8d 61 91 08 66 c6 b9 3a d7 d7 a3 8b 66 f5 ba 00 0b 9f 28 10 d7 c9 17 30 db a2 54 7f 31 b1 22 5f f5 60 4b 48 1d 0d 0c 39 67 3f d0 89 68 df 9a fe 7a a1 1c fd 7f ec c2 57 76 6e bc 6a cf 1c 78 67 88 85 a4 c3 d9 d4 01 5b dc a5 4a 16 69 66 80 32 67 1d 17 77 6f 84 43 Data Ascii: NH`+mN{]beN!5((\hK$kQ `bm @&cC}o:Nwyug7uuIUAo[Y\I{)[af:f(0T1"_`KH9g?hzWvnjxg[Jif2gwoC
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: ad ab c3 5b 43 6c bf f5 0b 2e 39 8f a8 71 ca 25 6a b6 d3 77 05 bf 4e 96 2a 1f f1 f7 5a 08 24 f5 68 c9 9b 7c 40 04 20 bd e1 a8 30 1c 6b 68 74 d3 11 55 76 83 c0 28 e7 51 fd 2c 67 05 f8 5d 76 dc fd 78 ee 6c 1b a9 b1 62 84 e5 8d d1 cf e1 40 cc c6 3f 14 97 9c c7 51 59 91 73 ea c7 2e 83 f8 37 ee c3 44 19 33 8e ed 1f 20 41 9d b7 9c 62 d7 f8 cf 32 9e c9 d4 2d 7e c7 98 3f 71 18 5b 61 4f 29 aa a9 f6 5e 69 23 87 11 72 22 49 5f 2d b7 4a c1 48 bc c2 82 84 04 db c7 ec 9b 81 ff e7 bd 13 dd 6c 68 d5 99 c9 48 bc e5 08 df 04 47 26 1e 04 03 72 8f 58 14 ad 59 7f 66 f4 e5 d8 f9 fe 35 0c 2b 88 f0 de 9a 87 48 79 de 47 90 95 22 33 f1 a5 ce 21 b7 2c 25 2d 86 b2 af fe e9 e1 39 c5 04 e9 a4 d5 d3 f2 15 45 64 7e 52 c6 40 5d 6b 70 37 64 10 11 9a 9c fa 2a f2 23 5b f5 d2 62 ef a2 35 ec Data Ascii: [Cl.9q%jwNZ$h\|@ 0khtUv(Q,g]vxlb@?QYs.7D3 Ab2-~?q[aO)^i#r"I_-JHlhHG&rXYf5+HyG"3!,%-9Ed~R@]kp7d#[b5
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: fc 70 2a 13 7f e0 3a 2b b8 43 1e ed 75 03 c2 e4 0e 86 c6 ac ee ff 55 0f 27 e0 ed 77 32 32 66 5e a7 9d b8 fc 02 25 51 90 89 65 93 45 a3 8a cd 96 1c da ff 27 e8 67 32 1d 30 3d d9 b1 8d 66 aa 4c cc 5c 45 13 45 70 82 0b 4f 84 25 26 d9 95 58 42 62 3b 4e c4 72 f0 3f 24 79 99 0e f8 6f e6 77 f8 98 f0 9d 66 74 4d 5f 3f b0 ca c2 08 01 31 f8 03 32 f4 85 aa 04 28 04 f7 9c 87 b6 79 af 3c 92 30 64 e5 00 00 51 b2 f0 55 d5 c8 72 e0 66 c7 b2 c0 22 74 0a 2e 6f 42 ec 90 7f fe 5e 34 d8 3a 75 d1 24 3e ce 37 c6 ac 1e 8b 39 51 13 4d 55 b8 27 34 d2 a0 da 3a 9f 1c 51 2a 2d e9 19 79 c3 40 b9 06 c4 89 ad 5f 9d e7 1e 4d 75 c8 6e 8f f0 4c 1c 11 5f 47 eb b6 88 b4 82 a5 a3 98 b7 f3 3b 10 80 53 bb 12 a8 0b e2 44 d8 27 0a a6 c5 12 3d c4 5b 98 63 93 f0 98 88 50 56 e3 89 1c 65 d0 4f e4 79 Data Ascii: p:+CuU'w22f^%QeE'g20=fL\EEpO%&XBb;Nr?$yowftM_?12(y<0dQUrf"t.oB^4:u$>79QMU'4:Q-y@_MunL_G;SD'=[cPVeOy
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: ce 3c 49 fc 0c e2 ac 8a 47 d7 21 fb 23 5d ab 6c b8 06 5b f6 48 0d 5e 0e aa 1b 5c ca 4e 97 f6 91 f1 d0 ed d3 44 23 9b 2e da 24 5b 46 c3 71 43 1d 6e bb bf 1b 3f 00 4c dc 84 3a c3 63 fc e4 44 f0 c8 46 de c8 f3 16 e3 e9 ab f7 70 7d 29 8c 76 28 f6 40 19 f7 9e 45 bf c3 4c d9 34 cf 6e 77 59 20 3c 49 47 3e e5 76 ad bd 41 90 fd 56 fc 58 20 bd 62 60 f2 d2 da b6 6b 11 2e 8c f9 2b 0c 52 ca 02 75 fb 1b 7f 32 31 28 97 26 3f 2b 63 96 02 0a 29 b3 13 cf ea 2c c8 5b a9 91 25 d6 b1 d6 c6 fb 1a 47 30 2b 2e a7 12 d5 e8 d0 49 e2 2b 5f 9f af 61 3b f1 f6 33 f0 5f 6b db 62 62 1e 19 46 e7 8d 03 21 9e 72 af 2d 02 31 86 6a 46 59 32 6d aa 63 6d 2a 92 e0 a1 7e b8 f1 d7 4c 73 e2 40 6e 94 48 fc bc 63 7b 90 2b f4 80 19 f0 15 0e d5 06 e4 a0 20 21 04 aa 33 35 4c d6 05 1a a5 64 27 e4 31 0f Data Ascii: <IG!#]l[H^\ND#.$[FqCn?L:cDFp})v(@EL4nwY <IG>vAVX b`k.+Ru21(&?+c),[%G0+.I+_a;3_kbbF!r-1jFY2mcm*~Ls@nHc{+ !35Ld'1
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 8a 5f 51 c2 74 60 7e 8f c7 4c 29 43 c7 b8 2c d8 e7 52 10 eb fd a8 62 f4 2f 01 1a 1a 2e 59 a2 ce 28 e1 49 62 c0 ad 91 f7 08 ad 1f 14 06 7b 94 d9 8b 34 ef a1 4f 3f d1 5e 91 36 cf 3c 84 31 ed 57 f5 6f 27 49 bb 14 ac ce a9 b0 ab f0 8a 0a 53 bf 12 c7 1d 5e 1b fd 09 12 8e 8e ea a1 28 42 88 27 71 44 d3 de 74 19 00 0e 8d e3 9e 12 26 f9 60 da 51 e3 ed e7 50 4f 47 ca df f6 4a e6 d6 2d 01 0f 81 d4 54 02 0b 9a 42 ec de e0 99 5e de 09 1a 86 84 77 67 70 86 23 42 90 8c 91 19 81 82 06 fd 3b 25 7b ac af 88 6b ee ec 6c 55 da 14 a6 1e 66 86 ed a4 51 dc 54 9d 17 8d 59 06 58 21 9b ef a9 7e 3d dc e8 74 eb ca 4a fa c1 01 59 93 ca 78 f1 1c f7 04 b1 59 72 e3 bb f9 e3 7b 0c 84 1b 8d b0 d9 96 0b 5f 5d 3a 39 26 a5 87 67 27 8a 43 27 cb 2e bf 12 d0 d9 ac 04 43 88 bf 73 d0 66 0d bb da Data Ascii: _Qt`~L)C,Rb/.Y(Ib{4O?^6<1Wo'IS^(B'qDt&`QPOGJ-TB^wgp#B;%{klUfQTYX!~=tJYxYr{_]:9&g'C'.Csf
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 68 21 23 cb b1 99 fd 40 0e 9b ba a4 8f da de 35 8d 27 97 9b 6a 20 a8 13 cc 94 d8 b3 cd 9d 49 e2 2b 04 1f 8b 7f 08 ee 01 4c 0e 91 f0 16 0e 6c ee c2 7b 06 55 c4 dc f6 59 aa 85 61 dc c2 73 ed 23 87 a0 36 60 7f 3d 7a ba 8e 8e 7f 58 6c 99 7e 84 f9 50 c8 b4 3d aa d2 e1 c3 bf 63 38 32 88 2b a4 07 a5 b4 15 c3 82 d9 51 08 c1 0d 7a 9c 07 26 a4 6f 4b a8 82 a4 d1 84 2d 7c 78 12 a4 46 2f c8 46 39 9f 76 7b 1c 75 4d 3f 31 b4 73 e0 27 75 25 96 9d fc 99 72 94 35 7d f5 83 95 0e 9b 9e fd 81 63 db d3 de 1d 26 6d 6b 2a 7e c8 df 3e ca 3b ff 44 c2 94 c2 8c 14 65 19 49 03 0d 51 62 48 21 2d 28 1e 53 a1 cc 7a 9f 2b 44 53 1f 8b 20 d3 a9 d4 a0 e5 9a 5c b1 a9 db ef bf 5b 74 90 fc d5 07 0e 7a 4b be 6b 02 a0 82 6e d7 0f 49 d1 db 7f 64 83 db 84 63 15 47 a5 55 09 3d 8f ea 88 8b a8 5b 44 Data Ascii: h!#@5'j I+Ll{UYas#6`=zXl~P=c82+Qz&oK-\|xF/F9v{uM?1s'u%r5}c&mk*~>;DeIQbH!-(Sz+DS \[tzKknIdcGU=[D
2024-03-29 00:41:31 UTC	914	IN	Data Raw: 37 45 86 96 83 38 56 8c d0 02 54 2e 1d db 83 1e 20 9d d3 f7 4a 95 f4 68 16 13 1c 72 93 6e 24 81 65 8b b9 89 48 0a c8 e7 dc de 64 e2 23 b2 f3 46 50 3a 05 a7 0d 2e 78 66 3d f3 50 52 d2 e1 04 2e 08 00 00 8c a6 c8 bb 60 00 0c d6 80 1a e5 c6 59 94 4a c4 ab 2b 96 75 6c d5 29 38 95 4d 85 f9 9c 59 d5 f0 68 42 18 6b 8b 7f cd f2 b3 e5 f3 30 da ff 72 1b 52 af 66 a0 87 63 57 ab 39 c0 ad 8f b0 64 7f 4c d5 4d a4 a6 28 82 7e b9 53 50 5b 04 d1 d5 97 32 81 d2 59 97 c1 fd e7 5c c4 56 70 0c 99 d8 8b 7c 13 f7 f8 b7 98 61 fa e2 41 55 2a 1e d5 25 4e ee 01 6a 53 96 83 f6 8f 1f e6 f3 e4 5c 45 be af b2 7c 59 fe 15 a6 67 51 cb 64 10 b4 a1 0b 95 04 a1 7b 80 10 03 e5 4d 03 24 61 da 3b f9 96 29 a7 e0 bf 54 f9 5e e3 b9 0b da 6a 08 2b 4b 2e 43 de 7d 41 80 02 96 cc 99 ba 90 42 d2 35 34 Data Ascii: 7E8VT. Jhrn$eHd#FP:.xf=PR.`YJ+ul)8MYhBk0rRfcW9dLM(~SP[2Y\Vp\|aAU*%NjS\E\|YgQd{M$a;)T^j+K.C}AB54

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49901	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:31 UTC	750	OUT	GET /uu/api/res/1.2/sE5UQVWKRLiLgilpJTcvHA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/0b844ca7b4d78611fb5815f9a7e26822.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:31 UTC	1199	IN	HTTP/1.1 200 OK Content-Length: 17806 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 269842101282319240085138087469458705056,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="0b844ca7b4d78611fb5815f9a7e26822.webp" Edge-Cache-Tag: 269842101282319240085138087469458705056,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "00e07a1ff6fbad2803cdf8f15caa410f" Expiration: expiry-date="Wed, 25 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 28 Mar 2024 19:58:20 GMT Server: ATS Surrogate-Reporting: width=536,height=284,bytes=17806,owidth=960,oheight=540,obytes=66673,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 28 Mar 2024 19:59:07 GMT X-Served-By: cache-iad-kiad7000077-IAD X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1711655947.448609,VS0,VE32 Age: 16944 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-03-29 00:41:31 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 52 49 46 46 86 45 00 00 57 45 42 50 56 50 38 20 7a 45 00 00 90 a7 01 9d 01 2a 18 02 1c 01 3e 79 30 93 46 24 a2 a1 a1 32 f3 1d 70 90 0f 09 65 00 c7 2e e0 7f 27 5f fc 8b f5 1f ee f7 4d 59 cf a5 36 2f 7f aa f9 5e 98 79 cf fa 8d f3 93 e6 7f e6 f1 90 bd eb 69 88 dd 1f 9f 35 fe 43 bf 1f cd 7e f3 f3 ff ca 17 d9 7c 17 fc 56 ff df 44 7c 59 fc ef b7 cf 8f bf 21 9b f9 e8 ef f4 ef fa bf 7f fc f3 3f fb d8 6f cb ff fe 7b 2a f9 f7 ea 23 ff 6e 84 1f fe bb fc 08 9e cb 88 31 4f fa 9f 30 06 b7 da 4e 57 e9 73 08 f1 f0 3f 03 cc 45 8f f0 8a 66 a9 db 10 cc 13 b1 9a 92 fc 58 c2 e2 a7 47 d5 bc 92 88 e1 1e 41 1f ac 7d 18 39 52 b8 de ea 77 de f6 f8 b4 29 ec 3e e3 6e 89 7c f8 f3 8e 5f 88 84 e8 f3 ef 33 77 9c 82 21 72 19 d0 48 1a 8e c6 df fd 6d e4 09 8a 53 4e e6 59 5f fe 03 1a 00 6d Data Ascii: RIFFEWEBPVP8 zE>y0F$2pe.'_MY6/^yi5C~\|VD\|Y!?o{#n1O0NWs?EfXGA}9Rw)>n\|_3w!rHmSNY_m
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: f1 dd e4 c8 78 79 ad 6b fa 17 80 e3 20 13 a7 1c f3 5e d0 ca f7 2c 17 11 c6 a2 37 72 75 45 86 62 a5 45 b2 35 6f 2a 91 d5 ff 26 84 e1 35 16 1c 09 bf c9 f8 17 b3 6c d4 ec 25 67 34 38 fd 52 e6 55 20 32 0f 98 e1 44 f6 a8 e2 5c 5b 45 25 f4 5e a3 37 62 48 f6 f8 81 b3 2b d4 af 44 b5 a8 11 2c e3 6f f4 4e 8f ce 51 da 8c ab ef 50 09 db da ab d4 ef e5 bc 3f b9 cb 95 f4 1c e0 7d 11 56 4b 60 92 69 21 cf dc ab fc e4 a4 dd 7a 51 e0 ef bd 0b 0d 49 e4 4b 4c 1c 1f fc 10 5b 4a ac b2 76 d8 a0 e0 2a 01 a3 03 4b 78 01 ba 62 6b e8 17 92 98 7e 9a 36 bd 72 0b 95 18 fe e6 ad a3 dd 98 05 8a b1 d9 48 9d 4f 93 17 aa d5 8e 73 6d d6 ca 32 5a 6b 4b c8 c9 96 89 f6 a4 85 4c 3d 0b f8 74 41 25 93 a3 57 0a 4d 5b bb b7 1d 0a 11 d2 ee 10 d3 f2 a6 f1 d5 75 ae f2 29 c6 5d 6d 31 c5 79 9f 62 ed c2 Data Ascii: xyk ^,7ruEbE5o&5l%g48RU 2D\[E%^7bH+D,oNQP?}VK`i!zQIKL[JvKxbk~6rHOsm2ZkKL=tA%WM[u)]m1yb
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 4a 11 62 11 04 da f9 c3 c7 e8 bf 62 be 5a a8 b8 d8 0c 6a 7f 1c 5a 28 52 b0 1e 83 d5 22 39 d9 68 57 68 07 51 38 d2 64 5d 08 78 90 cd 7a 1d 0e 0e 53 bf 47 e8 6d 31 d5 9f 75 38 67 0b 03 01 73 43 fb ae a1 c9 e5 49 e3 47 5d 99 43 cf 42 5a 67 ef 76 9b f9 71 45 fe 02 f8 b9 77 6d e4 30 c6 3b 5a de c2 3c 80 42 11 4e e6 63 35 10 c7 14 9c 97 1a 51 c7 71 97 db 52 bd d8 cf 8c b6 9e aa ca 67 77 f0 51 cd 64 93 d6 d3 62 16 7a 0d 1d f9 91 e4 e1 89 23 10 88 2a c1 88 3a 6f 5f f2 a2 9d 68 d1 df 22 fc 06 dc 14 26 0f fb bd 2c f2 c0 f1 54 65 2f e7 c1 56 bc 3b 55 bf fe 83 74 d5 10 86 24 99 35 ee 92 c0 4d 11 4b 61 c0 6e 4b d7 6f 4a 63 00 88 01 18 b7 bc b4 9b 32 44 3f 28 50 f4 f5 2b 75 ae 98 2e 10 7b ae 8d fa d0 04 71 48 8e 05 2b a4 76 f9 14 cf 2d 7b 5d f0 fc d0 f2 9b 18 82 52 2c Data Ascii: JbbZjZ(R"9hWhQ8d]xzSGm1u8gsCIG]CBZgvqEwm0;Z<BNc5QqRgwQdbz#*:o_h"&,Te/V;Ut$5MKanKoJc2D?(P+u.{qH+v-{]R,
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 5b ab 5a 73 41 27 4b 37 74 bf e8 b2 ce f9 0f c6 a1 47 68 19 4c 2b da 4b a8 fe 2c 10 a7 aa 04 5b 21 2f 3e ed 91 03 c7 5e 6e 73 b6 3e be 9d 9d 70 44 a5 52 03 cc a4 8e c9 dd ac 19 41 d1 cc 39 f0 dc 57 0d 9c 35 e5 14 94 a3 7c e0 7a af 21 f6 04 aa 53 e3 c2 b0 e0 7b ba e9 03 30 22 19 6c de f1 8e 55 c4 a2 66 bf 86 69 14 04 58 f3 18 83 3e d3 ac 46 79 d4 7f 42 58 37 0e a1 da 6d 8f f6 a3 4c 22 88 e4 37 e1 f0 2d 26 ea 2f 3d 86 3f 2a 7b c2 de 45 85 aa 8e 78 c0 f8 fd 7b ae fc 75 e5 07 d5 85 26 e9 df db f9 cc 21 e7 b0 5a dc 50 65 87 cb 8c cf 66 98 a7 fb 18 15 3a 0a 99 1b 92 15 d5 b1 59 e7 37 ea bc 90 5a e8 a5 4f 6a 0d cb cc 8b 59 b6 4b 7e 83 78 74 13 34 e8 01 32 ff 69 d2 81 fe 91 b0 ce 99 8d 68 f7 44 1f 5c b4 db 54 25 87 78 9c 56 f2 31 fb ba d5 a5 d5 c9 51 19 d3 c7 16 Data Ascii: [ZsA'K7tGhL+K,[!/>^ns>pDRA9W5\|z!S{0"lUfiX>FyBX7mL"7-&/=?*{Ex{u&!ZPef:Y7ZOjYK~xt42ihD\T%xV1Q
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: c0 29 bb 4c 4b c7 a6 cd 74 ef 89 fa c5 83 f7 54 da 6e e0 8f 14 c5 6e 0d 87 0d a9 b1 f7 5f 79 d3 2b b9 65 70 66 b9 4e 1a 6f a1 db f7 8f cf 82 1d 08 71 f5 c8 e8 82 f3 bf bb 66 15 84 7f bf db 07 99 9b b5 48 9a f8 ed 3f 3b af e3 cb 29 fc 53 fa d4 34 fb d2 7b a2 cd 90 2c 1d 0f 47 99 21 41 2e e3 12 80 e1 35 e4 e8 1a fe 12 07 ae b6 d2 dc 56 1e a8 02 ce a4 c4 35 72 5a 47 5d 9b 37 1d 8a 05 aa 53 64 3f 7f df 92 5b 55 27 b6 f1 4a e6 26 76 d9 11 ac 3e 95 a4 f7 9f 45 16 cc b0 e5 ef 3f 16 89 d7 2a ea 4c 44 1a d5 b5 32 0e cd 2d 19 e1 91 21 f4 c7 03 a1 31 25 74 38 0e e5 dc cc 0c c6 54 4f e9 df 92 12 01 8f 62 57 e3 cf 1e 0f ec 26 2c 25 03 33 1e a4 64 5b 58 01 80 77 bc 73 92 ff a6 6c e2 49 c9 55 71 fe 08 b8 82 6b 91 d3 30 32 b7 14 b6 f5 f7 4d 45 4e 95 b5 2b 39 2c 7a c2 27 Data Ascii: )LKtTnn_y+epfNoqfH?;)S4{,G!A.5V5rZG]7Sd?[U'J&v>E?*LD2-!1%t8TObW&,%3d[XwslIUqk02MEN+9,z'
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 51 09 c7 c1 96 8d 6e 67 9a 35 b2 94 7f 54 1d 6d 5c a6 5a 68 7a 60 7f c1 5e 95 3c 97 77 39 d6 24 6f 1e 06 62 d9 6d ca 0e 38 d2 ae a3 02 7e a6 60 fa c9 ee 20 e9 8c 35 f3 e4 5a 2b 31 5e 27 9b dc 36 db 3d d9 5f da 52 bb f2 ec f2 72 9b 52 1e 85 87 66 87 c1 e2 23 ce 82 49 83 46 82 3f fb a8 82 b1 ba bf 2b 65 f6 01 83 bf 5f 0c 1c 2d b4 c0 b6 32 1f a2 94 5e 3f 6e 6d 99 e2 88 81 cd c6 bb 8c ba 73 49 2f 61 eb 20 d3 2d b5 c7 21 16 d4 fe 1f 44 f8 4c fd df 81 16 f3 99 28 4a 5e 55 99 54 a1 95 16 dc 64 76 d4 76 a8 2a 2f db 38 67 6a 4b 42 0d 8f 5a 11 e2 70 3a 88 27 36 0c 16 7b f5 8b 41 f5 95 b7 20 38 d1 af 69 b6 bb 46 b4 3c 67 e8 01 f9 e9 12 02 5a b6 a2 5b f1 96 84 6d a0 e9 e2 ab f2 8d 4a 07 01 6a 43 66 5d 3e 47 eb 65 15 c7 11 05 b4 ff 3f a7 7d 5f 38 c6 96 f0 28 5d 16 2c Data Ascii: Qng5Tm\Zhz`^<w9$obm8~` 5Z+1^'6=_RrRf#IF?+e_-2^?nmsI/a -!DL(J^UTdvv*/8gjKBZp:'6{A 8iF<gZ[mJjCf]>Ge?}_8(],
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 16 46 c4 00 34 9e ab c8 96 7a 9d b1 a5 e0 7d 57 97 ea c9 49 c8 66 33 83 7d b5 1e 8c af 89 77 6c c3 45 cb 89 0e bc e8 f4 e3 12 9f 0a ed b3 91 b5 ae 46 f9 92 3f eb 32 bb a3 16 24 4c 75 78 93 39 45 e4 ee ec 2c 42 23 56 a8 af 9e b8 c3 45 d4 e3 4f bf 45 5f bc 8a 87 46 0f b7 93 14 87 d2 7c 4f cf 73 e6 d1 e8 11 89 ec c5 d2 76 3c cc 3a 11 cd 00 9a 8b 6b 1b c4 4c ce 5d 40 09 c7 ae 7b 47 4d 5f 0e 61 97 52 d2 51 81 7b 3d ce 97 55 9b b7 32 68 11 c5 21 a8 a3 d4 e0 58 14 d9 01 63 59 7d d5 26 5b ac 60 64 c3 a6 9a b6 23 5a 8b 5a 49 2e 42 44 70 ed c5 79 0e fd d5 7f 44 52 1d 0b fc 93 b7 8a 8c 82 8f 3e a0 2c ab fb 43 2d 91 ef 4e bb 14 b9 8d fc 64 a4 4f b0 f2 30 a3 d5 18 c7 9c 79 55 bf 9b 98 58 af 54 0e d8 1e 32 06 95 cf 87 9e 8c 0c 8c 5b a3 29 2d 65 8e 28 5b 25 56 81 e5 36 Data Ascii: F4z}WIf3}wlEF?2$Lux9E,B#VEOE_F\|Osv<:kL]@{GM_aRQ{=U2h!XcY}&[`d#ZZI.BDpyDR>,C-NdO0yUXT2[)-e([%V6
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: ac b7 aa fc 8d 50 af 2c 90 7b e9 83 d4 85 c4 a0 c8 ca 72 5a 91 b7 6f af a0 c8 fa bb fd 65 0f c6 a7 37 9b 70 8b b2 54 b1 d0 f8 b5 ab 8b 7d b2 a8 b5 cc cd b7 37 d9 59 71 35 fa e7 dd 48 82 ab ea 59 02 32 26 f5 99 a3 68 f5 dd 94 64 fe 8f ab af 14 f0 b7 77 d4 3c df 3f d4 09 42 f7 95 ff 06 f6 11 17 f7 74 59 bb 4e 8a 6c 53 21 2c 01 5e a9 51 a0 e5 40 62 7e be d6 a8 03 c5 db cc 2e fe 2d d1 e1 52 4d a1 d2 c4 00 0c b2 ed f6 e9 5b c5 b8 e9 a4 5c a4 06 5e 68 ee 60 f6 87 01 7c 76 4d 21 cc 96 2d 1f 33 07 fd 17 00 4b e9 2c 20 e1 bd 91 53 85 69 83 cf ed 4f a4 1a b4 f9 03 41 5a 4a 61 09 ad 87 ce ed b9 b9 59 3e 7c 9f 6a c6 72 4b 56 eb 35 ae 44 3f 3b ec 7d b4 b8 79 f6 8f 04 fb 40 a3 7a 40 79 f4 88 84 6d 43 d7 32 3d 8f 2a 14 d4 51 93 3e 4b bb 76 87 ae b9 d2 40 c8 4a 32 bc 14 Data Ascii: P,{rZoe7pT}7Yq5HY2&hdw<?BtYNlS!,^Q@b~.-RM[\^h`\|vM!-3K, SiOAZJaY>\|jrKV5D?;}y@z@ymC2=*Q>Kv@J2
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: c0 50 02 a4 c7 77 9f ac 6a 4b 21 39 92 e3 86 51 66 5f 74 96 1c b7 85 f0 58 44 2b 39 a4 c6 0d 0e 9c 72 4e 94 ff bc e0 b6 3a 88 1d ac c2 55 6e f3 a2 4b 3c 33 98 b3 c6 b6 2d d4 81 f9 c1 b2 bb 67 54 2c 6d 9c 39 11 e1 3a 5e 20 7c 46 eb 00 78 74 68 42 5d 84 d7 55 5d 65 71 a6 4a 27 52 8e 9f 49 2e ad f5 f9 27 f8 85 f6 0a ec 4e bf 16 f8 be 83 8a 21 a6 66 7a 1a 7a e6 fc da de dd 0a 5b 26 57 e0 68 6d ee b1 86 77 7c 29 c0 ec af d4 fb 29 4d 35 c8 5e 49 a8 18 4d d3 40 9e f6 bc 73 e1 b4 fa 63 ff 0f e0 69 0d de 7d c3 b1 6a 4a e8 f9 61 3c a7 cc 48 03 9d 7c 02 0f 73 da 95 98 b3 be a2 f5 9f 81 09 8a 4d 9c 4a af ff 8d 3e b2 95 68 df b9 35 cf f9 3f d9 e5 46 39 ed 4e 59 c6 e0 2f 4a 99 1d 8c d4 fc f1 ff 7c 2f 86 c3 df 03 f7 cf 70 08 5a bb 74 ba a4 b1 b9 d4 73 54 37 18 40 56 b7 Data Ascii: PwjK!9Qf_tXD+9rN:UnK<3-gT,m9:^ \|FxthB]U]eqJ'RI.'N!fzz[&Whmw\|))M5^IM@sci}jJa<H\|sMJ>h5?F9NY/J\|/pZtsT7@V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49902	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:31 UTC	562	OUT	GET /ybar/exp.json HTTP/1.1 Host: edge-mcdn.secure.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:31 UTC	785	IN	HTTP/1.1 200 OK x-amz-id-2: /8984RnRWBRSAGY+MYHcNuCHyfPr0IJ1/grfLkXnq2gzBD4jjC+CdmOoPFlmVk7UeTWORMjAXiU= x-amz-request-id: HEJM5EBG8RMM7KP0 Date: Thu, 28 Mar 2024 16:30:43 GMT Last-Modified: Tue, 06 Dec 2022 17:20:56 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: application/json Server: ATS Content-Length: 1784 Referrer-Policy: no-referrer-when-downgrade Etag: "877792d86d801176269a36ac7b4e6e02" Age: 29449 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 7b 0a 20 20 20 20 22 65 78 70 43 6f 75 6e 74 22 3a 35 2c 0a 20 20 20 20 22 73 65 6c 65 63 74 69 6f 6e 22 3a 22 69 6e 64 69 76 69 64 75 61 6c 22 2c 0a 20 20 20 20 22 75 70 6c 6f 61 64 54 79 70 65 22 3a 22 67 72 6f 75 70 22 2c 0a 20 20 20 20 22 72 75 6e 50 72 6f 62 22 3a 31 30 2c 0a 20 20 20 20 22 65 78 70 4c 69 73 74 22 3a 5b 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 22 76 70 69 78 69 65 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 61 63 6f 6e 52 65 67 65 78 22 3a 22 5e 68 74 74 70 73 3a 5c 2f 5c 2f 76 2d 28 5b 5e 2e 5d 2a 29 2e 77 63 2e 79 61 68 6f 6f 64 6e 73 2e 6e 65 74 5c 2f 69 2e 67 69 66 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 61 72 67 65 74 22 3a 22 68 74 74 70 73 3a 2f 2f 76 2d Data Ascii: { "expCount":5, "selection":"individual", "uploadType":"group", "runProb":10, "expList":[ { "name":"vpixiea", "beaconRegex":"^https:\/\/v-([^.]*).wc.yahoodns.net\/i.gif", "target":"https://v-
2024-03-29 00:41:31 UTC	484	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 22 75 70 6c 6f 61 64 45 6e 64 70 6f 69 6e 74 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 79 62 61 72 2d 6d 63 64 6e 2d 72 65 70 6f 72 74 2e 77 63 2e 79 61 68 6f 6f 64 6e 73 2e 6e 65 74 2f 63 73 2f 22 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 6d 65 6f 75 74 22 3a 35 30 30 30 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 22 79 63 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 61 63 6f 6e 52 65 67 65 78 22 3a 22 5e 68 74 74 70 73 3a 5c 2f 5c 2f 63 65 72 65 62 72 6f 2e 65 64 6e 61 2e 79 61 68 6f 6f 2e 6e 65 74 5c 2f 6e 6f 71 75 65 72 79 5c 2f 70 69 78 65 6c 2e 67 69 66 5b 3f 5d 72 61 6e 64 3d 28 2e 2a 29 22 2c 0a 20 20 20 20 20 20 Data Ascii: "uploadEndpoints":["https://ybar-mcdn-report.wc.yahoodns.net/cs/"], "timeout":5000 }, { "name":"ycs", "beaconRegex":"^https:\/\/cerebro.edna.yahoo.net\/noquery\/pixel.gif[?]rand=(.*)",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49903	34.200.65.202	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:31 UTC	1018	OUT	GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2hk0:19e0~2hk0:19e7~2hk0"; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A
2024-03-29 00:41:31 UTC	465	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:31 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 29-Mar-2025 00:41:31 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.106
2024-03-29 00:41:31 UTC	59	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 67 69 4a 63 61 71 6c 45 32 75 4b 75 36 5a 30 37 72 6c 39 41 32 6d 74 77 6d 47 53 4f 54 42 4c 5a 7e 41 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30{"axid": "y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49898	44.197.69.112	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:31 UTC	720	OUT	GET /j?dtstmp=1711672890515&did=did-004f&se=e30&duid=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q&tv=8.38.0&pu=https%3A%2F%2Fwww.yahoo.com%2F&wpn=prebid&gdpr=0&cd=.com HTTP/1.1 Host: rp.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:31 UTC	563	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:31 GMT Content-Length: 0 Connection: close set-cookie: lidid=07571c18-3f04-4602-a656-288806fb242c; Max-Age=63072000; Domain=.liadm.com; Path=/; Secure; SameSite=None location: /j?se=e30&cd=.com&dtstmp=1711672890515&tv=8.38.0&did=did-004f&n3pc=true&wpn=prebid&pu=https%3A%2F%2Fwww.yahoo.com%2F&duid=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q&gdpr=0 access-control-expose-headers: * access-control-allow-origin: https://www.yahoo.com access-control-allow-methods: GET access-control-allow-credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49899	34.238.17.47	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:31 UTC	541	OUT	GET /idex/did-004f/any?duid=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q&gdpr=0&did=did-004f&cd=.com&resolve=nonId&resolve=index&resolve=magnite&resolve=pubmatic HTTP/1.1 Host: idx.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=3efb4240-3aa8-40ba-98d0-0783f915886a
2024-03-29 00:41:31 UTC	259	IN	HTTP/1.1 400 Bad Request Date: Fri, 29 Mar 2024 00:41:31 GMT Content-Type: application/json Content-Length: 93 Connection: close trace-id: dc9788c338328257 Vary: Origin Request-Time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-03-29 00:41:31 UTC	93	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 68 74 74 70 53 74 61 74 75 73 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 4e 6f 20 6f 72 69 67 69 6e 20 68 65 61 64 65 72 20 66 6f 75 6e 64 2e 22 2c 22 65 72 72 6f 72 43 6f 64 65 22 3a 22 62 61 64 5f 72 65 71 75 65 73 74 22 7d 5d 7d Data Ascii: {"errors":[{"httpStatus":400,"message":"No origin header found.","errorCode":"bad_request"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49904	151.101.1.44	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:31 UTC	656	OUT	GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1 Host: api.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:31 UTC	980	IN	HTTP/1.1 200 OK Connection: close Server: nginx Content-Type: application/json;charset=utf-8 P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Credentials: true Set-Cookie: t_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 29-Mar-2025 00:41:31 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 29-Mar-2025 00:41:31 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Accept-Ranges: bytes Date: Fri, 29 Mar 2024 00:41:31 GMT Via: 1.1 varnish X-SERVICE-VERSION: v2 X-Served-By: cache-iad-kjyo7100088-IAD X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1711672891.436352,VS0,VE17 Vary: Accept-Encoding X-vcl-time-ms: 17 transfer-encoding: chunked
2024-03-29 00:41:31 UTC	4	IN	Data Raw: 35 33 0d 0a Data Ascii: 53
2024-03-29 00:41:31 UTC	83	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 69 64 22 3a 22 39 32 61 39 63 66 63 34 2d 64 37 63 66 2d 34 34 31 63 2d 39 38 65 32 2d 66 39 31 35 38 35 35 32 64 36 34 34 2d 74 75 63 74 63 66 66 39 33 62 62 22 2c 22 69 73 4e 65 77 55 73 65 72 22 3a 74 72 75 65 7d 7d Data Ascii: {"user":{"id":"92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb","isNewUser":true}}
2024-03-29 00:41:31 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49906	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:31 UTC	356	OUT	GET /g/images/spaceball.gif HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:31 UTC	837	IN	HTTP/1.1 200 OK x-amz-id-2: JK3Rx4pSYkNEULW+DO6YoxLVxT3Pz8qUdARCkYJ/iLiuV4JBDmRkS/EC6I9ngJ3HoHRB2MSo5FQ= x-amz-request-id: TDT74VTK4Y74CFB1 Date: Thu, 28 Mar 2024 01:56:18 GMT Last-Modified: Wed, 24 Feb 2021 23:21:03 GMT ETag: "325472601571f31e1bf00674c368d335" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: KAUQOG5o0gBSJgl4c2JS9bVGo5z87pfq Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 43 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 81914 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49905	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:31 UTC	750	OUT	GET /uu/api/res/1.2/9dljnlwsdNbAGRjDdt418A--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/90fc863b5fb5c3e128c401bc64cf10a1.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:31 UTC	1296	IN	HTTP/1.1 200 OK Content-Length: 19046 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 306096902495509597627271203119390045982,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="90fc863b5fb5c3e128c401bc64cf10a1.webp" Edge-Cache-Tag: 306096902495509597627271203119390045982,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "3ba38d0225e50ab3bc2ea08462130835" Last-Modified: Thu, 28 Mar 2024 18:09:15 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=19046,owidth=960,oheight=540,obytes=75058,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 3a8d8e4d1f43bceab9da8cede45f8411 Accept-Ranges: bytes Date: Thu, 28 Mar 2024 18:18:02 GMT X-Served-By: cache-iad-kjyo7100056-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711649883.883167,VS0,VE1 Age: 23009 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 3a8d8e4d1f43bceab9da8cede45f8411 cld_by: cache-iad-kjyo7100056-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-03-29 00:41:31 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 52 49 46 46 5e 4a 00 00 57 45 42 50 56 50 38 20 52 4a 00 00 90 62 01 9d 01 2a 18 02 1c 01 3e 79 36 97 48 24 a2 a2 23 a7 f0 ec f8 90 0f 09 63 6d f5 bf 5b 0b 7f b7 26 e3 4c 36 f3 f5 8b fb 7f e6 7d 3d 38 f7 c4 ef ae c9 3d f5 bd 53 e6 f3 d3 ee e1 df 39 de 65 5f 96 f9 69 df b3 9d 74 b8 e3 93 07 e5 c7 f0 7c 3b f3 5b f4 8f df fd 1e 33 a7 da ee a6 bf 41 fd 11 92 ee 76 b0 2c f7 87 07 d0 9d 7e fd af 7f 8f 76 35 e8 29 e5 01 e0 a1 f9 3e 8a a1 63 1a 0c fa b2 7d 2c 2c 25 8a 3e d8 a3 34 b6 f3 04 64 64 2c 77 d1 8d e2 c9 65 ca 01 b8 ef fa 64 1c 23 c0 9d 8d 0e 9e ea 16 33 b7 5f 0b ba 53 4f 4d 1c d3 1b ba d4 6e f3 fb c2 92 03 bc d4 e3 7d b3 7f f8 77 cb 20 f8 59 15 09 e1 36 45 13 9a d3 b3 43 ff a1 1c 78 14 a6 3b e8 a8 11 66 6a 9a c7 2d 6a 42 ba 1d e3 80 73 bb fd 51 4f 9d f9 Data Ascii: RIFF^JWEBPVP8 RJb*>y6H$#cm[&L6}=8=S9e_it\|;[3Av,~v5)>c},,%>4dd,wed#3_SOMn}w Y6ECx;fj-jBsQO
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 71 2c b6 1a 37 c1 cf 0b 48 dd 15 21 07 01 da 34 61 33 98 9c 93 9a 9c 7e fa 81 b8 b7 a0 e4 b1 e6 bc 3b 31 a9 6b 9d 5e 14 11 97 36 f7 a0 71 0e 0e e8 be cb 26 7c 1a e4 49 57 07 5e 5c 5a b6 f3 83 51 4e ba e0 2e 30 d1 ca 3a c9 da 23 7a 26 53 92 c5 ab 03 a8 ff a6 37 09 65 99 02 eb 09 e7 c9 3c c2 48 e8 84 d3 bd 64 94 2e 4f f1 01 42 4f 80 31 ba 57 78 1a 78 0c a1 42 90 ea 65 6e ec 6b 3c 22 23 c1 5c 52 d8 0d 4d e0 1f 46 c9 ab 5c 81 a6 3b a4 6b 9d 14 ec 08 91 6a 67 8e f9 63 4e 5a ea 1d 97 36 3a 37 45 2f 18 52 fd 89 dd 42 eb 23 f3 dc e7 be a9 ac 9d 9c a8 e8 7e 70 25 55 82 e6 42 98 1f 51 fc 63 69 e5 a2 aa bf b8 69 db 02 ba af 96 02 51 f1 d2 72 21 b4 af 78 53 cd 22 1b f9 2c c0 5c 7b 86 f3 8a e4 4a 9f 41 73 77 c9 26 e5 0e 36 33 c1 57 43 01 61 51 6e aa e9 07 6c 70 d9 4c Data Ascii: q,7H!4a3~;1k^6q&\|IW^\ZQN.0:#z&S7e<Hd.OBO1WxxBenk<"#\RMF\;kjgcNZ6:7E/RB#~p%UBQciiQr!xS",\{JAsw&63WCaQnlpL
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 07 5a 3b 64 5d f6 db 96 84 31 30 83 b4 be 22 6b f3 1d 7a 55 a7 7a 2b ae bd 56 b8 47 9b 55 2f 59 36 89 89 9d d8 15 d9 9d 45 a5 51 2e 5d fb eb fc 0f d2 6e 7b a0 cd bb 34 8f 7d f2 44 47 21 6a 29 d1 3d ac 6b 3e 03 6b ad fb a3 d4 9e 4e 73 de 84 94 a6 32 07 a3 43 fb f1 95 68 ab 96 25 4d bb 25 2a af 50 d1 b3 b4 48 1c 92 84 0e f2 8f 52 85 8b f4 89 c6 d8 fc 33 48 02 87 97 1e ba 2f 1a 2b 47 c6 f8 b9 65 56 6d 64 63 42 04 e6 60 e0 8f 8a 96 4d 5e b2 55 a9 ff 1c 3c fa 9a 06 a0 56 df 41 aa 72 57 08 45 57 02 bc 09 4a 9e 51 c5 4b 3a 3e 8f ab 62 e0 67 67 e1 91 ca 59 39 17 89 d7 1d 50 ff c4 d0 bb 25 3f b5 4b 2f 5a 17 9b 0f 7d ac 28 42 a8 ef 21 f1 a9 4b c2 a7 73 bc fc 0d 2d 76 d4 ad e5 36 ed 53 74 f1 5b ce 37 6d e1 db 64 f0 74 27 aa 26 c0 27 cf f2 44 13 eb 98 38 8f c7 40 66 Data Ascii: Z;d]10"kzUz+VGU/Y6EQ.]n{4}DG!j)=k>kNs2Ch%M%*PHR3H/+GeVmdcB`M^U<VArWEWJQK:>bggY9P%?K/Z}(B!Ks-v6St[7mdt'&'D8@f
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: ab bc 7c 33 4e fd bd d4 5c bf 4a a6 31 47 37 d3 44 56 68 19 fd 42 7b c6 47 9e 9a 08 71 ef d3 4c e6 dc 4d 9d 14 d0 b4 de 11 18 08 44 08 31 5a 76 06 de 1e 7f a3 25 f4 9a 94 48 72 e5 ec 74 a8 fd 46 e3 41 66 7a 12 08 31 45 59 bc 58 19 ac 0b 63 78 9a de 2a c3 5c 0d 5e ab 64 c5 97 59 2c ca a0 bb 57 2f 00 a0 6f 50 85 87 c0 ee 14 43 89 75 1c 38 6a 90 70 f0 b0 7c 16 53 08 58 09 12 b0 66 bb ab 59 8d 86 9b fc 3d 5e 09 db 77 8a b8 18 8a 14 30 e5 6c 95 d8 25 3c 1e a3 fc ab dc 8e d2 35 15 12 87 a5 25 31 29 38 18 b0 1c f1 8e 63 4d f2 6b 4f e6 d3 11 f9 04 83 ed 0f 6f 2b 34 37 d0 32 09 55 e8 d3 d9 89 3e 05 c4 03 52 f8 26 a2 73 47 50 4d 85 86 64 68 19 9d 9b 0c 12 9c 0d 7e b6 9f 09 e5 57 89 09 f8 42 7e b5 74 bb d8 98 fb 2b 96 93 bc 89 72 aa 0b 5b 00 40 0e be 06 f7 05 13 42 Data Ascii: \|3N\J1G7DVhB{GqLMD1Zv%HrtFAfz1EYXcx*\^dY,W/oPCu8jp\|SXfY=^w0l%<5%1)8cMkOo+472U>R&sGPMdh~WB~t+r[@B
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: af 13 af a1 6b aa 9e 7c 32 ef dc 92 08 5f f8 ca 5f 8d 1b 99 08 6f 97 09 bb 17 a6 bd ee fd f2 c6 cc 18 2f ca e7 f7 78 5e cb 7b 0c 71 0d 56 f9 87 54 eb 10 c4 41 f9 55 03 fd b5 9f c3 35 67 98 77 97 fa 21 7f 3b ba c7 b0 22 94 71 61 b5 6c 39 9e 24 51 82 fc ac ab 4c 9d 26 da 4e 3b a1 fd 77 4c 08 97 34 46 46 05 d0 59 42 ba 57 3f 3c 93 3f 7a 44 25 3f b9 ab 64 fc af 4a b4 d9 bb 0a f8 4e bd a2 f8 1f ef da 61 7b a0 3f 41 da e9 d3 13 21 95 93 26 d7 f5 37 ed 31 3f 9d d3 09 7d 22 c7 68 ff 1f 40 b9 fc 81 52 a5 9e 58 b0 a3 bc 79 4a d5 fe 6c 69 67 d8 91 1b ae 3a f3 4a 95 5e 03 c7 d3 93 4d 5a f3 37 9e 21 19 c8 68 92 1c 2b e7 a0 8a 22 91 c8 d6 a5 94 57 5e c7 36 40 59 f2 86 10 a8 6a 4f c6 93 ba 67 b6 99 86 53 41 0e d4 6b c6 7a ea 59 fb f2 25 74 14 03 de 6f c3 27 f4 d0 97 fb Data Ascii: k\|2__o/x^{qVTAU5gw!;"qal9$QL&N;wL4FFYBW?<?zD%?dJNa{?A!&71?}"h@RXyJlig:J^MZ7!h+"W^6@YjOgSAkzY%to'
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: c8 cb 99 80 64 d9 d4 4e cc 5d 95 bf 5f 6c 39 cd 50 a9 23 53 4d 28 29 4c bd 6a 13 7d 92 6e 35 66 e2 66 d3 bc 47 7b 06 26 af f0 20 a9 c6 08 cc 4c 56 9e ab 32 29 9b 50 16 7d 12 7d 5a 4f 1a 83 c2 6c 2b 63 5c 48 e8 70 3c 3f d1 9d 15 63 7e 59 06 7a 6d bd a7 b1 ed 04 52 ee 3a 15 a4 fc e8 ae ca 70 aa d7 fb 19 e1 d0 80 4c 26 e9 1f fc c2 31 7d 46 b2 56 75 98 ae 70 c5 c1 f6 45 0e 25 79 87 29 6b b3 6d d4 31 02 a2 bc 86 29 a3 fe 04 40 6b 46 db ec b0 e8 96 e1 d8 4d d9 1d d7 f3 c5 61 1c ed 4a 3c 31 42 6e 56 46 6d 6b ff e6 9e 26 8d 26 0e 59 1f b8 5e 11 db 2d 05 d5 3e b0 76 0e a8 8f e4 80 e9 6e ca 2b 9c f0 94 46 16 4c b0 c9 a7 15 85 8a ea 9b 22 cd 59 82 81 b1 e5 e5 22 52 0a eb 00 45 ed ea 86 1c 97 11 59 35 b3 3a 61 5b f0 6c 47 40 6f b9 27 50 bc 0d 9f 7f cd be 7c ea b2 61 Data Ascii: dN]_l9P#SM()Lj}n5ffG{& LV2)P}}ZOl+c\Hp<?c~YzmR:pL&1}FVupE%y)km1)@kFMaJ<1BnVFmk&&Y^->vn+FL"Y"REY5:a[lG@o'P\|a
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 06 43 2e 6d 52 88 ba e9 9f af 84 c6 05 04 98 29 16 53 7f 1f bb 43 f0 1a 98 1d 9d 0d d7 ea 48 09 19 b7 5d 26 2d f6 6b 32 f1 8f b0 53 fd 45 53 e9 c0 37 e3 ce e5 05 8b 41 53 95 8a 42 c9 9a 74 1d 1c c8 63 db ee da 29 f6 df 42 3e 36 91 ed 3b 6e 06 48 88 ea 9b af c1 b6 b0 a2 a5 97 2e f0 2c f8 85 de d7 53 c8 18 f9 61 aa 37 43 b8 22 d9 0b 09 6f c1 77 72 12 ed 1d ba 71 bd ce 8d 2f 6a 93 17 fb e1 b2 41 8f 9a 0b 62 48 0f f7 98 88 a6 8e 14 cb 0a f3 45 28 ef c8 26 aa 8f 18 45 77 fa fc 03 b9 6f a7 5c 00 55 05 61 79 ce 5a 76 f9 71 fc 6e cc 33 2d 75 7e 7f 91 70 3a 03 3e aa 3e 1b 5b 11 d9 fa a0 5d 8a 62 a2 59 9b 4b 66 b4 7c 2e e4 16 98 3e 0f 14 9d 21 a1 34 e8 a8 03 26 26 91 af f1 63 0f 67 8d d4 02 bd 13 c7 c4 95 8e cd 15 2e dc f6 59 f1 77 8f 98 44 56 2b 03 91 42 b2 0f 11 Data Ascii: C.mR)SCH]&-k2SES7ASBtc)B>6;nH.,Sa7C"owrq/jAbHE(&Ewo\UayZvqn3-u~p:>>[]bYKf\|.>!4&&cg.YwDV+B
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: d4 10 82 73 e4 1d 1c f3 8e ae 8e 8f d7 82 3a 2d 81 41 09 22 cf 64 6f f6 5c a5 15 2d e1 be 5a 2c a6 65 79 8c 09 20 59 b5 e6 05 fe 5a 95 08 da 42 61 69 09 23 f2 23 c6 98 c3 14 56 f9 39 0b 57 02 2b 38 fb 9d 93 22 ac 93 ca 8d 9f 94 a6 4e f4 06 5b a6 81 73 17 22 7e dd ac 0a df 2c 06 eb 87 da 58 6c 4c f6 a5 89 f9 27 48 4e 83 b7 86 0e 18 29 eb 5e 60 d0 c3 95 11 eb be f7 db 76 c4 cc 7b 46 56 a5 b5 1d 73 7d a8 86 b1 7f e0 41 7f 2f fe c4 2e 12 b6 1d d6 d5 98 6f e2 2f fd 56 5d 90 b4 81 ba 1b 04 2c ba 79 95 60 7f b6 8f 6d ab fb 3d a5 0d 73 1b b8 b6 d4 bc 62 a3 83 51 dc e1 14 dc d9 70 41 53 a6 52 52 74 ff c4 08 84 39 2f 47 a5 2c 7a a7 25 77 98 f8 35 10 36 5b 34 2c 10 0b 9f 54 75 08 7f e9 ec 40 2f 9a 46 ff 3a 6e 54 21 a4 c1 50 10 3e a0 41 d4 62 18 13 a4 96 a1 38 53 9a Data Ascii: s:-A"do\-Z,ey YZBai##V9W+8"N[s"~,XlL'HN)^`v{FVs}A/.o/V],y`m=sbQpASRRt9/G,z%w56[4,Tu@/F:nT!P>Ab8S
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 75 f3 55 ac be 4c 64 4b a8 a5 1b 3c f4 b6 d4 9f 84 64 a0 4f 67 d3 5e da 23 2f fa 1a c4 d1 f2 fd 15 14 93 83 20 35 ee 94 6a 84 ef 7d 3c 45 67 20 77 c1 8f 30 4d 8d 65 0f 9d e7 b0 06 e1 16 97 be ad 58 4a 3d 80 99 7e 4e 30 13 5a 87 cb a8 73 e1 b4 a0 ed 49 c1 6b 10 d9 f1 ca d0 f2 b3 99 68 5a 8d 27 90 92 20 24 8c c4 a2 05 9b 7f ad 5d e7 6f f5 8f f7 f9 83 ef 5f 04 c6 e8 7d 59 36 39 23 f3 e2 d5 48 eb 3d c1 ff b3 42 3f 8d 7c 7a 9f 59 94 3f 1b 53 5a 7b e7 6a 1f 73 01 d3 b6 6c 4a 42 da ed a6 04 6e 29 80 3c c9 85 af 98 44 55 0e f1 be 92 b8 e0 66 22 95 bf 3c 24 11 6b d2 cb d7 a0 89 af b7 cc 14 be e7 04 62 c7 42 a0 4a 3c 60 84 7b 5a 75 a2 ba 18 8c 78 db be be 15 ad d0 50 d6 73 53 ea 23 1a 68 a7 2a 52 a5 4a 6a 3e b5 5d 69 60 e2 ec 25 5a 72 4d 51 66 3b ed 7b 09 af 28 c2 Data Ascii: uULdK<dOg^#/ 5j}<Eg w0MeXJ=~N0ZsIkhZ' $]o_}Y69#H=B?\|zY?SZ{jslJBn)<DUf"<$kbBJ<`{ZuxPsS#h*RJj>]i`%ZrMQf;{(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49908	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:31 UTC	530	OUT	GET /uu/api/res/1.2/zfAlXE4gXTPcZHRxD2dicQ--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/495c67a0-ed60-11ee-bbdf-e84806c4f88e.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:31 UTC	1282	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 444719919102274071108771966721167519666,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="495c67a0-ed60-11ee-bbdf-e84806c4f88e.webp" Edge-Cache-Tag: 444719919102274071108771966721167519666,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Etag: "ff76e493abb1795309adedcb5408033f" Last-Modified: Fri, 29 Mar 2024 00:07:13 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=700,height=420,bytes=81314,owidth=4019,oheight=2679,obytes=2642233,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 6481a0a9a987071686ef6489bcca822b Accept-Ranges: bytes Date: Fri, 29 Mar 2024 00:07:25 GMT X-Served-By: cache-iad-kiad7000148-IAD X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1711670844.197110,VS0,VE942 Age: 2047 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 6481a0a9a987071686ef6489bcca822b cld_by: cache-iad-kiad7000148-IAD cld_latency: 942 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 109393
2024-03-29 00:41:31 UTC	220	IN	Data Raw: 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: ATS-Carp-Promotion: 1Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 01 e1 01 e9 01 f2 01 fa 02 03 02 0c 02 14 02 1d 02 26 02 2f 02 38 02 41 02 4b 02 54 02 5d 02 67 02 71 02 7a 02 84 02 8e 02 98 02 a2 02 ac 02 b6 02 c1 02 cb 02 d5 02 e0 02 eb 02 f5 03 00 03 0b 03 16 03 21 03 2d 03 38 03 43 03 4f 03 5a 03 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 Data Ascii: &/8AKT]gqz!-8COZfr~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 78 cc 79 2a 79 89 79 e7 7a 46 7a a5 7b 04 7b 63 7b c2 7c 21 7c 81 7c e1 7d 41 7d a1 7e 01 7e 62 7e c2 7f 23 7f 84 7f e5 80 47 80 a8 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 33 89 99 89 fe 8a 64 8a ca 8b 30 8b 96 8b fc 8c 63 8c ca 8d 31 8d 98 8d ff 8e 66 8e ce 8f 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac Data Ascii: xy*yyzFz{{c{\|!\|\|}A}~~b~#Gk0WGr;i3d0c1f6n?zM _4uL$hBd@iG&vV8nR7u\
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: e2 88 c7 e6 06 31 de 7c c5 18 60 9f 6f 4a 7e a0 83 f6 a7 73 15 29 c9 38 3e b5 a0 c2 e4 e5 52 25 53 2e 3c 0b dc fa 95 8e e2 aa 71 bf bd 0d 45 e5 15 3d eb 3a a5 b2 1b 16 c2 81 49 a7 44 36 50 64 a5 ad 94 ad 60 70 3b d4 b2 2b c6 71 26 3e cb a9 90 d2 dd 6d 49 39 0a 42 b9 a6 8d 1f 2e 4b 97 79 49 97 39 c5 bc 47 92 bb 1a 43 c9 7d b7 5c 69 14 06 60 5e 34 3c 57 23 24 6d 52 9a 58 0b f9 80 47 f5 a1 dc 7e 98 9d e2 db 66 b1 dc 63 6a 4d 1b 39 4a b7 be ac f8 6b 3e f3 47 d0 8a ee a0 dc 86 75 0e b9 bb 5e a2 b7 6e 97 31 6a 61 a5 65 29 4f 03 34 8e 01 2e bd 3d bf ca d3 cf eb ab 7c 25 39 69 69 7b 1d 74 ac 65 2a a9 08 30 85 71 48 45 b1 d1 58 21 f9 7b d6 9c 83 8f e7 4c 97 a0 f8 ce 89 91 a7 90 f4 32 af 0c 1e 09 ce 29 83 ca 17 a8 f1 7f 57 cf db 8c 1d d8 3c 50 a4 e7 09 1c 99 04 e0 Data Ascii: 1\|`oJ~s)8>R%S.<qE=:ID6Pd`p;+q&>mI9B.KyI9GC}\i`^4<W#$mRXG~fcjM9Jk>Gu^n1jae)O4.=\|%9ii{te*0qHEX!{L2)W<P
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 92 4b 21 85 2b 04 8c 73 4d d3 3b 9d 44 ff 00 f7 77 90 f2 55 81 9f 4e f4 eb 03 ba 96 0e 97 be a1 d6 d2 da 96 92 7c b9 a5 60 cc 2c 3b 64 f5 24 80 93 f3 c1 a4 70 9c c1 bc 13 18 2b 77 61 c8 cd 77 38 94 a4 fa d9 70 5c 96 54 de e2 71 45 8c 09 cf 4e 93 b8 e4 d3 c6 08 fd e3 de 98 23 47 52 47 9d 21 e2 74 84 26 a4 ed f3 a4 21 78 b1 5e 7c e1 b4 13 9f 4a e6 71 75 08 1d 37 74 08 f1 03 19 1f 0a 66 b3 02 e8 bb d0 1a f3 2e b0 e1 6d d4 14 a8 1f 3a e8 d5 4b 09 f8 9f 0a 78 c3 7a 42 35 0d 13 d8 d2 10 a6 d2 9e f4 84 66 90 82 b6 77 b6 b8 42 95 e9 8f 9d 75 80 1e 15 9c fe e6 0f 38 a2 8e 23 0a 39 51 3e b4 15 1c 22 ea f0 47 14 87 8b b4 72 9a 60 85 77 7c 29 a2 31 4e 10 99 38 a4 23 20 91 da 9a 23 60 a5 1f 3a 70 8c 05 28 79 d2 11 f6 ef 85 21 0f 21 37 95 6e cd 21 08 cd 73 73 9e b8 a6 Data Ascii: K!+sM;DwUN\|`,;d$p+waw8p\TqEN#GRG!t&!x^\|Jqu7tf.m:KxzB5fwBu8#9Q>"Gr`w\|)1N8# #`:p(y!!7n!ss
2024-03-29 00:41:31 UTC	48	IN	Data Raw: 3f 4c 42 32 21 4a 8c 32 eb 2a 03 d7 14 cb 1d d4 14 80 54 95 8c 1f 3a 73 0e 49 b8 42 6b aa fb 3e 28 97 1b 90 04 b5 e0 f6 a0 85 12 27 27 34 84 3c Data Ascii: ?LB2!J2*T:sIBk>(''4<
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 67 ee d3 5e 21 4a 60 f3 52 7c 85 21 86 29 c2 32 9a 42 32 4e 29 a2 31 bb e1 4e 11 f2 69 08 24 c8 4b 31 ce 78 e2 90 81 ee ab 72 e9 0c 13 24 01 93 48 79 ad 3c 46 c0 62 98 23 34 84 61 54 84 6a 4e 29 e2 35 27 34 84 7d 48 47 d4 84 7d 4c 11 f5 3c 47 c0 64 e2 98 21 c2 42 12 31 b7 3f 5a 42 3a d2 2c 48 f1 5c f1 12 81 91 f1 aa 9c e5 9c 92 67 0f b1 35 a4 37 ce 0f 6a e0 31 1b 85 c6 04 b6 56 cb cc a4 24 82 32 07 6a 75 ce 94 b6 af e9 c7 eb 89 cb 7e 1b 65 20 1f bc 9a 9b 1c 96 22 3d 37 10 b2 f4 4e 43 ef 05 2c 92 3d 00 a2 ea 9d d2 09 df 7a 49 3e d8 c0 75 94 92 12 39 f9 53 35 44 b1 10 15 c7 76 1b ca 61 e4 14 a9 07 cf ce 8c 04 dd 2a 18 c9 e3 34 d1 0a 25 05 54 4d 35 1b a8 d3 7f 0c f9 0c d7 74 dc 2d 46 9b 78 2a ec 30 07 90 a7 69 b8 6e a3 4c 84 2d 23 2b c0 f9 0a e6 47 0e ce d3 Data Ascii: g^!J`R\|!)2B2N)1Ni$K1xr$Hy<Fb#4aTjN)5'4}HG}L<Gd!B1?ZB:,H\g57j1V$2ju~e "=7NC,=zI>u9S5Dva4%TM5t-Fx0inL-#+G
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 19 35 d7 74 1b 98 14 11 9f 3a 08 53 74 c5 2e 1c 1a e6 71 0e da 88 1b 18 55 34 46 ee 45 c6 36 9a 68 84 3c 05 7a d3 87 9f 78 7b 7e f5 34 60 a0 8c 7d 38 a4 3c db ec 8b db b9 29 c8 3e 60 71 48 61 a7 83 df 9a 42 34 03 de c1 f5 a7 08 22 e2 c0 8e 12 7d 29 08 17 8f da 62 90 82 0e c6 65 2c a5 40 83 81 e5 4d 10 ca 3a 52 5e 00 8e 09 fc 29 c2 0b 2a 33 09 c7 29 e4 67 bd 34 42 2a 8f 1b 8f 79 14 87 88 be c3 04 64 11 f4 a4 30 6f e0 27 d6 90 8d 1c 69 23 8a 70 8d 76 0a 42 32 a4 0a 42 35 29 48 f2 a4 23 29 42 14 71 9c 52 11 9d a1 3d bc e9 08 4d 6a f7 bb 53 c6 1d 77 e2 36 52 14 8f bb f2 aa 42 c8 fb c5 0d a0 94 9e e3 3d f8 35 dc c8 74 64 e3 c9 51 51 52 f1 8a 7e 61 0b c6 b9 c4 6d 90 d2 b1 f8 f6 ae ea a2 07 8e 0d 40 9d b6 f0 d3 6e 25 4d 94 83 43 d5 71 33 c2 34 2d 71 bd c7 95 11 Data Ascii: 5t:St.qU4FE6h<zx{~4`}8<)>`qHaB4"})be,@M:R^)3)g4Byd0o'i#pvB2B5)H#)BqR=MjSw6RB=5tdQQR~am@n%MCq34-q
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 39 e4 d0 9e 1c 72 85 6d 34 31 1b a9 c5 a4 82 0d 21 e2 81 6a 3e 74 84 61 49 f8 d2 3b 90 d7 b5 23 82 ac a0 ad 69 41 e4 66 90 89 23 b0 e3 31 6e de a4 80 76 92 29 0c 22 eb 29 2a 25 34 87 8d d7 f7 8f ce 9c 30 70 14 56 d8 06 9a 21 a9 fe da 9c 35 07 6e 27 f6 27 9a 68 51 ac 74 e5 d1 cd 38 60 44 b0 40 c8 a1 2a 8f 34 2d 28 67 e1 4f 11 8f 0c d2 11 a1 6c 8a 42 12 5a 80 ae 2a 0b 32 09 57 46 e6 43 ec 1a 70 b3 1f 53 47 0a 30 13 b8 95 0e d4 e1 86 8e ac 2b dd 03 b5 21 08 53 c4 74 b4 5b f3 25 01 25 44 92 38 aa 8c 84 c4 1f 22 f0 c1 48 42 54 72 aa 66 98 6b 8d a4 3c 54 d2 d4 93 f2 ae d8 6d 94 00 e5 cf ec 65 59 5e 3f a5 0d e8 a5 94 1d 05 20 ea 20 92 95 ad 44 7c 49 a0 2a 29 37 39 30 83 73 6a e0 c2 4a 0f 24 0f 3e f4 a3 7a a2 80 91 33 91 cd 76 cb 5f 61 5a 86 c3 94 9f c7 d6 ad 22 Data Ascii: 9rm41!j>taI;#iAf#1nv)")%40pV!5n''hQt8`D@4-(gOlBZ2WFCpSG0+!St[%%D8"HBTrfk<TmeY^? D\|I)790sjJ$>z3v_aZ"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49907	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:31 UTC	750	OUT	GET /uu/api/res/1.2/4cpGBzlnhJ0yT7rqoxwXNw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/19f4517308701d1897c1d2429ccc754f.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:31 UTC	1297	IN	HTTP/1.1 200 OK Content-Length: 16316 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 372411165792788529172537820400320912799,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="19f4517308701d1897c1d2429ccc754f.webp" Edge-Cache-Tag: 372411165792788529172537820400320912799,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "fc2c412dc3fd923c13b3401b24f8be66" Last-Modified: Wed, 27 Mar 2024 11:28:58 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=16316,owidth=960,oheight=540,obytes=77269,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 6cabfadc303294cd1c393d7c9560d3c9 Accept-Ranges: bytes Date: Wed, 27 Mar 2024 11:30:49 GMT X-Served-By: cache-iad-kjyo7100086-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711539049.119858,VS0,VE1 Age: 133842 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 6cabfadc303294cd1c393d7c9560d3c9 cld_by: cache-iad-kjyo7100086-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-03-29 00:41:31 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 52 49 46 46 b4 3f 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 17 02 00 1b 01 00 49 43 43 50 18 02 00 00 00 00 02 18 61 70 70 6c 04 00 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e6 00 01 00 01 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 61 70 70 6c ec fd a3 8e 38 85 47 c3 6d b4 bd 4f 7a da 18 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 30 63 70 72 74 00 00 01 2c 00 00 00 50 77 74 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 54 52 43 00 00 01 cc 00 00 00 20 63 Data Ascii: RIFF?WEBPVP8X ICCPapplmntrRGB XYZ acspAPPLAPPL-appl8GmOz/desc0cprt,Pwtpt\|rXYZgXYZbXYZrTRC c
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 86 18 ea 0c 9f ec e1 23 39 ff 49 4e 50 3c 96 f5 4c cf 6e b1 df 5e 28 5c e7 d0 40 f9 b4 cb e9 5a db 66 4c e4 78 88 94 6a 6b c5 b4 16 49 58 55 3b 90 4e cc c6 f3 c1 ef b0 f5 4c c0 61 ad cf 7f c0 c4 13 cd ec 32 d1 3b 93 3d 09 83 f8 b8 75 b4 4f b7 2b b0 d7 87 1c b9 b0 83 39 86 ef d1 f0 13 03 1c 28 0a 0f 11 22 96 59 c0 e9 15 99 f9 b1 69 28 51 f7 f7 13 0d 9f f3 b5 8b a4 63 20 f0 2c 47 2d 28 2c 33 8e 7f 80 ca a5 b7 cb 37 5d b3 9d ad 64 2a 97 d7 77 6e 14 b6 73 b1 4e 65 65 9e 77 33 03 4a 0b a9 a5 68 e3 82 a0 52 11 a2 d6 b0 10 af 74 a7 23 3a 9a 81 db 4a 1a b6 88 9b e1 1f 13 09 04 ce 0b 15 a3 ca 2c 2b b4 2f 19 95 d7 11 db df 7f 83 3a 23 92 0b 13 a0 f5 5a ff 9f c1 1d fd 18 7a 02 c5 d3 04 ca 5e 8f d3 f6 cc bb 2a 06 f6 48 d6 9c c5 78 c3 db 97 ef cf 7d 0f 87 1d 65 b2 5e Data Ascii: #9INP<Ln^(\@ZfLxjkIXU;NLa2;=uO+9("Yi(Qc ,G-(,37]dwnsNeew3JhRt#:J,+/:#Zz^Hx}e^
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: a8 6f 97 18 a2 73 5e da de 5a 6e 72 32 8e 78 0a ff ae 69 cb e7 78 fd 47 1b 2f 32 3e 70 6e f9 9f 2e 98 fd 5a 26 3a 79 77 30 8f fe ce 0b 61 1b 52 8d cf 17 4d 13 ff 3e 72 e4 4a 0e 06 57 85 8f 9f cf 36 49 a1 af 6f 4b b5 64 5c 70 d7 3f 22 11 50 d5 69 1e ed bf 1a 2a e5 fd 89 dc 51 8a 07 cb 48 ae 42 62 af ef 5f ff 81 c2 9e 7f 8b 2d 9a a5 7a 44 c1 bd 6c 30 f2 04 95 7d da 52 5f 92 6e 91 70 fa f0 5b 59 64 c2 6e 85 1b 10 1d ae 4b 6d cd 35 46 30 93 8e be 47 f9 6a 81 0f 7a d9 04 8d ee 44 e1 44 56 73 c3 03 2f 2e 7a d6 1b 98 cb 85 77 99 b8 b3 d2 30 04 8b 2b aa d2 ae 3f 79 23 a0 02 52 e0 df 00 0e fa 72 f4 6f 5b b2 43 3a a5 2c ad 3b b5 71 c2 40 bb be e9 3b e4 16 18 57 b4 13 6c c5 a3 9d 60 97 ec ca b3 fc 5e 86 80 c2 64 80 54 c6 10 1c d1 18 ee 1d 2b 57 c2 c4 e3 ac 1e 87 b5 Data Ascii: os^Znr2xixG/2>pn.Z&:yw0aRM>rJW6IoKd\p?"Pi*QHBb_-zDl0}R_np[YdnKm5F0GjzDDVs/.zw0+?y#Rro[C:,;q@;Wl`^dT+W
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 33 4a 40 3a 84 20 0d fb 0e 1d cf 89 21 fc 07 dc 01 7d 09 99 25 f3 e7 45 d8 9e f0 03 a2 c0 7e 21 a5 50 05 00 1c a5 1d 0f f0 c6 63 bc 97 44 56 da 5a 07 9d e8 85 06 20 75 11 83 73 ae 35 e6 c8 c7 21 47 64 2d 95 fc 35 cc 86 b9 04 62 4a fa 97 2c 73 b6 e0 af da 85 b0 42 89 c0 b2 90 48 d2 d7 51 a3 3b ec 18 a4 84 7d 31 7e 2a 01 4f 1a c6 5a 2b 9b f9 bd cb 19 35 41 5b 7c 2f 9e 1d 11 b5 f3 1e 23 50 67 39 8b f5 0c f2 dc d1 c6 91 43 33 3d b5 ae fb f5 84 eb 75 d7 e1 e8 b8 2d fd 3a d1 0b 18 5c 3b f4 8a 17 65 69 da f6 98 3d 53 18 51 dc c3 ee 3d 90 c4 ec 0a 3e fa 83 7f 84 b2 c9 b8 68 43 7b fd 15 32 03 6e 91 98 86 f0 23 eb e8 b1 19 68 d2 d5 4b 87 9c 3d cf 6e 8d 38 5a a6 f5 17 8b d5 5e 61 19 4e 1b dc c5 07 53 e8 b5 24 46 3f d1 3c 5d 37 a2 30 f6 89 4f fc e6 24 32 5b af 05 09 Data Ascii: 3J@: !}%E~!PcDVZ us5!Gd-5bJ,sBHQ;}1~*OZ+5A[\|/#Pg9C3=u-:\;ei=SQ=>hC{2n#hK=n8Z^aNS$F?<]70O$2[
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 83 91 26 b8 24 f5 1a 68 fa e8 e2 6d a3 4a ba 24 02 d0 fb b6 ca 18 0d 03 a9 28 35 70 e5 cb 54 4a c3 d2 64 c7 19 34 3b c3 17 ab 04 d6 32 c6 78 dd bf 09 25 a1 41 e0 4b 8c c9 7c 8d 9a 57 53 46 ef 2a 99 b9 54 a0 68 77 7a f4 af 3c 51 99 4d 13 e7 d9 36 25 c5 5a d9 6f 74 6a ec 96 08 fb 90 96 1a 08 37 c6 75 4e 9f 5c f1 8b 9d 54 16 0a 8c 88 27 72 80 e6 83 2f b1 74 d7 03 54 71 da 96 74 ac e9 18 b3 72 ed d9 ea 7b dd 79 94 43 4e e2 ce 08 31 ac b0 ec bc 5e 03 b4 8b 0b 82 7d 93 75 44 75 8e 9d 3f 73 e8 24 ad 92 f1 a5 f8 55 94 d2 13 7f dd 44 41 8f 90 e2 e8 48 7b d1 d7 33 b2 47 7f 53 9c 4b e3 76 ed e0 79 41 aa 69 10 7a 06 06 98 ff dd 63 c5 e4 72 ef 1b b1 7e a8 f9 80 0b ae d9 c6 c3 be 2b d8 10 c2 27 b6 69 ed 19 7b fa b8 30 21 8a 3f 3b 00 00 47 33 0a 7d 60 a8 98 f3 12 bb 0d Data Ascii: &$hmJ$(5pTJd4;2x%AK\|WSF*Thwz<QM6%Zotj7uN\T'r/tTqtr{yCN1^}uDu?s$UDAH{3GSKvyAizcr~+'i{0!?;G3}`
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 6d ac 3a 0a 9a 01 02 c3 7b b5 e0 6f 76 e6 ce d3 eb 10 cf 21 f0 fc fb c2 f7 11 75 c9 b6 79 a7 2e 00 e6 32 fd a6 d8 e2 ab ac 73 24 7b 36 fb dd 9c 5b 78 da df da b7 49 ab d0 43 dd cb 92 bd 12 d0 56 d4 05 a6 0f 6f e2 48 82 41 9d 7b 0f c1 e4 41 41 3e 0b 45 d2 61 e3 69 5d a6 28 0f 96 9a 90 ac a9 a7 50 77 1c a8 25 17 2e 8d 56 84 ef 1e 1b ce 10 2b d2 60 1d 8d 5e dd de 7d 85 fd b2 ca 09 f7 03 3a c7 79 23 97 30 ac 7d 63 02 eb 97 95 16 0c f4 0a 6b 07 b2 95 c4 a2 ff e3 76 6f 22 df 15 8c 57 c1 bf 60 27 b3 0c 85 87 bd 01 f3 21 4e 6f a4 38 46 46 bc 62 a9 de 8d 74 9f 1a 40 15 47 b4 75 21 ab 03 5a ce a1 8b 49 89 3b 54 cd ff 3f fd b7 22 7d 65 a9 66 11 a3 db b0 8d 5b 2a 80 2a 8c 95 61 e7 c5 9c 8a 4b c7 79 29 67 81 1a d0 85 42 ea 32 2c 37 87 d7 a1 7f ef 24 28 ca 2b f9 06 9e Data Ascii: m:{ov!uy.2s${6[xICVoHA{AA>Eai](Pw%.V+`^}:y#0}ckvo"W`'!No8FFbt@Gu!ZI;T?"}ef[**aKy)gB2,7$(+
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 17 a3 9a 83 41 a8 8a 39 bc 84 cd 1a b3 b8 7c a9 64 73 8c c2 97 2f 4d 79 82 3d 39 34 33 73 ad ac 04 da c7 d6 e8 f9 af 93 fc ae e9 c2 a1 2a b5 a6 62 0e 09 a1 1d 8e 5f 72 80 aa c3 07 9d f1 4f 89 fa 91 d6 c2 43 34 f6 16 33 cd d4 4d 93 15 6b 13 02 bf fc a1 8d 57 fb c1 ca 85 db 88 fa 01 55 89 f3 e9 8b 26 bc 5b 83 d4 30 11 70 5f 19 b0 0f fb da 9e ba d2 16 07 ea 44 77 79 91 2c 4f 39 96 79 65 cf 98 40 d6 ee 7b 29 1a 2b 06 63 d3 84 c3 99 21 cf 61 01 21 2f d9 f7 45 56 e5 ed 63 3d f0 3c e9 79 9a 1a 53 25 50 8c da b1 f3 7d b4 56 15 b8 a9 af 84 06 aa a3 4f 08 3f dc 42 60 ea e7 a7 dc 58 25 4f f0 87 ff b3 59 bf 7c 10 72 fb 5b c3 f3 0a ff a0 fe ad df 11 da a8 3c 6e 7f 8e 6f 40 bd 2d 4f de fd 68 db 65 54 82 dc ae 7f 5d 41 4a c7 e0 9c f6 40 f7 d4 33 1f c8 cd f0 ae 90 8d 3a Data Ascii: A9\|ds/My=943s*b_rOC43MkWU&[0p_Dwy,O9ye@{)+c!a!/EVc=<yS%P}VO?B`X%OY\|r[<no@-OheT]AJ@3:
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 89 f6 ac cd 04 05 16 48 fa 47 4e 3f 27 cd c3 cc bd 7d 69 1a 5b 99 51 df 43 f2 10 98 87 38 63 4b 14 8a 9c e5 80 f9 94 6f fc 8c bd e4 3a 88 96 5a ab 50 72 31 b6 f9 87 09 38 35 7d fa ca ef 63 8f e1 00 68 ed 86 83 cf be ac b9 0a 6e 0c 30 59 a3 3c a0 9d c7 33 1e 50 db a1 10 e3 95 0b 52 4e 2a 56 9a 18 bc c6 56 38 0d de 60 65 e4 a8 28 95 b8 cf 82 b4 66 34 ab 0e 25 6b 44 23 de 25 12 43 03 17 af c6 cb 7d eb 51 14 31 1f 3d 5f 27 12 55 3e bc ac c6 e5 9b 27 e9 d7 b1 eb 3b c5 3b 40 26 7e 18 56 45 9a 7a 1d ff e4 80 44 cf 73 b7 ec b3 89 ce 02 fe 24 69 fc 17 aa 50 f2 95 5f 6c 07 b1 8e 6f b6 8b bc c3 c3 e7 4a ef 1e 91 36 4a 21 5d 1b 25 4f 9f 0f 8b 7f d3 a8 59 8a 1c 0c 97 fc 7a 64 f9 17 dd 4c 3f 2c 3c cd e7 9c c4 fd 3e f2 2b 87 fc 6b 60 27 f0 1f 91 84 62 88 27 88 05 18 17 Data Ascii: HGN?'}i[QC8cKo:ZPr185}chn0Y<3PRN*VV8`e(f4%kD#%C}Q1=_'U>';;@&~VEzDs$iP_loJ6J!]%OYzdL?,<>+k`'b'
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 97 3f 1b 2e 62 55 7c 24 a2 08 02 06 29 7d a2 c3 53 e9 95 17 a7 94 9d c4 39 28 00 7e f3 e1 06 4b e4 ae dc be 26 19 98 66 81 fa 27 84 90 19 54 17 22 2b 6c d9 80 67 74 84 8c 85 53 7f d1 0a 39 a0 bc b5 b8 bc 8e bf e3 e0 94 97 84 47 8e 42 f1 f5 01 ad 16 1f 05 fa 2a 97 8f 94 e0 bf c0 7d 2b 23 99 d6 88 f0 34 95 42 0c cb aa 6c 66 7e 93 41 b9 2f 36 f9 1b bc 0d d9 7c 0c 3f 62 57 b8 69 f7 7e cc 3a ac fb fa 3a be 88 1b 10 8b da 1c 7a 0e 74 f2 02 c6 4b 4a 03 46 9d d4 3a 12 81 03 0d 79 2b 72 d0 48 a4 0b 3d be d4 11 6d 2a 43 a1 8a 9f d6 31 4c 66 48 41 8b 65 be 97 77 ce 69 0d a4 6b ef 97 3d af ab 58 85 fa fb 7e d1 f2 03 95 f3 77 54 fe 7b 07 f9 6b 6a bb 88 1d ff bf c4 9d 2d ee ad fd f0 69 a1 53 49 bf 7a 1c 89 b5 eb 5c 36 5e 62 a1 24 17 65 ee 40 f6 3d ff 66 26 78 99 bb 77 Data Ascii: ?.bU\|$)}S9(~K&f'T"+lgtS9GB}+#4Blf~A/6\|?bWi~::ztKJF:y+rH=mC1LfHAewik=X~wT{kj-iSIz\6^b$e@=f&xw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49910	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:31 UTC	530	OUT	GET /uu/api/res/1.2/YR.7.XGIlIiS7.K_UjfdhA--~B/Zmk9c3RyaW07aD00MjA7cT05NTt3PTcwMDthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/d0833af0-ed4d-11ee-bdbe-cca2e24df743.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:31 UTC	1298	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 296746532157632283267262690971143825730,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="d0833af0-ed4d-11ee-bdbe-cca2e24df743.webp" Edge-Cache-Tag: 296746532157632283267262690971143825730,456798551737735533660229614257661011889,ae7a14591aaf8d474cdb3f92111c923e Etag: "87bb7ca478ec69aaa27a14f2d9067024" Last-Modified: Thu, 28 Mar 2024 21:55:55 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=700,height=420,bytes=73188,owidth=4680,oheight=2628,obytes=1025935,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 2d8940d3eb4c75b68ed81dae6b7ed4f6 Accept-Ranges: bytes Date: Thu, 28 Mar 2024 22:09:24 GMT X-Served-By: cache-iad-kiad7000168-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711663764.269590,VS0,VE1 Age: 9127 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 2d8940d3eb4c75b68ed81dae6b7ed4f6 cld_by: cache-iad-kiad7000168-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 99887 ATS-Carp-Promotion: 1
2024-03-29 00:41:31 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 cf 00 06 00 03 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF@ICC_PROFILE0ADBEmntrRGB XYZ acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 4c 8b 12 da 4f 77 8c 05 1e 80 92 47 5d f0 3a 9d ea 56 3f a5 7e 60 15 5b bc 0f e2 cb b2 dc 71 9d 09 75 5a 14 a3 85 25 93 be f5 08 62 81 c0 be 31 3c 39 8e 80 ba 8c f9 06 b6 a1 b2 88 12 78 07 c6 43 9c 70 fa e8 7f ca 9f e7 4f 83 84 2a 6f b3 b7 1a d6 39 91 a0 2e 38 f7 e4 fe 74 d8 38 40 ff 00 e6 e7 c6 f3 d3 40 cd ff 00 5d b1 ff 00 8a 9d 18 e1 07 0e cd 9c 72 5a 72 34 1c 9f fd bb 5f fc 54 78 3b d8 41 bf f3 5f e3 93 9f 67 43 b9 b7 5c ca 6b 3f f7 a8 30 70 f8 07 27 b2 d7 1c 57 92 9d 17 b7 bc c6 47 fe 2a 5c b7 0f 80 26 fb 2c 71 bd 67 94 e9 46 d2 7c f9 a6 b2 3f f1 52 e5 b8 56 0f ff 00 9a 77 1b cf 4d 37 14 7c e7 b3 ff 00 c5 47 c9 77 b0 ac 18 7b 24 f1 c4 f5 b0 42 03 cf fb 7b 59 fd f4 b9 2e f6 02 c7 55 d9 1f 8c a8 19 55 be de 0f a7 c7 22 9b 07 0e 10 e7 65 de 2a 34 14 a5 Data Ascii: LOwG]:V?~`[quZ%b1<9xCpOo9.8t8@@]rZr4_Tx;A_gC\k?0p'WG\&,qgF\|?RVwM7\|Gw{$B{Y.UU"e*4
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 70 70 b5 de c7 e0 55 b5 20 79 2a 46 7f f0 d5 76 46 9e 65 1f 24 2f 9d 21 c3 ee 06 5e 34 2e 99 d6 fa 8a db a6 f4 fb 9a 9d 1c f1 61 1b 63 d2 4a 01 7d d6 51 cc b4 0c 0e 65 32 bd ce 31 e7 56 23 a0 59 fa 9a 1e 42 d3 a3 fb 33 b6 c8 90 8b bd 80 21 4c a9 f1 c9 a6 64 28 a9 29 5f 21 01 24 82 55 cd fa 38 c9 1b 81 8d ea 6f a2 65 f3 01 92 02 87 c3 de 01 5d 27 a6 db 6c b8 db a4 49 2b 52 10 dc 5d 22 e3 ca 56 13 cc 48 09 5e 54 9c 7e 90 05 3b 11 9c d5 59 e9 1f 4c d5 91 dd 90 b7 43 0b ab 24 48 d9 ea 48 51 c1 2e 1e 81 f9 8b 7d c3 07 c9 be 1f bf fc 54 2b 3b c5 b3 dc df ff 00 0d cd ee 09 1c 11 d1 6a 29 2c db 75 18 57 fd 4e 83 58 fd ee 52 5a 86 04 9c 38 ff 00 c5 62 03 a9 7b 18 68 6d 4b 7a 91 79 7d de 27 32 b9 05 39 6e 36 90 4a 1b 4e 00 1b 0e f7 da a3 e7 46 3f f8 71 7f 19 84 e0 Data Ascii: ppU y*FvFe$/!^4.acJ}Qe21V#YB3!Ld()_!$U8oe]'lI+R]"VH^T~;YLC$HHQ.}T+;j),uWNXRZ8b{hmKzy}'29n6JNF?q
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 9a 3a ba 75 bd 2a af 4f 62 16 50 d4 39 a9 5a 89 d6 40 b5 ad d6 f1 a1 ef 73 b4 9d c2 16 a4 79 d8 ce 85 21 e6 a7 a4 b0 fb 44 65 b7 50 31 ba 54 92 08 39 e8 7e 75 8f 53 4e d8 5c ac 72 d8 df a4 aa 75 5b 52 44 4e c7 dc 3b bc b9 ac b8 81 a5 b4 1c c6 ef ed b3 a8 ae cc c4 2b ef d2 7b b0 7e d2 ba 79 24 28 fd 2a 5d 37 4e 8f 50 9f 97 7d 85 ab 6a ee d3 a9 d6 45 42 c5 e2 dc cb 3f 04 20 ce b6 da 44 eb 84 ed 54 f3 a6 dc 5b 90 1c 72 3d a0 2b 09 70 ab 1b 29 c3 b0 1d 70 93 57 eb b4 d8 74 e6 b9 8c 5d d7 fb 1c ee 99 aa cf ad bd b9 a6 cd ef f3 22 96 3d 5f 3a f9 c1 bb c4 0f c9 97 74 a6 cb 76 8d 35 08 75 ff 00 1a 92 f2 16 da 88 50 1b 00 52 9c fc eb 3e 4c 1f 44 ac ca f8 9d 0b 55 d0 d7 b1 c8 9b bb f8 21 22 f9 73 2e b6 db 1a 6a e6 f2 d4 42 42 7f 28 2b 73 e4 30 37 ac aa 68 99 23 d1 Data Ascii: :uObP9Z@sy!DeP1T9~uSN\ru[RDN;+{~y$(]7NP}jEB? DT[r=+p)pWt]"=_:tv5uPR>LDU!"s.jBB(+s07h#
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 7f cd f2 3a 02 70 53 72 97 9f f5 85 3b fc a8 1b 7b 17 ad d0 7f 66 5e 3f 54 9a 84 4a b6 21 7a 60 84 ea 54 28 f9 12 3f 1a bb 01 1c bd 8b da 0e ec 3a 7d 51 57 dc 56 30 9e b5 bc dc ad 3c 53 62 3c 5b 63 f2 db 79 ee 77 d4 cb 65 6b 43 5c e4 15 6c 0e 3a d5 1a 7d a4 cb b8 6b bb 6c 24 b4 76 ac d2 9c 2f b4 9e 17 5e b8 70 9b 86 a4 d3 c5 56 b6 d0 96 b9 93 35 49 f0 b6 bc e7 6e 61 83 8c 79 d7 6c ed 7a 08 69 95 cf 91 5a a8 9d bd 0c c4 d3 dd 2c d8 b5 2f 73 4f f0 9b 8c da 02 0e 90 d3 5a 3e d9 1e e0 ed ee 15 bb 98 41 89 6b 7d c2 85 86 b9 e4 94 80 9e 89 5a 82 09 e9 93 8a e2 59 a9 41 5c e7 2b 1d 73 75 f4 13 52 b1 39 89 61 ca 1f 13 f4 b2 a0 e9 98 56 5d 2f a9 a6 3f 11 32 65 d9 da 36 67 d2 2e 45 b8 8a 4a 9c 41 52 47 28 2b 78 82 55 83 93 9e 84 1a 9b 24 d8 87 71 9b 53 6a 1d 39 c4 Data Ascii: :pSr;{f^?TJ!z`T(?:}QWV0<Sb<[cywekC\l:}kl$v/^pV5InaylziZ,/sOZ>Ak}ZYA\+suR9aV]/?2e6g.EJARG(+xU$qSj9
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: aa 4c 11 7b 95 ae 9a ed ad 68 d4 f6 39 57 c8 fa 02 e4 87 18 29 cb 2e 48 6c 29 dc 85 1f 01 d8 2b 64 9f c2 ac 47 58 88 de 96 dc 37 69 cc 63 91 b3 3e c2 6d 0f db 9b 4b 6b 9d 52 d6 96 8d a4 a6 c1 7d f4 38 52 a9 4e e0 2c a4 13 ca 30 93 e2 23 38 07 19 a9 99 5a e7 a7 52 58 07 e9 f4 ac 4e 99 2f fa 12 36 fb 51 cc 96 db a2 26 80 92 97 19 90 96 14 99 12 03 63 c4 ae 50 af b2 4f 5c 6d 8f 3a 8d 75 56 27 a1 7e 2e 1c 47 d9 55 fb 28 cc f7 6a ad 4a 96 15 2d 7c 31 21 a4 3a a6 14 bf 8d 24 05 8e a3 ec 55 49 35 85 66 f8 6c 6c 33 84 29 5e b6 5a 84 b9 30 e1 df 19 a4 f1 1e 15 c5 a9 96 54 5b 15 15 69 48 05 ee 7e 74 28 75 dc 0f 4a b5 4b a8 2d 63 56 e9 63 0b 5b d1 63 d2 71 e5 bf 2b 92 69 22 0b ec 18 b2 4b 4b 6d c0 52 a4 ab 04 11 f2 35 24 88 87 3b b9 8e 7b 72 f0 e6 c4 cd a2 cb 7a d2 Data Ascii: L{h9W).Hl)+dGX7ic>mKkR}8RN,0#8ZRXN/6Q&cPO\m:uV'~.GU(jJ-\|1!:$UI5fll3)^Z0T[iH~t(uJK-cVc[cq+i"KKmR5$;{rz
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 19 4e 9f 78 19 28 a5 f6 1d af 5c 4c d2 5a cb 44 cf d5 16 79 b6 c4 c4 b8 e9 e7 8e 6e 2c ba a8 c1 6b 3c f2 03 a8 46 17 b2 50 9e 9d 73 4c b5 f0 27 a8 69 a6 d4 63 95 bb 10 eb 1f 16 38 59 0e 26 85 d1 4d 71 12 33 f7 f8 ed c3 31 57 1a d9 25 2b 43 0d 47 51 c4 96 ba 14 95 9c 02 71 b9 c8 dc 66 81 6b a0 46 f3 2f b0 09 45 2a bf 0b 6e a4 03 b4 5f 01 6e dd a2 a1 a2 0e 90 49 88 f8 95 1f f2 83 ac ba 7b 84 b6 d2 5d 09 0d b6 b5 78 72 b7 54 ad 8f 90 da a2 8d f2 56 b9 6d d8 b5 a8 52 36 89 8d f7 52 a8 87 fd 16 97 55 a3 fb 46 b5 92 92 7a f2 b2 d0 df fd 6a 3f 08 e4 32 f9 db 0b e3 ff 00 45 68 2a 1d f6 b4 9e 07 a8 43 5f ef a9 3c 23 80 e7 20 e0 c7 f4 56 d9 4a 40 77 57 5d 0e 7f 69 af e5 4f e1 9c 1f 3b 61 53 7f d1 55 a4 8e 7b cd 59 77 2a ff 00 d3 35 b7 fb 14 fe 11 c0 73 90 94 68 3f Data Ascii: Nx(\LZDyn,k<FPsL'ic8Y&Mq31W%+CGQqfkF/En_nI{]xrTVmR6RUFzj?2EhC_<# VJ@wW]iO;aSU{Yw*5sh?
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 0d 35 fe 37 7a 7f b1 55 39 6f fc 1f dc e8 b2 87 f1 2f f4 38 a8 ba b5 a1 cd f9 1b 82 ac 8e 80 95 13 fc 05 2e 5f ff 00 1f ee 3f d4 fb aa 9c 2e 6b 06 ce 13 2b 82 6d 84 f4 3c a4 ff 00 1a 3b 3b d8 0c 61 f6 5f ee 16 bb 8e ae 69 40 ff 00 5a 38 28 d0 f2 3d d9 3f f8 e8 6e f6 7a 8a d0 fe 05 fe aa 03 f2 ee ac 1b 2b 5f f0 60 e3 61 86 71 ff 00 8e 9f 98 be e1 61 1f fd b5 fe a7 8a 31 b6 db de 9d fd 8f 3c 8c 56 b4 39 83 8e 9f 3a 06 86 f1 19 39 35 32 6c 44 7d 4d e6 10 07 7e cd 12 6c 80 b8 2a 9c 00 5d df bd 21 1c 52 79 7c e9 08 e0 38 39 14 84 08 2f 04 9c 75 a4 23 bd ea a9 0f 90 1e 62 0d 21 2a dc 5d 12 59 69 5c aa 3b 51 b1 e3 0f 2c 38 1d 1b 54 dd c4 1c 46 29 84 24 7c 85 ec 45 27 6c 18 cc f8 01 78 15 0b 81 55 b8 55 08 c7 d4 84 09 3b d2 10 22 71 46 18 9d c3 95 50 00 7c 95 72 Data Ascii: 57zU9o/8._?.k+m<;;a_i@Z8(=?nz+_`aqa1<V9:952lD}M~l]!Ry\|89/u#b!]Yi\;Q,8TF)$\|E'lxUU;"qFP\|r
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: b8 3c 2d bc 5f 54 8d 42 e9 62 f3 38 2d 3c b1 e3 25 d5 a9 48 8e a4 a4 78 39 5b 52 56 07 a9 c5 4a fa 09 2b 21 e5 b9 4c c5 d4 e1 d3 eb 39 f1 25 d1 3f d0 b2 75 b5 db 4c f0 97 47 d8 f8 41 a6 ee 00 0b 54 34 37 21 c4 af 05 43 72 a5 2c 0d b2 b5 15 2b 1e fe f5 b9 4d 13 61 62 44 de c8 73 7a 85 5b eb a7 59 e4 ee a5 78 de af b5 a8 9e 49 00 e3 ad 68 ec 52 c1 c2 94 6a bb 7e 3c 2e 64 7a d0 01 83 81 2b 59 5b d2 41 2f 11 f4 a9 93 61 f9 6e f6 1f ec dc 53 80 c7 2c 7b 83 e4 a0 6d de 1e a3 e7 47 cc 4f bc 45 c9 71 2c 63 58 db a4 20 3a cc a0 b0 b0 08 20 f5 a5 9b 7d c7 e4 b8 58 d6 aa 8a 09 24 92 3d 7d 6a 4e 63 41 e4 38 39 1a 9e 11 ce 54 45 2e 64 60 72 1c 18 9d 43 15 5d 0a a8 b9 d1 7b 8b 90 f0 7f 97 e3 60 65 2b 3f 41 41 cf 68 b9 01 7f 97 d8 ff 00 a3 5d 0e 6d 1b 90 a0 55 a8 58 ff Data Ascii: <-_TBb8-<%Hx9[RVJ+!L9%?uLGAT47!Cr,+MabDsz[YxIhRj~<.dz+Y[A/anS,{mGOEq,cX : }X$=}jNcA89TE.d`rC]{`e+?AAh]mUX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49911	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:31 UTC	754	OUT	GET /uu/api/res/1.2/pCTJDhUlfaOLjVy_BN8xpw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ny_post_articles_869/fb2f3b77989e5eb20704a6386c0e6d4d.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:31 UTC	1298	IN	HTTP/1.1 200 OK Content-Length: 25900 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 326462486219046161544806036348322304999,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="fb2f3b77989e5eb20704a6386c0e6d4d.webp" Edge-Cache-Tag: 326462486219046161544806036348322304999,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "73c99aa1a2b77cd10144d43d1ed5fc07" Last-Modified: Thu, 28 Mar 2024 23:44:27 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=25900,owidth=2000,oheight=1333,obytes=443935,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 56ae108c601010a20d327e1561420b83 Accept-Ranges: bytes Date: Thu, 28 Mar 2024 23:59:16 GMT X-Served-By: cache-iad-kjyo7100065-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711670357.942518,VS0,VE2 Age: 2535 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 56ae108c601010a20d327e1561420b83 cld_by: cache-iad-kjyo7100065-IAD cld_latency: 2 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-03-29 00:41:31 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 52 49 46 46 24 65 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 17 02 00 1b 01 00 49 43 43 50 30 02 00 00 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: RIFF$eWEBPVP8X ICCP00ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 1e b1 07 09 0e 10 2a b4 3d 4c 0a 56 e2 09 d7 53 89 6f 44 55 80 b8 2a a7 bd 7e 88 25 a9 34 ae 8a fb bc 2b b0 2e 03 9f 2e 32 27 c4 06 9f b9 f4 23 66 8f 0f 3a 1e ee 32 4d f4 3f ef 56 f8 b7 bc 07 2f d8 db 76 81 fd 8d 8c f5 d6 a7 05 73 d9 16 53 95 94 13 4c 33 0e 70 4e 63 df ce 9a 56 c9 17 88 d4 0d 22 77 53 5b aa a5 8b 39 23 1e ba 64 6e 53 5c d1 7e 85 4f e4 f5 f6 f5 ad 5f 76 b5 d6 eb 99 72 81 ce 4c 65 75 9d ea 3e fc 52 7a 70 c0 2f 0c 73 28 5c 90 00 e4 3f d3 44 d3 aa 6f b3 27 1c 19 bd 00 a6 cd 9e 32 20 2d 3d ee e6 16 e0 7d b7 c8 6f 7f de 32 38 20 e9 1f 79 f9 8b 4b a0 8e 6c 86 20 c9 28 24 c5 ea c3 86 17 92 35 9d 91 7f 16 0b f2 f6 8f c7 f7 23 a8 d1 d6 3c d6 af ab cd e2 e3 b4 02 ee 24 d1 11 93 29 0f 63 ec 22 e2 32 87 37 b7 55 de 95 7e 11 29 48 b6 1f 17 c0 c4 62 27 Data Ascii: =LVSoDU~%4+..2'#f:2M?V/vsSL3pNcV"wS[9#dnS\~O_vrLeu>Rzp/s(\?Do'2 -=}o28 yKl ($5#<$)c"27U~)Hb'
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 07 78 49 33 7d a0 d0 99 ff 89 6c 29 43 8b 94 cd 36 c0 9f 51 63 da 84 b0 0d 06 aa 12 6d 39 8b 0b 4b 58 8c 2f 17 11 22 46 7a 16 26 5c 79 cc 0f 0c a4 2d 51 07 fb 6e d5 bc 51 8e 6b 55 02 86 3d b5 73 d3 70 be b7 17 c0 47 05 a8 80 eb b5 7f c7 bc 16 2c 04 f0 c9 dd dc f0 46 d4 d9 03 d8 04 e4 4e 0a 41 19 04 03 5a 48 cb e9 d6 c6 1e 44 dc 06 57 fb 8e 3d b9 e1 4f d5 d5 44 45 b8 d3 f9 63 5c 26 75 3e 96 bd 48 5e b1 20 0f 4c 76 9b 11 82 69 7f 39 1c 2f b4 98 b2 a9 e9 69 80 ca 3e f1 64 a8 c1 7e 4d 2b 65 7a 9b 0c 91 c7 58 eb 46 07 09 93 71 a5 91 b0 81 c2 86 9e 8b 4e 4f 74 95 be cc 3d 02 f3 d4 39 09 11 a6 89 ef e1 2f c5 99 e1 2b 16 4d 31 88 ce d6 24 94 d3 c8 49 24 2e 83 48 1f 59 19 72 32 fc 30 da 63 ff 47 f4 ae 95 8e cf 2f 66 6b 6f 6f e1 23 be 67 10 97 50 56 a2 21 eb 58 d4 Data Ascii: xI3}l)C6Qcm9KX/"Fz&\y-QnQkU=spG,FNAZHDW=ODEc\&u>H^ Lvi9/i>d~M+ezXFqNOt=9/+M1$I$.HYr20cG/fkoo#gPV!X
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 4d d6 cc a2 8f 3d 74 52 53 8d 69 cd b1 84 8a ae b8 56 ae 87 a9 5f 79 07 0b f6 47 9e 14 fd 95 8c 58 3b 97 36 cc 5a b5 b2 18 cb 56 57 9a 8b 35 51 ed 0b ff 9e cc 46 8a d8 c2 f0 db 35 c5 92 bd 8b a9 8a c4 ba 70 a7 4c 05 25 12 17 8e e2 15 a7 9f 1a 35 60 e4 d6 08 26 cd c4 6e 39 46 ed 32 a8 4b 16 ea 6e a2 e6 50 eb e4 0c 26 b4 d8 fc 65 42 2b 9b 59 10 8e 4a 8f cb 06 16 20 e3 86 f3 03 be 8b c0 95 68 ed 8d a5 2d 05 bd ef f5 2a c7 74 cd 65 c8 87 d5 9e 5f 88 7f ae d2 3f ad 85 d7 98 2b d2 8f f4 cf cf f8 2c bf 27 91 f0 05 c5 2b 74 d3 93 78 06 87 22 0b 5d 2c 91 94 9f 88 96 d1 54 79 10 de a6 81 2f 3a 92 ec fc fa 54 c9 36 94 27 4c 6b 10 34 bc 0e 64 dd fe 8d 0d 55 85 29 2e 13 8b 83 06 6f ed 65 a7 7f 59 26 83 0f 6b 2b 00 bc 33 2c 1e 65 2e 7b 83 d3 a7 2b ed 34 a1 03 28 e1 60 Data Ascii: M=tRSiV_yGX;6ZVW5QF5pL%5`&n9F2KnP&eB+YJ h-*te_?+,'+tx"],Ty/:T6'Lk4dU).oeY&k+3,e.{+4(`
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 9c 13 96 cf ec 62 d1 0a 70 c2 4e 96 e1 56 cc 62 1e 79 ab d3 c8 5a 6a a0 c1 f1 39 13 7f f3 f1 31 97 a7 78 39 0a 20 d2 f6 2a e4 62 15 b0 5f 17 7d be e6 40 db 21 7d a7 d5 fe 0c 96 86 26 b9 19 65 f6 cf fe dd d4 5c 28 e3 58 41 7b 88 c9 5f ce 69 f0 73 d3 d8 db 48 74 80 5b 9d a4 5e 44 a0 06 b4 d7 f5 98 51 cd af 33 bd c9 c7 73 e8 41 c2 60 33 b6 29 bb 58 3a be 05 69 12 b4 c2 6d b7 83 42 1d c9 7e ab e6 5d 1b 94 6e 03 ce a9 c2 6a 74 70 5d 99 3c 62 7a db 1f d5 94 24 dc e8 9a 67 4a 03 96 7b d9 07 55 6d e7 a8 e5 36 a5 5b bf 5f 0d 5d e0 03 5f a0 3d e8 0d b0 fb 7c 62 18 a9 8d b9 7c 66 02 6d da ff 7c 58 b7 62 1b ed 0f a5 91 77 70 b3 f1 0f d0 6c ed 8c ef 24 cc 2e 13 b1 7c f6 56 f7 b2 c9 1e 45 43 4f 96 78 26 31 05 ee 6c 2c 22 da 10 1a 1c 0b 83 50 1b 39 91 67 f8 b3 12 b1 96 Data Ascii: bpNVbyZj91x9 *b_}@!}&e\(XA{_isHt[^DQ3sA`3)X:imB~]njtp]<bz$gJ{Um6[_]_=\|b\|fm\|Xbwpl$.\|VECOx&1l,"P9g
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 58 a1 08 b4 bb 47 e6 9e b7 95 ae a6 91 88 b5 cc e9 47 ae 4b f5 c3 c6 54 73 a7 9c 3d 07 a1 b7 6a c3 79 16 83 39 9e e2 99 47 3a fe 98 ee 8e 73 7b 46 07 cd 20 34 9a 90 76 31 34 95 e8 ed aa 46 ca 1a 01 6f 0a e9 0c 0f 76 34 1f 98 cc 36 79 45 bf bf db 7b 46 0f 32 6c 50 4d 28 6f 96 b0 32 b4 4a d2 7b 00 c4 66 e7 8f 3a 07 58 4a e2 f4 6d ac 68 01 03 b6 fc 7d 0a d8 40 ad fb 97 ef d8 cd 40 10 f0 9e 04 ae 38 91 73 dc 77 e8 9b c7 9c 32 5f 29 ce 83 1e c4 d0 30 9c 1e c8 0c cf 15 ba 6e a4 97 bb a7 37 d6 6d 70 5f d4 ad 8f 79 2f 96 7d 6c 6b 21 2d e4 50 87 a1 2e 7a 16 88 d7 8a f9 73 05 5e 15 6b 33 03 48 a4 91 84 fd 4e ec 54 8f 61 3e 6c 5d d7 39 45 e7 c6 9a 83 71 da 82 6b 19 11 e7 f6 de f1 d2 11 35 c8 c1 58 aa a5 4d 03 92 60 c3 7e 99 14 46 c8 70 82 c1 1c 0d 1d 37 a1 33 c4 16 Data Ascii: XGGKTs=jy9G:s{F 4v14Fov46yE{F2lPM(o2J{f:XJmh}@@8sw2_)0n7mp_y/}lk!-P.zs^k3HNTa>l]9Eqk5XM`~Fp73
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 05 65 13 bf 13 49 40 b0 8a a9 56 fb 6a 35 68 e6 0f 5d 8b d6 35 0f 12 95 13 82 97 8a 00 37 ee 6b 60 64 62 49 03 e6 a2 36 6f 3d 86 28 71 f3 96 c0 ad f6 51 53 bb 5d 08 11 b8 d8 92 29 86 80 22 e6 82 ac e0 52 97 03 04 67 e1 c1 cc 14 6f b1 fa 51 3b f9 b6 0b 5d 74 fa c5 cf 4f dc b3 8e 05 5c a7 b4 d4 6d 30 d2 97 4c ec ba 1d ae 3e fd 31 be 24 d3 ea 26 8d 4c e0 67 ec 6f 98 23 bf c3 31 a6 16 a7 34 27 3e 9a d4 57 c2 32 6c 94 1f 41 bf e0 9e 99 3a 01 19 62 a6 48 05 74 64 91 19 9b 1d 6c 45 fe 70 ba 8c 89 aa 32 0f b9 5e 55 09 fd 4e 76 fc a7 a2 de 8d d5 ba 71 33 c9 de 14 18 ed ca cf 56 a4 74 5d 0b 66 13 a3 a3 8f 3d ca 27 fe 5d e4 29 17 65 64 aa c7 d8 a2 de 3e e4 cf ec 67 18 77 8a 0b c3 ae c8 28 fc 14 28 7c 6c 65 56 75 77 c3 86 d0 c8 82 b6 05 95 e8 8a 2b 9e 8e b7 57 80 29 Data Ascii: eI@Vj5h]57k`dbI6o=(qQS])"RgoQ;]tO\m0L>1$&Lgo#14'>W2lA:bHtdlEp2^UNvq3Vt]f='])ed>gw((\|leVuw+W)
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 7e 1d cd b2 11 e4 a1 2b c0 f3 3d e4 f4 a1 d1 6d 9e 2f 9a 34 12 cc c8 98 04 f9 e3 a1 b8 f0 9d ef 01 71 c6 a4 f3 4d 52 f3 bb 82 08 4a 0a ea 2b 9b 21 3e 01 73 b9 12 0b 0a 2d 14 b9 2a d6 65 32 79 bf cb ae 1f 9a c6 ff e6 4a 27 74 27 e6 d6 6d 5f dc 2c 26 12 23 9d 71 cf 55 ce 24 ee 84 cf 43 7b 3d c7 bb 7e 47 6c cc 21 23 d8 c7 aa 0b 12 7d 83 58 26 e3 e7 18 58 e3 9d 97 cd 25 80 9e 3d ea 92 e8 8f b2 0b 35 99 b4 fc 54 19 d0 ee 38 1a 05 c0 09 a8 6f 0e 0b 0d 7f 2f 70 c7 31 ad 96 b5 fd a2 bd 77 4f 16 70 37 fb ff 36 c1 6c 23 5b 29 a4 79 50 07 b9 42 0a 08 4f 6d 9d 95 8c 7c 8f cd c0 bf fa b3 50 05 6c bd b8 35 77 b4 e7 4d 8a b1 15 65 0b 32 aa 79 3f 5d 93 e2 e5 3c 71 fd 34 2b de 0d 90 6c 66 3b 72 ca d2 e5 2b 66 34 ed 47 d3 eb b2 58 25 e6 08 05 f0 d7 a2 a1 6b 6f 4f 2c bf da Data Ascii: ~+=m/4qMRJ+!>s-*e2yJ't'm_,&#qU$C{=~Gl!#}X&X%=5T8o/p1wOp76l#[)yPBOm\|Pl5wMe2y?]<q4+lf;r+f4GX%koO,
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 02 ea c9 75 b7 d2 77 88 e5 62 27 92 89 dc b1 74 58 90 0a f1 f7 14 ce a3 d1 bc 97 58 8a 70 fb b9 cb 9a 58 ae 76 f4 f9 0c 5b 3e 20 62 2b 42 af 31 5a bc d9 97 25 32 95 bd b3 20 a3 c2 f5 2a 85 f6 04 1b 64 1f 28 61 b7 ae 20 0e ea cd fe 76 2e 1b a3 bc e2 ce 9b 18 ec b9 64 1f 2d 29 b5 af a1 2e b5 18 09 2f f8 98 f0 08 95 67 11 1a ef b3 de a3 cb a8 ce 1d 5a 9d cd 9b 54 e4 ed b1 22 b9 23 d9 a3 20 a8 fb da d6 3c e5 13 3f ea e9 bc 08 2a b7 64 45 a9 2c 70 aa f8 9b 7f d3 6b c3 43 39 77 36 52 e0 71 24 b0 40 40 0b 7b 54 b7 b9 29 be 10 95 e1 eb ab 4e fa 16 4e c9 37 c8 52 61 d8 ae bd 68 8c bc 96 b3 2c aa c0 ef db 08 9b 5f cd ac e3 9d b0 38 56 38 bd 88 73 a7 6c b3 46 f3 1d e5 2c 7a 0e 72 04 f7 1f 83 a4 34 3f c2 e8 a6 ff 27 9f 87 81 fc 8c 50 6b 85 91 93 32 8f 96 f1 d4 77 d3 Data Ascii: uwb'tXXpXv[> b+B1Z%2 d(a v.d-)./gZT"# <?dE,pkC9w6Rq$@@{T)NN7Rah,_8V8slF,zr4?'Pk2w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49912	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:31 UTC	530	OUT	GET /uu/api/res/1.2/zPFVjTF552.HVRCqQnZP9w--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/47289480-ed5c-11ee-9afb-f52c7d0d9bf8.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:31 UTC	1279	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 295516029420979051046241713907668877452,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="47289480-ed5c-11ee-9afb-f52c7d0d9bf8.webp" Edge-Cache-Tag: 295516029420979051046241713907668877452,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "6411cdfa1d161f28b2c0820e58ffe582" Expiration: expiry-date="Wed, 25 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 28 Mar 2024 23:39:30 GMT Server: ATS Surrogate-Reporting: width=536,height=284,bytes=13914,owidth=5174,oheight=3449,obytes=13822731,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 28 Mar 2024 23:41:01 GMT X-Served-By: cache-iad-kiad7000176-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711669262.872923,VS0,VE1 Age: 3630 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-iad-kiad7000176-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 35672
2024-03-29 00:41:31 UTC	220	IN	Data Raw: 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: ATS-Carp-Promotion: 1Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 01 e1 01 e9 01 f2 01 fa 02 03 02 0c 02 14 02 1d 02 26 02 2f 02 38 02 41 02 4b 02 54 02 5d 02 67 02 71 02 7a 02 84 02 8e 02 98 02 a2 02 ac 02 b6 02 c1 02 cb 02 d5 02 e0 02 eb 02 f5 03 00 03 0b 03 16 03 21 03 2d 03 38 03 43 03 4f 03 5a 03 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 Data Ascii: &/8AKT]gqz!-8COZfr~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 78 cc 79 2a 79 89 79 e7 7a 46 7a a5 7b 04 7b 63 7b c2 7c 21 7c 81 7c e1 7d 41 7d a1 7e 01 7e 62 7e c2 7f 23 7f 84 7f e5 80 47 80 a8 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 33 89 99 89 fe 8a 64 8a ca 8b 30 8b 96 8b fc 8c 63 8c ca 8d 31 8d 98 8d ff 8e 66 8e ce 8f 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac Data Ascii: xy*yyzFz{{c{\|!\|\|}A}~~b~#Gk0WGr;i3d0c1f6n?zM _4uL$hBd@iG&vV8nR7u\
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: ce e3 79 9a 72 6a 12 b4 79 c9 7c 3d 40 97 08 cb 79 87 1e 0d b8 e1 48 e6 da 83 9a 8e 4b 3d 23 9e 4d 7b 36 45 9d 16 46 87 2f 5a a2 50 56 1f be 15 62 66 b4 b0 b3 64 99 a7 1d 2c a2 65 49 e6 54 53 30 f2 45 c6 5c d7 d6 32 4e ca 3c a2 b5 8a ea 92 18 47 18 e2 46 33 bd 50 c5 b5 f5 52 65 d4 8b a5 4d ca a0 a5 b5 37 9d 27 da 39 72 12 0e 9c 3d 09 b6 68 d1 35 74 23 d1 e9 74 2a 15 37 c4 ca ef 8a 58 99 6d 99 2c 05 2a d5 2a 49 c5 9b 20 ba 25 5b 48 23 ba 46 7f 9b a6 29 09 95 33 9e 26 1a 2e 1d ad 63 7f 23 95 e7 92 b7 a5 d8 70 fe f1 6f 2d 48 09 5b 97 bd 96 ab 02 52 6e 52 89 74 b4 2d 94 93 aa 30 7e cc ae 17 a4 bb 31 8b f0 53 2f b4 b5 48 61 43 36 f5 47 83 74 25 53 73 4a 6d 94 b7 9a f7 52 8b f9 99 20 de e9 42 96 4e 86 06 c4 7b ad 5f c4 1a 0e 1e ac d3 30 05 1c a6 6a ab 4f 96 e0 Data Ascii: yrjy\|=@yHK=#M{6EF/ZPVbfd,eITS0E\2N<GF3PReM7'9r=h5t#t7Xm,*I %[H#F)3&.c#po-H[RnRt-0~1S/HaC6Gt%SsJmR BN{_0jO
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: ce f8 85 28 cb f3 05 72 74 29 59 9a 9e 5b 6a b9 e7 73 3c e3 ca 3f 94 04 29 83 7d 6c a5 8e b1 cc e5 5a 68 d5 20 b0 8c e4 d5 79 da bd 46 69 dc 8f d7 51 4c 65 d5 5c 14 21 a4 49 a1 d2 91 63 b1 0e cc 1b f3 cd b5 85 ce 6b a4 06 6e 96 89 57 11 48 c3 92 96 76 5e 89 88 a9 d2 e1 49 16 0a 79 28 54 d4 eb 87 b1 0e 38 08 ea b4 9e 56 2f ff 00 d0 46 da bf 3d 4d 97 f0 fc 01 2a e4 c3 d2 85 ba bc ee 83 3f 1d c6 5d 7d 0a 28 b9 25 57 61 a4 a6 e6 c1 6b 16 27 2d a3 65 2f c8 99 88 aa 28 e1 7c 1c c5 22 65 0d 7e 2d 26 d4 94 a4 ba 46 b7 a8 be a5 b8 e2 d4 36 28 6d d6 9e 72 f6 d5 24 8f cd ae 96 61 56 69 b0 63 ed e0 99 c6 24 e6 00 e1 c8 4e c9 48 b4 5b d5 c9 ea ac c2 ca 92 92 46 8b 43 49 21 44 83 ed 36 bf 78 44 39 15 18 95 d8 0a 82 e3 fe 31 d7 27 2a 21 6b 5c b3 05 e6 52 a5 92 80 89 8e Data Ascii: (rt)Y[js<?)}lZh yFiQLe\!IcknWHv^Iy(T8V/F=M?]}(%Wak'-e/(\|"e~-&F6(mr$aVic$NH[FCI!D6xD91'!k\R
2024-03-29 00:41:31 UTC	51	IN	Data Raw: a2 ec ad 14 ba 94 8c e8 69 40 38 f6 53 bf f6 4c a0 10 0f 20 6c 4c 62 df 51 46 94 3d 82 71 43 6e e0 9a 8c eb 48 6d a5 a6 88 1e 43 c0 8c aa 57 97 97 64 91 Data Ascii: i@8SL lLbQF=qCnHmCWd
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: dc 07 57 63 c8 da 34 4a 9d 10 c3 f0 56 b0 27 29 0f ce b9 91 b4 4f 62 59 e9 b9 d2 f1 05 49 60 b2 b6 7d 27 91 22 59 45 5d 0a 4e f0 6b 3e a9 08 3a b6 22 a8 26 53 1f d4 5b 71 41 ea a5 76 98 c9 cc ab 99 76 ff 00 78 94 26 dc 8e 5e 19 03 96 6e a6 d0 e1 e8 9a 36 94 e7 e9 f5 04 50 1e 7d bb bd 3b 54 98 ac 2d e4 b7 7b 27 8b 9f 88 a3 7d c2 78 81 3d 2f 7d c4 55 86 27 9e 39 8b 25 6a 7e 29 d0 68 c0 92 d5 32 a6 dd 4d c4 2b 67 1d 5b 88 2b 52 87 22 0a 32 da e7 28 4a 53 ca 14 9d 2b 61 8d 1e db 4c 44 8c 86 2f 9f 9a 5a 38 4b 70 4b 32 4e f6 97 41 71 4d 7c 7f 79 9f eb 11 9a 2e 8c 9b 53 b3 58 92 8e ec fc cb 6c bb e7 6b 0e 29 4b 75 61 23 80 ca 52 d9 b1 3a 00 b0 d2 db 04 e9 fb e1 15 92 0a 35 ce 55 a7 25 a9 f8 4d 12 53 2c 4c 99 da ab 73 2f 3e 05 b3 b6 a2 86 d6 11 9a c4 02 32 92 ab Data Ascii: Wc4JV')ObYI`}'"YE]Nk>:"&S[qAvvx&^n6P};T-{'}x=/}U'9%j~)h2M+g[+R"2(JS+aLD/Z8KpK2NAqM\|y.SXlk)Kua#R:5U%MS,Ls/>2
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 88 4a 40 e7 75 ca 9d 7f 52 61 a5 46 6c b5 c2 c8 46 1e c1 74 5c 01 54 60 ca d5 d7 4f 54 d4 d9 51 bb a1 6f 19 94 3c 3e 4a 71 66 ff 00 68 ce 4b 29 02 32 9e 23 d4 ce 1b a1 cf 67 4b d3 8e d5 f1 1a 5f 1e bb a5 6e b4 b6 98 62 e2 de e3 0e a8 5f 9a 35 07 78 db 49 51 49 1e 8d 40 c5 c2 9f 86 1e c4 93 c4 2d 34 ac 31 4f 25 64 fa 96 eb 88 75 f7 53 7e aa 43 ed 24 69 ba be 51 ce ff 00 b7 5f e4 0d 51 e3 de 06 3f 35 89 71 2d 63 1b 57 66 0b 8a 96 c8 a5 5c 5f fe a2 61 fc c8 3d b5 24 7c 2d 1b 6e 7f 8e 9f 42 4a 8f a2 2a 75 72 f8 ae d6 44 d6 45 4d ad c9 19 20 a1 ec 70 11 ea 27 e0 e0 71 43 a8 22 38 93 65 a5 46 67 18 d4 85 3f 05 50 f0 b4 ae 72 fb d2 ed 07 50 da 7d 29 4b 8e 12 b1 6e 57 27 35 f7 ba 04 6a ac aa 37 73 f3 57 9f c2 c8 96 6f ff 00 e1 4c ca ca 8a ac 1b 43 56 16 27 ba 50 Data Ascii: J@uRaFlFt\T`OTQo<>JqfhK)2#gK_nb_5xIQI@-41O%duS~C$iQ_Q?5q-cWf\_a=$\|-nBJ*urDEM p'qC"8eFg?PrP})KnW'5j7sWoLCV'P
2024-03-29 00:41:31 UTC	1300	IN	Data Raw: 34 29 1e df 80 a7 e4 2b 28 90 a5 bc f3 9e 55 c9 69 73 36 a2 df a4 a6 5d 25 39 53 ae c1 48 58 ff 00 31 eb 13 81 8b 63 38 ea ad 21 25 8c 2a f5 c5 bd 7f 2f 45 28 5b c0 7a 54 a5 12 14 a4 f3 cc 1c 5a 6c 08 e7 13 8d bb 35 5e 8c b7 88 f2 89 5e 11 96 af 4e 3a 26 04 9c 93 a5 b1 6d 57 35 32 57 95 07 a9 4b 6e ba ae d0 35 d7 41 68 be c6 60 b3 41 a5 e1 76 9e e0 cb 56 2a 6a 9f 9e 70 fb 09 90 94 69 21 a2 4f ea 43 08 50 ea 52 a8 c7 6e ad f7 fe 20 47 f0 73 0c 4e d3 70 ec a3 99 32 22 a5 58 f3 cb 45 ad c6 43 4d 65 61 bb f7 71 e0 7e 09 31 ae e7 b8 d2 03 7d 8a 15 c7 aa 49 52 98 19 e5 64 5a 5c b3 8b 3e d2 d0 e0 53 61 47 a9 36 24 f4 19 d5 b0 31 cd 18 94 81 54 d9 7d 74 b4 3d 2e b7 27 27 07 e3 0e 36 37 42 52 ac f2 92 e7 a1 29 b5 c7 f8 ba c5 e3 46 b1 ec db 50 97 2e d4 c9 41 50 2e Data Ascii: 4)+(Uis6]%9SHX1c8!%/E([zTZl5^^N:&mW52WKn5Ah`AvVjpi!OCPRn GsNp2"XECMeaq~1}IRdZ\>SaG6$1T}t=.''67BR)FP.AP.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49913	44.197.69.112	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:31 UTC	782	OUT	GET /j?se=e30&cd=.com&dtstmp=1711672890515&tv=8.38.0&did=did-004f&n3pc=true&wpn=prebid&pu=https%3A%2F%2Fwww.yahoo.com%2F&duid=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q&gdpr=0 HTTP/1.1 Host: rp.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=07571c18-3f04-4602-a656-288806fb242c
2024-03-29 00:41:32 UTC	469	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:32 GMT Content-Type: application/json Content-Length: 13 Connection: close X-Pixel-Event-Id: 7e8a897e-c0f2-48a4-a13f-2882eff6a462 set-cookie: lidid=07571c18-3f04-4602-a656-288806fb242c; Max-Age=63072000; Domain=.liadm.com; Path=/j; Secure; SameSite=None access-control-expose-headers: * access-control-allow-origin: https://www.yahoo.com access-control-allow-methods: GET access-control-allow-credentials: true
2024-03-29 00:41:32 UTC	13	IN	Data Raw: 7b 22 62 61 6b 65 72 73 22 3a 5b 5d 7d Data Ascii: {"bakers":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49919	152.199.24.48	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:31 UTC	1747	OUT	GET /tag/opus-frame.html?referrer=https%3A%2F%2Fwww.yahoo.com%2F&tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb&axids=gam%3Dy-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A%26dv360%3DeS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B%26ydsp%3Dy-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A%26tbla%3Dy-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1 HTTP/1.1 Host: opus.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; IDSYNC="19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0"; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:32 UTC	548	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 393663 Content-Security-Policy: default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline' Content-Type: text/html Date: Fri, 29 Mar 2024 00:41:32 GMT Etag: "19720d3a285aba8024b11fc9955795fe" Last-Modified: Tue, 19 Mar 2024 17:45:41 GMT Server: ECAcc (dcd/7D6C) Vary: Accept-Encoding x-amz-id-2: yqKehM0vumn/y5Dx06H8rsfv4OoNuUIxip+w50uAj/pxQg7nNsImvr7HrLm7YCD+gMIZ+e8loZM= x-amz-request-id: NGKHK3JNS9CZCFAN X-Cache: HIT Content-Length: 5503 Connection: close
2024-03-29 00:41:32 UTC	5503	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 3e Data Ascii: <!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width,initial-scale=1"><script defer="defer">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49915	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:31 UTC	519	OUT	GET /uu/api/res/1.2/3URZTH5jLXm7RJvuzhGpyg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/usa_today_news_641/ae7e9fe306293a79dd7ba40f181e26cf.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:32 UTC	1297	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 438247443201403264965780023803913537909,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="ae7e9fe306293a79dd7ba40f181e26cf.webp" Edge-Cache-Tag: 438247443201403264965780023803913537909,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "044a692182a19aa9f6913484ab641e87" Expiration: expiry-date="Wed, 25 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 28 Mar 2024 22:19:41 GMT Server: ATS Surrogate-Reporting: width=536,height=284,bytes=11314,owidth=8256,oheight=5504,obytes=5902600,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 28 Mar 2024 23:52:51 GMT X-Served-By: cache-iad-kjyo7100152-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711669971.352801,VS0,VE1 Age: 2921 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-iad-kjyo7100152-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 34808 ATS-Carp-Promotion: 1
2024-03-29 00:41:32 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: ca 12 15 f1 0d eb 6f 4b f3 b1 f6 88 e5 89 b6 92 a6 d4 1b 6d 2e 37 3d 30 04 c2 2e 85 65 ba d2 41 d9 57 02 dd 77 ed 6b ed 0b a6 e8 f1 62 56 66 d3 72 bc 26 96 bf 37 9b 5e 60 e6 17 ff 00 32 6d 6e a9 3b ef 18 7c 71 39 a7 cb 4b a4 8b b2 8c e3 65 20 58 fa fa 91 78 cc 97 c6 69 3e c3 4c 32 c9 5a 5c 1a 10 4a 93 b2 17 cc 81 fd 3d bb 6f 11 aa 49 a2 28 9e 35 55 86 8c ca c2 5a 6e d6 4b 79 ae 91 b0 dc 11 6d 46 a3 6d 23 1a 9a 90 93 2a c8 99 39 7e 07 15 21 41 a0 a0 b2 7e 9a 1b 0b 0d 39 5a 06 e9 20 e3 33 0e 25 72 93 12 e9 53 86 c7 20 19 40 16 b8 24 ea 39 f4 3b 40 34 6d 31 46 9c 61 9b f1 54 5b 50 05 60 11 a0 e9 61 1b 06 91 6b 5b 68 4a 9b 24 80 a0 52 2f fd f4 86 83 4f 5d 7d 3a 06 9c 27 af 2f 7f 48 c2 dc 48 cc 29 84 4b ad 44 65 5a fe 65 5e f7 e9 e8 20 6c 88 09 99 66 42 73 bb Data Ascii: oKm.7=0.eAWwkbVfr&7^`2mn;\|q9Ke Xxi>L2Z\J=oI(5UZnKymFm#*9~!A~9Z 3%rS @$9;@4m1FaT[P`ak[hJ$R/O]}:'/HH)KDeZe^ lfBs
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: d8 00 80 08 00 80 08 00 80 08 00 80 08 00 80 08 00 80 08 00 80 08 00 80 08 00 80 08 03 6a f8 0f 86 e6 2a 18 9d ba 88 4d d0 83 94 0b 6f ac 23 d1 e0 71 fd ae eb e8 36 08 a6 4b cc 53 82 6d 97 ca 0e d7 8c d3 e9 a4 d1 25 31 2c c5 61 c6 17 a8 4a b4 84 93 46 d7 7b 47 e2 9f 85 96 6d 4e 37 af 51 1b b3 ca a9 61 31 33 55 aa ad d4 8b a1 2a ca 0f 58 45 71 a9 8c 42 d1 6d 2a 48 36 de 33 7a 56 58 d7 78 c7 c0 ba 5e 39 a2 bb 50 9b 6f fc 52 f5 0a 23 68 26 4e 1e 5f 0e 72 7e b9 42 7f 07 4c e1 7a c5 56 93 34 a5 66 94 5a 51 65 26 c4 82 0f e9 1d 38 7f 73 e2 f9 78 7f 4b e6 d1 67 14 07 15 44 59 0c a7 32 95 0c 49 55 97 5d 4c f4 c3 8f 38 e9 4a 41 01 b1 6b f9 6f 61 fa c4 b4 d9 76 6d 3c 97 19 77 86 97 82 c0 e7 94 8b fd 40 8d 3e f6 66 b1 63 72 37 81 b1 93 6e 29 a5 85 a0 d8 8d 41 1b 83 Data Ascii: jMo#q6KSm%1,aJF{GmN7Qa13UXEqBm*H63zVXx^9PoR#h&N_r~BLzV4fZQe&8sxKgDY2IU]L8JAkoavm<w@>fcr7n)A
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 8d d6 da 48 00 2b ae bd 7b 13 b4 35 c7 a1 0d 26 66 5c 2d da 66 63 23 17 b2 ce 50 6c 3d f5 fc f6 b4 27 aa b8 a3 a6 1d 72 ce b0 dc 80 68 a5 56 43 ae a1 59 ec 39 a4 65 d0 1f cc de 12 e2 69 48 05 ce b4 da dc 5b f6 cb 6d 38 79 bf 0e 6b 8d 0d 8f 7d e3 9f 28 a4 cb 46 4c c9 cc 4d 34 eb 33 0f 2d 39 b5 ca 0f cf aa 8e a7 b5 e3 9e af 85 78 e2 64 28 ed 21 f5 79 82 56 01 21 cc ca 23 d2 d7 fa d8 c7 2e 5f 56 87 d2 b5 b9 46 18 53 72 d2 f7 21 45 64 95 58 00 7a 9b 69 68 9d 52 44 85 2e 60 b8 48 93 53 8e 15 82 48 42 49 3e 52 46 9a 82 7a ea 74 36 8c 3c c5 31 fc 2f 11 87 d4 e3 49 9a 4a 57 6c c1 64 66 4d 88 23 40 6f cb a8 80 de a7 b2 78 12 61 f0 66 5e 47 10 92 0b 77 d1 49 eb 70 35 fc e0 36 29 49 4a 2f 01 c7 1a 4a d6 ca 11 6c a1 37 d7 dc 8b 9f ce 05 62 66 53 0a 2a 75 a0 ea 4a e6 Data Ascii: H+{5&f\-fc#Pl='rhVCY9eiH[m8yk}(FLM43-9xd(!yV!#._VFSr!EdXzihRD.`HSHBI>RFzt6<1/IJWldfM#@oxaf^GwIp56)IJ/Jl7bfS*uJ
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 17 3f 78 bf 83 5b 9f 9a 97 6d ca 72 dc 6c b6 97 14 ea 75 29 5a 1f 68 6a 39 f9 5c 7c 74 21 66 3b 78 9b c2 be 6f f2 d8 cf 27 4d 65 55 f0 ea 55 f9 32 eb 28 74 96 54 97 a5 dc 6c 90 92 d3 68 4a 52 91 63 be 84 df a9 3a 58 de 3d fc 33 e9 f2 7c 8e 2f fa 6b 2a bc a8 94 a8 b8 94 0b 85 04 ac 0e 97 00 db f3 8e 8c 2b ce b8 dc 7e 93 4e 84 01 cc 6b d8 c5 e5 24 9a 60 f6 de d1 b4 22 a7 bf 92 a8 4c c2 01 ef 9a 23 41 28 c3 88 00 80 08 00 80 08 00 80 08 00 80 08 00 80 08 00 80 08 00 80 08 00 80 08 00 80 08 03 62 f8 55 4d 0f cf 71 dc 07 2a 54 32 9b 6e 46 ff 00 b4 2e 7d 3b f8 92 64 ed 7f 0b a8 52 4f 48 34 1c 1f 28 48 1a 44 6b de f0 cd 44 e6 2e c2 a9 96 68 ad a1 e5 bf 48 a6 d7 dd 63 e1 fb 2d 52 e9 ef 17 53 95 c5 2b 4b f2 8c d6 c7 64 eb 75 25 3d 3e 1a 49 f2 aa e2 21 ad 55 71 5c Data Ascii: ?x[mrlu)Zhj9\\|t!f;xo'MeUU2(tTlhJRc:X=3\|/k+~Nk$`"L#A(bUMqT2nF.};dROH4(HDkD.hHc-RS+Kdu%=>I!Uq\
2024-03-29 00:41:32 UTC	55	IN	Data Raw: 95 c4 4a 7d 41 30 06 65 09 1a 25 59 a3 2f c3 63 d1 cb 01 01 04 e6 50 56 60 2c 0f e1 e7 09 3b 34 9b 3e 95 65 c7 73 70 f2 69 6b e6 71 29 e7 7e 64 5f 6e 5a c6 1f 17 8a Data Ascii: J}A0e%Y/cPV`,;4>espikq)~d_nZ
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 97 70 11 99 0b 4a 15 f2 a9 49 23 37 5d e1 32 9d af 16 0a 2b bc 04 a5 65 19 b2 6a 22 57 52 2b 84 ed b2 a8 05 d4 b8 db b3 2e 5d 2f 22 e5 a2 9d c7 4d f6 89 6d d7 8e 3d 2d 8f 3f 4b 95 97 4b 4d a7 8e f2 74 0c 04 80 9f 78 d9 94 aa 33 67 8e f2 5a 7e a2 a0 56 9b d9 a1 b2 3b 7a c3 37 4b 45 36 7d 28 4b 09 68 dc 8b 83 ca 1b 70 cb 6c 80 4b 6e 95 ba fa 0f 40 93 78 d9 74 13 eb 48 7e df c3 54 b4 34 35 25 26 cb 24 ee 73 72 fc bf d1 fd a1 f4 7f 25 5b 6e 46 73 84 ea 7e 25 63 45 24 23 30 49 ec 39 d8 10 6f a0 06 da 42 65 62 93 15 99 13 2e cd b8 94 36 78 37 be 87 e6 f7 1f de b6 e9 12 b7 4b 4c 15 ac 41 23 69 f5 39 c4 be 7d 48 b7 e2 e6 7d e3 9b 3c d7 c3 1d 2b 85 bc cf 38 96 58 17 4e 5c c4 73 b8 bf ef eb e9 1c 96 af 86 32 1e 34 f2 14 95 70 d6 bc 99 ca 83 6a 55 c3 64 ea 40 1f f9 Data Ascii: pJI#7]2+ej"WR+.]/"Mm=-?KKMtx3gZ~V;z7KE6}(KhplKn@xtH~T45%&$sr%[nFs~%cE$#0I9oBeb.6x7KLA#i9}H}<+8XN\s24pjUd@
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 35 e2 43 12 ec fc 3c ec bc 8b f7 74 bc 85 a9 4a 25 16 dc 90 0f 9a d7 e8 44 5a 44 72 aa a5 6f 1f b6 e2 f3 26 5d f7 6d ab 65 86 54 14 47 22 13 6b 8f d3 a1 31 be a5 cb 35 52 6b 15 0a 64 bc cd 4e 62 d2 ea 4e 67 33 3a a4 85 01 c8 70 ec a3 ee 44 17 14 ee 4d 73 59 c7 cf 54 c1 b7 0d c4 ea 43 ab f3 a9 67 60 48 55 c5 80 d2 c2 c3 d2 27 ae d5 f1 76 b1 e0 ca 4c cd 40 4b 4f d5 26 9d 53 6b 1e 66 93 64 85 7d 34 1f 48 6f 57 5e 13 b7 41 61 f9 59 d9 ea 5b 4a 2d f0 d2 d3 67 2a 07 ca 90 3a 74 bc 34 8f 43 d7 fb 5c 81 e2 5e 35 4d 67 13 d4 6e f9 52 44 db a0 0b d8 04 85 59 23 da c7 eb 16 c7 17 cb 73 39 72 e5 a3 6c 1f 36 d8 98 7b 88 72 fc bf bc 74 e3 34 e6 df b7 69 fa ed 57 e0 a9 33 2f 53 a6 9b 2e 00 9b 85 79 48 19 86 dd fb c5 70 c1 c9 ca be 91 ae de 9d 7e 79 e5 3c f9 25 4a 37 d4 Data Ascii: 5C<tJ%DZDro&]meTG"k15RkdNbNg3:pDMsYTCg`HU'vL@KO&Skfd}4HoW^AaY[J-g*:t4C\^5MgnRDY#s9rl6{rt4iW3/S.yHp~y<%J7
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: b8 d8 f6 e8 df 0b 24 52 c3 a8 28 4e fb c7 9f be df 41 c6 c3 a7 4a e1 87 03 12 69 5e 5b 8e 91 bb 74 4c 5e 62 1a 8b 3f 0a 57 7b 65 e5 0b 3b 3e 38 ed 9e 14 9f 57 0c b8 af 28 04 58 45 f1 9d 2b 3c 68 5c 67 57 5b f3 4d b2 da ae 5b 50 bf bc 1e ad 98 a4 25 c8 66 4d 2e 28 e9 6b c2 d5 b1 84 70 f3 46 b5 57 ca 93 7c 86 ea e7 bf fc 42 e8 d2 6c be 31 a2 b9 2f 2e eb 8d a7 91 bc 64 35 f8 e0 6f 15 de 6a 6b 14 cf 4a b8 eb 6c 9e 2d b3 2b 7d af a7 d6 3a b1 f8 f8 4e 74 b7 93 76 a0 3c 9e 1c b7 05 26 fc 35 65 52 b9 91 bf eb 0c 97 ec d0 24 5a c0 5a e6 f0 36 4d bd bd 94 53 68 2b 19 21 37 23 58 95 b7 66 89 5a 65 21 fa b4 f4 bd 3e 59 3e 77 96 10 56 47 95 00 9d cc 65 f8 e9 f1 e1 b7 51 60 0a 1e 17 c0 32 b6 40 6f e2 1d 6f 2a a6 16 df de b8 79 92 79 0e 83 a4 73 db 76 fa 8e 2f 1b 1e 34 Data Ascii: $R(NAJi^[tL^b?W{e;>8W(XE+<h\gW[M[P%fM.(kpFW\|Bl1/.d5ojkJl-+}:Ntv<&5eR$ZZ6MSh+!7#XfZe!>Y>wVGeQ`2@oo*yysv/4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49909	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	541	OUT	GET /aaq/notifications/js/sh-5.17.91.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:32 UTC	829	IN	HTTP/1.1 200 OK x-amz-id-2: NNeht8sw/yWoVX4gIzTm7+dp66MbdpX+dMIvx/odlmELli1IOBT3UEKFlass/TziMhIWCHTRDMg= x-amz-request-id: X5HDC8MMAM76T0V1 Date: Thu, 28 Mar 2024 23:31:47 GMT Last-Modified: Fri, 01 Mar 2024 20:31:04 GMT ETag: "e6a743e22f5b7027f77359f0a549572b" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: a4d6j1rGXjJh7zYv1zxDfxRxpUDhRFD1 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 23479 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 4186 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 22 42 72 6f 77 73 65 72 53 75 62 73 63 72 69 70 74 69 6f 6e 48 65 6c 70 65 72 22 2c 69 3d 5b 22 63 68 72 6f 6d 65 22 2c 22 63 68 72 6f 6d 65 20 6d 6f 62 69 6c 65 22 5d 2c 70 3d 22 65 72 72 6f 72 22 2c 66 3d 22 69 6e 66 6f 22 2c 6e 3d 22 70 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 2c 6f 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 74 3d 22 55 6e 73 75 70 70 6f 72 74 65 64 20 42 72 6f 77 73 65 72 2e 22 2c 75 3d 22 67 72 61 6e 74 65 64 22 2c 61 3d 22 64 65 6e 69 65 64 22 2c 63 3d 22 73 75 62 73 63 72 69 70 74 69 6f 6e 73 22 2c 73 3d 22 74 79 70 65 22 2c 64 3d 22 70 75 73 68 22 2c 65 3d 22 64 69 73 70 6c 61 79 2d 70 75 73 68 2d 70 72 6f 6d 6f 73 22 2c 6c 3d 22 6a 73 2d 70 75 73 68 2d 73 75 62 73 63 72 Data Ascii: !function(){var r="BrowserSubscriptionHelper",i=["chrome","chrome mobile"],p="error",f="info",n="pushNotifications",o="undefined",t="Unsupported Browser.",u="granted",a="denied",c="subscriptions",s="type",d="push",e="display-push-promos",l="js-push-subscr
2024-03-29 00:41:32 UTC	914	IN	Data Raw: 41 67 65 6e 74 2c 6e 3d 65 2e 62 72 6f 77 73 65 72 4e 61 6d 65 2c 69 3d 65 2e 62 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 2c 72 3d 65 2e 6f 73 7c 7c 65 2e 6f 73 4e 61 6d 65 2c 74 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 73 75 70 70 6f 72 74 65 64 42 72 6f 77 73 65 72 73 5b 6e 5d 7c 7c 7b 7d 2c 6f 3d 21 31 2c 73 3d 21 31 2c 61 3d 74 2e 6f 73 26 26 74 2e 6f 73 2e 6c 65 6e 67 74 68 2c 63 3d 30 3b 63 3c 61 3b 63 2b 2b 29 69 66 28 2d 31 3c 72 2e 69 6e 64 65 78 4f 66 28 74 2e 6f 73 5b 63 5d 29 29 7b 73 3d 21 30 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 28 21 74 2e 6d 69 6e 56 65 72 73 69 6f 6e 7c 7c 69 3e 3d 74 2e 6d 69 6e 56 65 72 73 69 6f 6e 29 26 26 28 21 74 2e 6d 61 78 56 65 72 73 69 6f 6e 7c 7c 69 3c 3d 74 2e 6d 61 78 56 65 72 73 69 6f 6e 29 26 26 28 21 74 2e 75 Data Ascii: Agent,n=e.browserName,i=e.browserVersion,r=e.os\|\|e.osName,t=this.config.supportedBrowsers[n]\|\|{},o=!1,s=!1,a=t.os&&t.os.length,c=0;c<a;c++)if(-1<r.indexOf(t.os[c])){s=!0;break}return(!t.minVersion\|\|i>=t.minVersion)&&(!t.maxVersion\|\|i<=t.maxVersion)&&(!t.u
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 6e 49 64 28 6e 29 7c 7c 6e 75 6c 6c 2c 72 3d 65 2e 64 65 76 69 63 65 49 64 7c 7c 6e 75 6c 6c 2c 74 3d 65 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 53 74 61 74 65 7c 7c 6e 75 6c 6c 2c 6f 3d 6e 26 26 6e 2e 65 72 72 6f 72 3d 3d 3d 62 2c 73 3d 21 72 26 26 22 67 72 61 6e 74 65 64 22 3d 3d 3d 65 2e 73 74 61 74 65 2c 61 3d 72 26 26 22 67 72 61 6e 74 65 64 22 3d 3d 3d 65 2e 73 74 61 74 65 26 26 22 73 74 61 72 74 65 64 22 3d 3d 3d 6e 2e 6f 6e 62 6f 61 72 64 53 74 61 74 65 26 26 21 6e 2e 65 72 72 6f 72 2c 63 3d 6f 7c 7c 73 7c 7c 61 2c 75 3d 22 73 75 62 73 50 75 73 68 4d 6e 67 72 52 65 73 79 6e 63 22 3b 6f 3f 75 3d 22 73 75 62 73 52 69 76 65 6e 64 65 6c 6c 52 65 73 79 6e 63 22 3a 61 26 26 28 75 3d 22 73 75 62 73 46 43 4d 52 65 73 79 6e 63 22 29 3b 76 61 72 20 64 3d 21 Data Ascii: nId(n)\|\|null,r=e.deviceId\|\|null,t=e.subscriptionState\|\|null,o=n&&n.error===b,s=!r&&"granted"===e.state,a=r&&"granted"===e.state&&"started"===n.onboardState&&!n.error,c=o\|\|s\|\|a,u="subsPushMngrResync";o?u="subsRivendellResync":a&&(u="subsFCMResync");var d=!
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 72 2c 74 3d 6e 2e 70 75 73 68 4d 61 6e 61 67 65 72 43 68 75 72 6e 3b 69 66 28 65 7c 7c 21 72 26 26 21 74 29 73 26 26 73 28 6e 75 6c 6c 2c 6e 75 6c 6c 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 28 69 3d 69 7c 7c 7b 7d 29 2e 6f 72 69 67 69 6e 7c 7c 22 67 6f 6e 64 6f 72 5f 68 6f 6d 65 72 75 6e 5f 6e 65 77 73 22 3b 61 2e 5f 64 6f 52 65 67 69 73 74 65 72 53 65 72 76 69 63 65 57 6f 72 6b 65 72 28 61 2e 63 6f 6e 66 69 67 2e 73 65 72 76 69 63 65 57 6f 72 6b 65 72 55 72 6c 2c 61 2e 63 6f 6e 66 69 67 2e 73 65 72 76 69 63 65 57 6f 72 6b 65 72 53 63 6f 70 65 29 2e 74 68 65 6e 28 61 2e 5f 64 6f 50 75 73 68 4d 61 6e 61 67 65 72 53 75 62 73 63 72 69 62 65 2e 62 69 6e 64 28 61 29 29 2e 74 68 65 6e 28 61 2e 5f 62 75 69 6c 64 50 65 72 6d 69 73 73 69 6f 6e 4f 62 6a 65 63 74 43 Data Ascii: r,t=n.pushManagerChurn;if(e\|\|!r&&!t)s&&s(null,null);else{var o=(i=i\|\|{}).origin\|\|"gondor_homerun_news";a._doRegisterServiceWorker(a.config.serviceWorkerUrl,a.config.serviceWorkerScope).then(a._doPushManagerSubscribe.bind(a)).then(a._buildPermissionObjectC
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 6d 69 73 73 69 6f 6e 43 68 72 6f 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 2c 72 3d 69 2e 63 6f 6e 66 69 67 2e 73 65 72 76 69 63 65 57 6f 72 6b 65 72 55 72 6c 2c 74 3d 69 2e 63 6f 6e 66 69 67 2e 73 65 72 76 69 63 65 57 6f 72 6b 65 72 53 63 6f 70 65 3b 4e 6f 74 69 66 69 63 61 74 69 6f 6e 26 26 72 26 26 74 26 26 28 22 64 65 66 61 75 6c 74 22 3d 3d 3d 4e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 70 65 72 6d 69 73 73 69 6f 6e 26 26 28 69 2e 5f 74 72 61 63 6b 4c 69 6e 6b 56 69 65 77 28 7b 69 74 63 3a 22 31 22 2c 73 65 63 3a 65 2e 73 65 63 2c 73 6c 6b 3a 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 70 65 72 6d 69 73 73 69 6f 6e 20 72 65 71 75 65 73 74 22 2c 73 75 62 73 65 63 3a 65 2e 73 75 62 73 65 63 7d 29 2c 69 2e 5f 73 65 6e 64 Data Ascii: missionChrome:function(e,n){var i=this,r=i.config.serviceWorkerUrl,t=i.config.serviceWorkerScope;Notification&&r&&t&&("default"===Notification.permission&&(i._trackLinkView({itc:"1",sec:e.sec,slk:"notification permission request",subsec:e.subsec}),i._send
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 74 75 72 6e 20 72 2e 70 75 73 68 4d 61 6e 61 67 65 72 2e 73 75 62 73 63 72 69 62 65 28 7b 61 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 4b 65 79 3a 6e 2e 61 70 70 53 65 72 76 65 72 50 75 62 4b 65 79 41 72 72 2c 75 73 65 72 56 69 73 69 62 6c 65 4f 6e 6c 79 3a 21 30 7d 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 28 65 26 26 65 2e 65 6e 64 70 6f 69 6e 74 26 26 65 2e 6f 70 74 69 6f 6e 73 26 26 65 2e 6f 70 74 69 6f 6e 73 2e 61 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 4b 65 79 29 29 74 68 72 6f 77 22 4d 69 73 73 69 6e 67 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 69 6e 66 6f 22 3b 72 65 74 75 72 6e 20 6e 2e 6c 6f 67 50 75 73 68 4d 61 6e 61 67 65 72 53 75 63 63 65 73 73 28 65 2e 65 6e 64 70 6f 69 6e 74 29 2c 6e 2e 5f 73 Data Ascii: turn r.pushManager.subscribe({applicationServerKey:n.appServerPubKeyArr,userVisibleOnly:!0})}).then(function(e){if(!(e&&e.endpoint&&e.options&&e.options.applicationServerKey))throw"Missing subscription info";return n.logPushManagerSuccess(e.endpoint),n._s
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 74 74 70 73 5c 3a 5c 2f 5c 2f 28 66 63 6d 7c 61 6e 64 72 6f 69 64 29 5c 2e 67 6f 6f 67 6c 65 61 70 69 73 5c 2e 63 6f 6d 5c 2f 28 67 63 6d 7c 66 63 6d 29 5c 2f 73 65 6e 64 5c 2f 28 2e 2a 29 24 2f 29 29 26 26 6e 2e 6c 65 6e 67 74 68 26 26 6e 5b 33 5d 29 2c 69 7d 2c 5f 73 65 6e 64 42 65 61 63 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 3b 69 2e 62 65 61 63 6f 6e 65 72 26 26 65 26 26 6e 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 62 65 61 63 6f 6e 65 72 3f 69 2e 62 65 61 63 6f 6e 65 72 28 65 2c 72 2c 6e 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 62 65 61 63 6f 6e 65 72 5b 65 5d 26 26 69 2e 62 65 61 63 6f 6e 65 72 5b 65 5d 28 72 2c 6e 29 29 7d 2c 5f 74 72 61 63 6b 43 6c Data Ascii: ttps\:\/\/(fcm\|android)\.googleapis\.com\/(gcm\|fcm)\/send\/(.*)$/))&&n.length&&n[3]),i},_sendBeacon:function(e,n){var i=this;i.beaconer&&e&&n&&("function"==typeof i.beaconer?i.beaconer(e,r,n):"function"==typeof i.beaconer[e]&&i.beaconer[e](r,n))},_trackCl
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 70 74 69 6f 6e 73 2e 6f 54 6f 52 22 7d 2c 74 29 2c 21 30 7d 2c 5f 75 70 64 61 74 65 41 74 74 72 69 62 75 74 65 73 46 6f 72 53 75 62 73 63 72 69 62 65 64 55 73 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 69 6e 64 65 78 65 64 44 42 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 61 3d 74 68 69 73 3b 61 2e 5f 72 65 61 64 45 6e 74 72 79 49 6e 44 42 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 69 66 28 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6e 3d 28 6f 3d 6f 7c 7c 7b 7d 29 2e 6c 61 73 74 41 74 74 72 69 62 75 74 65 55 70 64 61 74 65 54 69 6d 65 2c 73 3d 6f 2e 72 65 67 69 73 74 72 61 74 69 6f 6e 49 64 3b 69 66 28 44 61 74 65 2e 6e 6f 77 28 29 2d 6e 3c 3d 38 36 34 65 35 29 72 65 74 75 72 6e 21 31 3b 61 2e 66 65 74 63 68 50 75 73 68 Data Ascii: ptions.oToR"},t),!0},_updateAttributesForSubscribedUser:function(){if(!window.indexedDB)return!1;var a=this;a._readEntryInDB(function(e,o){if(e)return!1;var n=(o=o\|\|{}).lastAttributeUpdateTime,s=o.registrationId;if(Date.now()-n<=864e5)return!1;a.fetchPush
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 73 68 4d 61 6e 61 67 65 72 46 61 69 6c 22 7d 2c 65 29 7d 2c 6c 6f 67 53 75 62 73 63 72 69 70 74 69 6f 6e 46 61 69 6c 75 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 73 65 74 45 6e 74 72 79 49 6e 44 42 28 7b 65 72 72 6f 72 3a 62 7d 2c 65 29 7d 2c 6c 6f 67 53 75 62 73 63 72 69 70 74 69 6f 6e 43 68 75 72 6e 43 68 65 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 73 65 74 45 6e 74 72 79 49 6e 44 42 28 7b 63 68 75 72 6e 43 68 65 63 6b 54 69 6d 65 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 2c 65 29 7d 2c 63 6c 65 61 72 45 72 72 6f 72 4c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 73 65 74 45 6e 74 72 79 49 6e 44 42 28 7b 65 72 72 6f 72 3a 76 6f 69 64 20 30 7d 2c 65 29 7d 2c 67 65 74 53 Data Ascii: shManagerFail"},e)},logSubscriptionFailure:function(e){this._setEntryInDB({error:b},e)},logSubscriptionChurnCheck:function(e){this._setEntryInDB({churnCheckTime:(new Date).getTime()},e)},clearErrorLog:function(e){this._setEntryInDB({error:void 0},e)},getS
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 61 67 65 3a 6e 2e 6d 65 73 73 61 67 65 7d 29 2c 6f 26 26 6f 28 6e 29 2c 69 2e 63 6c 6f 73 65 28 29 7d 7d 29 7d 2c 5f 72 65 61 64 45 6e 74 72 79 49 6e 44 42 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6f 3d 74 68 69 73 2c 73 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 6f 2e 5f 6f 70 65 6e 44 42 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 69 66 28 65 29 72 65 74 75 72 6e 20 74 26 26 74 28 65 29 3b 76 61 72 20 72 3d 69 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 63 29 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 63 29 2e 67 65 74 28 64 29 3b 72 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 74 26 26 74 28 6e 75 6c 6c 2c 72 2e 72 65 73 75 Data Ascii: age:n.message}),o&&o(n),i.close()}})},_readEntryInDB:function(t){var o=this,s=(new Date).getTime();o._openDB(function(e,i){if(e)return t&&t(e);var r=i.transaction(c).objectStore(c).get(d);r.onsuccess=function(e){var n=(new Date).getTime();t&&t(null,r.resu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49916	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	541	OUT	GET /aaq/hc/homepage-pwa-defer-1.1.6.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:32 UTC	865	IN	HTTP/1.1 200 OK x-amz-id-2: 0dWp3YjdSzanrsGj6UtKhxRorh4qNXIWdTbmrICfuohr/FhIXV3pAU6cfUQPJUU+z3apXhqjYQjM85wrK5CU6A== x-amz-request-id: B18F09QJJMETJ2E7 Date: Thu, 28 Mar 2024 05:32:15 GMT Last-Modified: Tue, 02 May 2023 21:04:06 GMT ETag: "6ea12fccbed15820786c87f0b9b67d61" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 62z3e394BVX5YApOMJTuFHiUFyy3mHgC Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 67717 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 68958 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 48 6f 6d 65 70 61 67 65 43 6c 69 65 6e 74 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 48 6f 6d 65 70 61 67 65 43 6c 69 65 6e 74 3d 74 28 29 3a 65 2e 48 6f 6d 65 70 61 67 65 43 6c 69 65 6e 74 3d 74 28 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("HomepageClient",[],t):"object"==typeof exports?exports.HomepageClient=t():e.HomepageClient=t()}("undefined"!=typeof self?self
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 29 2c 69 7d 2c 74 2e 6d 3d 65 2c 74 2e 63 3d 6f 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 74 2e 6f 28 65 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6f 7d 29 7d 2c 74 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 74 2e 64 28 6e 2c 22 61 22 2c 6e 29 2c 6e 7d 2c 74 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 Data Ascii: ),i},t.m=e,t.c=o,t.d=function(e,n,o){t.o(e,n)\|\|Object.defineProperty(e,n,{configurable:!1,enumerable:!0,get:o})},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 64 69 6e 67 53 75 70 70 6f 72 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6c 6f 61 64 69 6e 67 22 69 6e 20 48 54 4d 4c 49 6d 61 67 65 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 7d 28 29 2c 74 2e 69 73 53 6c 6f 77 42 72 6f 77 73 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 72 65 74 75 72 6e 20 74 28 65 29 3b 76 61 72 20 6e 3d 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6e 6e 65 63 74 69 6f 6e 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 6d 6f 7a 43 6f 6e 6e 65 63 74 69 6f 6e 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 6b 69 74 43 6f 6e 6e 65 63 74 69 6f 6e 3b 69 66 28 6e 29 Data Ascii: dingSupported=function(){return"loading"in HTMLImageElement.prototype}(),t.isSlowBrowser=function(){var e=void 0;return new Promise(function(t){if(void 0!==e)return t(e);var n=navigator.connection\|\|navigator.mozConnection\|\|navigator.webkitConnection;if(n)
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 73 2f 40 76 7a 6d 69 2f 77 61 66 65 72 2d 63 6f 72 65 2f 73 72 63 2f 75 74 69 6c 73 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 20 73 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 76 7a 6d 69 2f 77 61 66 65 72 2d 63 6f 72 65 2f 73 72 63 2f 75 74 69 6c 73 2f 75 74 69 6c 73 2e 6a 73 22 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 63 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 76 7a 6d 69 2f 77 61 66 65 72 2d 63 6f 72 65 2f 73 72 63 2f 75 74 69 6c 73 2f 63 6f 6f 6b 69 65 2e 6a 73 22 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 20 6c 3d 6e 28 22 2e 2e 2f Data Ascii: s/@vzmi/wafer-core/src/utils.js":function(e,t,n){"use strict";function o(){return s=n("../../node_modules/@vzmi/wafer-core/src/utils/utils.js")}function r(){return c=n("../../node_modules/@vzmi/wafer-core/src/utils/cookie.js")}function i(){return l=n("../
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 2e 62 6f 74 74 6f 6d 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 6f 2c 72 29 7b 69 66 28 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 74 29 29 7b 76 61 72 20 69 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 3b 72 5b 69 5d 26 26 72 5b 69 5d 2e 70 75 73 68 28 6f 29 7d 76 61 72 20 61 3d 6f 2e 63 68 69 6c 64 72 65 6e 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 6c 65 6e 67 74 68 3b 73 2d 2d 3b 29 65 28 74 2c 6e 2c 61 5b 73 5d 2c 72 29 3b 72 65 74 75 72 6e 20 Data Ascii: .bottom},v=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().length)},g=function e(t,n,o,r){if(o.hasAttribute(t)){var i=o.getAttribute(t);r[i]&&r[i].push(o)}var a=o.children;if(!a)return r;for(var s=a.length;s--;)e(t,n,a[s],r);return
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 74 75 72 6e 20 70 28 62 2c 73 2c 7b 6f 66 66 73 65 74 58 3a 72 2c 6f 66 66 73 65 74 59 3a 61 7d 29 7d 2c 74 2e 74 68 72 6f 74 74 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 69 3d 41 72 72 61 79 28 72 29 2c 61 3d 30 3b 61 3c 72 3b 61 2b 2b 29 69 5b 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 3b 76 61 72 20 73 3d 2b 6e 65 77 20 44 61 74 65 3b 73 2d 6f 3c 74 7c 7c 28 6f 3d 73 2c 65 2e 61 70 70 6c 79 28 6e 2c 69 29 29 7d 7d 2c 74 2e 62 69 6e 64 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 33 26 26 76 Data Ascii: turn p(b,s,{offsetX:r,offsetY:a})},t.throttle=function(e,t,n){var o=0;return function(){for(var r=arguments.length,i=Array(r),a=0;a<r;a++)i[a]=arguments[a];var s=+new Date;s-o<t\|\|(o=s,e.apply(n,i))}},t.bindEvent=function(e,t,n){var o=arguments.length>3&&v
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 61 74 65 7c 7c 28 63 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 69 28 6e 75 6c 6c 2c 63 29 29 7d 3a 63 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 6e 75 6c 6c 2c 63 29 7d 2c 63 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 3c 3d 35 3f 65 28 7b 73 72 63 3a 6e 2c 74 79 70 65 3a 6f 2c 74 65 78 74 3a 72 7d 2c 69 2c 61 2c 2b 2b 73 29 3a 69 28 6e 65 77 20 45 72 72 6f 72 28 22 63 6f 75 6c 64 20 6e 6f 74 20 6c 6f 61 64 20 73 63 72 69 70 74 22 29 29 7d 29 3a 28 63 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 74 72 79 7b 22 2b 72 2b 22 7d 63 61 74 63 68 28 65 29 7b 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 20 26 26 20 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3b 7d 22 2c 69 Data Ascii: ate\|\|(c.onreadystatechange=null,i(null,c))}:c.onload=function(){i(null,c)},c.onerror=function(){s<=5?e({src:n,type:o,text:r},i,a,++s):i(new Error("could not load script"))}):(c.textContent="try{"+r+"}catch(e){window.console && window.console.error(e);}",i
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 28 6f 29 69 66 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 29 74 72 79 7b 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 65 29 7c 7c 28 61 3d 21 30 29 7d 63 61 74 63 68 28 65 29 7b 61 3d 21 30 7d 65 6c 73 65 20 61 3d 21 30 3b 65 6c 73 65 20 61 3d 21 30 3b 69 66 28 61 29 7b 76 61 72 20 73 3d 6e 65 77 20 49 6d 61 67 65 3b 77 28 73 2c 22 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 3d 6e 75 6c 6c 7d 29 2c 77 28 73 2c 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 3d 6e 75 6c 6c 7d 29 2c 77 28 73 2c 22 61 62 6f 72 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: (o)if(window.navigator&&"function"==typeof window.navigator.sendBeacon)try{window.navigator.sendBeacon(e)\|\|(a=!0)}catch(e){a=!0}else a=!0;else a=!0;if(a){var s=new Image;w(s,"error",function(){s=null}),w(s,"load",function(){s=null}),w(s,"abort",function()
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 2e 77 61 66 65 72 73 5b 74 5d 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6f 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 6f 3d 21 30 3d 3d 3d 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 6e 2e 64 65 66 61 75 6c 74 2e 5f 73 74 61 74 65 3a 6e 2e 5f 73 74 61 74 65 2c 6f 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 2e 67 65 74 28 65 29 7d 2c 74 2e 67 65 74 55 72 6c 50 61 72 61 6d 65 74 65 72 56 61 6c 75 65 42 79 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 52 65 67 45 78 70 28 22 5b 3f 26 5d 22 2b 65 2b 22 3d 28 5b 5e 26 5d 2a 29 22 29 2e 65 78 65 63 28 74 29 3b 72 65 74 75 72 6e 20 6e 26 26 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 5b 31 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c Data Ascii: .wafers[t];if(!n)return null;var o=void 0;return o=!0===n.__esModule?n.default._state:n._state,o.elementInstances.get(e)},t.getUrlParameterValueByName=function(e,t){var n=RegExp("[?&]"+e+"=([^&]*)").exec(t);return n&&decodeURIComponent(n[1].replace(/\+/g,
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 6e 74 28 6e 2e 73 75 62 73 74 72 69 6e 67 28 6f 2e 6c 65 6e 67 74 68 2b 31 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6f 3d 3d 3d 65 26 26 28 74 3d 72 2e 74 72 69 6d 28 29 2c 21 30 29 7d 29 2c 74 7d 7d 2c 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 76 7a 6d 69 2f 77 61 66 65 72 2d 63 6f 72 65 2f 73 72 63 2f 75 74 69 6c 73 2f 69 6e 64 65 78 44 42 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 Data Ascii: nt(n.substring(o.length+1))}catch(e){}return o===e&&(t=r.trim(),!0)}),t}},"../../node_modules/@vzmi/wafer-core/src/utils/indexDB.js":function(e,t,n){"use strict";function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49862	34.111.85.214	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	651	OUT	POST /rtb/yhb?cid=8YHBJ3BJ0 HTTP/1.1 Host: m.hb.yahoo.net Connection: keep-alive Content-Length: 7014 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10
2024-03-29 00:41:32 UTC	7014	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 6f 67 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 61 62 74 65 22 3a 22 53 53 50 5f 43 4c 49 45 4e 54 22 2c 22 63 75 73 74 6f 6d 65 72 5f 69 64 22 3a 22 38 59 48 42 4a 33 Data Ascii: {"site":{"domain":"www.yahoo.com","page":"https://www.yahoo.com/","ref":"","topMostLocation":"https://www.yahoo.com/","isTop":true,"canonical_url":"https://www.yahoo.com/","og_url":"https://www.yahoo.com/"},"ext":{"abte":"SSP_CLIENT","customer_id":"8YHBJ3
2024-03-29 00:41:32 UTC	604	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Fri, 29 Mar 2024 00:41:32 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.yahoo.com content-type: application/json;charset=utf-8 date: Fri, 29 Mar 2024 00:41:31 GMT x-envoy-upstream-service-time: 362 server: istio-envoy via: 1.1 google Alt-Svc: clear Connection: close Transfer-Encoding: chunked
2024-03-29 00:41:32 UTC	1252	IN	Data Raw: 34 62 65 32 0d 0a 7b 22 69 64 22 3a 22 33 34 37 38 31 38 32 37 39 34 35 37 32 30 30 32 32 31 37 31 31 36 37 32 38 39 31 36 30 36 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 7b 22 6e 6f 5f 62 69 64 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 32 35 33 34 38 32 31 36 33 36 37 36 32 30 35 35 31 37 31 31 36 37 32 38 39 31 36 32 35 22 2c 22 63 70 6d 22 3a 30 2e 37 35 30 2c 22 61 64 22 3a 22 3c 64 69 76 20 69 64 3d 5c 22 72 63 5f 38 38 38 32 61 61 63 35 64 36 34 62 34 62 34 30 36 62 34 33 32 34 63 62 35 39 38 32 36 32 39 64 5c 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 74 72 79 7b 6e 65 77 20 49 6d 61 67 65 28 29 2e 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 6c 67 31 2e 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 6c 6f 67 3f 6c 6f 67 69 64 3d 6b 66 Data Ascii: 4be2{"id":"347818279457200221711672891606","bidList":[{"no_bid":false,"requestId":"25348216367620551711672891625","cpm":0.750,"ad":"<div id=\"rc_8882aac5d64b4b406b4324cb5982629d\"></div><script>try{new Image().src=\"https://lg1.hb.yahoo.net/log?logid=kf
2024-03-29 00:41:32 UTC	1252	IN	Data Raw: 5f 65 6e 66 3d 74 72 75 65 26 64 6e 74 5f 65 6e 66 3d 74 72 75 65 26 67 65 6f 5f 73 6f 75 72 63 65 3d 32 26 73 63 3d 44 43 26 63 74 3d 77 61 73 68 69 6e 67 74 6f 6e 26 7a 69 70 3d 32 30 30 31 31 26 70 75 62 69 64 3d 70 75 62 2d 38 59 48 42 4a 33 42 4a 30 26 74 67 74 76 61 6c 3d 70 75 62 2d 38 59 48 42 4a 33 42 4a 30 26 63 73 69 70 3d 72 74 62 2d 68 6f 6d 69 65 31 2d 7a 31 2d 37 39 36 64 36 66 62 37 62 64 2d 72 63 6b 62 63 2e 59 53 43 26 64 74 63 3d 79 5f 65 61 73 74 5f 73 63 26 7a 6f 6e 65 3d 64 26 73 64 3d 2d 31 26 70 74 79 70 65 3d 34 33 26 74 6d 61 78 3d 31 34 30 30 26 78 74 6d 61 78 3d 35 34 35 26 67 64 70 72 3d 30 26 67 73 69 3d 30 26 67 70 70 5f 70 72 65 73 65 6e 74 3d 74 72 75 65 26 67 70 70 5f 73 69 64 25 33 43 25 33 45 3d 2d 31 26 61 70 70 3d 30 Data Ascii: _enf=true&dnt_enf=true&geo_source=2&sc=DC&ct=washington&zip=20011&pubid=pub-8YHBJ3BJ0&tgtval=pub-8YHBJ3BJ0&csip=rtb-homie1-z1-796d6fb7bd-rckbc.YSC&dtc=y_east_sc&zone=d&sd=-1&ptype=43&tmax=1400&xtmax=545&gdpr=0&gsi=0&gpp_present=true&gpp_sid%3C%3E=-1&app=0
2024-03-29 00:41:32 UTC	1252	IN	Data Raw: 26 70 76 41 67 49 64 3d 49 6e 64 65 78 2b 45 78 63 68 61 6e 67 65 26 65 78 69 64 3d 31 30 30 31 35 26 62 69 64 66 6c 72 3d 30 2e 30 30 30 26 70 62 69 64 66 6c 72 3d 30 2e 35 30 30 26 62 61 73 65 62 69 64 66 6c 72 3d 30 2e 35 26 6f 70 62 69 64 66 6c 72 3d 30 2e 35 30 30 26 73 70 62 66 3d 30 26 62 66 61 5f 70 72 3d 30 2e 35 26 62 66 61 5f 72 72 3d 30 2e 30 26 66 6c 72 5f 70 72 69 63 65 3d 30 2e 35 26 76 69 65 77 61 62 69 6c 69 74 79 3d 38 35 26 65 78 70 3d 73 66 6c 25 33 44 66 61 6c 73 65 25 37 43 73 73 42 75 63 6b 65 74 25 33 44 30 25 37 43 62 66 6c 25 33 44 2d 31 30 30 25 37 43 66 6c 5f 72 6c 25 33 44 31 25 37 43 73 73 50 72 6f 66 69 6c 65 25 33 44 30 25 37 43 64 62 72 25 33 44 31 25 37 43 73 66 6c 25 33 44 66 61 6c 73 65 25 37 43 62 66 6c 25 33 44 2d 31 Data Ascii: &pvAgId=Index+Exchange&exid=10015&bidflr=0.000&pbidflr=0.500&basebidflr=0.5&opbidflr=0.500&spbf=0&bfa_pr=0.5&bfa_rr=0.0&flr_price=0.5&viewability=85&exp=sfl%3Dfalse%7CssBucket%3D0%7Cbfl%3D-100%7Cfl_rl%3D1%7CssProfile%3D0%7Cdbr%3D1%7Csfl%3Dfalse%7Cbfl%3D-1
2024-03-29 00:41:32 UTC	1252	IN	Data Raw: 78 5f 61 75 72 6c 5f 68 63 3d 30 26 6d 78 5f 61 61 62 70 63 3d 30 26 6d 78 5f 69 73 4c 6f 73 73 4e 74 66 3d 66 61 6c 73 65 26 6d 78 5f 73 73 42 75 63 6b 65 74 3d 30 26 6d 78 5f 62 63 61 74 5f 63 6f 75 6e 74 3d 32 30 26 6d 78 5f 67 70 69 64 5f 73 65 6e 74 3d 74 72 75 65 26 6d 78 5f 63 6f 6d 6d 69 74 5f 69 64 3d 66 63 34 61 37 36 35 37 61 62 26 6d 78 5f 65 78 70 5f 74 6f 6b 65 6e 73 25 33 43 25 33 45 3d 6c 6f 73 73 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 65 78 70 25 33 41 74 72 75 65 25 32 33 25 32 33 64 75 70 6c 69 63 61 74 69 6f 6e 25 33 41 43 54 56 5f 45 58 54 52 45 4d 45 4c 59 5f 41 47 47 52 45 53 53 49 56 45 5f 4c 32 25 32 33 25 32 33 70 72 6c 6c 5f 72 65 71 25 33 41 74 72 75 65 26 6d 78 5f 73 64 72 3d 66 61 6c 73 65 26 6d 78 5f 73 75 61 5f 63 76 67 Data Ascii: x_aurl_hc=0&mx_aabpc=0&mx_isLossNtf=false&mx_ssBucket=0&mx_bcat_count=20&mx_gpid_sent=true&mx_commit_id=fc4a7657ab&mx_exp_tokens%3C%3E=loss_notification_exp%3Atrue%23%23duplication%3ACTV_EXTREMELY_AGGRESSIVE_L2%23%23prll_req%3Atrue&mx_sdr=false&mx_sua_cvg
2024-03-29 00:41:32 UTC	1252	IN	Data Raw: 46 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 72 69 67 68 74 26 6e 61 74 69 76 65 5f 61 73 73 65 74 3d 30 26 72 65 71 5f 6d 74 79 70 65 25 33 43 25 33 45 3d 30 25 32 33 25 32 33 32 26 67 3d 30 26 63 74 72 3d 2d 31 2e 30 26 72 66 63 3d 31 26 64 66 70 44 69 76 3d 73 64 61 2d 4c 52 45 43 2d 69 66 72 61 6d 65 26 64 66 70 41 64 50 61 74 68 3d 25 32 46 32 32 38 38 38 31 35 32 32 37 39 25 32 46 75 73 25 32 46 79 68 70 25 32 46 6d 61 69 6e 25 32 46 64 74 25 32 46 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 72 69 67 68 74 26 66 65 65 64 62 61 63 6b 5f 69 64 3d 33 34 37 39 36 36 38 33 37 31 38 38 35 31 32 39 31 37 31 31 36 37 32 38 39 31 36 30 36 26 73 75 70 70 6c 79 54 61 67 49 64 3d 38 32 37 33 38 32 31 33 34 26 6d 6e 72 66 63 3d 31 26 Data Ascii: Fus_yhp_main_dt_top_right&native_asset=0&req_mtype%3C%3E=0%23%232&g=0&ctr=-1.0&rfc=1&dfpDiv=sda-LREC-iframe&dfpAdPath=%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_top_right&feedback_id=34796683718851291711672891606&supplyTagId=827382134&mnrfc=1&
2024-03-29 00:41:32 UTC	1252	IN	Data Raw: 32 25 37 44 26 64 65 62 75 67 5f 74 73 3d 32 30 32 34 2d 30 33 2d 32 39 2b 30 30 25 33 41 34 31 25 33 41 33 32 26 5f 5f 65 78 70 69 72 65 61 74 3d 31 37 31 31 36 37 33 34 39 32 38 35 38 26 6d 76 69 65 77 3d 30 26 74 6f 63 6f 6e 73 69 64 65 72 3d 31 26 73 63 5f 70 76 69 64 3d 32 35 30 31 37 26 73 63 5f 64 70 3d 30 26 73 63 5f 62 64 70 3d 30 2e 36 35 39 26 73 63 5f 63 62 64 70 3d 30 2e 36 35 39 26 73 63 5f 6f 67 62 64 70 3d 30 2e 36 35 39 26 73 63 5f 61 64 6a 30 3d 30 2e 30 26 73 63 5f 61 64 6a 31 3d 30 2e 30 26 73 63 5f 61 64 6a 32 3d 30 2e 30 26 73 63 5f 70 72 73 70 74 3d 68 65 61 64 65 72 42 69 64 26 6c 6f 5f 70 76 69 64 3d 25 35 42 32 35 30 35 32 25 35 44 26 6c 6f 5f 64 70 3d 30 26 6c 6f 5f 62 64 70 3d 30 2e 37 35 30 26 6c 6f 5f 63 62 64 70 3d 30 2e 37 Data Ascii: 2%7D&debug_ts=2024-03-29+00%3A41%3A32&__expireat=1711673492858&mview=0&toconsider=1&sc_pvid=25017&sc_dp=0&sc_bdp=0.659&sc_cbdp=0.659&sc_ogbdp=0.659&sc_adj0=0.0&sc_adj1=0.0&sc_adj2=0.0&sc_prspt=headerBid&lo_pvid=%5B25052%5D&lo_dp=0&lo_bdp=0.750&lo_cbdp=0.7
2024-03-29 00:41:32 UTC	1252	IN	Data Raw: 6f 70 65 6e 28 29 3b 20 64 6f 63 2e 77 72 69 74 65 28 63 6f 6e 74 65 6e 74 29 3b 64 6f 63 2e 63 6c 6f 73 65 28 29 3b 7d 20 63 61 74 63 68 20 28 65 29 20 7b 20 28 6e 65 77 20 49 6d 61 67 65 28 29 29 2e 73 72 63 20 3d 20 5c 22 2f 2f 6c 67 31 2e 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 6c 6f 67 3f 6c 6f 67 69 64 3d 6b 66 6b 65 26 65 76 74 69 64 3d 70 6c 75 74 6f 65 76 65 6e 74 73 26 5f 5f 71 3d 41 54 37 44 77 4c 51 41 44 48 42 79 5a 57 4a 70 5a 43 52 68 5a 48 4a 6c 62 6d 52 6c 63 6c 39 6c 65 47 4e 6c 63 48 52 70 62 32 34 53 4f 46 6c 49 51 6b 6f 7a 51 6b 6f 77 45 6a 67 79 4e 7a 4d 34 4d 6a 45 7a 4e 45 52 79 64 47 49 74 61 47 39 74 61 57 55 78 4c 58 6f 78 4c 54 63 35 4e 6d 51 32 5a 6d 49 33 59 6d 51 74 63 6d 4e 72 59 6d 4d 75 57 56 4e 44 45 6e 6c 66 5a 57 46 7a Data Ascii: open(); doc.write(content);doc.close();} catch (e) { (new Image()).src = \"//lg1.hb.yahoo.net/log?logid=kfke&evtid=plutoevents&__q=AT7DwLQADHByZWJpZCRhZHJlbmRlcl9leGNlcHRpb24SOFlIQkozQkowEjgyNzM4MjEzNERydGItaG9taWUxLXoxLTc5NmQ2ZmI3YmQtcmNrYmMuWVNDEnlfZWFz
2024-03-29 00:41:32 UTC	1252	IN	Data Raw: 32 35 31 33 35 25 32 43 32 35 30 31 37 25 32 43 32 35 31 33 37 25 32 43 32 35 32 31 37 25 32 43 32 35 30 31 39 25 32 43 32 35 30 31 38 25 32 43 32 35 32 31 39 25 32 43 32 35 32 31 38 25 32 43 32 35 32 39 32 25 32 43 32 35 30 35 33 25 32 43 32 35 30 39 37 25 32 43 32 35 32 35 30 25 32 43 32 35 30 35 32 25 32 43 32 35 30 39 36 25 32 43 32 35 32 39 34 25 32 43 32 35 32 39 36 25 32 43 32 35 31 33 34 25 32 43 32 35 32 39 38 25 32 43 32 35 30 39 31 25 32 43 32 35 30 39 30 25 32 43 32 35 32 39 30 26 69 74 79 70 65 3d 59 48 42 26 70 75 72 70 6f 73 65 31 3d 31 26 67 64 70 72 63 6f 6e 73 65 6e 74 3d 31 26 67 64 70 72 3d 30 26 63 6f 70 70 61 3d 30 26 75 73 70 5f 73 74 61 74 75 73 3d 31 26 75 73 70 5f 63 6f 6e 73 65 6e 74 3d 31 26 75 73 70 73 74 72 69 6e 67 3d 31 59 Data Ascii: 25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25250%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1Y
2024-03-29 00:41:32 UTC	1252	IN	Data Raw: 2d 65 61 73 74 31 22 2c 22 73 65 61 74 22 3a 22 49 6e 64 65 78 20 45 78 63 68 61 6e 67 65 22 2c 22 70 76 61 67 69 64 22 3a 22 31 31 36 31 31 22 2c 22 62 69 64 75 75 69 64 22 3a 22 38 38 38 32 61 61 63 35 64 36 34 62 34 62 34 30 36 62 34 33 32 34 63 62 35 39 38 32 36 32 39 64 22 7d 7d 2c 7b 22 6e 6f 5f 62 69 64 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 31 33 36 39 36 36 35 36 39 31 30 38 36 36 33 35 31 37 31 31 36 37 32 38 39 31 36 32 36 22 2c 22 63 70 6d 22 3a 30 2e 37 35 30 2c 22 61 64 22 3a 22 3c 64 69 76 20 69 64 3d 5c 22 72 63 5f 62 65 61 64 36 63 63 62 39 32 65 33 32 62 61 64 34 34 63 37 33 39 65 37 36 37 33 61 63 31 64 39 5c 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 74 72 79 7b 6e 65 77 20 49 6d 61 67 65 28 29 2e 73 72 63 Data Ascii: -east1","seat":"Index Exchange","pvagid":"11611","biduuid":"8882aac5d64b4b406b4324cb5982629d"}},{"no_bid":false,"requestId":"13696656910866351711672891626","cpm":0.750,"ad":"<div id=\"rc_bead6ccb92e32bad44c739e7673ac1d9\"></div><script>try{new Image().src

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49914	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	526	OUT	GET /aaq/vzm/cs_1.5.1.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:32 UTC	826	IN	HTTP/1.1 200 OK x-amz-id-2: rYWmiGA8WZBl7FpgSBXKkKGgmGf3HHbqCvFdZ53QsquJdDamzVUGHX5kBezHc5qhx4mF9Ux/jlQ= x-amz-request-id: DE48C9V0Q5V18EF6 Date: Fri, 29 Mar 2024 00:40:37 GMT Last-Modified: Tue, 19 Sep 2023 22:24:21 GMT ETag: "79a0874b52c0c38add16385eb1a694e7" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: kNkmKOe52Bavmn2ePx9bBmv8ukXmrtvT Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 1240 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 56 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:32 UTC	1240	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 77 69 6e 64 6f 77 2c 65 3d 63 2e 64 6f 63 75 6d 65 6e 74 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 6e 2c 74 2c 72 29 7b 69 66 28 21 65 7c 7c 21 6e 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 63 5b 65 5d 29 72 65 74 75 72 6e 20 72 28 29 3b 74 72 79 7b 63 5b 65 5d 28 6e 2c 74 2c 28 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 72 28 63 2c 65 29 7d 29 29 7d 63 61 74 63 68 28 63 29 7b 72 28 29 7d 7d 63 2e 43 4f 4d 53 43 4f 52 45 3d 7b 5f 76 65 72 73 69 6f 6e 3a 22 31 2e 35 2e 31 22 2c 62 65 61 63 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 28 22 5f 5f 75 73 70 61 70 69 22 2c 22 67 65 74 44 6f 4e 6f 74 53 65 6c 6c 22 2c 31 2c 28 66 75 6e 63 74 69 6f Data Ascii: !function(){"use strict";var c=window,e=c.document;function n(e,n,t,r){if(!e\|\|!n\|\|"function"!=typeof c[e])return r();try{c[e](n,t,(function(c,e){r(c,e)}))}catch(c){r()}}c.COMSCORE={_version:"1.5.1",beacon:function(t){n("__uspapi","getDoNotSell",1,(functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49917	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	517	OUT	GET /uu/api/res/1.2/sE5UQVWKRLiLgilpJTcvHA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/0b844ca7b4d78611fb5815f9a7e26822.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:32 UTC	1296	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 269842101282319240085138087469458705056,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="0b844ca7b4d78611fb5815f9a7e26822.webp" Edge-Cache-Tag: 269842101282319240085138087469458705056,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "00e07a1ff6fbad2803cdf8f15caa410f" Last-Modified: Thu, 28 Mar 2024 19:58:20 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=17806,owidth=960,oheight=540,obytes=66673,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 4a1046363068e46175f87b1d8a2191f0 Accept-Ranges: bytes Date: Thu, 28 Mar 2024 21:29:43 GMT X-Served-By: cache-lga21969-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 2 X-Timer: S1711661383.308364,VS0,VE0 Age: 11509 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 2 cld_id: 4a1046363068e46175f87b1d8a2191f0 cld_by: cache-lga21969-LGA cld_latency: 0 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 47827 ATS-Carp-Promotion: 1 Connection: close
2024-03-29 00:41:32 UTC	178	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 01 1c 02 18 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 00 08 ff c4 00 42 10 00 01 03 03 03 02 02 07 07 03 04 02 02 01 04 03 01 02 03 04 00 05 11 06 12 21 13 31 41 51 07 14 22 32 61 71 81 15 23 42 91 a1 b1 Data Ascii: JFIFCCB!1AQ"2aq#B
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 83 06 f6 84 39 8e c1 49 1f 5f e2 aa a9 0a f8 2b 4b f4 4d a4 ee b6 95 dc 6d d2 9b 6e 63 49 2b 01 3d 8f f4 ac f0 73 d6 2e c5 5b 7d ad f8 ee 74 d6 c1 1d 23 dc 8e 0f c6 ac a5 17 d1 8d 03 84 24 a0 c7 49 db da af a6 93 5b 6a 02 69 9c 95 43 54 37 59 05 47 dd 23 8a 85 65 72 d4 96 94 14 ae d4 84 27 85 30 44 98 d4 95 a0 ab 62 b7 11 9c 66 95 f0 2d 4a 54 05 6f fa 9e 35 d5 f6 d5 16 3b 85 2d 24 a7 20 e7 3d bf a5 57 66 c1 9e c5 8f 0b 05 bf 3e 67 43 a1 1d 5b 12 7f 4a 90 6a 15 e4 3d 3c cd 2d f5 0f b1 fa d3 2a 4a 56 98 c1 6f 90 f3 c9 08 71 64 f9 55 a5 a8 95 e5 18 29 e8 c7 25 dd fe d1 2a f0 a5 89 23 2e c8 98 ec a8 ed 92 12 da da ff 00 88 f1 a5 01 46 df 3e dd 0d 97 9e 11 90 f4 87 12 12 92 4f ce 82 94 30 21 c9 ce 32 fb 93 e6 27 05 5d 93 9f e6 ac 21 6e df 6f ba dc e3 89 72 51 Data Ascii: 9I_+KMmncI+=s.[}t#$I[jiCT7YG#er'0Dbf-JTo5;-$ =Wf>gC[Jj=<-JVoqdU)%#.F>O0!2']!norQ
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 9d 95 f9 04 89 0e 2d 99 8f 36 da b2 9c e0 1c 77 a7 a2 92 e4 dc 07 20 32 7e cf 12 f7 7d d7 9d 5a 2c 1e 15 b8 ea 92 98 83 72 c9 c6 7c aa ba 88 89 1e 4b cc 85 26 44 8d c4 78 67 34 a4 67 d1 65 37 26 2a 90 df 7e fd e8 3e 05 24 b7 bc 4b 6a 6d 2a da a1 fa d2 05 12 a2 42 5b 52 dc 90 90 a0 81 9e 69 bb 40 c0 93 db 5b b3 84 e6 50 94 21 59 c8 02 8a 50 22 2e 34 e8 c6 40 ef f1 ab 12 81 91 61 0a 56 e4 a0 a7 0a 50 ca 79 ee 29 6a 5b 09 32 90 b4 38 8c b9 c1 cf 85 56 d4 10 85 4d 04 2d b2 b4 e7 7a 72 3e 14 c9 41 0e 0d ba 1c 85 97 a4 bb d3 43 5e d1 1f f2 a2 98 19 60 eb 2d 91 11 6c 8f 15 6b 8c d0 da 02 07 15 58 8c 1e e6 a8 87 36 73 51 dc 82 f8 69 85 6e 09 3e 35 18 0b 3a c5 cd 3b 31 c6 1f b0 36 b6 d6 e8 dc e2 08 c2 72 7c bf 23 56 d9 96 45 26 77 7b 44 c3 24 36 a6 96 a4 24 0c 04 Data Ascii: -6w 2~}Z,r\|K&Dxg4ge7&~>$KjmB[Ri@[P!YP".4@aVPy)j[28VM-zr>AC^`-lkX6sQin>5:;16r\|#VE&w{D$6$
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 24 8c 7b 22 91 af 6c 4e 4b 4d 3a 96 d2 e3 72 0e ed e3 05 3d b1 40 0c 8a c7 26 04 49 7b 5c 42 4f 50 60 6e a3 0c 11 04 77 87 85 ba 6a 9d 04 a5 0e 61 48 c1 a5 f7 20 24 6d e4 b8 0e f0 a4 7f f9 0e f4 f0 07 b3 c1 ba 64 84 c3 65 0a 56 7c 12 33 48 f4 f6 07 a2 a4 b5 2e dd 21 4c 38 82 40 3c 2b ca 9a 9d 8c b6 78 99 25 d0 09 58 50 ec 29 88 75 2a e9 71 43 24 c5 69 4b 57 98 fc 34 84 0a c4 09 5b 3e c9 ce 28 27 20 4e 4f 1b 6a 34 67 91 d6 69 4b 42 ce 15 8f 04 f8 d1 09 c5 c1 bb 6c 59 1f fe db ee 29 21 4a 1f f1 f2 fe 69 05 68 82 c7 66 7e ff 00 74 58 69 b0 a6 90 0e 72 71 92 2a 27 02 bd 6c 9b 54 68 bb 85 85 46 7b 4a 0f 46 27 92 8e 76 d4 a6 fa 5a 2a c7 c8 57 80 68 95 09 4d a9 46 46 d5 0e c0 8e f5 17 dc 69 84 15 b2 e9 a6 2f cd 3c b5 dc 52 c2 d8 cf b1 e2 af d6 9b b2 49 08 20 cd Data Ascii: ${"lNKM:r=@&I{\BOP`nwjaH $mdeV\|3H.!L8@<+x%XP)uqC$iKW4[>(' NOj4giKBlY)!Jihf~tXirq'lThF{JF'vZ*WhMFFi/<RI
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 3b 88 3d fe 5f a5 2b ae 11 5d eb ba d1 13 70 e1 b7 75 42 ee 2d f5 1a 42 81 18 38 c8 a5 8f c7 04 4a 68 39 d5 77 18 37 19 ed 47 82 c2 5a 4a 52 14 71 cd 35 94 d2 0d 9d 15 f4 b4 86 6d d7 84 49 79 7f 24 e2 85 d4 e0 17 76 36 df 34 c3 7a ae 32 e5 43 69 b6 de fc 19 38 df f5 ac af 21 d8 66 3f 3b b0 cc ea 44 10 d3 8b 8b b5 4d be d1 c2 92 78 35 b6 8a bb f6 6b ee ee 09 e9 ad 49 16 d8 85 c3 b8 45 0e 21 63 69 27 07 1f 1a 01 68 21 73 b7 db ed d7 04 b3 6b 75 7b 48 ca f7 1c f3 55 5b 72 2d 0e 4a ef ad 2b 5f 41 1c a8 d5 a5 80 d9 e5 c8 a4 c5 71 bf be 3d 93 9a 84 26 b2 8b a4 39 c8 5a 1b 5c 67 12 46 e0 7f be 68 55 c0 95 70 37 6a 8b f7 ae c6 36 eb 7a 37 ad 59 c9 dd fc 56 5b 36 20 cd 8f 8f da e4 ce 24 da 5c 54 86 58 4b 45 b5 a9 78 20 8c fe 55 ae 95 06 e9 83 e9 76 77 ed f7 06 98 Data Ascii: ;=_+]puB-B8Jh9w7GZJRq5mIy$v64z2Ci8!f?;DMx5kIE!ci'h!sku{HU[r-J+_Aq=&9Z\gFhUp7j6z7YV[6 $\TXKEx Uvw
2024-03-29 00:41:32 UTC	77	IN	Data Raw: 09 81 c2 ae 4e 04 aa 74 c0 b4 8e c1 2a a1 db a8 2c 4b ed 83 ce ac a8 4f 89 d0 16 97 9b 1e fe d3 db ca a5 0b b4 45 a3 99 2f 3e e4 bf 59 65 18 cf 74 e6 9a 08 f6 6a 16 37 8a e3 35 22 04 84 3c 31 87 52 93 d8 f9 56 0b e9 49 cf c8 49 0b Data Ascii: Nt*,KOE/>Yetj75"<1RVII
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 5e 91 ad 33 04 a6 ef 50 9a d8 30 03 b8 39 dd 9f 1a d1 8f 54 96 63 3f 42 cb 2d c2 9a da 64 04 fb 40 73 8e 2a f3 77 69 7d 9f 5b 5c d7 dc 38 52 0a b0 9c 1a 41 4b 11 e5 45 5a 4b 4f 28 b6 a4 f2 15 e5 46 19 0a 33 6e 50 56 e0 64 49 2b 71 0a ca 54 07 6f 3e 28 08 ea 21 9f ab 66 46 48 75 e6 d2 f9 23 19 57 1d a8 31 65 a2 8a fd 24 b9 0d d6 dd 8f 0b ab df 23 19 c5 2a 64 57 06 ad 1f 79 b7 ea 17 17 76 7d 2a 32 dd 4e d4 a1 5f 83 ce 83 d9 1b 75 29 39 d6 72 ec 51 64 47 82 d4 b5 ae 72 b2 b5 05 7e 11 e5 fb d5 96 74 4b 3f ec 1b 67 9b 06 04 c5 4c 96 90 56 86 c9 47 38 e7 ce ae 2f 29 4c 92 e4 a9 5b db 4e c2 ea 89 23 39 c5 08 2e 9d 15 2e 2f c3 82 eb 2f b2 ac ad a5 6f f2 fa 50 89 11 ef 45 8d 4f e9 21 ab dd ad b8 29 b7 94 3c 91 85 38 52 3f 30 68 78 e4 0a c7 83 64 ba 1b 48 db f5 14 Data Ascii: ^3P09Tc?B-d@swi}[\8RAKEZKO(F3nPVdI+qTo>(!fFHu#W1e$#dWyv}*2N_u)9rQdGr~tK?gLVG8/)L[N#9..//oPEO!)<8R?0hxdH
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 7c 0d 6d 93 a1 dc 4f 2a 43 d6 e6 52 be 8a 82 0f 25 4a e3 34 93 02 49 3c 6b 74 8d 72 e0 72 07 4d 9f 64 24 78 e6 87 95 19 ea ba 5a d3 fa 65 cb 45 c1 f3 7d b4 c8 28 69 1f f9 00 e3 9f f1 43 bd 30 2a e4 8e 55 9e c1 21 d9 37 64 9d 8c b0 09 c2 95 8f d6 98 bd 43 2a 3b 23 4c dc 59 48 b6 db 83 47 6e d3 b9 3c 2b 1e 5f df 8d 40 42 38 d3 ed 5b b4 e5 d4 dc de 80 a5 21 63 6e d4 ab 1c fc 28 a4 45 49 42 5c 28 f7 1b c3 b7 89 08 f6 97 d8 1f 0a 34 ae d1 a8 a4 ab 73 2d b9 70 8e 22 bc 86 f0 e0 dd b8 f7 fe f9 a7 4e 4b 50 52 f3 06 34 48 e2 54 9b 83 69 7b 82 30 69 92 91 80 56 36 e0 4c d4 ac 5c 6e 4f 21 4c 85 8c a0 1f 64 d2 dc fe 1a 2b bb fc 3e d0 ae bf 6e d1 32 61 61 0d b4 86 8f 28 2d 0c 11 f3 a5 a2 60 16 66 36 04 83 ad 6e 96 36 db b6 b7 11 c1 0f 24 ef 3e 3d bc 2a c4 93 e4 d1 da Data Ascii: \|mOCR%J4I<ktrrMd$xZeE}(iC0U!7dC;#LYHGn<+_@B8[!cn(EIB\(4s-p"NKPR4HTi{0iV6L\nO!Ld+>n2aa(-`f6n6$>=
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: da a1 5c b1 c2 69 b2 e9 cb 32 57 11 21 a7 3f f4 ed 1e f7 9f f1 58 dd 33 72 0c cb be f3 01 5d f5 9d d9 10 da 43 8a 4a d2 a0 77 64 77 fe f9 ab 95 87 32 68 56 3b 50 99 3a 62 2e 0b 0e 37 ff 00 88 e7 3c f7 ad 09 16 aa 20 e9 30 1b 72 2a 55 0f 95 0c fb 38 ef 4c 94 04 b4 b4 4c 6c 21 b9 4e 05 94 67 18 f8 d1 4a 46 44 6f 94 ed 2d 83 c9 ef 8f 0a 03 25 25 29 23 a8 df 5a 33 1e c2 7c 73 ef 51 43 b1 66 f0 a7 e4 be 92 a7 14 a6 12 3b 13 da 9d 00 b2 60 4c 8f 67 66 e4 dc 6d cb 70 fb 38 ef 4c 48 3d 7b 4f ea 75 32 cd ca 64 12 96 ca b6 a7 3c 63 3e 34 81 4e 0b 0f da ae 6c 18 d0 2e cd 74 59 93 ff 00 b0 9e 07 ce 9c 6a 8b 4d 68 9d 25 2d c4 c7 6f 51 a8 49 ff 00 80 e4 0a 82 20 3c cb 8d f6 c9 21 56 f8 d2 8b a8 41 ca 55 ff 00 d4 f6 e7 c6 a4 49 62 a5 3e 4a 72 ef ba 96 7c 75 47 72 52 91 Data Ascii: \i2W!?X3r]CJwdw2hV;P:b.7< 0r*U8LLl!NgJFDo-%%)#Z3\|sQCf;`Lgfmp8LH={Ou2d<c>4Nl.tYjMh%-oQI <!VAUIb>Jr\|uGrR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49918	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	907	OUT	GET /ybar/exp.json HTTP/1.1 Host: edge-mcdn.secure.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A
2024-03-29 00:41:32 UTC	797	IN	HTTP/1.1 200 OK x-amz-id-2: gZB7BwBU6duQFwOI1hSiNcEq6XMUFkqdE2dREd6sywNIaj0F08pEl/CBOiEJN0JZGlNFR2wVJfevgLiKIC72UQ== x-amz-request-id: 7Z3EQH852Z8RCQMR Date: Thu, 28 Mar 2024 17:35:19 GMT Last-Modified: Tue, 06 Dec 2022 17:20:56 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: application/json Server: ATS Content-Length: 1784 Referrer-Policy: no-referrer-when-downgrade Etag: "877792d86d801176269a36ac7b4e6e02" Age: 25575 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 7b 0a 20 20 20 20 22 65 78 70 43 6f 75 6e 74 22 3a 35 2c 0a 20 20 20 20 22 73 65 6c 65 63 74 69 6f 6e 22 3a 22 69 6e 64 69 76 69 64 75 61 6c 22 2c 0a 20 20 20 20 22 75 70 6c 6f 61 64 54 79 70 65 22 3a 22 67 72 6f 75 70 22 2c 0a 20 20 20 20 22 72 75 6e 50 72 6f 62 22 3a 31 30 2c 0a 20 20 20 20 22 65 78 70 4c 69 73 74 22 3a 5b 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 22 76 70 69 78 69 65 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 61 63 6f 6e 52 65 67 65 78 22 3a 22 5e 68 74 74 70 73 3a 5c 2f 5c 2f 76 2d 28 5b 5e 2e 5d 2a 29 2e 77 63 2e 79 61 68 6f 6f 64 6e 73 2e 6e 65 74 5c 2f 69 2e 67 69 66 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 61 72 67 65 74 22 3a 22 68 74 74 70 73 3a 2f 2f 76 2d Data Ascii: { "expCount":5, "selection":"individual", "uploadType":"group", "runProb":10, "expList":[ { "name":"vpixiea", "beaconRegex":"^https:\/\/v-([^.]*).wc.yahoodns.net\/i.gif", "target":"https://v-
2024-03-29 00:41:32 UTC	484	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 22 75 70 6c 6f 61 64 45 6e 64 70 6f 69 6e 74 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 79 62 61 72 2d 6d 63 64 6e 2d 72 65 70 6f 72 74 2e 77 63 2e 79 61 68 6f 6f 64 6e 73 2e 6e 65 74 2f 63 73 2f 22 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 6d 65 6f 75 74 22 3a 35 30 30 30 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 22 79 63 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 61 63 6f 6e 52 65 67 65 78 22 3a 22 5e 68 74 74 70 73 3a 5c 2f 5c 2f 63 65 72 65 62 72 6f 2e 65 64 6e 61 2e 79 61 68 6f 6f 2e 6e 65 74 5c 2f 6e 6f 71 75 65 72 79 5c 2f 70 69 78 65 6c 2e 67 69 66 5b 3f 5d 72 61 6e 64 3d 28 2e 2a 29 22 2c 0a 20 20 20 20 20 20 Data Ascii: "uploadEndpoints":["https://ybar-mcdn-report.wc.yahoodns.net/cs/"], "timeout":5000 }, { "name":"ycs", "beaconRegex":"^https:\/\/cerebro.edna.yahoo.net\/noquery\/pixel.gif[?]rand=(.*)",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49922	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	1510	OUT	POST /p?s=2023538075&t=1711672891584&_I=&_AO=0&_NOL=0&etag=performance&etrg=backgroundPost&outcm=performance&usergenf=0&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&test=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=2vl5n89j0c3hk&pd=unknown&pt=home&A_utm=%7B%22GAM_READY_TIME%22%3A8146%7D HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:32 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:32 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49926	3.230.217.116	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	545	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.yahoo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:32 UTC	373	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:32 GMT Content-Length: 0 Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,X-Openrtb-Version Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49925	3.230.217.116	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	545	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.yahoo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:32 UTC	373	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:32 GMT Content-Length: 0 Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,X-Openrtb-Version Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49921	151.101.129.44	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	507	OUT	GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1 Host: api.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:32 UTC	951	IN	HTTP/1.1 200 OK Connection: close Server: nginx Content-Type: application/json;charset=utf-8 P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Set-Cookie: t_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 29-Mar-2025 00:41:32 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 29-Mar-2025 00:41:32 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Accept-Ranges: bytes Date: Fri, 29 Mar 2024 00:41:32 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-ewr18121-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1711672892.413766,VS0,VE3 Vary: Accept-Encoding X-vcl-time-ms: 3 transfer-encoding: chunked
2024-03-29 00:41:32 UTC	4	IN	Data Raw: 35 34 0d 0a Data Ascii: 54
2024-03-29 00:41:32 UTC	84	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 69 64 22 3a 22 39 32 61 39 63 66 63 34 2d 64 37 63 66 2d 34 34 31 63 2d 39 38 65 32 2d 66 39 31 35 38 35 35 32 64 36 34 34 2d 74 75 63 74 63 66 66 39 33 62 62 22 2c 22 69 73 4e 65 77 55 73 65 72 22 3a 66 61 6c 73 65 7d 7d Data Ascii: {"user":{"id":"92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb","isNewUser":false}}
2024-03-29 00:41:32 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49928	3.230.217.116	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	545	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.yahoo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:32 UTC	373	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:32 GMT Content-Length: 0 Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,X-Openrtb-Version Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49924	3.230.217.116	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	545	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.yahoo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:32 UTC	373	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:32 GMT Content-Length: 0 Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,X-Openrtb-Version Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49920	151.101.65.44	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	691	OUT	GET / HTTP/1.1 Host: tsdtocl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:32 UTC	603	IN	HTTP/1.1 200 OK Connection: close Content-Length: 786 x-amz-id-2: llmbw1CDNz8ZbWwuST7ApQh1hR1GEyEogcYToj8OiRvyiL9jc/zyndXpKPtX2dtMZsRJ4OMUF+s= x-amz-request-id: ECVGTHXDRVCKH110 x-amz-replication-status: COMPLETED Last-Modified: Wed, 05 Jan 2022 19:36:57 GMT ETag: "fb5a4594b9ffef704d61bb6e6f80f145" x-amz-version-id: Qk4nobcRRphLiqVWi0NeSs0dand8kap0 Content-Type: text/html Server: AmazonS3 Accept-Ranges: bytes Date: Fri, 29 Mar 2024 00:41:32 GMT Via: 1.1 varnish Age: 2931 X-Served-By: cache-iad-kcgs7200097-IAD X-Cache: HIT X-Cache-Hits: 255 X-Timer: S1711672892.418411,VS0,VE0
2024-03-29 00:41:32 UTC	786	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 3e 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 74 73 64 74 6f 63 6c 22 2c 74 3d 22 21 2d 23 40 22 2c 61 3d 32 3b 74 72 79 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 20 74 28 61 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 6e 61 6d 65 73 70 61 63 65 3d 65 2c 6e 2e 69 64 3d 61 2c 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 2c 22 2a 22 29 2c 6e 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 20 65 28 72 2c 73 2c 63 29 7b 74 72 79 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 63 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 76 6f 69 64 20 30 3d 3d 3d 73 29 74 68 72 6f 77 20 30 3b 76 61 72 20 69 3d Data Ascii: <!doctype html><html><head><script>!function(){var e="tsdtocl",t="!-#@",a=2;try{var n=function t(a,n){return n.namespace=e,n.id=a,parent.postMessage(JSON.stringify(n),"*"),n},r=function e(r,s,c){try{if(void 0===c\|\|void 0===r\|\|void 0===s)throw 0;var i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49927	3.230.217.116	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	545	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.yahoo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:32 UTC	373	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:32 GMT Content-Length: 0 Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,X-Openrtb-Version Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49861	3.230.217.116	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	1251	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1473 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:32 UTC	1473	OUT	Data Raw: 7b 22 69 64 22 3a 22 63 39 35 37 34 32 32 61 2d 62 39 30 31 2d 34 38 63 39 2d 61 32 34 31 2d 61 33 65 34 38 38 37 30 39 30 31 63 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 38 37 37 34 33 33 35 37 32 38 32 31 38 32 30 39 31 37 31 31 36 37 32 38 39 31 36 31 39 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 33 35 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 2c 7b 22 77 22 3a 33 30 30 2c Data Ascii: {"id":"c957422a-b901-48c9-a241-a3e48870901c","cur":["USD"],"imp":[{"id":"87743357282182091711672891619","secure":1,"bidfloor":0.35,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":300,"h":250},{"w":300,
2024-03-29 00:41:32 UTC	348	IN	HTTP/1.1 204 No Content Date: Fri, 29 Mar 2024 00:41:32 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49930	151.101.65.44	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	642	OUT	POST /OpenRTB/TaboolaHB/auction?publisher=1635758 HTTP/1.1 Host: display.bidder.taboola.com Connection: keep-alive Content-Length: 1967 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:32 UTC	1967	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 65 78 74 22 3a 7b 22 67 70 69 64 22 3a 22 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 72 69 67 68 74 22 2c 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 72 69 67 68 74 22 7d 7d 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 35 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 69 64 22 3a 22 31 38 38 37 30 37 31 36 30 37 37 35 37 30 37 39 31 37 31 31 36 37 32 38 39 31 36 32 32 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 2c 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 74 61 67 69 64 22 3a 22 59 61 68 6f 6f 20 48 6f 6d 65 70 61 67 65 20 2d 20 4d Data Ascii: {"imp":[{"ext":{"gpid":"us_yhp_main_dt_top_right","data":{"pbadslot":"us_yhp_main_dt_top_right"}},"bidfloor":0.5,"bidfloorcur":"USD","id":"18870716077570791711672891622","banner":{"format":[{"w":300,"h":600},{"w":300,"h":250}]},"tagid":"Yahoo Homepage - M
2024-03-29 00:41:32 UTC	383	IN	HTTP/1.1 204 No Content Connection: close Server: nginx Content-Type: application/json;charset=utf-8 x-envoy-upstream-service-time: 246 Access-Control-Allow-Origin: https://www.yahoo.com Accept-Ranges: bytes Date: Fri, 29 Mar 2024 00:41:32 GMT Via: 1.1 varnish X-Served-By: cache-iad-kcgs7200094-IAD X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1711672893.595736,VS0,VE256

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49935	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	616	OUT	GET /pv/static/img/voiceSearch1x-1620383531565.min.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:32 UTC	787	IN	HTTP/1.1 200 OK x-amz-id-2: lgTEeZa04mrbqMx7F+wAmI8tu0zjsR1se4wZcUIDMZ3ZqjR6TbXKybXeuOOfkcJZcE6zomvHBt4= x-amz-request-id: 6R2KVGCEJM7CKHYA Date: Thu, 28 Mar 2024 23:33:42 GMT Last-Modified: Fri, 07 May 2021 10:32:24 GMT ETag: "c2396079060a7028fa898a73b72aa592" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 2986 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 4071 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 29 00 00 01 4a 08 03 00 00 00 b7 a9 86 84 00 00 02 6a 50 4c 54 45 00 00 00 49 49 59 97 9e a9 9e aa aa ff ff ff 1e 23 29 45 82 f9 5c 65 6c 1f 22 29 ff ff ff 5c 64 6b 21 77 ed 10 6a ff ff ff ff 0f 6a ff 10 6a ff 27 2f 3b 00 3a bd ff ff ff 00 3b bc ff ff ff 0f 69 ff ff ff ff 10 69 ff ff ff ff 23 2b 31 24 2c 34 10 6a ff ff ff ff ff ff ff ff ff ff ff ff ff 0f 69 ff 24 2b 33 ff ff ff 00 3b be 00 3a bd 23 2a 32 0f 69 ff 00 3b bd 23 2b 32 00 3b be ff ff ff 10 6a ff ff ff ff 0f 6a ff 11 6a ff 16 6d ff 0f 69 ff ff ff ff ff ff ff 13 6c eb 00 3a bd 98 9f a9 23 2b 32 23 2b 31 5c 64 6a 1f 23 29 10 6a ff 0f 6b ff 0f 6b ff 23 28 2f 11 6c ff 26 2d 35 00 3b be 12 6e ff 18 6e ff ff ff ff 2a 2a 37 ff ff ff 10 6a ff 00 Data Ascii: PNGIHDR)JjPLTEIIY#)E\el")\dk!wjjj'/;:;ii#+1$,4ji$+3;:#2i;#+2;jjjmil:#+2#+1\dj#)jkk#(/l&-5;nn*7j
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 75 96 90 5f 6e 91 49 41 65 fa e8 16 be 29 38 07 35 95 b0 c8 c8 30 33 ae d5 fa 38 4a e3 d6 b7 42 e1 de a3 d4 c8 d1 bd 58 cf 85 d4 9b 42 e4 0c b6 d3 ca 6c 97 cb 70 21 c3 e5 72 8a 90 53 e4 b2 a1 90 0d ff cb 9f 97 83 9c 83 aa 4b 71 40 24 92 1d 89 ac 26 c5 01 91 10 b6 23 a4 9a 14 07 44 c6 b3 1d f3 02 c9 79 ac 32 de 57 2e 60 3b ca 78 65 9a 90 d3 80 a5 8c 55 16 80 6f 9c 94 8e e3 e5 2c 21 67 01 cb 38 4a 9d e0 17 87 f7 7a 9c 23 e4 1c ef f5 ea f0 97 79 94 da fa 7f 6f 54 34 d9 df 46 69 9e bf ec c8 8e 8d e5 95 f8 e3 1e 38 c3 f8 bf b1 ac d6 b1 fa 6d 61 f3 4c 47 b1 c3 e9 74 14 7b 26 cf 16 e0 26 09 b1 53 1a 15 0f 7e 89 8f a2 d4 1e 52 55 1a 1d 4d de eb 77 eb 4f 36 4e a9 5a c2 66 b0 fd 99 db c3 2a b7 b7 67 f2 d3 0d 74 d7 27 14 1a 2b 93 d7 d1 18 61 9e b1 5a 85 09 10 28 d6 Data Ascii: u_nIAe)85038JBXBlp!rSKq@$&#Dy2W.`;xeUo,!g8Jz#yoT4Fi8maLGt{&&S~RUMwO6NZf*gt'+aZ(
2024-03-29 00:41:32 UTC	386	IN	Data Raw: ef 29 c6 67 c6 45 ca 64 b8 f8 c8 fd 96 be 96 8d da e6 10 1b 71 d9 12 19 49 07 89 8d c2 4c a9 5c 27 36 1c 0d 65 73 64 9b e6 73 26 b2 de 61 0d dd 25 5e 0f 48 67 74 9e 2d 2a 01 8c 8c 77 66 c6 4b 20 6f 69 59 19 2f cf 38 69 76 18 48 73 c7 4e 33 b3 0b 9d d4 e9 a0 63 10 3a 6f 4c 1c b5 1f 5d 7f d0 1a 8e 52 08 8b 5f c0 0b 41 91 fc 28 3d 09 26 e9 1a 7b 02 98 0c 02 fb e5 e6 f6 93 0b f1 cc 27 1e f6 f0 07 fd 5c 33 b2 39 97 cd 6b 43 2a fd 84 ec a7 c8 64 89 f6 f2 bb 7c a9 95 c8 5f 85 b4 fb 2e db c9 df 88 3c d3 1e 42 11 97 45 f0 50 7b 26 93 6a 8f 2c 45 5d a9 69 2b 55 25 ab 87 0a f2 ee ef 01 94 97 03 dc 43 5f c7 c4 68 31 ed 14 a5 1d 2b d0 79 da c6 1e c9 d9 df 36 05 d0 1c 28 ba 75 ab e8 00 d4 64 36 0e 37 b2 11 97 25 cd 8d 94 80 89 74 0d 0d ed 0a a6 e0 24 42 26 99 a2 a1 66 Data Ascii: )gEdqIL\'6esds&a%^Hgt-wfK oiY/8ivHsN3c:oL]R_A(=&{'\39kCd\|_.<BEP{&j,E]i+U%C_h1+y6(ud67%t$B&f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49931	151.101.1.44	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	906	OUT	GET /scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; t_pt_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:32 UTC	741	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5311 x-amz-id-2: /RZ2uIwaovE4BFLFfG4kkU+W/VrmuARrGnejD/WI1WXM8zJG6ExNwRl+oykGIRqH8VUTAzw1wjQ= x-amz-request-id: DEWTHFJZ6KC1Q0ZY x-amz-replication-status: COMPLETED Last-Modified: Thu, 30 Nov 2023 18:35:31 GMT ETag: "ba0777792ce6c88cb6ac61d50f5ed420" x-amz-server-side-encryption: AES256 x-amz-version-id: 7Bl.XaNXVuUlHrm3kacHfal8wWJB1784 Content-Type: text/html Server: AmazonS3 Accept-Ranges: bytes Date: Fri, 29 Mar 2024 00:41:32 GMT Via: 1.1 varnish Age: 0 X-Served-By: cache-iad-kjyo7100056-IAD X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1711672893.519179,VS0,VE16 Cache-Control: private,max-age=14400 Vary: Accept-Encoding abp: 53 Access-Control-Allow-Origin: *
2024-03-29 00:41:32 UTC	1378	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d Data Ascii: <!doctype html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content=
2024-03-29 00:41:32 UTC	1378	IN	Data Raw: 21 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 26 26 20 61 72 72 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 20 7c 7c 20 61 72 72 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 20 69 66 20 28 6e 75 6c 6c 20 21 3d 20 5f 69 29 20 7b 20 76 61 72 20 5f 73 2c 20 5f 65 2c 20 5f 78 2c 20 5f 72 2c 20 5f 61 72 72 20 3d 20 5b 5d 2c 20 5f 6e 20 3d 20 21 30 2c 20 5f 64 20 3d 20 21 31 3b 20 74 72 79 20 7b 20 69 66 20 28 5f 78 20 3d 20 28 5f 69 20 3d 20 5f 69 2e 63 61 6c 6c 28 61 72 72 29 29 2e 6e 65 78 74 2c 20 30 20 3d 3d 3d 20 69 29 20 7b 20 69 66 20 28 4f 62 6a 65 63 74 28 5f 69 29 20 21 3d 3d 20 5f 69 29 20 72 65 74 75 72 6e 3b 20 5f 6e 20 3d 20 21 31 3b 20 7d 20 65 6c 73 65 20 66 6f 72 20 28 3b 20 21 28 5f 6e 20 3d 20 28 5f 73 20 3d 20 5f 78 2e 63 61 6c Data Ascii: != typeof Symbol && arr[Symbol.iterator] \|\| arr["@@iterator"]; if (null != _i) { var _s, _e, _x, _r, _arr = [], _n = !0, _d = !1; try { if (_x = (_i = _i.call(arr)).next, 0 === i) { if (Object(_i) !== _i) return; _n = !1; } else for (; !(_n = (_s = _x.cal
2024-03-29 00:41:32 UTC	1378	IN	Data Raw: 6c 53 74 6f 72 61 67 65 3b 0a 20 20 20 20 76 61 72 20 72 65 61 64 46 72 6f 6d 4c 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 72 65 61 64 46 72 6f 6d 4c 73 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 75 69 64 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 69 66 20 28 6c 73 29 20 7b 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 75 69 64 20 3d 20 6c 73 2e 67 65 74 49 74 65 6d 28 54 41 42 4f 4f 4c 41 5f 47 4c 4f 42 41 4c 5f 55 53 45 52 5f 4b 45 59 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 75 69 64 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 75 69 64 3b 0a 20 20 20 20 7d 3b 0a 20 20 20 20 76 61 Data Ascii: lStorage; var readFromLs = function readFromLs() { var uid = null; if (ls) { try { uid = ls.getItem(TABOOLA_GLOBAL_USER_KEY); } catch (err) { uid = null; } } return uid; }; va
2024-03-29 00:41:32 UTC	1177	IN	Data Raw: 43 6f 6f 6b 69 65 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 76 61 72 20 75 69 64 46 72 6f 6d 54 52 43 20 3d 20 77 69 6e 64 6f 77 2e 54 52 43 20 3f 20 77 69 6e 64 6f 77 2e 54 52 43 2e 75 73 65 72 5f 69 64 20 3a 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 20 20 20 20 20 69 66 20 28 75 69 64 46 72 6f 6d 54 52 43 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 75 69 64 46 72 6f 6d 54 52 43 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 20 20 20 7d 3b 0a 20 20 20 20 76 61 72 20 6c 6f 61 64 49 66 73 53 63 72 69 70 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 49 66 73 53 63 72 69 70 74 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 69 66 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 Data Ascii: Cookie; } var uidFromTRC = window.TRC ? window.TRC.user_id : undefined; if (uidFromTRC) { return uidFromTRC; } return undefined; }; var loadIfsScript = function loadIfsScript() { var ifs = document.creat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49929	172.64.151.101	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	615	OUT	POST /openrtb/pbjs?s=1057986 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 2240 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:32 UTC	2240	OUT	Data Raw: 7b 22 69 64 22 3a 22 32 31 31 35 32 36 34 36 33 37 31 30 38 37 31 35 31 37 31 31 36 37 32 38 39 31 36 32 33 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 72 65 62 69 64 22 2c 22 69 78 64 69 61 67 22 3a 7b 22 6c 73 22 3a 74 72 75 65 2c 22 6d 66 75 22 3a 30 2c 22 62 75 22 3a 35 2c 22 69 75 22 3a 30 2c 22 6e 75 22 3a 30 2c 22 6f 75 22 3a 30 2c 22 61 6c 6c 75 22 3a 35 2c 22 72 65 6e 22 3a 66 61 6c 73 65 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 2d 70 72 65 22 2c 22 75 73 65 72 49 64 73 22 3a 5b 5d 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 76 70 64 22 3a 66 Data Ascii: {"id":"21152646371087151711672891623","site":{"page":"https://www.yahoo.com/"},"ext":{"source":"prebid","ixdiag":{"ls":true,"mfu":0,"bu":5,"iu":0,"nu":0,"ou":0,"allu":5,"ren":false,"version":"8.13.0-pre","userIds":[],"url":"https://www.yahoo.com/","vpd":f
2024-03-29 00:41:32 UTC	918	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:32 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 86bbd09a59dc6fe0-IAD CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.yahoo.com Cache-Control: no-cache Expires: 0 Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:32 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None; Partitioned Vary: Accept-Encoding Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qomQoo5RKErVDPMHVddfEJdzoxC7hOYLrJnUiik9Ac25kSNrNoCyGiqcVrK%2FsKkoAx3jhVtUAVukCXlBYiGBrkxTVc4FjlRZypDLAY9QQ3S6nF%2BCDT239FWijaq8lv7bT07D5N%2FN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:32 UTC	451	IN	Data Raw: 31 31 61 32 0d 0a 7b 22 69 64 22 3a 22 32 31 31 35 32 36 34 36 33 37 31 30 38 37 31 35 31 37 31 31 36 37 32 38 39 31 36 32 33 22 2c 20 22 73 65 61 74 62 69 64 22 3a 5b 7b 22 62 69 64 22 3a 5b 7b 22 69 64 22 3a 22 35 62 39 33 35 30 63 62 2d 30 38 39 35 2d 34 62 39 33 2d 38 37 38 34 2d 31 31 31 61 30 33 66 65 30 61 65 61 22 2c 20 22 69 6d 70 69 64 22 3a 22 31 32 36 35 31 34 39 33 37 34 36 31 31 30 31 38 31 37 31 31 36 37 32 38 39 31 36 32 34 22 2c 20 22 70 72 69 63 65 22 3a 32 35 30 2c 20 22 61 64 69 64 22 3a 22 31 32 38 38 39 33 39 39 22 2c 20 22 61 64 6d 22 3a 22 3c 69 6d 67 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 61 35 35 38 39 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 69 6d 70 72 65 73 73 69 6f 6e 2f 76 32 2f 31 30 35 37 39 38 34 2f 38 35 Data Ascii: 11a2{"id":"21152646371087151711672891623", "seatbid":[{"bid":[{"id":"5b9350cb-0895-4b93-8784-111a03fe0aea", "impid":"12651493746110181711672891624", "price":250, "adid":"12889399", "adm":"<img src=\"https://a5589.casalemedia.com/impression/v2/1057984/85
2024-03-29 00:41:32 UTC	1369	IN	Data Raw: 6c 65 3d 5c 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 5c 22 20 77 69 64 74 68 3d 5c 22 30 5c 22 20 68 65 69 67 68 74 3d 5c 22 30 5c 22 20 61 6c 74 3d 5c 22 5c 22 20 62 6f 72 64 65 72 3d 5c 22 30 5c 22 20 2f 3e 3c 44 49 56 20 53 54 59 4c 45 3d 5c 22 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6c 65 66 74 3a 20 30 70 78 3b 20 74 6f 70 3a 20 30 70 78 3b 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 5c 22 3e 3c 49 4d 47 20 53 52 43 3d 5c 22 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 67 65 6e 5f 32 30 34 3f 69 64 3d 78 62 69 64 26 64 62 6d 5f 62 3d 41 4b 41 6d 66 2d 44 56 38 67 76 48 79 65 57 72 47 41 4f 44 7a 37 59 4c 4d 4d 79 6c 37 5a 35 52 Data Ascii: le=\"display:none\" width=\"0\" height=\"0\" alt=\"\" border=\"0\" /><DIV STYLE=\"position: absolute; left: 0px; top: 0px; visibility: hidden;\"><IMG SRC=\"https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-DV8gvHyeWrGAODz7YLMMyl7Z5R
2024-03-29 00:41:32 UTC	1369	IN	Data Raw: 70 4c 51 75 32 53 57 35 48 72 31 59 61 7a 7a 58 45 54 4a 41 6b 4e 39 57 53 34 62 54 4a 57 6a 49 48 51 53 43 4a 4a 5f 5f 6a 4e 66 70 78 46 71 6a 73 6a 69 48 6b 79 59 42 79 62 64 46 73 2d 76 38 37 6d 34 37 62 76 43 46 4b 34 67 68 36 6d 6c 79 6d 6f 6a 61 78 6d 2d 73 43 5f 65 39 30 48 53 51 43 4e 30 50 43 43 62 78 38 69 6c 42 59 73 67 4a 73 7a 64 6b 4a 66 49 58 68 6e 63 74 56 69 5f 75 51 35 39 54 35 54 39 75 59 4d 33 54 41 6b 69 56 53 4c 42 75 49 51 62 6f 33 37 58 48 6e 65 32 33 65 70 6a 5a 66 6c 48 39 33 66 5a 67 4b 31 39 67 6b 57 7a 35 79 33 4a 6d 69 46 31 35 72 5a 39 7a 6b 46 2d 31 48 32 78 73 2d 6a 6e 58 6a 5a 6b 68 47 58 54 58 36 52 58 38 6c 4a 75 4b 67 72 31 66 63 30 79 39 2d 63 42 4a 52 31 37 4e 32 77 68 71 4b 67 6a 77 6b 51 45 6f 63 62 63 68 7a 51 5a Data Ascii: pLQu2SW5Hr1YazzXETJAkN9WS4bTJWjIHQSCJJ__jNfpxFqjsjiHkyYBybdFs-v87m47bvCFK4gh6mlymojaxm-sC_e90HSQCN0PCCbx8ilBYsgJszdkJfIXhnctVi_uQ59T5T9uYM3TAkiVSLBuIQbo37XHne23epjZflH93fZgK19gkWz5y3JmiF15rZ9zkF-1H2xs-jnXjZkhGXTX6RX8lJuKgr1fc0y9-cBJR17N2whqKgjwkQEocbchzQZ
2024-03-29 00:41:32 UTC	1333	IN	Data Raw: 51 4d 55 68 51 36 4b 46 58 37 36 54 6b 54 71 31 53 78 6e 73 53 77 38 70 6f 79 41 6d 78 6b 36 76 61 54 53 34 37 4b 56 75 43 6c 75 4e 34 5f 32 34 61 6c 76 65 70 61 79 37 59 30 49 74 79 6e 58 6c 30 64 6f 59 66 35 63 79 58 4e 76 78 76 30 58 6a 61 6e 46 45 59 4b 36 6a 52 4d 78 5f 5f 6a 6a 46 30 63 38 6d 36 75 36 56 44 31 43 2d 42 43 6a 49 68 30 72 75 34 45 43 67 33 34 59 38 42 31 55 65 57 30 41 6d 70 52 75 67 36 4f 6a 66 62 4c 56 53 33 32 4f 64 5f 79 30 58 70 65 66 41 6f 5a 71 6b 6b 6e 66 4c 47 4b 41 55 79 66 67 61 50 7a 6d 48 57 69 4b 52 70 48 38 4d 56 41 41 71 4d 32 72 44 56 36 6e 4c 45 30 64 37 64 4e 78 45 75 41 39 32 49 44 6a 46 58 33 30 71 69 78 30 67 4f 5a 61 75 56 64 45 5f 6e 70 4e 41 42 4a 4b 68 6e 48 68 51 46 33 62 30 6c 6c 5a 6d 68 71 42 47 77 45 30 Data Ascii: QMUhQ6KFX76TkTq1SxnsSw8poyAmxk6vaTS47KVuCluN4_24alvepay7Y0ItynXl0doYf5cyXNvxv0XjanFEYK6jRMx__jjF0c8m6u6VD1C-BCjIh0ru4ECg34Y8B1UeW0AmpRug6OjfbLVS32Od_y0XpefAoZqkknfLGKAUyfgaPzmHWiKRpH8MVAAqM2rDV6nLE0d7dNxEuA92IDjFX30qix0gOZauVdE_npNABJKhnHhQF3b0llZmhqBGwE0
2024-03-29 00:41:32 UTC	1369	IN	Data Raw: 37 66 65 61 0d 0a 48 62 57 44 4f 68 52 7a 30 78 6e 67 5a 44 31 54 5a 56 67 79 4e 33 5f 6c 62 36 68 59 31 4d 55 5a 4a 6b 79 45 33 37 79 36 36 65 64 48 5a 2d 57 74 45 6d 50 32 6c 6f 72 64 70 50 47 59 56 4b 59 78 70 74 75 4c 71 36 47 64 64 7a 76 78 50 32 63 5f 4b 50 50 44 75 53 32 2d 53 33 70 32 58 63 75 79 5f 73 47 6e 46 4c 42 73 49 59 45 59 2d 32 53 75 2d 38 64 7a 58 4f 59 38 70 57 73 4d 38 71 55 61 50 36 45 68 35 2d 62 56 49 2d 31 49 53 37 4e 6c 77 63 63 63 4e 72 78 71 56 62 45 45 47 42 56 42 54 5a 78 34 70 79 2d 31 64 6f 53 51 66 65 43 33 6d 30 4a 45 44 46 49 38 70 61 43 64 63 66 36 4b 66 33 49 4d 65 6a 76 78 73 4e 72 53 42 76 6a 49 53 4d 68 53 4e 30 48 6f 7a 79 4f 71 51 69 32 30 44 4b 79 73 75 48 6f 51 53 75 37 77 71 51 35 65 78 30 39 6c 74 30 4f 63 73 Data Ascii: 7feaHbWDOhRz0xngZD1TZVgyN3_lb6hY1MUZJkyE37y66edHZ-WtEmP2lordpPGYVKYxptuLq6GddzvxP2c_KPPDuS2-S3p2Xcuy_sGnFLBsIYEY-2Su-8dzXOY8pWsM8qUaP6Eh5-bVI-1IS7NlwcccNrxqVbEEGBVBTZx4py-1doSQfeC3m0JEDFI8paCdcf6Kf3IMejvxsNrSBvjISMhSN0HozyOqQi20DKysuHoQSu7wqQ5ex09lt0Ocs
2024-03-29 00:41:32 UTC	1369	IN	Data Raw: 78 56 61 67 54 30 34 45 6f 4d 43 55 4e 4a 6e 4c 41 77 75 58 34 65 67 26 64 62 6d 5f 64 3d 41 4b 41 6d 66 2d 41 5f 30 54 71 37 71 59 4d 6b 68 45 58 5f 78 52 45 65 6f 79 69 4e 7a 66 6f 75 33 76 43 31 6d 2d 31 63 4e 69 70 69 63 51 65 30 31 53 62 6f 4a 35 46 61 32 46 57 39 37 57 64 58 70 63 6e 61 61 73 6f 45 32 7a 61 70 32 64 67 77 67 69 34 62 71 4e 77 4f 6b 79 6c 57 4a 7a 6d 52 7a 41 64 55 66 33 6a 52 5a 42 7a 36 69 52 75 2d 4d 6b 62 4d 41 5f 6c 59 35 56 58 43 47 49 44 6d 32 58 76 49 49 70 73 6f 36 7a 45 55 56 6d 75 70 32 47 38 39 46 65 53 58 68 59 41 66 34 33 31 59 4b 77 64 5f 67 45 55 6e 75 39 61 74 44 39 61 53 70 71 6a 57 65 55 64 6e 42 65 35 37 4e 7a 4a 6a 78 38 54 6e 5f 4e 54 62 30 49 30 2d 31 7a 6e 50 49 44 59 36 72 37 67 47 52 39 44 7a 38 69 76 55 4b Data Ascii: xVagT04EoMCUNJnLAwuX4eg&dbm_d=AKAmf-A_0Tq7qYMkhEX_xREeoyiNzfou3vC1m-1cNipicQe01SboJ5Fa2FW97WdXpcnaasoE2zap2dgwgi4bqNwOkylWJzmRzAdUf3jRZBz6iRu-MkbMA_lY5VXCGIDm2XvIIpso6zEUVmup2G89FeSXhYAf431YKwd_gEUnu9atD9aSpqjWeUdnBe57NzJjx8Tn_NTb0I0-1znPIDY6r7gGR9Dz8ivUK
2024-03-29 00:41:32 UTC	1369	IN	Data Raw: 2d 58 73 2d 47 31 50 47 7a 6f 56 34 71 6f 55 4a 31 4f 58 61 54 7a 73 4f 35 65 6c 6c 78 71 68 47 58 66 54 44 59 70 37 4d 41 44 62 38 46 34 57 48 57 4e 39 77 56 34 50 51 72 6f 57 37 47 4d 52 53 4e 6f 33 6d 31 44 42 54 7a 68 2d 62 6b 44 53 67 71 64 66 47 73 79 55 78 56 78 75 4f 6a 78 6d 6d 48 6b 43 66 59 6b 75 2d 48 43 44 72 6a 66 77 79 52 55 56 70 37 4a 71 41 51 36 4c 54 4d 38 42 6e 51 4e 76 44 43 56 76 58 4e 65 5a 4e 36 79 2d 71 55 41 6b 35 6d 31 36 69 6e 47 61 32 2d 55 5a 55 30 51 6e 42 48 5a 68 49 62 47 38 52 62 6a 55 58 7a 5f 37 49 4c 58 67 30 36 36 52 52 56 7a 70 4e 51 64 78 33 51 53 71 4c 7a 32 4c 55 78 71 31 2d 33 4e 65 48 50 4f 70 44 31 6b 38 45 30 55 77 56 77 69 30 6c 6f 6b 46 59 4b 58 58 79 67 44 37 78 58 5f 62 2d 36 73 6e 58 31 55 6a 48 75 6b 4c Data Ascii: -Xs-G1PGzoV4qoUJ1OXaTzsO5ellxqhGXfTDYp7MADb8F4WHWN9wV4PQroW7GMRSNo3m1DBTzh-bkDSgqdfGsyUxVxuOjxmmHkCfYku-HCDrjfwyRUVp7JqAQ6LTM8BnQNvDCVvXNeZN6y-qUAk5m16inGa2-UZU0QnBHZhIbG8RbjUXz_7ILXg066RRVzpNQdx3QSqLz2LUxq1-3NeHPOpD1k8E0UwVwi0lokFYKXXygD7xX_b-6snX1UjHukL
2024-03-29 00:41:32 UTC	1369	IN	Data Raw: 4a 6c 36 4d 70 42 4e 61 4b 61 5a 7a 71 78 59 4c 2d 62 4d 58 75 6b 74 57 6c 76 4d 51 50 6f 44 69 75 71 38 47 56 4f 4d 35 5a 47 43 73 34 65 32 38 38 58 7a 66 71 48 73 64 57 4a 37 31 65 66 37 64 34 53 49 51 64 30 41 52 7a 78 69 6f 62 6c 6a 46 4f 65 57 31 44 4d 72 38 63 6d 73 65 50 61 4f 76 50 53 6a 72 64 5f 42 6b 5f 33 6c 6b 35 4d 5f 66 75 42 68 58 76 79 4e 4e 44 6f 31 61 6a 61 36 4b 73 65 78 51 75 48 59 52 4f 4c 32 66 55 6d 33 4c 4e 74 34 61 75 36 49 74 51 64 48 53 55 66 4c 66 65 4a 58 57 45 6a 43 4b 66 38 39 37 30 4e 66 69 53 45 56 4c 45 71 61 68 68 51 59 5a 65 4c 44 69 72 6b 2d 53 4d 6f 6e 78 55 43 59 31 30 38 43 57 41 37 42 51 54 66 39 2d 5f 78 73 75 77 68 76 7a 5f 45 33 63 63 56 43 68 36 7a 66 4c 7a 6d 66 56 57 37 58 33 37 77 6d 75 73 6f 42 51 6f 57 42 Data Ascii: Jl6MpBNaKaZzqxYL-bMXuktWlvMQPoDiuq8GVOM5ZGCs4e288XzfqHsdWJ71ef7d4SIQd0ARzxiobljFOeW1DMr8cmsePaOvPSjrd_Bk_3lk5M_fuBhXvyNNDo1aja6KsexQuHYROL2fUm3LNt4au6ItQdHSUfLfeJXWEjCKf8970NfiSEVLEqahhQYZeLDirk-SMonxUCY108CWA7BQTf9-_xsuwhvz_E3ccVCh6zfLzmfVW7X37wmusoBQoWB
2024-03-29 00:41:32 UTC	1369	IN	Data Raw: 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 5c 22 31 31 32 5c 22 20 64 61 74 61 2d 6a 63 2d 76 65 72 73 69 6f 6e 3d 5c 22 72 32 30 32 34 30 33 32 37 5c 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 64 3d 2f 5b 26 3f 5d 64 62 6d 5f 63 3d 28 5b 5e 20 26 5d 2b 29 2f 3b 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 64 2e 65 78 65 63 28 61 29 29 3f 61 5b 31 5d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 2c 62 2c 63 29 7b 61 3d 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 62 29 3b 66 6f 72 28 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 69 66 28 65 28 61 5b 62 5d 2e 73 72 63 29 3d 3d 3d 63 29 72 65 74 75 72 Data Ascii: ></script><script data-jc=\"112\" data-jc-version=\"r20240327\">(function(){'use strict';const d=/[&?]dbm_c=([^ &]+)/;function e(a){return(a=d.exec(a))?a[1]:null}function f(a,b,c){a=a.getElementsByTagName(b);for(b=0;b<a.length;++b)if(e(a[b].src)===c)retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49936	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	537	OUT	GET /aaq/f10d509c/d1ccw66oyq8ex2.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:32 UTC	824	IN	HTTP/1.1 200 OK x-amz-id-2: LzUghh7L48E/OP46pwVCSJaCllECE5oyLo202M6u7yZzq8sxHmbN1V3yJ0WKpIxrsgIQdmVKprs= x-amz-request-id: FWPRMJT93YTQCQ11 Date: Fri, 29 Mar 2024 00:35:03 GMT Last-Modified: Thu, 28 Mar 2024 16:55:42 GMT x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=600 x-amz-version-id: 3xflto.veEVgQZrN6EtfVHHURtyjga08 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 152442 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "f49a4ee2c66883af94dfc024b8f98725" Age: 390 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 28 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 5b 27 42 4d 66 32 41 77 44 48 44 67 75 3d 27 2c 27 43 32 76 30 27 2c 27 77 65 31 6d 73 68 72 30 43 66 6a 4c 43 78 76 4c 43 33 71 3d 27 2c 27 43 4e 76 55 27 2c 27 79 78 62 50 76 78 6e 4c 43 4e 6e 4a 43 4d 4c 57 44 61 3d 3d 27 2c 27 44 78 6e 4c 43 4b 66 4a 44 67 4c 32 79 78 72 50 42 32 34 3d 27 2c 27 72 75 58 66 74 75 76 6f 76 66 39 6f 74 30 72 66 27 2c 27 44 32 76 49 41 32 4c 30 71 78 76 4b 41 77 39 65 7a 77 6e 56 7a 67 76 4b 71 4e 4c 30 7a 75 6e 56 44 77 35 30 27 2c 27 43 33 6c 72 47 71 3d 3d 27 2c 27 44 67 76 34 44 63 39 4f 44 67 31 53 27 2c 27 43 33 72 48 79 32 53 3d 27 2c 27 6c 63 62 55 42 59 31 4c 44 4d 66 53 6f 49 61 3d 27 2c 27 79 32 39 55 43 32 39 53 7a 71 3d 3d 27 2c 27 42 4d 39 4b Data Ascii: (new function(){var c=['BMf2AwDHDgu=','C2v0','we1mshr0CfjLCxvLC3q=','CNvU','yxbPvxnLCNnJCMLWDa==','DxnLCKfJDgL2yxrPB24=','ruXftuvovf9ot0rf','D2vIA2L0qxvKAw9ezwnVzgvKqNL0zunVDw50','C3lrGq==','Dgv4Dc9ODg1S','C3rHy2S=','lcbUBY1LDMfSoIa=','y29UC29Szq==','BM9K
2024-03-29 00:41:32 UTC	244	IN	Data Raw: 62 48 7a 32 66 30 41 77 39 55 27 2c 27 69 63 38 47 7a 32 76 30 27 2c 27 43 32 4c 36 7a 71 3d 3d 27 2c 27 73 64 4c 6c 73 57 3d 3d 27 2c 27 79 77 58 53 42 33 43 54 7a 4d 39 59 42 78 6d 47 79 77 58 53 42 33 43 54 43 67 39 50 42 4e 72 4c 43 49 31 53 42 32 6e 52 69 67 66 53 42 67 39 33 6c 78 62 56 43 68 76 57 43 59 62 48 42 67 58 56 44 59 31 57 42 33 62 31 43 68 6d 54 44 67 38 54 7a 78 6e 4a 79 78 62 4c 6c 78 6e 48 42 4d 72 49 42 33 47 47 79 77 58 53 42 33 43 54 43 32 66 54 7a 73 31 56 43 4d 4c 4e 41 77 34 47 79 77 58 53 42 33 43 54 43 32 6e 59 41 78 62 30 43 59 62 48 42 67 58 56 44 59 31 30 42 33 61 54 42 4d 66 32 41 77 44 48 44 67 4c 56 42 49 31 49 45 73 31 31 43 32 76 59 6c 77 66 4a 44 67 4c 32 79 78 72 50 42 32 34 3d 27 2c Data Ascii: bHz2f0Aw9U','ic8Gz2v0','C2L6zq==','sdLlsW==','ywXSB3CTzM9YBxmGywXSB3CTCg9PBNrLCI1SB2nRigfSBg93lxbVChvWCYbHBgXVDY1WB3b1ChmTDg8TzxnJyxbLlxnHBMrIB3GGywXSB3CTC2fTzs1VCMLNAw4GywXSB3CTC2nYAxb0CYbHBgXVDY10B3aTBMf2AwDHDgLVBI1IEs11C2vYlwfJDgL2yxrPB24=',
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 27 44 68 6a 50 42 71 3d 3d 27 2c 27 72 76 39 74 76 66 69 3d 27 2c 27 42 32 6a 51 7a 77 6e 30 27 2c 27 43 78 76 4c 43 4e 4c 74 7a 77 58 4c 79 33 72 56 43 4b 66 53 42 61 3d 3d 27 2c 27 43 4d 76 32 42 32 54 4c 74 32 6a 51 7a 77 6e 30 76 76 6a 6d 27 2c 27 79 32 48 50 42 67 72 6f 42 32 72 4c 43 57 3d 3d 27 2c 27 78 31 39 4a 43 33 62 59 78 31 38 3d 27 2c 27 41 4d 39 50 42 47 3d 3d 27 2c 27 69 64 4f 47 27 2c 27 69 63 38 47 79 77 58 53 42 33 44 64 79 77 58 53 27 2c 27 43 67 39 5a 44 65 31 4c 43 33 6e 48 7a 32 75 3d 27 2c 27 43 68 6a 4c 44 4d 76 55 44 65 72 4c 7a 4d 66 31 42 68 71 3d 27 2c 27 79 4d 4c 4b 75 4d 76 58 44 77 76 5a 44 67 76 4b 27 2c 27 79 78 62 57 7a 77 35 4b 71 32 48 50 42 67 71 36 69 61 3d 3d 27 2c 27 41 68 72 30 43 68 6d 36 6c 59 39 30 43 4d 76 55 Data Ascii: 'DhjPBq==','rv9tvfi=','B2jQzwn0','CxvLCNLtzwXLy3rVCKfSBa==','CMv2B2TLt2jQzwn0vvjm','y2HPBgroB2rLCW==','x19JC3bYx18=','AM9PBG==','idOG','ic8GywXSB3DdywXS','Cg9ZDe1LC3nHz2u=','ChjLDMvUDerLzMf1Bhq=','yMLKuMvXDwvZDgvK','yxbWzw5Kq2HPBgq6ia==','Ahr0Chm6lY90CMvU
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 7a 73 30 3d 27 2c 27 44 32 4c 4b 44 67 47 3d 27 2c 27 79 32 58 48 43 33 6e 6f 79 77 31 4c 27 2c 27 7a 4d 39 59 72 77 66 4a 41 61 3d 3d 27 2c 27 6c 63 61 4e 27 2c 27 44 67 4c 54 7a 71 3d 3d 27 2c 27 44 78 44 57 27 2c 27 79 33 76 5a 44 67 39 54 7a 78 6a 6a 7a 61 3d 3d 27 2c 27 7a 4e 6a 56 42 75 6e 4f 79 78 6a 64 42 32 72 4c 27 2c 27 76 32 76 49 72 30 57 59 75 4d 76 55 7a 67 76 59 41 77 35 4e 71 32 39 55 44 67 76 34 44 61 3d 3d 27 2c 27 70 63 66 4b 42 32 6e 30 45 78 62 4c 69 67 48 30 42 77 57 2b 27 2c 27 79 33 6a 4c 79 78 72 4c 27 2c 27 41 78 6e 62 43 4e 6a 48 45 71 3d 3d 27 2c 27 42 4d 39 55 79 32 75 3d 27 2c 27 74 4b 7a 6f 27 2c 27 43 32 66 4d 7a 71 3d 3d 27 2c 27 71 4d 4c 4b 71 77 72 48 43 68 72 4c 43 47 3d 3d 27 2c 27 43 68 62 53 27 2c 27 73 66 72 6e 74 Data Ascii: zs0=','D2LKDgG=','y2XHC3noyw1L','zM9YrwfJAa==','lcaN','DgLTzq==','DxDW','y3vZDg9Tzxjjza==','zNjVBunOyxjdB2rL','v2vIr0WYuMvUzgvYAw5Nq29UDgv4Da==','pcfKB2n0ExbLigH0BwW+','y3jLyxrL','AxnbCNjHEq==','BM9Uy2u=','tKzo','C2fMzq==','qMLKqwrHChrLCG==','ChbS','sfrnt
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 42 4d 39 55 7a 71 3d 3d 27 2c 27 76 76 44 71 27 2c 27 72 78 6a 59 42 33 69 3d 27 2c 27 42 4d 38 54 7a 67 39 4a 27 2c 27 41 68 72 30 43 64 4f 3d 27 2c 27 43 32 50 5a 27 2c 27 41 77 35 5a 7a 78 6a 30 71 77 72 51 79 77 6e 4c 42 4e 72 69 76 65 31 6d 27 2c 27 43 4d 76 53 27 2c 27 70 4a 57 56 27 2c 27 41 4d 66 32 79 78 6e 4a 43 4d 4c 57 44 64 50 4d 79 77 58 5a 7a 71 3d 3d 27 2c 27 74 75 76 75 71 71 3d 3d 27 2c 27 73 67 76 48 44 4e 4c 62 7a 65 4c 55 44 67 76 59 44 4d 76 55 44 67 4c 56 42 47 3d 3d 27 2c 27 43 33 72 48 43 4e 71 3d 27 2c 27 7a 4d 39 59 42 75 72 48 44 67 65 3d 27 2c 27 7a 78 48 4c 79 57 3d 3d 27 2c 27 74 4b 66 6d 27 2c 27 71 4b 35 73 27 2c 27 73 66 72 6e 74 66 6e 4a 43 4d 4c 57 44 65 76 53 7a 77 31 4c 42 4e 71 3d 27 2c 27 43 67 66 30 41 67 35 48 42 Data Ascii: BM9Uzq==','vvDq','rxjYB3i=','BM8Tzg9J','Ahr0CdO=','C2PZ','Aw5Zzxj0qwrQywnLBNrive1m','CMvS','pJWV','AMf2yxnJCMLWDdPMywXZzq==','tuvuqq==','sgvHDNLbzeLUDgvYDMvUDgLVBG==','C3rHCNq=','zM9YBurHDge=','zxHLyW==','tKfm','qK5s','sfrntfnJCMLWDevSzw1LBNq=','Cgf0Ag5HB
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 7a 78 6a 59 42 33 69 3d 27 2c 27 79 4d 4c 4b 75 4d 76 5a 27 2c 27 41 77 31 57 44 4d 4c 4c 44 57 3d 3d 27 2c 27 43 4d 76 5a 42 33 76 59 79 32 75 3d 27 2c 27 79 32 58 56 43 32 75 3d 27 2c 27 79 32 58 4c 79 78 6a 75 41 77 31 4c 42 33 76 30 27 2c 27 43 32 76 30 73 77 35 30 7a 78 6a 32 79 77 57 3d 27 2c 27 42 77 66 30 79 32 47 3d 27 2c 27 71 75 72 67 27 2c 27 72 4b 39 73 74 71 3d 3d 27 2c 27 44 67 48 4c 42 47 3d 3d 27 2c 27 41 77 7a 59 79 77 31 4c 6c 67 66 31 7a 67 4c 56 6c 68 7a 50 7a 67 76 56 27 2c 27 44 33 6a 50 44 67 76 53 42 47 3d 3d 27 2c 27 41 77 35 71 42 67 66 4a 7a 77 31 4c 42 4e 71 3d 27 2c 27 7a 78 7a 30 6c 77 72 4c 44 4a 66 56 7a 57 3d 3d 27 2c 27 63 49 61 47 69 63 62 48 44 63 62 48 79 4d 39 31 44 64 50 49 42 67 66 55 41 5a 4f 3d 27 2c 27 79 77 6e Data Ascii: zxjYB3i=','yMLKuMvZ','Aw1WDMLLDW==','CMvZB3vYy2u=','y2XVC2u=','y2XLyxjuAw1LB3v0','C2v0sw50zxj2ywW=','Bwf0y2G=','qurg','rK9stq==','DgHLBG==','AwzYyw1Llgf1zgLVlhzPzgvV','D3jPDgvSBG==','Aw5qBgfJzw1LBNq=','zxz0lwrLDJfVzW==','cIaGicbHDcbHyM91DdPIBgfUAZO=','ywn
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 4d 6a 48 70 71 3d 3d 27 2c 27 41 77 31 57 27 2c 27 43 4d 39 31 42 4d 71 3d 27 2c 27 7a 4d 66 53 43 32 75 3d 27 2c 27 79 4d 4c 4b 76 32 39 55 27 2c 27 42 4e 72 32 27 2c 27 43 4d 76 57 42 67 66 4a 7a 71 3d 3d 27 2c 27 44 4d 4c 4c 44 33 62 56 43 4e 72 66 42 67 76 54 7a 77 35 30 27 2c 27 70 68 6e 4a 43 4d 4c 57 44 63 62 55 42 32 35 4a 7a 74 30 49 27 2c 27 42 4e 76 53 42 61 3d 3d 27 2c 27 43 32 48 56 44 77 58 4b 6c 77 6a 53 42 32 6e 52 27 2c 27 76 30 66 65 6c 71 3d 3d 27 2c 27 76 65 6a 6d 27 2c 27 79 78 62 57 6c 77 6a 48 42 4d 35 4c 43 47 3d 3d 27 2c 27 7a 78 7a 30 6c 77 58 56 7a 57 3d 3d 27 2c 27 43 32 76 30 75 4d 76 58 44 77 76 5a 44 65 48 4c 79 77 72 4c 43 47 3d 3d 27 2c 27 44 67 39 57 27 2c 27 76 32 4c 55 7a 67 39 33 6c 4d 58 56 79 32 66 30 41 77 39 55 27 Data Ascii: MjHpq==','Aw1W','CM91BMq=','zMfSC2u=','yMLKv29U','BNr2','CMvWBgfJzq==','DMLLD3bVCNrfBgvTzw50','phnJCMLWDcbUB25Jzt0I','BNvSBa==','C2HVDwXKlwjSB2nR','v0felq==','vejm','yxbWlwjHBM5LCG==','zxz0lwXVzW==','C2v0uMvXDwvZDeHLywrLCG==','Dg9W','v2LUzg93lMXVy2f0Aw9U'
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 65 76 67 70 47 3d 3d 27 2c 27 70 67 48 4c 79 77 71 2b 70 63 39 4f 7a 77 66 4b 70 4a 58 49 42 32 72 35 70 4a 57 56 79 4d 39 4b 45 74 34 3d 27 2c 27 78 32 6a 53 79 77 35 52 27 2c 27 69 68 57 47 44 78 6a 53 6f 49 61 3d 27 2c 27 63 4d 44 4c 44 65 62 51 79 78 7a 48 43 32 6e 59 41 78 62 30 6f 47 3d 3d 27 2c 27 79 32 58 50 79 32 54 75 79 78 6a 4e 7a 78 71 3d 27 2c 27 74 76 6e 6a 72 71 3d 3d 27 2c 27 79 32 58 56 42 4d 75 3d 27 2c 27 42 77 76 30 79 76 54 4f 44 68 72 57 6c 77 76 58 44 77 4c 32 70 73 6a 64 42 32 35 30 7a 77 35 30 6c 76 6e 4c 79 33 76 59 41 78 72 35 6c 76 62 56 42 67 4c 4a 45 73 6a 44 27 2c 27 6a 4d 66 4b 42 32 31 48 41 77 35 5a 70 71 3d 3d 27 2c 27 71 31 72 6a 27 2c 27 43 78 76 4c 27 2c 27 72 77 58 4c 42 77 76 55 44 61 3d 3d 27 2c 27 69 4c 30 47 6a Data Ascii: evgpG==','pgHLywq+pc9OzwfKpJXIB2r5pJWVyM9KEt4=','x2jSyw5R','ihWGDxjSoIa=','cMDLDebQyxzHC2nYAxb0oG==','y2XPy2TuyxjNzxq=','tvnjrq==','y2XVBMu=','Bwv0yvTODhrWlwvXDwL2psjdB250zw50lvnLy3vYAxr5lvbVBgLJEsjD','jMfKB21HAw5Zpq==','q1rj','CxvL','rwXLBwvUDa==','iL0Gj
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 30 27 2c 27 69 67 4c 5a 69 67 35 56 44 63 62 4c 45 68 72 4c 42 4e 6e 50 79 4d 58 4c 27 2c 27 43 67 58 48 45 71 3d 3d 27 2c 27 7a 32 76 30 75 68 6a 56 44 67 39 30 45 78 62 4c 74 32 79 3d 27 2c 27 71 4b 39 65 77 71 3d 3d 27 2c 27 7a 78 7a 30 6c 77 66 4b 43 33 72 52 27 2c 27 71 76 62 68 27 2c 27 7a 32 76 30 76 67 4c 54 7a 78 50 56 42 4d 76 70 7a 4d 7a 5a 7a 78 71 3d 27 2c 27 78 33 75 4f 44 67 48 50 43 59 57 47 6a 57 3d 3d 27 2c 27 41 32 76 35 43 57 3d 3d 27 2c 27 63 49 30 54 6c 71 4f 3d 27 2c 27 43 4d 76 48 7a 68 4c 74 44 67 66 30 7a 71 3d 3d 27 2c 27 76 32 76 49 72 30 58 73 7a 77 35 4b 7a 78 6a 50 42 4d 44 64 42 32 35 30 7a 78 48 30 27 2c 27 73 66 72 6e 74 65 4c 4d 43 4d 66 54 7a 75 76 53 7a 77 31 4c 42 4e 71 55 27 2c 27 44 32 58 4e 27 2c 27 6b 63 4c 37 46 Data Ascii: 0','igLZig5VDcbLEhrLBNnPyMXL','CgXHEq==','z2v0uhjVDg90ExbLt2y=','qK9ewq==','zxz0lwfKC3rR','qvbh','z2v0vgLTzxPVBMvpzMzZzxq=','x3uODgHPCYWGjW==','A2v5CW==','cI0TlqO=','CMvHzhLtDgf0zq==','v2vIr0Xszw5KzxjPBMDdB250zxH0','sfrnteLMCMfTzuvSzw1LBNqU','D2XN','kcL7F
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 61 3d 3d 27 2c 27 79 32 7a 4e 6c 78 4c 4f 79 47 3d 3d 27 2c 27 72 78 7a 4c 42 4e 72 75 79 78 6a 4e 7a 78 71 3d 27 2c 27 77 30 76 73 75 4c 39 75 78 71 3d 3d 27 2c 27 44 4d 66 53 44 77 75 3d 27 2c 27 7a 67 4c 5a 79 77 6a 53 7a 77 71 3d 27 2c 27 41 67 39 5a 44 67 35 48 42 77 75 3d 27 2c 27 79 32 58 50 7a 77 35 30 71 4d 4c 4b 7a 67 76 59 27 2c 27 71 4b 4c 65 75 47 3d 3d 27 2c 27 42 78 76 30 7a 77 71 47 27 2c 27 43 78 76 4c 43 4e 4c 74 7a 77 58 4c 79 33 72 56 43 47 3d 3d 27 2c 27 72 76 48 71 6c 76 72 70 27 2c 27 41 67 66 5a 71 78 72 30 43 4d 4c 49 44 78 72 4c 27 2c 27 78 31 39 57 43 4d 39 30 42 31 39 46 27 2c 27 42 33 44 55 7a 78 6a 65 42 32 6e 31 42 77 76 55 44 61 3d 3d 27 2c 27 43 4d 66 55 7a 67 39 54 27 2c 27 6a 66 44 6d 77 66 6a 54 71 77 71 3d 27 2c 27 75 Data Ascii: a==','y2zNlxLOyG==','rxzLBNruyxjNzxq=','w0vsuL9uxq==','DMfSDwu=','zgLZywjSzwq=','Ag9ZDg5HBwu=','y2XPzw50qMLKzgvY','qKLeuG==','Bxv0zwqG','CxvLCNLtzwXLy3rVCG==','rvHqlvrp','AgfZqxr0CMLIDxrL','x19WCM90B19F','B3DUzxjeB2n1BwvUDa==','CMfUzg9T','jfDmwfjTqwq=','u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49934	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	584	OUT	GET /aaq/fp/js/react-wafer-games.custom.modern.5043a481c515b36358c32b8ea2d581fe.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:32 UTC	822	IN	HTTP/1.1 200 OK x-amz-id-2: ZH0lBIRZRiQrlnIuIi+UMTd/dlzBn6P0NduopmSCVVq82w4Gg6tnm5FKvFPIC9w6SrH6/cwy6EPixyKlmGKUEQE0BElmJ9Hf x-amz-request-id: DEWZDTPTMF0MNMWT Date: Fri, 29 Mar 2024 00:41:33 GMT Last-Modified: Wed, 26 Jul 2023 00:32:42 GMT ETag: "5043a481c515b36358c32b8ea2d581fe" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: fm8ox0y1IJZn8EjreVWRE8Dgs2Cm7oxo Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 1419 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 63 6f 6e 73 74 20 4c 4f 43 41 4c 5f 53 54 4f 52 41 47 45 5f 56 41 52 49 41 42 4c 45 5f 4e 41 4d 45 3d 22 6e 67 79 52 65 63 65 6e 74 6c 79 50 6c 61 79 65 64 47 61 6d 65 73 22 2c 4d 41 58 5f 41 4d 4f 55 4e 54 5f 4f 46 5f 47 41 4d 45 53 5f 49 4e 5f 52 45 43 45 4e 54 4c 59 5f 50 4c 41 59 45 44 3d 32 2c 63 6c 65 61 6e 50 61 74 68 3d 65 3d 3e 65 2e 72 65 70 6c 61 63 65 28 22 2f 67 61 6d 65 73 2f 70 6c 61 79 2f 22 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 24 2f 2c 22 22 29 2c 69 64 48 65 79 59 61 68 6f 6f 3d 22 68 65 79 20 79 61 68 6f 6f 22 2c 69 6e 69 74 3d 28 29 3d 3e 7b 63 6f 6e 73 74 7b 77 61 66 65 72 3a 65 7d 3d 77 69 6e 64 6f 77 2c 7b 6c 6f 63 61 6c 53 74 6f 72 61 67 65 3a 74 7d 3d 65 2e 66 65 61 74 75 72 65 73 3b 6c 65 74 20 61 3d 6e 75 6c 6c 3b 66 Data Ascii: const LOCAL_STORAGE_VARIABLE_NAME="ngyRecentlyPlayedGames",MAX_AMOUNT_OF_GAMES_IN_RECENTLY_PLAYED=2,cleanPath=e=>e.replace("/games/play/","").replace(/\/$/,""),idHeyYahoo="hey yahoo",init=()=>{const{wafer:e}=window,{localStorage:t}=e.features;let a=null;f
2024-03-29 00:41:32 UTC	119	IN	Data Raw: 66 65 72 3a 77 61 66 65 72 7d 3d 77 69 6e 64 6f 77 3b 77 61 66 65 72 3f 77 61 66 65 72 2e 72 65 61 64 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 6e 69 74 28 29 7d 29 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 77 61 66 65 72 3a 72 65 61 64 79 22 2c 28 28 29 3d 3e 7b 69 6e 69 74 28 29 7d 29 29 3b Data Ascii: fer:wafer}=window;wafer?wafer.ready((function(){init()})):document.body.addEventListener("wafer:ready",(()=>{init()}));

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49940	151.101.1.44	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	768	OUT	GET /sg/prebidJS/1/cm?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: trc.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; t_pt_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:32 UTC	969	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 29-Mar-2025 00:41:32 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 29-Mar-2025 00:41:32 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 7677 Accept-Ranges: bytes Date: Fri, 29 Mar 2024 00:41:32 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-iad-kiad7000071-IAD X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1711672893.712803,VS0,VE8 X-vcl-time-ms: 8 transfer-encoding: chunked
2024-03-29 00:41:32 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-03-29 00:41:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-03-29 00:41:32 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49933	204.237.133.116	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	626	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2411 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:32 UTC	2411	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 31 36 37 32 38 39 31 36 38 38 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 30 35 35 34 31 38 38 30 30 34 37 38 33 36 39 31 37 31 31 36 37 32 38 39 31 36 32 34 22 2c 22 74 61 67 69 64 22 3a 22 35 35 33 37 32 39 38 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 35 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 72 69 67 68 74 22 7d 2c 22 67 70 69 64 22 3a 22 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 72 69 67 68 74 22 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 3a Data Ascii: {"id":"1711672891688","at":1,"cur":["USD"],"imp":[{"id":"10554188004783691711672891624","tagid":"5537298","bidfloor":0.5,"secure":1,"ext":{"data":{"pbadslot":"us_yhp_main_dt_top_right"},"gpid":"us_yhp_main_dt_top_right"},"bidfloorcur":"USD","banner":{"w":
2024-03-29 00:41:33 UTC	355	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.yahoo.com Cache-Control: no-cache, no-store, must-revalidate Content-Type: application/json Observe-Browsing-Topics: ?1 X-Br-Rtb-Version: 2.2 X-Openrtb-Version: 2.3 Date: Fri, 29 Mar 2024 00:41:32 GMT Transfer-Encoding: chunked Connection: close
2024-03-29 00:41:33 UTC	13896	IN	Data Raw: 38 66 35 64 0d 0a 7b 22 69 64 22 3a 22 31 37 31 31 36 37 32 38 39 31 36 38 38 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 7b 22 62 69 64 22 3a 5b 7b 22 69 64 22 3a 22 42 33 31 46 41 35 31 39 2d 44 41 41 30 2d 34 32 36 41 2d 38 36 45 36 2d 44 35 37 32 37 46 45 31 34 44 45 37 22 2c 22 69 6d 70 69 64 22 3a 22 31 30 37 35 33 33 38 37 34 37 34 33 30 30 39 34 31 37 31 31 36 37 32 38 39 31 36 32 34 22 2c 22 70 72 69 63 65 22 3a 30 2e 39 33 31 39 31 37 2c 22 61 64 69 64 22 3a 22 35 34 30 32 32 31 31 30 30 22 2c 22 61 64 6d 22 3a 22 5c 75 30 30 33 63 69 66 72 61 6d 65 20 77 69 64 74 68 3d 5c 22 30 5c 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 5c 22 6e 6f 5c 22 20 68 65 69 67 68 74 3d 5c 22 30 5c 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 5c 22 30 5c 22 20 73 72 63 3d 5c 22 68 Data Ascii: 8f5d{"id":"1711672891688","seatbid":[{"bid":[{"id":"B31FA519-DAA0-426A-86E6-D5727FE14DE7","impid":"10753387474300941711672891624","price":0.931917,"adid":"540221100","adm":"\u003ciframe width=\"0\" scrolling=\"no\" height=\"0\" frameborder=\"0\" src=\"h
2024-03-29 00:41:33 UTC	14480	IN	Data Raw: 71 6c 44 37 64 48 5f 63 72 4b 54 64 48 4a 6f 73 42 75 4b 78 31 57 52 35 2d 56 6f 62 7a 48 4d 43 5a 33 77 2d 38 63 37 74 67 30 6a 75 35 30 69 6b 22 2c 22 63 69 64 22 3a 22 32 32 39 38 37 22 2c 22 63 72 69 64 22 3a 22 35 34 30 32 32 31 31 30 30 22 2c 22 68 22 3a 32 35 30 2c 22 77 22 3a 33 30 30 2c 22 6d 74 79 70 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 73 70 69 64 22 3a 38 30 2c 22 77 44 53 50 42 79 72 49 64 22 3a 22 32 30 35 33 32 34 39 22 2c 22 61 64 76 69 64 22 3a 31 33 30 36 37 33 2c 22 62 69 64 74 79 70 65 22 3a 30 7d 7d 2c 7b 22 69 64 22 3a 22 45 37 42 41 44 37 37 30 2d 46 43 32 43 2d 34 30 31 37 2d 42 46 44 33 2d 35 42 31 39 33 34 31 45 42 37 32 31 22 2c 22 69 6d 70 69 64 22 3a 22 37 34 35 32 30 38 39 30 31 32 30 30 32 32 35 32 31 37 31 31 36 37 32 Data Ascii: qlD7dH_crKTdHJosBuKx1WR5-VobzHMCZ3w-8c7tg0ju50ik","cid":"22987","crid":"540221100","h":250,"w":300,"mtype":1,"ext":{"dspid":80,"wDSPByrId":"2053249","advid":130673,"bidtype":0}},{"id":"E7BAD770-FC2C-4017-BFD3-5B19341EB721","impid":"74520890120022521711672
2024-03-29 00:41:33 UTC	8338	IN	Data Raw: 2f 41 64 44 69 73 70 6c 61 79 54 72 61 63 6b 65 72 53 65 72 76 6c 65 74 3f 6f 70 65 72 49 64 3d 31 5c 75 30 30 32 36 70 75 62 49 64 3d 31 33 33 37 39 39 5c 75 30 30 32 36 73 69 74 65 49 64 3d 31 31 34 38 33 31 33 5c 75 30 30 32 36 61 64 49 64 3d 35 35 33 37 32 39 38 5c 75 30 30 32 36 69 6d 70 72 49 64 3d 42 31 32 43 32 34 39 31 2d 45 30 30 37 2d 34 46 35 37 2d 38 45 42 30 2d 46 43 30 32 32 35 44 37 37 32 45 43 5c 75 30 30 32 36 63 6b 73 75 6d 3d 43 35 44 41 36 35 37 33 41 43 45 36 42 32 45 37 5c 75 30 30 32 36 61 64 54 79 70 65 3d 31 30 5c 75 30 30 32 36 61 64 53 65 72 76 65 72 49 64 3d 32 34 33 5c 75 30 30 32 36 6b 65 66 61 63 74 3d 31 2e 35 39 30 38 38 35 5c 75 30 30 32 36 6b 61 78 65 66 61 63 74 3d 31 2e 35 39 30 38 38 35 5c 75 30 30 32 36 6b 61 64 4e Data Ascii: /AdDisplayTrackerServlet?operId=1\u0026pubId=133799\u0026siteId=1148313\u0026adId=5537298\u0026imprId=B12C2491-E007-4F57-8EB0-FC0225D772EC\u0026cksum=C5DA6573ACE6B2E7\u0026adType=10\u0026adServerId=243\u0026kefact=1.590885\u0026kaxefact=1.590885\u0026kadN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49941	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	538	OUT	GET /aaq/wf/wf-tabs-1.12.6-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:32 UTC	854	IN	HTTP/1.1 200 OK x-amz-id-2: dKh7HdqvxGHpnO9ayYfYahDCF+wphaGmlVy9237N+klBRTFSvJbpSrs4f8LR6Eq/5QwX83eV8NY= x-amz-request-id: QKT17Y4MYC4FQDGW Date: Wed, 27 Mar 2024 06:53:40 GMT Last-Modified: Tue, 15 Mar 2022 07:44:13 GMT ETag: "ff6533febe2f4fb2e2dbaa32b38c5d20" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 9l5UHTD.5HUg6MnfgIovkt0YXJhWC8kn Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 14567 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 150473 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 74 61 62 73 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 74 61 62 73 22 5d 3d 65 28 29 3a 28 74 2e 77 61 66 65 72 3d 74 2e 77 61 66 65 72 7c 7c 7b 7d 2c 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 74 Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-tabs",[],e):"object"==typeof exports?exports["wafer-tabs"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|{},t
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 65 29 3a 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 Data Ascii: ype=Object.create(e&&e.prototype,{constructor:{value:t,enumerable:!1,writable:!0,configurable:!0}}),e&&(Object.setPrototypeOf?Object.setPrototypeOf(t,e):t.__proto__=e)}function r(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a func
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 69 29 7b 72 65 74 75 72 6e 20 61 26 26 74 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 61 29 2c 69 26 26 74 28 65 2c 69 29 2c 65 7d 7d 28 29 2c 68 3d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 61 2c 69 29 7b 6e 75 6c 6c 3d 3d 3d 65 26 26 28 65 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 3b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 61 29 Data Ascii: umerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}return function(e,a,i){return a&&t(e.prototype,a),i&&t(e,i),e}}(),h=function t(e,a,i){null===e&&(e=Function.prototype);var o=Object.getOwnPropertyDescriptor(e,a)
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 74 65 28 45 2b 22 61 75 74 6f 2d 73 77 69 74 63 68 22 29 29 7c 7c 30 2c 79 3d 4e 75 6d 62 65 72 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 45 2b 22 61 75 74 6f 2d 73 77 69 74 63 68 2d 74 69 6d 65 6f 75 74 22 29 29 7c 7c 32 65 33 2c 54 3d 4e 75 6d 62 65 72 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 45 2b 22 61 75 74 6f 2d 73 77 69 74 63 68 2d 72 6f 74 61 74 69 6f 6e 2d 69 6e 74 65 72 76 61 6c 22 29 29 7c 7c 30 2c 5f 3d 4e 75 6d 62 65 72 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 45 2b 22 61 63 74 69 76 65 2d 69 6e 64 65 78 22 29 29 7c 7c 28 68 3f 6e 75 6c 6c 3a 30 29 2c 4f 3d 77 28 74 2c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 45 2b 22 62 6f 75 6e 64 61 72 79 22 29 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 53 3d 74 2e 67 65 74 Data Ascii: te(E+"auto-switch"))\|\|0,y=Number(t.getAttribute(E+"auto-switch-timeout"))\|\|2e3,T=Number(t.getAttribute(E+"auto-switch-rotation-interval"))\|\|0,_=Number(t.getAttribute(E+"active-index"))\|\|(h?null:0),O=w(t,t.getAttribute(E+"boundary"))\|\|document.body,S=t.get
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 29 7b 73 5b 74 5d 3d 73 5b 74 5d 2e 62 69 6e 64 28 73 29 7d 29 2c 67 26 26 73 2e 73 65 74 54 69 6d 65 6f 75 74 46 6f 72 54 61 62 43 68 61 6e 67 65 28 29 2c 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 2c 73 7d 72 65 74 75 72 6e 20 73 28 65 2c 74 29 2c 63 28 65 2c 5b 7b 6b 65 79 3a 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 61 3d 74 2e 73 68 6f 75 6c 64 41 75 74 6f 53 77 69 74 63 68 2c 69 3d 74 2e 74 61 72 67 65 74 45 6c 65 6d 3b 61 26 26 28 67 28 69 2c 22 66 6f 63 75 73 69 6e 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 54 61 72 67 65 74 46 6f 63 75 73 49 6e 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 2c 67 28 69 2c 22 66 6f 63 Data Ascii: ){s[t]=s[t].bind(s)}),g&&s.setTimeoutForTabChange(),s.addEventListeners(),s}return s(e,t),c(e,[{key:"addEventListeners",value:function(){var t=this._util,a=t.shouldAutoSwitch,i=t.targetElem;a&&(g(i,"focusin",this.handleTargetFocusIn,{passive:!1}),g(i,"foc
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 61 3d 65 2e 66 6f 63 75 73 2c 69 3d 76 6f 69 64 20 30 21 3d 3d 61 26 26 61 2c 6f 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 74 61 62 73 45 6c 65 6d 73 2c 73 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 49 6e 64 65 78 2c 72 3d 22 6e 65 78 74 22 3d 3d 3d 74 3f 73 2b 31 3a 73 2d 31 3b 73 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 2d 31 26 26 22 6e 65 78 74 22 3d 3d 3d 74 3f 74 68 69 73 2e 61 63 74 69 76 61 74 65 54 61 62 28 6f 5b 30 5d 2e 74 61 62 45 6c 65 6d 2c 7b 66 6f 63 75 73 3a 69 2c 66 6f 72 63 65 3a 21 30 7d 29 3a 30 3d 3d 3d 73 26 26 22 70 72 65 76 22 3d 3d 3d 74 3f 74 68 69 73 2e 61 63 74 69 76 61 74 65 54 61 62 28 6f 5b 6f 2e 6c 65 6e 67 74 68 2d 31 5d Data Ascii: 0!==arguments[1]?arguments[1]:{},a=e.focus,i=void 0!==a&&a,o=this._util.tabsElems,s=this._state.activeIndex,r="next"===t?s+1:s-1;s===o.length-1&&"next"===t?this.activateTab(o[0].tabElem,{focus:i,force:!0}):0===s&&"prev"===t?this.activateTab(o[o.length-1]
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 6c 64 41 75 74 6f 53 77 69 74 63 68 2c 4f 3d 67 2e 73 68 6f 75 6c 64 53 63 72 6f 6c 6c 52 65 73 74 6f 72 65 2c 53 3d 67 2e 73 68 6f 75 6c 64 55 73 65 41 72 69 61 2c 6b 3d 67 2e 74 61 62 73 45 6c 65 6d 73 2c 43 3d 67 2e 74 61 72 67 65 74 45 6c 65 6d 73 2c 78 3d 74 68 69 73 2e 5f 73 74 61 74 65 2c 46 3d 78 2e 61 63 74 69 76 65 49 6e 64 65 78 2c 6a 3d 78 2e 74 61 62 73 54 6f 70 53 74 79 6c 65 49 6e 50 69 78 65 6c 3b 62 3d 70 26 26 21 70 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 77 61 66 65 72 2d 66 65 74 63 68 2d 63 6f 6d 70 6c 65 74 65 22 29 2c 41 26 26 74 68 69 73 2e 70 61 75 73 65 53 77 69 74 63 68 69 6e 67 28 29 3b 76 61 72 20 4c 3d 30 2c 49 3d 30 3b 69 66 28 4f 29 7b 76 61 72 20 50 3d 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 Data Ascii: ldAutoSwitch,O=g.shouldScrollRestore,S=g.shouldUseAria,k=g.tabsElems,C=g.targetElems,x=this._state,F=x.activeIndex,j=x.tabsTopStyleInPixel;b=p&&!p.classList.contains("wafer-fetch-complete"),A&&this.pauseSwitching();var L=0,I=0;if(O){var P=window.pageYOffs
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 65 6d 3a 77 2c 6d 65 74 61 3a 7b 74 61 62 45 6c 65 6d 3a 69 2c 74 61 72 67 65 74 45 6c 65 6d 3a 6e 7d 7d 29 7d 7d 65 6c 73 65 20 76 2e 6c 6f 63 6b 28 69 29 2c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 64 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 21 31 29 2c 53 26 26 28 6e 26 26 6e 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 68 69 64 64 65 6e 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 2d 31 29 29 2c 6e 26 26 21 45 26 26 28 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 79 29 2c 5f 26 26 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 5f 29 2c 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e Data Ascii: em:w,meta:{tabElem:i,targetElem:n}})}}else v.lock(i),i.classList.remove(d),i.setAttribute("aria-selected",!1),S&&(n&&n.removeAttribute("hidden"),i.setAttribute("tabindex",-1)),n&&!E&&(n.classList.remove(y),_&&n.classList.add(_),n.setAttribute("aria-hidden
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 61 62 46 6f 63 75 73 49 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 61 3d 65 2e 73 68 6f 75 6c 64 48 61 6e 64 6c 65 46 6f 63 75 73 2c 69 3d 65 2e 66 6f 63 75 73 4f 75 74 54 69 6d 65 6f 75 74 3b 61 26 26 28 69 26 26 79 28 69 2c 74 68 69 73 29 2c 74 68 69 73 2e 61 63 74 69 76 61 74 65 54 61 62 28 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 29 7d 7d 2c 7b 6b 65 79 3a 22 66 6f 63 75 73 49 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 75 74 69 6c 2e 73 68 6f 75 6c 64 55 73 65 41 72 69 61 26 26 67 28 64 6f 63 75 6d 65 6e 74 2c 22 6b 65 79 64 6f 77 6e 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 4b 65 79 44 6f 77 6e 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c Data Ascii: abFocusIn",value:function(t){var e=this._util,a=e.shouldHandleFocus,i=e.focusOutTimeout;a&&(i&&y(i,this),this.activateTab(t.currentTarget))}},{key:"focusIn",value:function(t){this._util.shouldUseAria&&g(document,"keydown",this.handleKeyDown)}},{key:"handl
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 65 76 65 6e 74 54 61 72 67 65 74 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 7c 7c 30 3b 74 68 69 73 2e 61 63 74 69 76 61 74 65 54 61 62 28 74 2e 65 76 65 6e 74 54 61 72 67 65 74 2e 6f 70 74 69 6f 6e 73 5b 65 5d 29 7d 7d 2c 7b 6b 65 79 3a 22 64 65 73 74 72 6f 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 61 75 73 65 53 77 69 74 63 68 69 6e 67 28 29 2c 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 2c 68 28 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 64 65 73 74 72 6f 79 22 2c 74 68 69 73 Data Ascii: preventDefault();var e=t.eventTarget.selectedIndex\|\|0;this.activateTab(t.eventTarget.options[e])}},{key:"destroy",value:function(){this.pauseSwitching(),this.removeEventListeners(),h(e.prototype.__proto__\|\|Object.getPrototypeOf(e.prototype),"destroy",this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49937	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	546	OUT	GET /aaq/wf/wf-autocomplete-1.31.8-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:32 UTC	853	IN	HTTP/1.1 200 OK x-amz-id-2: EJO6SQVaxMKB7hwXpHsfGW74tffrTGtBuQKxL7LL/ZQBAq3leqGqL3722uYvGIUW9LDkAJt2UaU= x-amz-request-id: 98H5BDP84JYH216K Date: Thu, 28 Mar 2024 01:54:10 GMT Last-Modified: Mon, 04 Dec 2023 12:09:37 GMT ETag: "ad4b4808c249d200df8bcdb043ac4611" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 8t4F7XT1EMez7nbFAsJiLxiBVvaxQ2pI Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 29594 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 82043 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-autocomplete",[],t):"object"==typeof exports?exports["wafer-autocomplete"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wa
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 74 2e 6e 63 29 2c 73 2e 73 72 63 3d 74 2e 70 2b 22 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 31 2e 33 31 2e 38 2d 6d 6f 64 65 72 6e 2d 22 2b 7b 30 3a 22 61 34 66 33 31 65 31 30 61 65 22 7d 5b 65 5d 2b 22 2e 63 68 75 6e 6b 2e 6a 73 22 3b 76 61 72 20 6c 3d 73 65 74 54 69 6d 65 6f 75 74 28 69 2c 31 32 65 34 29 3b 72 65 74 75 72 6e 20 73 2e 6f 6e 65 72 72 6f 72 3d 73 2e 6f 6e 6c 6f 61 64 3d 69 2c 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 2c 72 7d 2c 74 2e 6d 3d 65 2c 74 2e 63 3d 61 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 61 29 7b 74 2e 6f 28 65 2c 69 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 Data Ascii: t.nc),s.src=t.p+"wf-autocomplete-1.31.8-modern-"+{0:"a4f31e10ae"}[e]+".chunk.js";var l=setTimeout(i,12e4);return s.onerror=s.onload=i,o.appendChild(s),r},t.m=e,t.c=a,t.d=function(e,i,a){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,ge
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 Data Ascii: ot call a class as a function")}function l(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function u(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!=t
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 65 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c Data Ascii: w ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!=typeof t&&"function"!=typeof t?e:t}function m(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function,
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 69 29 2c 61 26 26 65 28 74 2c 61 29 2c 74 7d 7d 28 29 2c 5f 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 77 3d 5f 2e 62 61 73 65 2c 4c 3d 5f 2e 63 6f 6e 73 74 61 6e 74 73 2c 4f 3d 5f 2e 75 74 69 6c 73 2c 6b 3d 4c 2e 41 54 54 52 5f 50 52 45 46 49 58 2c 45 3d 4f 2e 62 69 6e 64 45 76 65 6e 74 2c 43 3d 4f 2e 63 6f 6e 76 65 72 74 4e 6f 64 65 4c 69 73 74 54 6f 41 72 72 61 79 2c 41 3d 4f 2e 66 65 74 63 68 57 69 74 68 43 61 63 68 65 2c 54 3d 4f 2e 66 69 6e 64 41 6e 63 65 73 74 6f 72 2c 6a 3d 4f 2e 67 65 74 43 6f 6e 66 69 67 46 72 6f 6d 4a 53 4f 4e 53 63 72 69 70 74 4e 6f 64 65 2c 53 3d 4f 2e 67 65 74 44 61 74 61 59 6c 6b 2c 50 3d 4f 2e 67 65 74 54 65 6d 70 6c 61 74 65 43 6f 6e 74 65 6e 74 2c 78 3d 4f 2e 67 65 74 57 61 66 65 72 Data Ascii: (t.prototype,i),a&&e(t,a),t}}(),_=window.wafer,w=_.base,L=_.constants,O=_.utils,k=L.ATTR_PREFIX,E=O.bindEvent,C=O.convertNodeListToArray,A=O.fetchWithCache,T=O.findAncestor,j=O.getConfigFromJSONScriptNode,S=O.getDataYlk,P=O.getTemplateContent,x=O.getWafer
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 2d 63 6f 6e 74 72 6f 6c 73 22 29 7c 7c 69 26 26 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 22 2c 69 2b 22 2d 6c 69 73 74 22 29 2c 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 29 7c 7c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 22 66 61 6c 73 65 22 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 61 3d 74 2e 63 6c 65 61 72 42 75 74 74 6f 6e 2c 6e 3d 74 2e 73 61 76 65 64 4c 6f 63 61 74 69 6f 6e 54 61 72 67 65 74 2c 72 3d 74 2e 74 61 72 67 65 74 45 6c 65 6d 2c 6f Data Ascii: -controls")\|\|i&&t.setAttribute("aria-controls",i+"-list"),t.hasAttribute("aria-expanded")\|\|t.setAttribute("aria-expanded","false")}},{key:"addEventListeners",value:function(){var e=this,t=this._util,a=t.clearButton,n=t.savedLocationTarget,r=t.targetElem,o
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 65 2e 63 6c 65 61 72 42 75 74 74 6f 6e 2c 69 3d 65 2e 73 61 76 65 64 4c 6f 63 61 74 69 6f 6e 54 61 72 67 65 74 2c 61 3d 65 2e 74 61 72 67 65 74 45 6c 65 6d 3b 69 26 26 42 28 69 2c 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 4c 69 73 74 43 6c 69 63 6b 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 2c 42 28 61 2c 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 4c 69 73 74 43 6c 69 63 6b 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 2c 42 28 61 2c 22 6b 65 79 64 6f 77 6e 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 4c 69 73 74 4b 65 79 44 6f 77 6e 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 2c 74 26 26 42 28 74 2c 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 68 61 6e 64 Data Ascii: function(){var e=this._util,t=e.clearButton,i=e.savedLocationTarget,a=e.targetElem;i&&B(i,"click",this.handleListClick,{passive:!1}),B(a,"click",this.handleListClick,{passive:!1}),B(a,"keydown",this.handleListKeyDown,{passive:!1}),t&&B(t,"click",this.hand
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 74 73 4d 65 73 73 61 67 65 2c 76 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 77 6f 65 69 64 3b 69 66 28 76 26 26 28 73 3d 73 2b 22 26 77 6f 65 69 64 3d 22 2b 76 29 2c 72 3e 30 26 26 21 74 68 69 73 2e 5f 73 74 61 74 65 2e 6c 69 73 74 4f 70 65 6e 29 7b 76 61 72 20 6d 3d 74 68 69 73 2e 67 65 74 50 6c 61 63 65 68 6f 6c 64 65 72 73 28 29 3b 74 68 69 73 2e 5f 73 74 61 74 65 2e 70 6c 61 63 65 68 6f 6c 64 65 72 73 56 69 73 69 62 6c 65 3d 21 30 2c 74 68 69 73 2e 73 68 6f 77 4c 69 73 74 28 29 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6d 29 7d 76 61 72 20 79 3d 7b 63 61 63 68 65 3a 31 2c 63 61 63 68 65 53 74 72 61 74 65 67 79 3a 22 63 61 63 68 65 46 69 72 73 74 22 2c 6d 6f 64 65 3a 22 63 6f 72 73 22 2c 74 69 6d 65 6f 75 74 3a 66 2c 75 73 65 52 69 64 3a 30 7d 3b 41 28 Data Ascii: tsMessage,v=this._state.woeid;if(v&&(s=s+"&woeid="+v),r>0&&!this._state.listOpen){var m=this.getPlaceholders();this._state.placeholdersVisible=!0,this.showList(),n.appendChild(m)}var y={cache:1,cacheStrategy:"cacheFirst",mode:"cors",timeout:f,useRid:0};A(
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 65 6d 2c 6e 3d 74 2e 6c 69 73 74 45 6c 65 6d 3b 65 3d 65 7c 7c 6e 2c 65 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 3d 22 31 22 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6c 69 73 74 2d 61 63 74 69 76 65 22 29 2c 69 26 26 69 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 61 63 74 69 76 65 22 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 22 74 72 75 65 22 29 2c 77 2e 65 6d 69 74 57 61 66 65 72 45 76 65 6e 74 28 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3a 6f 70 65 6e 22 2c 7b 65 6c 65 6d 3a 61 2c 6d 65 74 61 3a 7b 7d 7d 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 68 69 64 65 4c 69 73 74 22 2c 76 Data Ascii: em,n=t.listElem;e=e\|\|n,e.style.opacity="1",e.classList.add("wafer-autocomplete-list-active"),i&&i.classList.add("wafer-autocomplete-active"),a.setAttribute("aria-expanded","true"),w.emitWaferEvent("autocomplete:open",{elem:a,meta:{}})}}},{key:"hideList",v
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 69 2c 22 77 61 66 65 72 2d 66 6f 72 6d 22 29 3b 69 66 28 61 29 7b 74 68 69 73 2e 5f 75 74 69 6c 2e 66 6f 72 6d 49 6e 73 74 61 6e 63 65 3d 61 3b 61 2e 69 6e 73 74 61 6e 63 65 2e 73 75 62 6d 69 74 46 6f 72 6d 28 29 7d 7d 74 68 69 73 2e 64 69 64 43 6f 6d 70 6c 65 74 65 28 6e 75 6c 6c 2c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 76 61 6c 75 65 22 29 7c 7c 74 2e 76 61 6c 75 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 4c 69 73 74 49 74 65 6d 53 65 6c 65 63 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 61 3d 69 2e 73 61 76 65 64 4c 6f 63 61 74 69 6f 6e 54 61 72 67 65 74 2c 6e 3d 69 2e 79 6c 6b 4d 61 70 3b 69 66 28 65 2e Data Ascii: i,"wafer-form");if(a){this._util.formInstance=a;a.instance.submitForm()}}this.didComplete(null,t.getAttribute("data-value")\|\|t.value.toLowerCase())}},{key:"handleListItemSelect",value:function(e,t){var i=this._util,a=i.savedLocationTarget,n=i.ylkMap;if(e.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49947	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	544	OUT	GET /aaq/wf/wf-geolocation-1.3.0-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:32 UTC	851	IN	HTTP/1.1 200 OK x-amz-id-2: JkULqQT8WXOKH9jJp8SIF0Gr6FU0xVVbFJoP6NRxDUa1wxCoExdU1mr/Q5eqesJvVGdO6IkyZq8= x-amz-request-id: ARBZKC1XRSBXXNFY Date: Thu, 28 Mar 2024 22:54:59 GMT Last-Modified: Sun, 26 Jun 2022 23:02:47 GMT ETag: "69d9917872ff1011bcb87d5044f6e12d" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: LeRXhTI8jsXZi5VD27HcACcazjCdOxvi Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 7977 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 6394 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 67 65 6f 6c 6f 63 61 74 69 6f 6e 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 67 65 6f 6c 6f 63 61 74 69 6f 6e 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-geolocation",[],t):"object"==typeof exports?exports["wafer-geolocation"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafe
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 Data Ascii: "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function i(e,t){if(!(e instanceof t))throw new TypeError("Cannot c
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 69 74 68 43 61 63 68 65 2c 76 3d 70 2e 41 54 54 52 5f 50 52 45 46 49 58 2c 77 3d 5b 22 68 61 6e 64 6c 65 43 6c 69 63 6b 22 5d 2c 6d 3d 22 75 73 65 72 2e 63 75 72 72 65 6e 74 50 72 65 63 69 73 65 4c 6f 63 61 74 69 6f 6e 22 2c 62 3d 5b 22 22 5d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 61 3d 6f 2e 73 65 6c 65 63 74 6f 72 3b 72 28 74 68 69 73 2c 74 29 3b 76 61 72 20 69 3d 6e 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 Data Ascii: ithCache,v=p.ATTR_PREFIX,w=["handleClick"],m="user.currentPreciseLocation",b=[""],_=function(e){function t(e){var o=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},a=o.selector;r(this,t);var i=n(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 70 72 6f 67 72 65 73 73 22 29 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 69 66 28 30 3d 3d 3d 65 2e 5f 73 74 61 74 65 2e 66 65 74 63 68 53 74 61 74 75 73 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 45 72 72 6f 72 28 22 66 65 74 63 68 20 69 6e 20 70 72 6f 67 72 65 73 73 22 29 29 3b 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 2e 5f 73 74 61 74 65 2e 66 65 74 63 68 53 74 61 74 75 73 3d 30 2c 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 2e 67 65 74 43 75 72 72 65 6e 74 50 6f 73 69 74 69 6f 6e 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6e 3d 72 2e 63 6f 6f 72 64 73 2c 61 3d 6e 2e 6c 61 74 69 74 75 64 65 2c 69 3d 6e 2e 6c 6f 6e 67 Data Ascii: progress"),new Promise(function(t,n){if(0===e._state.fetchStatus)return n(new Error("fetch in progress"));window.navigator.geolocation?(e._state.fetchStatus=0,window.navigator.geolocation.getCurrentPosition(function(r){var n=r.coords,a=n.latitude,i=n.long
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 5d 29 2c 74 7d 28 68 29 3b 5f 2e 65 76 65 6e 74 73 3d 7b 63 6c 69 63 6b 3a 5b 5b 22 68 61 73 2d 67 65 6f 6c 6f 63 61 74 69 6f 6e 2d 63 6c 69 63 6b 22 2c 22 68 61 6e 64 6c 65 43 6c 69 63 6b 22 5d 5d 7d 3b 76 61 72 20 6b 3d 5f 2c 4f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6f 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 72 29 26 26 28 65 5b 72 5d 3d 6f 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 Data Ascii: ]),t}(h);_.events={click:[["has-geolocation-click","handleClick"]]};var k=_,O=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var o=arguments[t];for(var r in o)Object.prototype.hasOwnProperty.call(o,r)&&(e[r]=o[r])}return e},j=function(){fu
2024-03-29 00:41:32 UTC	1300	IN	Data Raw: 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 61 3d 28 63 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 61 3d 21 30 29 7b 63 2e 76 61 6c 75 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 67 65 6f 6c 6f 63 61 74 69 6f 6e 2d 64 65 6e 69 65 64 22 29 7d 7d 63 61 74 63 68 28 65 29 7b 69 3d 21 30 2c 73 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 61 26 26 6c 2e 72 65 74 75 72 6e 26 26 6c 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 69 29 74 68 72 6f 77 20 73 7d 7d 7d 72 2e 5f 73 74 61 74 65 2e 70 65 72 6d 69 73 73 69 6f 6e 53 74 61 74 65 3d 6f 2c 74 2e 6f 6e 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 5f 73 74 61 74 65 2e 70 65 72 6d 69 73 73 69 6f 6e 53 74 61 74 65 3d 74 68 69 Data Ascii: [Symbol.iterator]();!(a=(c=l.next()).done);a=!0){c.value.classList.add("wafer-geolocation-denied")}}catch(e){i=!0,s=e}finally{try{!a&&l.return&&l.return()}finally{if(i)throw s}}}r._state.permissionState=o,t.onchange=function(){r._state.permissionState=thi
2024-03-29 00:41:32 UTC	177	IN	Data Raw: 64 65 73 74 72 6f 79 28 29 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 6c 69 63 6b 22 3a 63 61 73 65 22 65 61 63 68 43 6c 69 63 6b 22 3a 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 68 61 73 2d 67 65 6f 6c 6f 63 61 74 69 6f 6e 2d 63 6c 69 63 6b 22 2c 22 68 61 73 2d 77 61 66 65 72 2d 63 6c 69 63 6b 22 29 7d 7d 29 7d 7d 7d 5d 29 2c 74 7d 28 50 29 2c 45 3d 53 3b 74 2e 64 65 66 61 75 6c 74 3d 6e 65 77 20 45 28 7b 73 65 6c 65 63 74 6f 72 3a 22 2e 77 61 66 65 72 2d 67 65 6f 6c 6f 63 61 74 69 6f 6e 22 7d 29 7d 7d 29 7d 29 3b Data Ascii: destroy()});break;case"click":case"eachClick":e.classList.add("has-geolocation-click","has-wafer-click")}})}}}]),t}(P),E=S;t.default=new E({selector:".wafer-geolocation"})}})});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49946	34.200.65.202	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	1384	OUT	GET /ups/58746/sync?ui=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb&redir=true&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC=19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0
2024-03-29 00:41:32 UTC	689	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:32 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 29-Mar-2025 00:41:32 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://trc.taboola.com/sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb&us_privacy=1YNN Age: 0 Connection: close Server: ATS/9.1.10.106

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49923	23.43.243.35	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	614	OUT	GET /ss/nes/hbc?callback=window.advBidxc.cobrandConfig&cobrand=none HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10
2024-03-29 00:41:32 UTC	356	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Pragma: max-age=604800 Cache-Control: max-age=1800, post-check=1800 Expires: Fri, 29 Mar 2024 01:11:32 GMT Date: Fri, 29 Mar 2024 00:41:32 GMT Content-Length: 67 Connection: close Strict-Transport-Security: max-age=604800 Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-29 00:41:32 UTC	67	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 76 42 69 64 78 63 2e 63 6f 62 72 61 6e 64 43 6f 6e 66 69 67 28 7b 22 63 6f 64 65 22 3a 22 30 22 2c 22 64 61 74 61 22 3a 7b 22 62 41 64 76 44 6d 73 22 3a 6e 75 6c 6c 7d 7d 29 Data Ascii: window.advBidxc.cobrandConfig({"code":"0","data":{"bAdvDms":null}})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49942	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	1370	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=2023538075&yhlCT=2&yhlBTMS=1711672892006&yhlClientVer=3.53.39&yhlRnd=9hT3wM5qFLIg7ITv&yhlCompressed=0 HTTP/1.1 Host: udc.yahoo.com Connection: keep-alive Content-Length: 2979 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:32 UTC	2979	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 43 6b 4f 42 6d 59 43 45 50 75 4f 6b 42 4a 37 74 48 34 45 66 66 44 78 4a 65 2d 4c 62 68 55 46 45 67 45 42 41 51 46 66 42 32 59 50 5a 74 77 76 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 6f 47 69 50 52 53 53 54 37 79 47 72 33 2d 72 48 33 45 62 31 6a 34 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 33 2e 33 39 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 56 45 52 53 49 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.53.39%22%2C%22A_cn%22%3A%22VERSI
2024-03-29 00:41:33 UTC	591	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.yahoo.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 2 date: Fri, 29 Mar 2024 00:41:32 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49948	34.200.65.202	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	1285	OUT	GET /ups/58739/cms?partner_id=BLKAI&orig=ono HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC=19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0
2024-03-29 00:41:32 UTC	568	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:32 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 29-Mar-2025 00:41:32 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://tags.bluekai.com/site/19505?id=y-M5CU46VE2pKQ0CgwrfMIsdT_mjt7Wc1dhhg-~A Age: 0 Connection: close Server: ATS/9.1.10.106

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49949	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	1329	OUT	GET /px.gif?ch=1&rn=9.35954851852123 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; YHB__li_dcdm_c=.com; YHB__lc2_fpi=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q; YHB__lc2_fpi_meta=%7B%22w%22%3A1711672890010%7D; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:33 UTC	1271	IN	HTTP/1.1 200 OK x-amz-id-2: RX0rTXh0Jz265/11he+pBkJkJLmZ+MYNdBjqhfO8s+qBFdMkGeBXOEQpaC8fIW1j/0LAtDlM16Y= x-amz-request-id: DEWQ08EQK6EE2SNP Date: Fri, 29 Mar 2024 00:41:33 GMT Last-Modified: Wed, 30 Nov 2022 19:09:07 GMT ETag: "b4682377ddfbe4e7dabfddb2e543e842" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 42 Referrer-Policy: no-referrer-when-downgrade Age: 0 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 Vary: Origin Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=24jcjn9j0c3hs&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block
2024-03-29 00:41:33 UTC	35	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: X-Content-Type-Options: nosniff
2024-03-29 00:41:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	49944	34.200.65.202	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	1297	OUT	GET /ups/58782/cms?partner_id=ADOBE&orig=ono&redir2=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC=19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0
2024-03-29 00:41:32 UTC	729	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:32 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 29-Mar-2025 00:41:32 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://dpm.demdex.net/ibs:dpid=30646?dpuuid=y-7weHGmVE2pGShYPAsA_2AZ9rP8SJTZiRMVg-~A&redir=https%3A%2F%2Fups.analytics.yahoo.com%2Fups%2F58782%2Fcms%3Fpartner_id%3DADOBE%26_origin%3Dfalse%26_redirect%3Dfalse%26_hosted_id%3D%24%7BDD_UUID%7D Age: 0 Connection: close Server: ATS/9.1.10.106

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49956	3.230.217.116	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	1251	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1471 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:32 UTC	1471	OUT	Data Raw: 7b 22 69 64 22 3a 22 64 63 35 30 32 65 61 37 2d 31 33 30 61 2d 34 37 38 66 2d 61 32 35 64 2d 31 31 33 35 62 31 31 33 34 39 36 38 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 35 32 31 37 30 31 30 33 39 32 30 39 33 36 34 32 31 37 31 31 36 37 32 38 39 31 36 32 30 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 33 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 76 69 64 65 6f 22 3a Data Ascii: {"id":"dc502ea7-130a-478f-a25d-1135b1134968","cur":["USD"],"imp":[{"id":"52170103920936421711672891620","secure":1,"bidfloor":0.3,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":300,"h":250}]},"video":
2024-03-29 00:41:33 UTC	348	IN	HTTP/1.1 204 No Content Date: Fri, 29 Mar 2024 00:41:32 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	49959	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	521	OUT	GET /uu/api/res/1.2/pCTJDhUlfaOLjVy_BN8xpw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ny_post_articles_869/fb2f3b77989e5eb20704a6386c0e6d4d.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:33 UTC	1277	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 326462486219046161544806036348322304999,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="fb2f3b77989e5eb20704a6386c0e6d4d.webp" Edge-Cache-Tag: 326462486219046161544806036348322304999,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "73c99aa1a2b77cd10144d43d1ed5fc07" Expiration: expiry-date="Wed, 25 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 28 Mar 2024 23:47:24 GMT Server: ATS Surrogate-Reporting: width=536,height=284,bytes=25900,owidth=2000,oheight=1333,obytes=443935,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Fri, 29 Mar 2024 00:35:53 GMT X-Served-By: cache-lga21937-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711672554.524320,VS0,VE1 Age: 339 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-lga21937-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 61390 Connection: close
2024-03-29 00:41:33 UTC	178	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF@ICC_PROFILE0ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: c7 02 93 54 4a 54 0d 73 84 b6 ac f0 b8 df df 19 3b 4d 59 68 a2 13 a3 61 db 19 2f d8 53 26 11 67 d3 bf 6c 72 38 5c a6 fd b1 78 f0 71 ad 07 cd 8b b3 85 8d 6e 05 bb 5f 16 4c b2 31 2a 25 d0 dd b0 ae 65 61 60 4c 68 73 15 11 21 43 6d 5d 70 b5 71 43 b0 f6 89 b5 3e a4 b7 98 01 0b dd 23 14 92 a6 6c 2e 51 ad 9a ec bf 8b d1 e8 6d 81 da 06 cd 39 a2 9e e5 4a 1a 9c 09 2a 36 b9 c5 e2 c0 e5 8d a0 70 ec 27 59 70 b6 a0 ab 8c 1a 2e cc 86 9b 67 57 ff 00 47 92 14 3c 13 8d bf f7 c6 67 fe 46 87 f2 c3 fa df b8 4f 61 f0 1a 7e 16 39 fb c8 c3 c6 65 1e f8 36 ff 00 60 db 10 c9 42 84 a5 4d 32 2c 35 5b 15 2d e9 1e 54 9d 00 6d 8e 28 cf 46 9c e9 78 6a 1e 4e e6 fd 31 cd 59 c8 74 13 11 a7 c8 6e 7d f1 14 5d 1a 5f 7d c7 06 97 1b 46 8f 96 2c 54 d4 d3 ec b4 a0 a4 ed 6e c3 1d 4c eb 14 0a ab 43 Data Ascii: TJTs;MYha/S&glr8\xqn_L1%ea`Lhs!Cm]pqC>#l.Qm9J6p'Yp.gWG<gFOa~9e6`BM2,5[-Tm(FxjN1Ytn}]_}F,TnLC
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: d5 58 23 9b f4 0d 33 71 85 15 b4 dd 05 6a 23 b6 ac 47 b3 8f 25 90 92 0a 9b 3f 53 7c 4d 15 42 94 bc 94 a4 02 31 d4 59 70 60 e3 f1 d2 ab ad 02 e7 bd b1 ca 24 f7 15 77 c6 cf 88 e3 c3 bc bc 38 6f 93 66 ad ac c5 5a 67 99 29 f6 95 65 c3 86 ab 8d 88 3e 55 b9 b8 1d d2 90 a5 6c 74 9c 53 63 f0 8c eb af 2f b3 9f 11 63 38 f4 67 64 b4 10 b0 db 61 6a ba 6f 6f 32 52 7f f3 5f e9 84 fb db 35 a3 1b 43 85 71 30 23 47 69 b4 b4 10 e8 45 f6 3b a6 fd 88 c5 4a d5 12 9e 0c f1 ef 88 5c 0e ae a2 ad 94 2b 2b 4c 37 56 95 4d a5 be 54 b8 93 53 bd c2 d1 7b 05 5b a2 c7 98 7a d8 90 6b 6c b7 62 69 a2 db 70 57 88 f4 7e 24 d7 68 b9 92 8e a0 87 1e aa b2 a9 31 ca f5 2d 85 eb 1e 55 74 f7 b1 b6 e3 ea 06 d6 07 78 4f 2f b1 ae f0 66 e0 b8 02 53 a7 b9 c2 ee 23 8a 6e 8c fe 29 df 5c 50 9e f6 60 a9 0e Data Ascii: X#3qj#G%?S\|MB1Yp`$w8ofZg)e>UltSc/c8gdajoo2R_5Cq0#GiE;J\++L7VMTS{[zklbipW~$h1-UtxO/fS#n)\P`
2024-03-29 00:41:33 UTC	1246	IN	Data Raw: c6 4d 4d 49 56 93 df a1 c5 5a 09 16 2c 68 b2 ea c2 1d 2b 17 fd dc 0a 7e 86 31 fb 26 74 c7 e8 89 87 c9 92 f2 da d3 dc a8 ff 00 23 8c 7c dd ff 00 06 8c 6a 86 ac d0 d5 31 68 48 a6 be 5c 2a 17 bd f0 c6 9b 9f c8 be 6a ae 08 6a a1 c9 57 de 49 38 d3 4c ce 91 ad 50 9e 4f 54 df 17 45 19 ad 50 94 6d f6 2e 7e 18 ba 65 1a 66 c4 35 25 bb 69 0b 4d b1 dc 11 42 94 3f 26 e0 10 76 ee 71 46 4a 4c 50 da d6 a2 35 62 8d a2 e9 33 ec 95 0d 09 36 ef 8e 4d 13 42 3e 60 f5 c1 2c a1 c2 26 ee 6e 31 94 8d 53 ce 02 06 f8 92 c8 d4 41 27 15 6a 82 46 1d c7 cb 11 88 26 50 a3 cd f5 c7 01 6a 85 68 65 4a 4d c1 c4 ae 48 12 49 d9 7a 6d d3 12 cb 21 23 9d b0 36 49 9e 20 e3 22 6d 8e 25 2b 3e a0 de f8 e3 aa 82 ee 46 6d 28 ca 4c 68 65 bf b6 79 d5 ac ac f9 d6 7c a1 3b 9b e9 06 c7 b8 1e fd 31 0c ad 12 Data Ascii: MMIVZ,h+~1&t#\|j1hH\*jjWI8LPOTEPm.~ef5%iMB?&vqFJLP5b36MB>`,&n1SA'jF&PjheJMHIzm!#6I "m%+>Fm(Lhey\|;1
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 1f 6c 04 dc 76 c5 59 28 c1 28 49 b5 ce 2a c7 70 a4 60 ea 00 1b 1c 54 ec a9 1a da fb d8 22 12 62 d4 b8 42 40 b6 2c 95 90 20 94 6e e1 36 c4 32 e2 6c 52 ac e3 d8 93 8f 63 8e 36 27 10 ce 0a 79 3a a0 94 65 48 5a dd ba 52 e3 a9 2a b7 dc dc 10 91 ed 63 81 c9 32 d5 64 ba 81 50 a7 2d c6 a3 30 a2 99 0b 79 25 6f 13 7d c1 07 a7 fc 70 bc df c1 a9 a7 8d 96 db 86 f9 ae 28 8e 8a 14 c7 8f 2d f4 a2 ca 51 24 02 12 05 ac 01 3b e3 1e 5c 9a f2 fb 50 47 cc 3c 38 ac bf 1d c9 d0 73 2a a2 97 05 f4 ab 52 42 c7 fa d7 1d 3f 9e 2a da a1 8d 5c fc 82 99 d1 aa 54 e5 2d 94 3e 5d 5b 76 d6 a0 4e e4 fb e1 67 91 24 6c d5 85 5e 12 66 14 54 8b 0c 54 6a ff 00 0f fb 29 3e bf e3 8b eb 4e 9f 26 7e dc 78 0b dc 4a 68 47 cb 29 fd 50 ca 1d 8e 1c 02 42 82 fa f6 d3 6b 7b f5 c6 8a 92 32 70 2b f6 73 37 c4 Data Ascii: lvY((Ip`T"bB@, n62lRc6'y:eHZRc2dP-0y%o}p(-Q$;\PG<8sRB?\T->][vNg$l^fTTj)>N&~xJhG)PBk{2p+s7
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: f3 df 0f ea 74 f8 8c d0 26 d2 d6 ed 9e 69 35 26 55 1d 4e 36 6d a5 68 0b 00 94 9d f7 1b 62 63 ae af f2 01 dc da 55 f8 87 ec a7 c7 de 2a 4b 0d ae bd 5a 02 2b 4b f2 b0 1a 52 90 4f 7d 3b 69 57 d4 ec 2d 86 5f 89 23 23 f3 67 90 c1 e2 79 b6 6b fc 2c a9 e7 e1 96 67 d4 e1 07 e1 52 a3 55 da 4b 8d c6 83 24 2d 4e b9 7b 80 14 a5 21 5a 02 54 0d b5 13 60 74 e1 be 9d 24 fd 0a f5 14 d4 68 a6 78 db 30 11 ec 71 63 d8 e2 8c f6 28 40 a2 16 ef 8c 1b 5f 99 a2 1a b0 86 c5 9b 84 00 1d 40 c7 ac af b6 c1 b6 58 0f 0e fc 55 85 44 a7 b5 4c a8 3c a4 3b 1d 65 03 dd 3d 47 f1 c7 9a d9 e7 20 f6 08 f7 06 69 fc 7d 55 2a a3 fa c2 97 3d d5 36 76 28 51 f2 91 dc 1c 28 c6 fe 99 b0 59 c5 1e 2f d4 b8 8a 5a 8c e3 05 98 cd 1f b9 af 55 fa 7b 0f 4c 2f 26 3b 83 5b fb 06 12 b2 6c 79 ec 15 69 04 9f 6e 98 Data Ascii: t&i5&UN6mhbcUKZ+KRO};iW-_##gyk,gRUK$-N{!ZT`t$hx0qc(@_@XUDL<;e=G i}U=6v(Q(Y/ZU{L/&;[lyin
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 96 52 63 49 ab c6 7d b0 da 52 31 4a 08 a7 63 8b 8d 46 78 1d 85 ce 25 2a 2e 84 0f d3 5a 4e e9 40 23 e5 88 a3 a8 c1 29 4b 62 c2 c3 1d 47 77 22 2d 9b eb 8c c3 8c b4 f3 34 94 a6 e4 5f ae 2e a3 42 9b 33 a4 d1 7e 7c 12 cb 13 3c 0f 2a 41 58 29 56 73 97 63 ff 00 74 de 35 b5 38 ca 79 7d f7 70 b2 63 63 8d b6 63 45 70 65 7b 03 88 65 c7 db 93 01 37 fd c1 85 5f ef 19 6b ec 1b 63 bb cb 59 57 4d 88 fc 46 18 03 13 4b e2 cd 93 dc e2 c0 a5 ec 49 7b 0c 59 15 48 f8 37 be 08 51 9f 71 16 41 b5 27 15 25 1b 15 75 63 82 76 d9 86 fd ce 28 a4 97 b6 57 c5 29 7a 43 2d 53 38 51 68 75 ea 6e 5e a9 cb 4c 67 ea ed 3c e4 52 b3 60 b5 35 a3 52 3e 76 58 23 e4 71 75 25 fd 90 b5 a4 c0 cf 89 2e 20 e4 3a c7 0a eb 0d 46 cc 51 25 49 61 ff 00 85 2c 34 ab ad b9 2d a8 85 21 43 a8 23 7e b6 e9 ee 30 0c Data Ascii: RcI}R1JcFx%.ZN@#)KbGw"-4_.B3~\|<AX)Vsct58y}pcccEpe{e7_kcYWMFKI{YH7QqA'%ucv(W)zC-S8Qhun^Lg<R`5R>vX#qu%. :FQ%Ia,4-!C#~0
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 91 31 cb f9 41 5d d0 9f 92 46 c3 1e 43 3f 52 dc d8 76 a4 7b 15 ab a7 a4 bf 1c 46 8e 20 f0 81 13 69 ed b6 ca 39 c2 31 52 d9 6d f4 07 12 d9 22 c4 a4 1e 86 dd c5 b1 0b a9 6d e1 f6 c0 ad 5d 4c fe a2 56 3a 87 86 ea b5 56 af 3e 2c 4a fc 5a 74 87 1c 54 af 87 99 74 b6 f9 51 3e 64 ab 72 3e b7 ed 87 d7 56 72 5c b2 8f a5 52 b5 2f fc 03 6a e7 04 78 9d 49 aa 1a 5a b2 84 c9 05 37 b3 f0 99 e6 b2 47 ae b4 12 91 df 63 a4 fa 8c 3f f5 98 2a ec 42 5a 7b 08 b1 5e 0a f2 dd 5f 23 cd cc 8c 66 c8 ce d3 18 a8 a6 32 58 4c 96 d6 de a5 a0 b9 75 0b 8b 01 e6 1d f1 8d d5 36 b0 ec f6 d0 ee 9e ae 65 ec b0 99 c8 d3 72 fd 16 75 66 88 ea 23 cc d2 39 69 8c ab 20 b8 4e c5 49 e8 7f 0b e1 0c 6e b8 1d c9 16 a2 57 8e 26 78 6e e2 3f 10 72 84 4e 26 53 f3 1c 8c df 29 80 f0 9f 11 44 73 a1 9b 82 84 a5 Data Ascii: 1A]FC?Rv{F i91Rm"m]LV:V>,JZtTtQ>dr>Vr\R/jxIZ7Gc?*BZ{^_#f2XLu6eruf#9i NInW&xn?rN&S)Ds
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: fa 76 84 36 ba 72 ce 99 a1 dc c3 4c a4 e6 28 f5 49 97 e5 ae 50 74 a9 08 ec 15 7f e7 8f 63 1e b1 82 95 9e 23 67 a3 ec 5f e2 0a 14 8c e9 96 6b 05 29 a7 d5 a3 ad 64 5f 96 b5 72 d6 3d ac ab 5c fc af 8d 4c 1b 58 33 2f c6 d1 95 9f a6 ec 61 e7 24 47 c0 e5 fb 60 bd c9 fa 13 95 af 66 ed 40 f7 c4 d9 54 a8 cd 02 d7 c4 58 48 c6 cd 4e 0b 62 c7 28 59 a3 1c 4f 8c f6 26 c8 70 a3 20 9b f4 c4 79 51 1e 24 cf a9 69 6a 3b 80 06 3b ca 8b 2c 54 7c 78 e8 56 81 d3 11 76 46 45 48 c5 2a f6 c5 c1 9b 11 bf 7c 73 e0 e1 d2 90 3f ac 91 fd dc 29 99 8d e0 42 5c c0 bb cd 09 1d 90 30 6c 4b 82 99 95 48 6b 07 b6 08 d0 b9 c6 5c 79 2a a3 d5 9e c5 19 c7 b1 27 1e c7 1c 63 8b 9c 7b 1c 71 ec 71 c7 b1 c7 19 63 8e 3d 8e 7c 1c b9 24 39 13 87 d9 d3 89 b9 8e 3e 53 c8 59 72 65 6a ab 26 fa 18 8e 91 b0 1d Data Ascii: v6rL(IPtc#g_k)d_r=\LX3/a$G`f@TXHNb(YO&p yQ$ij;;,T\|xVvFEH\|s?)B\0lKHk\y'c{qqc=\|$9>SYrej&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	49943	34.200.65.202	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	1285	OUT	GET /ups/58692/cms?partner_id=NEUAR&orig=ono HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC=19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0
2024-03-29 00:41:33 UTC	585	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:32 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 29-Mar-2025 00:41:32 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://aa.agkn.com/adscores/g.pixel?sid=9202214988&yho=y-jGJ1.cVE2p6n9kNjUpUTsoysez2PNDSbgvg-~A Age: 0 Connection: close Server: ATS/9.1.10.106

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	49960	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	2020	OUT	POST /p?s=2023538075&t=Ek8qbEGPHfSNrjiG,0.3503812169542493&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03C2WZIAfuc5wHrRWD%04_w%03www.yahoo.com%2F%04_rid%032vl5n89j0c3hk%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLQ1AMEACWH4gQEAMAdNgUEAZlCNwcEACPSVQgEAWVv0QoFVkNEUEE%04ns_ready%031925%04dcl_ready%03-6562%04_E%03saready%04_ts%031711672892%04_ms%03145%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:33 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:33 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	49945	34.200.65.202	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:32 UTC	1305	OUT	GET /ups/58699/cms?partner_id=SEMAS&orig=ono&sInitiator=external HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC=19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0
2024-03-29 00:41:33 UTC	618	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:33 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 29-Mar-2025 00:41:33 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://uipglob.semasio.net/oath/1/info?sType=sync&_sdv&sExtCookieId=y-IH9AJJtE2oPnY32nwExO7SVPiRrzp2zgABI-~A&sInitiator=external Age: 0 Connection: close Server: ATS/9.1.10.106

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	49953	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	2150	OUT	POST /p?s=2023538075&t=rE4MIfxN1zio7ljB,0.4099138849511881&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03C2WZIAfuc5wHrRWD%04_w%03www.yahoo.com%2F%04_rid%032vl5n89j0c3hk%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLQ1AMEACWH4gQEAMAdNgUEAZlCNwcEACPSVQgEAWVv0QoFVkNEUEE%04A_pfb%03649%04A_pbp%03690%04A_psr%03955%04A_pdi%034780%04A_psh%03237%04A_psc%03238%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031711672892%04_ms%03250%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:33 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:33 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	49952	3.230.217.116	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	1251	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1291 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:33 UTC	1291	OUT	Data Raw: 7b 22 69 64 22 3a 22 32 30 32 65 33 33 30 65 2d 34 66 33 64 2d 34 31 34 39 2d 38 64 35 31 2d 66 37 35 61 32 37 64 34 35 33 37 62 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 34 34 30 36 36 37 30 39 37 33 34 39 35 30 37 34 31 37 31 31 36 37 32 38 39 31 36 32 30 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 33 35 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 5d 7d 2c 22 65 78 74 22 3a 7b 22 Data Ascii: {"id":"202e330e-4f3d-4149-8d51-f75a27d4537b","cur":["USD"],"imp":[{"id":"44066709734950741711672891620","secure":1,"bidfloor":0.35,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":728,"h":90}]},"ext":{"
2024-03-29 00:41:33 UTC	348	IN	HTTP/1.1 204 No Content Date: Fri, 29 Mar 2024 00:41:33 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	49954	3.230.217.116	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	1251	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1305 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:33 UTC	1305	OUT	Data Raw: 7b 22 69 64 22 3a 22 37 38 37 33 39 38 31 31 2d 36 64 32 38 2d 34 37 37 63 2d 62 63 62 34 2d 36 64 63 63 36 62 33 31 64 65 33 39 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 35 30 36 38 35 31 37 31 37 39 36 30 30 30 35 31 37 31 31 36 37 32 38 39 31 36 32 31 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 30 35 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 65 78 74 22 3a 7b Data Ascii: {"id":"78739811-6d28-477c-bcb4-6dcc6b31de39","cur":["USD"],"imp":[{"id":"15068517179600051711672891621","secure":1,"bidfloor":0.05,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":300,"h":250}]},"ext":{
2024-03-29 00:41:33 UTC	348	IN	HTTP/1.1 204 No Content Date: Fri, 29 Mar 2024 00:41:33 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	49950	18.238.49.124	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	830	OUT	GET /p?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1711672891922 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:33 UTC	1020	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Fri, 29 Mar 2024 00:41:33 GMT Location: /p2?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1711672891922 set-cookie: UID=10A5517d307ba86b59849b41711672893; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=18A5517d3096d86b5984b671711672893; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 set-cookie: XID=10A5517d307ba86b59849b41711672893; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 a410463cf33c032bf74ee26bf94b81b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: T3NPuw8XAoAW1TNts4dNCoFBimbt3RCtl2T8ODzS-ZYgjsOeTBtNdA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	49955	3.230.217.116	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	1251	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1305 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:33 UTC	1305	OUT	Data Raw: 7b 22 69 64 22 3a 22 66 35 33 33 34 36 31 62 2d 36 37 66 37 2d 34 35 31 61 2d 61 30 36 64 2d 35 38 38 36 30 30 38 64 63 30 33 30 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 38 38 36 37 39 34 33 39 31 35 36 31 36 36 35 34 31 37 31 31 36 37 32 38 39 31 36 32 31 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 34 35 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 5d 7d 2c 22 65 78 74 22 3a 7b Data Ascii: {"id":"f533461b-67f7-451a-a06d-5886008dc030","cur":["USD"],"imp":[{"id":"88679439156166541711672891621","secure":1,"bidfloor":0.45,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":300,"h":600}]},"ext":{
2024-03-29 00:41:33 UTC	348	IN	HTTP/1.1 204 No Content Date: Fri, 29 Mar 2024 00:41:33 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	49958	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	517	OUT	GET /uu/api/res/1.2/4cpGBzlnhJ0yT7rqoxwXNw--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/19f4517308701d1897c1d2429ccc754f.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:33 UTC	1299	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 372411165792788529172537820400320912799,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="19f4517308701d1897c1d2429ccc754f.webp" Edge-Cache-Tag: 372411165792788529172537820400320912799,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "fc2c412dc3fd923c13b3401b24f8be66" Expiration: expiry-date="Tue, 24 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 27 Mar 2024 11:29:02 GMT Server: ATS Surrogate-Reporting: width=536,height=284,bytes=16316,owidth=960,oheight=540,obytes=77269,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 28 Mar 2024 03:44:33 GMT X-Served-By: cache-lga21942-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711597473.042460,VS0,VE2 Age: 75420 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-lga21942-LGA cld_latency: 2 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 43520 ATS-Carp-Promotion: 1 Connection: close
2024-03-29 00:41:33 UTC	178	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 61 70 70 6c 04 00 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e6 00 01 00 01 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 61 70 70 6c ec fd a3 8e 38 85 47 c3 6d b4 bd 4f 7a da 18 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 30 63 70 72 74 00 00 01 2c 00 00 00 50 77 74 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 54 52 43 00 00 01 cc 00 00 00 20 63 Data Ascii: JFIF(ICC_PROFILEapplmntrRGB XYZ acspAPPLAPPL-appl8GmOz/desc0cprt,Pwtpt\|rXYZgXYZbXYZrTRC c
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 59 93 ce 50 df fd 5a bf 0a 00 97 6f 16 65 1f f2 c1 fd 12 bf 0a 06 b7 0a ec 12 18 76 3b ae 30 a0 a4 97 8e fc 24 7d 11 e3 59 72 34 e3 9a 6f 51 c9 61 a8 ec 17 dc e0 49 59 df 84 9e 43 3d d4 a2 ed 30 b3 74 b4 83 fe 5d ff 00 96 aa d6 5d b2 b0 a4 de 2c e0 61 6f a9 7e c6 d5 5b 62 cf 21 06 f1 62 e2 dd c5 27 f5 9b 23 ee aa dc 65 a0 55 7c d3 e3 d4 79 4b fd 56 d5 f8 50 a1 4a bd 59 15 8e 1e 3f 7a 08 a2 b3 a0 9b bd 98 f7 a8 7e c9 ac b5 ba 4c f9 d2 c7 cd 6e a9 3f cd aa a8 02 bb b5 81 3c 9e 59 fe 69 55 50 f5 b1 4e 5d ec 7d dd 69 fe 6c d5 2e 4d 8b 55 de cb 8c 27 ad cf fb 3a 8b f4 fc 44 1b ad ad 47 25 2e f9 76 69 29 a1 75 b7 73 2a 56 3c 38 69 c9 29 7b 61 bd d9 9b 20 80 ee 7f d9 e6 a8 12 48 b9 da 9e 57 17 5c e8 e2 ff 00 53 ff 00 1a 9c 8e 24 1d 1e 4b 84 2f af a5 a7 14 ae 16 Data Ascii: YPZoev;0$}Yr4oQaIYC=0t]],ao~[b!b'#eU\|yKVPJY?z~Ln?<YiUPN]}il.MU':DG%.vi)us*V<8i){a HW\S$K/
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: a0 a7 20 fa 4c 6f e9 53 4e 27 26 0b 72 4f 29 51 b6 f1 75 3f 8d 52 42 55 be 22 40 0e bb 0c ff 00 38 3f 1a 53 d5 2b 02 6e 05 ad 07 25 e6 0e 7c 5f 14 40 3b d0 ec 24 1e cb 0e 12 9c 61 2f 8c 8f 75 06 42 fd b6 d4 df f1 6e 24 7f 3a 0d 41 9b 5e b7 b2 b2 7a b9 0d 1f 22 e2 7f 1a 73 0f 21 e7 e2 22 36 af b5 59 10 bb 6b 68 f4 a9 6b 73 8b 85 b5 7e 4c 76 11 eb 2f 90 1b 73 19 a7 fc 29 cb b1 fe 82 6d ab ae af 79 28 b9 75 d2 12 8d d9 8f 18 86 99 42 8f 32 a5 28 92 a3 b0 df ca 94 c3 4e 2c bb 17 2a 92 db f4 fe 9f b1 e1 eb 8b 71 9e 53 7f c5 b7 1b b5 85 f7 71 a9 2a c7 17 96 e7 ca b4 98 69 17 2d 83 76 d5 cb 60 29 70 f4 e3 bd 5b 5b f5 d2 b0 da d4 ae e2 9e 24 95 63 9e fc 23 db 54 c6 d4 5e e1 d3 f6 a0 8c 8f 9b e0 58 ad e8 ea f2 a5 75 a8 71 c1 ef 22 a7 44 89 de 7a 5a d4 b7 a8 8b 7f Data Ascii: LoSN'&rO)Qu?RBU"@8?S+n%\|_@;$a/uBn$:A^z"s!"6Ykhks~Lv/s)my(uB2(N,qSqi-v`)p[[$c#T^Xuq"DzZ
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 9b 82 c1 c9 e1 e5 45 a3 19 a6 96 ac e3 6a 8b ed 42 38 b0 69 44 d9 a6 f8 82 8e 31 55 09 dc df e0 e2 b3 3c 2d 3a d3 52 ba 80 10 f4 98 d0 11 8e 5d 84 15 90 3f 78 7c 2b 0e 79 e8 e3 b3 d0 01 ce 6b 8e 5b 23 68 1d 6d 0d 94 c3 49 a0 04 4e 68 02 95 40 01 7c a8 04 eb f5 8d 01 aa 03 28 0c a0 32 80 f2 71 33 9a 57 d2 ad 91 26 86 22 4a 49 ca 15 4e 02 86 de 5f 8a 8e 69 e9 61 89 2f a4 fa df 55 49 cb a2 86 a7 2c 6d c6 76 f2 a8 50 e4 cc 5a b9 2c 8f 75 00 7a 1d 75 58 e2 49 f8 50 06 8e 20 33 c0 68 2d b6 9e 3f cc 3f 0a 12 25 d5 ba 93 d9 49 c7 b2 80 0f 13 87 9b 67 e1 40 49 b4 e3 bf f5 2b 09 56 c7 8d c1 bf eb 91 48 0a d5 27 ac 4c 52 3b 8a 87 d4 29 83 2a 5a 51 03 b2 69 c9 b1 b1 9d 4a ff 00 d1 ab e1 54 86 75 2e 7f a3 57 c2 80 cf 47 7b fd 12 c7 ba 80 d2 59 59 38 e1 de 89 36 36 18 Data Ascii: EjB8iD1U<-:R]?x\|+yk[#hmINh@\|(2q3W&"JIN_ia/UI,mvPZ,uzuXIP 3h-??%Ig@I+VH'LR;)*ZQiJTu.WG{YY866
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: d3 1e 90 b9 5b a0 3b e9 ef bd d6 4e 71 45 72 5f 78 e5 44 79 9e 78 e7 b0 20 1c 9e 54 a9 2d 18 fa d9 f6 60 22 6a e3 3a 7a ef f2 48 ff 00 ca 3a 3c 48 f5 50 8e 5d ae 5e 66 b2 bf 57 26 89 db 72 d9 64 79 5a ab 52 48 17 0b c3 c3 a8 87 12 22 78 97 c6 7f 90 8e d1 df 7d b2 e6 33 cf 95 2d 8d 99 66 74 69 3f 54 cd f9 ef 52 25 83 39 67 2d 42 43 dc 51 a2 b6 00 1e b6 49 5a c6 06 54 ac f9 01 42 7d 19 b5 06 82 66 c7 1c b2 c4 73 3a 74 a1 d5 a4 34 93 94 f9 a1 24 6e 06 77 3c 80 a9 b9 4c 67 b1 f5 17 9d d0 db ee 43 42 e6 cc 8e 85 3b 92 5b 63 85 6e 2b 97 ac b2 42 53 ee 1b f8 d6 17 b1 8e 37 47 fc 77 2f d2 be be 68 9b c4 37 8c 3b 7c 17 9e 4e 70 94 31 f9 55 8f 25 70 8c 66 8c 7b 58 7e e8 fe b6 59 7c 86 55 e9 6d 46 87 14 d1 b2 cb 2b 4f ac 94 b4 49 4f 91 03 91 ae 8c 7b 7c 3f ec bf a7 Data Ascii: [;NqEr_xDyx T-`"j:zH:<HP]^fW&rdyZRH"x}3-fti?TR%9g-BCQIZTB}fs:t4$nw<LgCB;[cn+BS7Gw/h7;\|Np1U%pf{X~Y\|UmF+OIO{\|?
2024-03-29 00:41:33 UTC	524	IN	Data Raw: b1 e0 7c 2b 1c a6 9e a7 5f 39 61 6f cd 12 4f 2c 57 3b a2 cf 62 4d aa 5a 3d 64 d5 ca 52 6c eb a3 51 d5 5e 9d e3 6c 92 63 a8 7c 14 9a c3 9b db 44 ca 5b 2d b9 12 42 31 8e 28 ee 8f f7 6b 1c 4e 45 52 9b 5b ca 19 29 75 3e c1 5b 45 02 ed b5 e1 8d 95 ef 14 c1 34 db 74 af 43 7c a1 04 90 da bb bc b1 5a ac ba fe c3 cb b9 2c 96 56 55 c0 de 48 1f a0 29 16 cd 6b 61 f4 ff 00 20 e7 c2 96 8c 52 da 7f 9f 50 bf 85 2f 10 25 65 e4 ec 58 5f c2 96 8a b4 92 b3 cd a7 07 ec d1 a4 c8 f4 93 e4 1b 69 f9 bb a0 28 b3 15 b2 ee 77 39 92 48 c7 70 5f 56 0f fe 5d 73 f3 2e 57 46 a1 39 ac 22 86 8d a9 86 50 19 40 65 01 a5 2b 15 40 05 50 05 d0 19 40 65 00 07 79 0a 3f 60 45 0b 79 47 e9 10 c9 1f f5 7f fe 6a ab 60 34 4c 87 80 3e 6d 49 c7 8b aa 34 1c 9b 1c dc a8 7b 1f 9b 1b fd f5 50 70 35 cb 87 8d Data Ascii: \|+_9aoO,W;bMZ=dRlQ^lc\|D[-B1(kNER[)u>[E4tC\|Z,VUH)ka RP/%eX_i(w9Hp_V]s.WF9"P@e+@P@ey?`EyGj`4L>mI4{Pp5
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: d0 53 98 c0 0d 23 f0 f0 a6 9e 49 a4 0b 5d 4f 9b 2e 62 10 e3 e0 30 a4 a9 ce b1 29 c1 09 39 01 40 77 1c 60 fb 0f 9d 5e 31 c9 c9 96 d5 24 99 27 8b dd 81 e5 5a 62 e3 ca 92 a9 6a 57 7d 53 3c ae 83 6d dc 0e ca 77 f1 a0 a5 b4 fb 0e 3f 5d 21 b7 e5 2d 98 cc ad 21 4a 4e 30 42 7b c9 ce e7 bb ce 85 e3 91 f5 dd 48 d9 60 58 ec 04 c7 86 57 c6 f3 a9 3f 94 92 e0 e4 49 df 23 3c 92 3c 37 c5 4e 79 4c 66 eb 5c 71 f3 ba 74 07 41 1f 26 7d 71 d2 5b 68 bc df db 72 d9 60 75 40 f0 b9 94 39 29 23 3c 87 e6 f8 8f 67 91 af 9b ef 7e 56 75 b7 23 e8 7a 7f 88 b7 57 27 7e f4 79 d1 de 9a d0 96 96 ad 76 2b 53 2c 47 46 33 d8 dd 67 c7 35 f3 59 f7 79 bb 57 75 f5 58 f4 a7 56 7a 5a 50 22 a1 a8 c9 ea d3 c3 c4 33 4b f8 91 33 36 dd 2d 31 d0 f7 58 8e ca 57 be 3c 0f 7d 2c b8 9a e3 c8 6a 99 15 b6 da 52 Data Ascii: S#I]O.b0)9@w`^1$'ZbjW}S<mw?]!-!JN0B{H`XW?I#<<7NyLf\qtA&}q[hr`u@9)#<g~Vu#zW'~yv+S,GF3g5YyWuXVzZP"3K36-1XW<},jR
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: d4 5b f5 33 71 a6 a4 f5 7d 61 8c b5 e3 0a 5b 6a e4 af 88 a5 9f b4 63 7c 6a 43 3e dc dc 39 ce c5 69 59 0d 9d 95 dc a0 46 41 15 cd 9e 3a 8f 57 af cd bf 42 7d 0d e2 39 56 1a db b7 65 da 45 25 bd 44 80 bc 81 d4 b9 f7 56 79 09 34 9b 90 3a 87 f1 8f e2 94 3e 20 d6 51 51 56 08 ca 58 18 ee ad a0 d0 68 8c 85 6c a1 b8 a6 42 25 45 05 a7 36 db 81 43 e2 31 57 b8 a1 93 19 53 ef 15 72 ec a0 7f b8 29 5a 72 11 bb 1c b6 40 27 34 bc 8f 42 54 8f 2a a9 76 56 68 04 8e 03 b9 a5 f0 a4 d0 de b0 27 c2 8a 6f 48 7e 44 16 b7 2d 7f 27 bb 34 97 5b e1 5d ce 5c c9 5e d1 d6 94 24 fe ea 05 73 73 1e 97 f2 55 92 46 2b 9e 5d 98 d0 73 54 1b a0 01 40 07 26 89 36 1a 51 34 e8 16 82 4e 73 45 01 52 0c a0 32 80 2d de ea 70 08 a6 b7 95 6a 7e d7 b7 f8 c4 8f ff 00 5f ff 00 75 6c d7 5a 8c 12 2d 88 df af Data Ascii: [3q}a[jc\|jC>9iYFA:WB}9VeE%DVy4:> QQVXhlB%E6C1WSr)Zr@'4BT*vVh'oH~D-'4[]\^$ssUF+]sT@&6Q4NsER2-pj~_ulZ-
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 9d d4 01 34 36 79 30 97 2b 60 d9 74 24 e4 8a 0b 7a 18 87 c8 c6 d4 2b 6d 75 e7 c2 82 f2 0b ad f2 a0 f6 07 1a bb 85 09 db 45 72 4f 23 b7 b6 83 67 13 c3 75 1a 06 f4 d7 a4 3a 36 e1 34 21 be b5 cf 1a 03 03 ce 0e 4a a5 42 6f a3 9e 57 f0 79 8c ef 87 1c fe b1 a8 fd 82 5d 65 27 8e 3c 71 8e 4b 3f 65 5e 25 51 d4 72 f7 53 67 42 4a bc aa 80 67 c8 50 19 83 5a ec 04 10 ac ec 9a 36 5b 0c 36 40 ed 0c 54 a4 15 81 e1 40 04 37 c4 3d 5a 7b 02 cb 43 3c a8 fa 9c ae 9b 5a d1 06 3b d2 94 40 28 6c 94 67 96 7f e7 7f 75 54 63 c9 97 af 68 85 a5 0d dd b5 32 14 da 7a ce 33 d7 38 08 d8 a5 20 0f b7 7f 78 ab 93 4e 2c d1 de 90 66 bf 32 e0 ec d9 0e 71 38 f3 c4 e4 00 07 00 38 48 00 6c 30 36 f7 55 eb 4c ea 34 eb 4f cb e1 68 30 a4 25 d7 0e 14 ae ec f7 0f 2c 60 fb e9 ed 96 50 5c ce 12 e1 69 bc Data Ascii: 46y0+`t$z+muErO#gu:64!JBoWy]e'<qK?e^%QrSgBJgPZ6[6@T@7=Z{C<Z;@(lguTch2z38 xN,f2q88Hl06UL4Oh0%,`P\i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	49961	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	1374	OUT	GET /tdv2_fp/api/resource/WeatherLocationService.favoriteLocation?returnMeta=true&lang=en-US&region=US&site=fp&ssl=1&crumb=VCpNxEjFVPV HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; YHB__li_dcdm_c=.com; YHB__lc2_fpi=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q; YHB__lc2_fpi_meta=%7B%22w%22%3A1711672890010%7D; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:33 UTC	1184	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 content-type: application/json; charset=utf-8 content-length: 21 etag: W/"15-umwiS4rIitQ2ijB3W71Mutm+O6U" vary: Accept-Encoding date: Fri, 29 Mar 2024 00:41:33 GMT x-envoy-upstream-service-time: 16 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=0ivtnepj0c3ht&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:33 UTC	21	IN	Data Raw: 7b 22 64 61 74 61 22 3a 5b 5d 2c 22 6d 65 74 61 22 3a 7b 7d 7d Data Ascii: {"data":[],"meta":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	49957	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	517	OUT	GET /uu/api/res/1.2/9dljnlwsdNbAGRjDdt418A--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/90fc863b5fb5c3e128c401bc64cf10a1.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:33 UTC	1291	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 306096902495509597627271203119390045982,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="90fc863b5fb5c3e128c401bc64cf10a1.webp" Edge-Cache-Tag: 306096902495509597627271203119390045982,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "3ba38d0225e50ab3bc2ea08462130835" Last-Modified: Thu, 28 Mar 2024 18:09:15 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=19046,owidth=960,oheight=540,obytes=75058,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 3a8d8e4d1f43bceab9da8cede45f8411 Accept-Ranges: bytes Date: Thu, 28 Mar 2024 18:18:02 GMT X-Served-By: cache-iad-kjyo7100056-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1711649883.883167,VS0,VE1 Age: 23011 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 3a8d8e4d1f43bceab9da8cede45f8411 cld_by: cache-iad-kjyo7100056-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 51344 ATS-Carp-Promotion: 1
2024-03-29 00:41:33 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 01 1c 02 18 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 07 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 09 00 01 0a ff c4 00 49 10 00 01 03 03 02 03 06 04 03 06 02 09 03 04 02 03 01 02 03 04 00 05 11 06 21 07 12 31 08 13 22 41 51 61 14 32 71 81 91 a1 b1 Data Ascii: JFIFCCI!1"AQa2q
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: d1 4d f8 3e 43 b8 ba f8 59 5b 6a 49 4e 31 cc 31 4c ee 42 f6 bf e0 54 cd dd b6 15 cb 24 1e 55 74 23 ca 94 03 95 39 90 79 63 38 95 36 3a 01 e5 48 20 4d c2 e0 f4 46 92 fa 71 c9 fc 47 3d 3d 29 ef c0 a9 d3 b3 40 f0 73 8d e8 91 a6 dc b6 5d a7 7f a4 46 38 e7 56 37 4e f8 19 ac 1c ac 6d d9 d4 62 f5 2a 43 dd cb 5b 4d d5 f2 ff 00 64 da c2 f0 ad d4 e1 38 48 1e b5 52 bb 74 c9 9e 4f b8 29 3e d4 3a 60 da af 36 a6 dd 42 b9 57 0f 98 38 46 ce 1f 0e 48 fc ab 67 a6 a7 46 07 52 f2 67 cb 8b 4a 69 49 6d 2a 3c a3 a0 cd 6c 33 2f e0 44 42 c7 99 14 83 40 29 0e ac 80 92 4d 23 1c 2d 8c cc de ec 0e 73 8a 68 d1 d6 22 30 c8 cf 5a 72 54 38 b2 74 7d fa 66 98 bc c1 bc 41 70 a5 d8 8b 0a c0 fe 34 f9 a7 ef 57 31 24 e2 d3 2a 49 59 b4 34 86 ac 63 54 5a 59 b9 b2 41 32 10 1c 38 3d 49 03 26 bd 9f Data Ascii: M>CY[jIN11LBT$Ut#9yc86:H MFqG==)@s]F8V7NmbC[Md8HRtO)>:`6BW8FHgFRgJiIm<l3/DB@)M#-sh"0ZrT8t}fAp4W1$*IY4cTZYA28=I&
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: f2 23 68 b1 8c e8 dd 5c 28 e1 9c b7 0c 66 6d d0 14 eb 8f 2c 00 02 72 41 f5 cf a5 61 46 2f 22 54 91 d0 da c6 8d 8a 3f c4 63 86 90 74 cf 05 34 8d c1 84 1f 8c b7 4d 4a 16 f0 1b f8 d0 41 49 3e 7d 2b b3 8e 2a c6 e0 47 27 97 94 f9 f9 8e 6f 49 8c 97 54 09 4e 79 6a 02 1f f0 05 31 19 77 09 ee 8a 71 ea 28 10 35 16 f6 93 82 53 40 07 a9 94 21 93 c8 9a 4a 01 28 5e 3a 52 81 2e 8e f0 50 42 f1 d4 74 a9 a2 ab 43 4b f7 b3 d6 af ee 1e 5d 8a 4b fe 1c 85 34 0f e9 5e 99 f4 8f 52 4b f0 33 91 fa 8f 16 9f aa 8b d6 33 88 6a e8 e2 9d 57 51 b7 da bd 19 b7 db 67 35 1f 83 16 f1 8e 53 73 f8 9b 71 5a 7e 44 bd cc a4 e7 af a0 cf e3 5e 33 f5 45 7b a6 7a 07 49 df 01 a9 78 13 73 8b 6c 2c bb 31 28 2e ba c2 32 14 33 5e 77 96 d2 3a bc 6f ba 8d 41 a3 66 49 b9 32 a0 96 f9 9a 71 5c dd 7e b5 83 37 Data Ascii: #h\(fm,rAaF/"T?ct4MJAI>}+*G'oITNyj1wq(5S@!J(^:R.PBtCK]K4^RK33jWQg5SsqZ~D^3E{zIxsl,1(.23^w:oAfI2q\~7
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 91 92 f1 b3 57 22 2a 75 3c 65 91 c1 46 b3 7e ef 19 76 a1 3d 2a e7 0a 6b 3b 6d 9d ab dd a3 92 a5 8d dd fe 0f 39 6b b6 54 cc 7d aa c4 ab ee b6 79 2c 94 03 2e 40 6d b5 29 58 4a 49 38 dc fd 48 af 12 fa a2 7f 9e 6c f4 0e 8b 16 f8 92 35 ad a7 85 fa 83 4f c3 b0 39 1a 7c 59 c5 48 6e 2a dc 8e 49 49 38 19 ce 77 15 e7 b9 39 5e b6 8e e6 18 af 1e 8b e3 58 cc d5 7a 37 49 84 69 08 6e bd 34 b5 80 a4 79 74 c6 47 e3 59 f6 6d 45 52 28 48 d7 7e d3 d3 3b d7 93 70 93 0d 05 c3 ca da c0 27 f3 a4 11 37 65 c7 a7 6c 5c 40 bc 70 96 7b d3 6f 0e a2 f4 d6 5b 4a b3 8c fa 9c 7e 14 d4 95 ec 9d 78 28 98 fc 1d e3 fd de 79 5c bb fc b7 da 4e e8 0a 38 df d7 ad 3d 7a 7f 25 7f cc 5b b2 f4 25 ce c7 61 85 fe 67 49 95 31 09 2c a1 c2 a2 0a 41 c6 c7 f0 a4 74 bc 13 63 5c 79 6c 8d 4e d3 92 57 c9 2a 53 Data Ascii: W"u<eF~v=k;m9kT}y,.@m)XJI8Hl5O9\|YHnII8w9^Xz7Iin4ytGYmER(H~;p'7el\@p{o[J~x(y\N8=z%[%agI1,Atc\ylNWS
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: d6 9a b3 b5 fa 7a 0e 2e 1a 3a 0d 6e 83 1e d1 6b 12 52 92 84 46 43 65 80 0e c4 ef 93 f5 dc 57 99 cb 4d 9e a5 cd 54 89 ad 83 89 76 f4 b0 1a 92 a0 55 b0 04 fa 7a 53 7b 88 12 4c 93 8b cd 9a 74 25 ba 9e e7 01 25 5f 28 a7 27 65 8f 6f 44 6b 4f 6a ad 36 c4 99 d6 d7 af b0 90 87 1a 52 8a 0b 9b a7 eb b5 3d a4 42 95 0b 6c ba be d7 f0 2e f2 1e 70 ce 4f 30 3e 15 7d 0d 46 d1 32 2b cd 77 ab 24 5e d9 b8 26 37 8d 51 62 ba f8 19 ea 40 18 a6 f8 05 1f 0d 19 0b 5c 6b dd 57 6a b1 c5 7e 64 ae e9 99 ee 16 96 3a ec 31 ff 00 3a b3 8e ac bd 8e 94 9f 6b 28 dd 63 a6 5d 8f cd 74 b7 9e f5 97 89 52 b0 37 15 d1 e2 64 25 a3 13 ea 0f a5 39 f1 d7 b8 e0 44 1d c9 07 18 c5 5e bb d9 c1 ca 2e 2e a4 12 93 40 87 c2 12 ae a6 80 08 71 b1 e9 40 0b 22 64 2d 81 fd 63 f5 14 ab c8 8f c1 dd 3e cc 90 7f cb Data Ascii: z.:nkRFCeWMTvUzS{Lt%%_('eoDkOj6R=Bl.pO0>}F2+w$^&7Qb@\kWj~d:1:k(c]tR7d%9D^..@q@"d-c>
2024-03-29 00:41:33 UTC	831	IN	Data Raw: 2a bb 8d f5 0b e9 77 11 7f 49 f7 5b 3a 65 a2 b4 06 91 e1 66 97 8b a5 ac b6 d6 51 09 00 97 1d 5a 72 b5 af 6c a8 9f 32 6b 92 ea 59 bc d9 9c de b1 d6 74 dc 25 89 c3 44 1b 89 3a 4d af d9 f2 5e b5 46 51 65 4a 2b e4 4a b9 40 51 f3 1b 1a c8 ed b3 66 f4 50 4c ac 48 9e 01 1c 85 00 20 83 e5 4c 9a ed 11 4b 65 b7 a2 ed 53 15 05 2f b0 95 ba 8d b0 49 a8 97 25 0b cf 92 eb 43 d4 6e 0b 70 ea f7 21 cb bd d9 09 91 31 6a fd ea 59 59 4f 22 bd 0e 29 1f 3a 45 15 91 c8 48 17 c3 bd 28 dc 44 42 80 1c 8c 86 b3 c9 c8 ad c6 6a 07 93 b2 45 cf 2a d9 53 71 0b 84 5a be ce d4 a9 3a 6a 4a 65 c6 94 82 87 39 72 1c 42 7f a4 7e 3f 80 a5 59 09 a2 de 3f 3d f9 32 0f 69 0d 31 27 fc a7 18 c5 6f 95 f8 32 3b d5 a7 a9 e5 f6 ad 1c 4e 45 63 f9 a4 fb 95 10 bd 18 fa ae 36 c6 98 7c 24 a4 a4 6c a1 9a b5 cf Data Ascii: wI[:efQZrl2kYt%D:M^FQeJ+J@QfPLH LKeS/I%Cnp!1jYYO"):EH(DBjESqZ:jJe9rB~?Y?=2i1'o2;NEc6\|$l
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 5d 17 67 8f a3 34 7b 68 44 58 6d 86 fb c4 8c 17 16 3a e4 7b 7f 7a e3 24 df 3c 9b 67 48 95 2a 1a 51 a4 56 fa 3f 6a 5c cf c5 cb ea 3b ef 10 47 d2 9c d2 8a a0 6a b6 7c 99 c3 ae 1e 69 78 2c 5e 75 db 52 6e b2 9c 49 71 8b 6b 23 99 6a fe a2 9f 3f 2a 45 3e d2 5e df 70 86 bb 86 8d 6f 54 47 8c fe 8b d3 8d 58 56 97 00 74 ba c0 4a 90 df b6 08 f4 a7 c7 95 20 78 b2 a2 41 6d e1 50 76 03 91 5b bc 97 a4 b6 8e 75 32 a0 52 a4 fd 33 d6 ad 46 57 b3 36 49 fc 98 e3 b5 3f 0c a4 da b3 71 4b 5d db ac 39 83 e1 c9 e5 f4 3f 4a d7 e9 d9 3f 0c a1 91 1d 59 95 d0 e1 0a 29 29 c1 ce 0d 6f 94 28 3d 07 23 34 0d 0c 4d 00 7b 22 80 02 b2 0d 00 12 fb d9 01 a6 fa 79 9a 00 2d 29 d8 66 80 05 40 1e a0 03 71 92 37 a1 80 e4 cb c5 a4 25 24 74 a8 d8 0a 92 ee 40 da 99 63 90 ad 88 eb 92 8d 87 d6 9b dd 44 Data Ascii: ]g4{hDXm:{z$<gHQV?j\;Gj\|ix,^uRnIqk#j?E>^poTGXVtJ xAmPv[u2R3FW6I?qK]9?J?Y))o(=#4M{"y-)f@q7%$t@cD
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: b0 3b 3b 69 68 fc 21 e1 db fa 96 60 4b 57 8b ea 42 52 e1 18 52 18 23 03 23 ec 6b 8e ea 99 5e ea 54 74 5d 2a 34 b6 58 f1 35 f4 79 8b 8f 31 6e 60 be 9e 70 33 9f 09 e8 7e f5 4e 2a 96 8b cb c9 2e b6 6b 93 29 48 8a c6 0b 68 21 4a f1 6e a3 e4 9f d6 a1 6f 64 fc 51 b6 5a fa 1f 46 0b 93 ab bc de d5 df 4b 7d 5c fc ca 46 c0 1c e0 01 9d b1 45 17 a2 92 27 17 ed 39 6c 97 6e 53 06 30 41 3d 16 8d 88 a4 ed 26 54 64 dd 6b c4 6b ff 00 0a 75 60 89 7f 92 f4 8b 3b c7 99 97 d4 a3 ce d1 cf 4e 61 e5 57 78 1d aa 31 fa 94 6f 68 90 71 26 d7 67 e3 27 0b e4 4f 82 d3 12 1f 0c f3 15 01 9e 64 e3 ad 5d c6 fb 64 63 c9 1c c4 d4 96 4f d8 f7 d9 b0 79 89 2c bc 50 ac 8c 74 3d 6b ac 8b 4d 19 13 5d ac 6f a5 23 05 40 87 b0 7d 68 00 b2 92 7a ab f2 a0 00 ac 01 8c 0a 00 02 68 03 ed 00 7a 80 0f 42 4a Data Ascii: ;;ih!`KWBRR##k^Tt]4X5y1n`p3~N.k)Hh!JnodQZFK}\FE'9lnS0A=&Tdkku`;NaWx1ohq&g'Od]dcOy,Pt=kM]o#@}hzhzBJ
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 4a 42 81 a0 60 fd 69 b6 25 13 6e 13 69 5f f3 46 b1 85 15 c1 fe 8e d3 81 c7 b6 ce c3 35 43 a9 64 fa 1c 3a 24 c5 c7 79 0e cb 87 89 da c1 db 8d f5 ab 05 bd f0 dc 78 cb 0c 94 0e 9c 89 f9 8e 7c b6 fd 6b 95 71 ee 6c e9 62 fb 55 0d cb d5 cb 95 73 7e 47 79 fb b6 c8 43 63 fa 45 2f 69 32 56 ac b7 f8 35 ad 34 d5 a2 50 9d aa c4 94 a3 9b 21 65 82 5b 3e f9 19 a8 14 7c b2 ef 02 36 4e 99 d6 96 4b b4 06 27 da 56 cb d1 4a 42 90 e3 67 01 40 f4 fd 29 7b 68 b2 36 df 78 e9 c3 78 52 17 6b 72 ee a7 65 a3 e7 69 96 16 e1 4f a7 41 8f fc 52 f6 85 b3 33 f6 93 16 bd 79 6d 75 fb 2a 0b 88 53 4b 6c 15 6c a4 b9 b6 06 2a 5c 7d 32 be 54 7b b8 99 53 f6 3e d6 b7 38 17 3b ae 90 ba 3c a7 19 65 a0 b6 da 59 e9 85 10 71 f8 d6 97 3b a5 68 e7 9f 82 9c ed 4f a6 ce 9f e2 24 9b 8d bd 03 e0 2e 49 4b ad Data Ascii: JB`i%ni_F5Cd:$yx\|kqlbUs~GyCcE/i2V54P!e[>\|6NK'VJBg@){h6xxRkreiOAR3ymuSKll\}2T{S>8;<eYq;hO$.IK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	49963	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	383	OUT	GET /pv/static/img/voiceSearch1x-1620383531565.min.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:33 UTC	807	IN	HTTP/1.1 200 OK x-amz-id-2: eFcMnZt7DIIX1ebOlad1SkBYGImR+xhIdHBrnL+BhxFCoC/mbjDmTLhbN7YLlbcYkL5H2nKW68ZfKceF+W71M1YApnRScO1t x-amz-request-id: MVDJ36TYD5XNSTVM Date: Thu, 28 Mar 2024 22:26:26 GMT Last-Modified: Fri, 07 May 2021 10:32:24 GMT ETag: "c2396079060a7028fa898a73b72aa592" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 2986 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 8108 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 29 00 00 01 4a 08 03 00 00 00 b7 a9 86 84 00 00 02 6a 50 4c 54 45 00 00 00 49 49 59 97 9e a9 9e aa aa ff ff ff 1e 23 29 45 82 f9 5c 65 6c 1f 22 29 ff ff ff 5c 64 6b 21 77 ed 10 6a ff ff ff ff 0f 6a ff 10 6a ff 27 2f 3b 00 3a bd ff ff ff 00 3b bc ff ff ff 0f 69 ff ff ff ff 10 69 ff ff ff ff 23 2b 31 24 2c 34 10 6a ff ff ff ff ff ff ff ff ff ff ff ff ff 0f 69 ff 24 2b 33 ff ff ff 00 3b be 00 3a bd 23 2a 32 0f 69 ff 00 3b bd 23 2b 32 00 3b be ff ff ff 10 6a ff ff ff ff 0f 6a ff 11 6a ff 16 6d ff 0f 69 ff ff ff ff ff ff ff 13 6c eb 00 3a bd 98 9f a9 23 2b 32 23 2b 31 5c 64 6a 1f 23 29 10 6a ff 0f 6b ff 0f 6b ff 23 28 2f 11 6c ff 26 2d 35 00 3b be 12 6e ff 18 6e ff ff ff ff 2a 2a 37 ff ff ff 10 6a ff 00 Data Ascii: PNGIHDR)JjPLTEIIY#)E\el")\dk!wjjj'/;:;ii#+1$,4ji$+3;:#2i;#+2;jjjmil:#+2#+1\dj#)jkk#(/l&-5;nn*7j
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 75 96 90 5f 6e 91 49 41 65 fa e8 16 be 29 38 07 35 95 b0 c8 c8 30 33 ae d5 fa 38 4a e3 d6 b7 42 e1 de a3 d4 c8 d1 bd 58 cf 85 d4 9b 42 e4 0c b6 d3 ca 6c 97 cb 70 21 c3 e5 72 8a 90 53 e4 b2 a1 90 0d ff cb 9f 97 83 9c 83 aa 4b 71 40 24 92 1d 89 ac 26 c5 01 91 10 b6 23 a4 9a 14 07 44 c6 b3 1d f3 02 c9 79 ac 32 de 57 2e 60 3b ca 78 65 9a 90 d3 80 a5 8c 55 16 80 6f 9c 94 8e e3 e5 2c 21 67 01 cb 38 4a 9d e0 17 87 f7 7a 9c 23 e4 1c ef f5 ea f0 97 79 94 da fa 7f 6f 54 34 d9 df 46 69 9e bf ec c8 8e 8d e5 95 f8 e3 1e 38 c3 f8 bf b1 ac d6 b1 fa 6d 61 f3 4c 47 b1 c3 e9 74 14 7b 26 cf 16 e0 26 09 b1 53 1a 15 0f 7e 89 8f a2 d4 1e 52 55 1a 1d 4d de eb 77 eb 4f 36 4e a9 5a c2 66 b0 fd 99 db c3 2a b7 b7 67 f2 d3 0d 74 d7 27 14 1a 2b 93 d7 d1 18 61 9e b1 5a 85 09 10 28 d6 Data Ascii: u_nIAe)85038JBXBlp!rSKq@$&#Dy2W.`;xeUo,!g8Jz#yoT4Fi8maLGt{&&S~RUMwO6NZf*gt'+aZ(
2024-03-29 00:41:33 UTC	386	IN	Data Raw: ef 29 c6 67 c6 45 ca 64 b8 f8 c8 fd 96 be 96 8d da e6 10 1b 71 d9 12 19 49 07 89 8d c2 4c a9 5c 27 36 1c 0d 65 73 64 9b e6 73 26 b2 de 61 0d dd 25 5e 0f 48 67 74 9e 2d 2a 01 8c 8c 77 66 c6 4b 20 6f 69 59 19 2f cf 38 69 76 18 48 73 c7 4e 33 b3 0b 9d d4 e9 a0 63 10 3a 6f 4c 1c b5 1f 5d 7f d0 1a 8e 52 08 8b 5f c0 0b 41 91 fc 28 3d 09 26 e9 1a 7b 02 98 0c 02 fb e5 e6 f6 93 0b f1 cc 27 1e f6 f0 07 fd 5c 33 b2 39 97 cd 6b 43 2a fd 84 ec a7 c8 64 89 f6 f2 bb 7c a9 95 c8 5f 85 b4 fb 2e db c9 df 88 3c d3 1e 42 11 97 45 f0 50 7b 26 93 6a 8f 2c 45 5d a9 69 2b 55 25 ab 87 0a f2 ee ef 01 94 97 03 dc 43 5f c7 c4 68 31 ed 14 a5 1d 2b d0 79 da c6 1e c9 d9 df 36 05 d0 1c 28 ba 75 ab e8 00 d4 64 36 0e 37 b2 11 97 25 cd 8d 94 80 89 74 0d 0d ed 0a a6 e0 24 42 26 99 a2 a1 66 Data Ascii: )gEdqIL\'6esds&a%^Hgt-wfK oiY/8ivHsN3c:oL]R_A(=&{'\39kCd\|_.<BEP{&j,E]i+U%C_h1+y6(ud67%t$B&f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	49970	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	533	OUT	GET /cx/pv/perf-vitals_3.2.0.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:33 UTC	800	IN	HTTP/1.1 200 OK x-amz-id-2: OK0PLbn+fXEY/uNskY33V9ajSmJGX83tn2o2Y3WJmORUxS2HY8pA9fSgwEAf/22SSRqEX94mYaA= x-amz-request-id: J8N29YWTA6QWXJ6V Date: Thu, 28 Mar 2024 19:47:32 GMT Last-Modified: Tue, 12 Sep 2023 19:35:40 GMT ETag: "26831b6bd9ea430823f593b6a70c7375" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 8128 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 17642 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 6e 2c 69 2c 72 2c 61 3d 2d 31 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 73 68 6f 77 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 65 72 73 69 73 74 65 64 26 26 28 61 3d 74 2e 74 69 6d 65 53 74 61 6d 70 2c 65 28 74 29 29 7d 29 2c 21 30 29 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 5b 30 5d Data Ascii: !function(){"use strict";var e,t,n,i,r,a=-1,o=function(e){addEventListener("pageshow",(function(t){t.persisted&&(a=t.timeStamp,e(t))}),!0)},c=function(){return window.performance&&performance.getEntriesByType&&performance.getEntriesByType("navigation")[0]
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 65 28 74 29 7d 3b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 74 2c 21 30 29 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 68 69 64 65 22 2c 74 2c 21 30 29 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 21 31 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 7c 7c 28 65 28 6e 29 2c 74 3d 21 30 29 7d 7d 2c 6d 3d 2d 31 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 68 69 64 64 65 6e 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 6f 63 75 6d 65 6e 74 2e 70 72 65 72 65 6e 64 65 72 69 6e 67 3f Data Ascii: "!==document.visibilityState\|\|e(t)};addEventListener("visibilitychange",t,!0),addEventListener("pagehide",t,!0)},l=function(e){var t=!1;return function(n){t\|\|(e(n),t=!0)}},m=-1,h=function(){return"hidden"!==document.visibilityState\|\|document.prerendering?
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 65 3d 72 2c 74 3d 69 2c 6e 3d 6e 65 77 20 44 61 74 65 2c 50 28 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 2c 53 28 29 29 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 3e 3d 30 26 26 74 3c 6e 2d 43 29 7b 76 61 72 20 72 3d 7b 65 6e 74 72 79 54 79 70 65 3a 22 66 69 72 73 74 2d 69 6e 70 75 74 22 2c 6e 61 6d 65 3a 65 2e 74 79 70 65 2c 74 61 72 67 65 74 3a 65 2e 74 61 72 67 65 74 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 65 2e 63 61 6e 63 65 6c 61 62 6c 65 2c 73 74 61 72 74 54 69 6d 65 3a 65 2e 74 69 6d 65 53 74 61 6d 70 2c 70 72 6f 63 65 73 73 69 6e 67 53 74 61 72 74 3a 65 2e 74 69 6d 65 53 74 61 6d 70 2b 74 7d 3b 69 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 72 29 7d 29 29 2c 69 3d 5b 5d 7d 7d 2c 49 3d 66 75 Data Ascii: e=r,t=i,n=new Date,P(removeEventListener),S())},S=function(){if(t>=0&&t<n-C){var r={entryType:"first-input",name:e.type,target:e.target,cancelable:e.cancelable,startTime:e.timeStamp,processingStart:e.timeStamp+t};i.forEach((function(e){e(r)})),i=[]}},I=fu
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 48 5b 69 2e 69 64 5d 3d 69 2c 42 2e 70 75 73 68 28 69 29 7d 42 2e 73 6f 72 74 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 6c 61 74 65 6e 63 79 2d 65 2e 6c 61 74 65 6e 63 79 7d 29 29 2c 42 2e 73 70 6c 69 63 65 28 31 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 65 6c 65 74 65 20 48 5b 65 2e 69 64 5d 7d 29 29 7d 7d 2c 71 3d 7b 7d 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3e 74 5b 31 5d 3f 22 70 6f 6f 72 22 3a 65 3e 74 5b 30 5d 3f 22 6e 65 65 64 73 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 3a 22 67 6f 6f 64 22 7d 3b 76 61 72 20 7a 2c 47 2c 4a 3d 2f 5c 73 2b 2f 67 2c 4b 3d 77 69 6e 64 6f 77 2c 51 3d 5b 5d 2c 55 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 56 28 29 7b 76 61 72 Data Ascii: H[i.id]=i,B.push(i)}B.sort((function(e,t){return t.latency-e.latency})),B.splice(10).forEach((function(e){delete H[e.id]}))}},q={},j=function(e,t){return e>t[1]?"poor":e>t[0]?"needs-improvement":"good"};var z,G,J=/\s+/g,K=window,Q=[],U={};function V(){var
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 64 41 74 74 72 69 62 75 74 65 28 7b 73 70 61 63 65 69 64 3a 6d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 29 7b 4b 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 65 3f 28 56 28 29 2c 57 28 65 29 29 3a 51 2e 70 75 73 68 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 29 7b 55 5b 65 2e 6e 61 6d 65 5d 3d 65 7d 77 28 58 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 72 3d 72 7c 7c 7b 7d 2c 62 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 63 3d 5b 31 30 30 2c 33 30 30 5d 2c 75 3d 45 28 29 2c 70 3d 73 28 22 46 49 44 22 29 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 73 74 61 72 74 54 69 6d 65 3c 75 2e 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 26 26 28 70 2e 76 61 6c 75 65 3d 65 2e 70 72 6f 63 65 73 73 69 6e 67 53 74 61 72 74 2d 65 2e 73 74 61 Data Ascii: dAttribute({spaceid:m})}}function X(e){K.rapidInstance?(V(),W(e)):Q.push(e)}function Y(e){U[e.name]=e}w(X),function(n,r){r=r\|\|{},b((function(){var a,c=[100,300],u=E(),p=s("FID"),m=function(e){e.startTime<u.firstHiddenTime&&(p.value=e.processingStart-e.sta
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 26 26 6f 5b 6e 5d 26 26 28 61 5b 6e 5d 3d 4d 61 74 68 2e 6d 61 78 28 6f 5b 6e 5d 2d 6f 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2c 30 29 29 3b 76 61 72 20 63 3d 61 5b 6e 5d 3b 69 66 28 63 3c 30 7c 7c 63 3e 72 2e 6e 6f 77 28 29 29 72 65 74 75 72 6e 3b 65 28 7b 64 65 6c 74 61 3a 63 2c 65 6e 74 72 69 65 73 3a 5b 61 5d 2c 69 64 3a 74 2c 6e 61 6d 65 3a 74 2c 72 61 74 69 6e 67 3a 6a 28 63 2c 69 29 2c 76 61 6c 75 65 3a 63 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 22 6e 61 76 69 67 61 74 65 22 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 58 2c 22 54 54 46 42 22 2c 22 72 65 73 70 6f 6e 73 65 53 74 61 72 74 22 2c 5b 38 30 30 2c 31 38 30 30 5d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 74 7c 7c 7b 7d 2c 77 28 6c 28 28 66 75 6e 63 74 69 6f 6e Data Ascii: &&o[n]&&(a[n]=Math.max(o[n]-o.navigationStart,0));var c=a[n];if(c<0\|\|c>r.now())return;e({delta:c,entries:[a],id:t,name:t,rating:j(c,i),value:c,navigationType:"navigate"})}catch(e){}}(X,"TTFB","responseStart",[800,1800]),function(e,t){t=t\|\|{},w(l((function
2024-03-29 00:41:33 UTC	328	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 61 28 63 2e 74 61 6b 65 52 65 63 6f 72 64 73 28 29 29 2c 72 2e 76 61 6c 75 65 3c 30 26 26 4f 28 29 3e 30 26 26 28 72 2e 76 61 6c 75 65 3d 30 2c 72 2e 65 6e 74 72 69 65 73 3d 5b 5d 29 2c 69 28 21 30 29 7d 29 29 2c 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 42 3d 5b 5d 2c 78 3d 46 28 29 2c 72 3d 73 28 22 49 4e 50 22 29 2c 69 3d 64 28 65 2c 72 2c 6e 2c 74 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 7d 29 29 29 7d 29 29 7d 28 59 29 2c 4b 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 28 4b 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 56 29 2c 4b 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 68 69 64 65 22 2c 28 66 75 6e 63 Data Ascii: unction(){a(c.takeRecords()),r.value<0&&O()>0&&(r.value=0,r.entries=[]),i(!0)})),o((function(){B=[],x=F(),r=s("INP"),i=d(e,r,n,t.reportAllChanges)})))}))}(Y),K.addEventListener&&(K.addEventListener("DOMContentLoaded",V),K.addEventListener("pagehide",(func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	49973	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	568	OUT	GET /pv/static/misc/voice-start-202105050733.wav HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.yahoo.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-03-29 00:41:33 UTC	902	IN	HTTP/1.1 206 Partial Content x-amz-id-2: sb4uK7iStKtqFCpIhHW3uLPIbT5QlbMNWRvbmPGWfEeZ5k7hYxGjp8aXBIrQzx96yfwxEMtF0AA= x-amz-request-id: QTV288M62PW73X5F Date: Thu, 28 Mar 2024 02:48:57 GMT Last-Modified: Wed, 05 May 2021 07:33:16 GMT ETag: "8abfe6dfa7b0d9a5a4b7268155054740" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public Expires: Mon, 05 May 2031 07:33:14 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: binary/octet-stream Server: ATS Content-Length: 189160 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 78757 Content-Range: bytes 0-189159/189160 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 52 49 46 46 e0 e2 02 00 57 41 56 45 66 6d 74 20 10 00 00 00 03 00 02 00 44 ac 00 00 20 62 05 00 08 00 20 00 64 61 74 61 68 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: RIFFWAVEfmt D b datah
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 03 a3 c1 3c 1f 1d 64 3c 4c 2c 65 3c ed 94 3f 3b 8b 71 40 3b 02 58 36 bc a0 34 37 bc 12 81 ce bc 9e 79 cf bc 21 91 18 bd 89 48 19 bd 62 75 45 bd 9e 62 46 bd f4 fb 67 bd 8e 12 69 bd 96 42 7b bd 41 70 7c bd f4 33 82 bd 44 d0 82 bd 0c 95 82 bd d9 31 83 bd 64 65 81 bd c7 00 82 bd f4 8a 81 bd 90 26 82 bd 69 14 80 bd 4b ae 80 bd 6b cc 7d bd 5b fd 7e bd 23 48 84 bd 10 e7 84 bd 12 f6 8b bd 3b 9e 8c bd 64 87 8f bd d6 33 90 bd cb 91 90 bd 7a 3f 91 bd 2b b3 8e bd 99 5e 8f bd ca 6f 87 bd 8e 12 88 bd 30 73 75 bd 51 9a 76 bd e4 5e 4d bd 1d 56 4e bd 04 f7 19 bd b8 b0 1a bd b2 0e ce bc 21 08 cf bc 95 32 4e bc 5f 2f 4f bc b8 88 ac 38 a9 69 aa 38 cc 2c 1f 3c 5a e5 1f 3c ed 72 87 3c 06 12 88 3c 0b 46 ba 3c f4 21 bb 3c 15 63 df 3c 5d 6b e0 3c 81 4e f5 3c f3 70 f6 3c cc b2 05 Data Ascii: <d<L,e<?;q@;X647y!HbuEbFgiB{Ap\|3D1de&iKk}[~#H;d3z?+^o0suQv^MVN!2N_/O8i8,<Z<r<<F<!<c<]k<N<p<
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 08 bb 7c bd 97 ec 7d bd 01 39 88 bd 8a dd 88 bd 6e e1 90 bd 5a 90 91 bd e8 80 95 bd 4e 35 96 bd 90 e9 98 bd 13 a2 99 bd e8 26 99 bd a3 df 99 bd 26 b4 91 bd f4 63 92 bd 49 52 83 bd db f0 83 bd 07 0e 60 bd d9 1c 61 bd e5 3a 34 bd 36 15 35 bd 6a d0 08 bd c2 76 09 bd 3d 97 b8 bc fb 78 b9 bc d1 eb 42 bc b5 de 43 bc 89 53 7f bb e3 54 80 bb 2e 4e f4 3a f8 27 f5 3a d4 3c e8 3b 0c 41 e9 3b 5c 24 37 3c ba f6 37 3c 76 4b 70 3c 6a 62 71 3c 7e d0 9f 3c 85 8b a0 3c eb ab d2 3c ef a3 d3 3c 31 0d 07 3d e8 ac 07 3d fb cf 28 3d 17 98 29 3d cc e7 4a 3d d5 d8 4b 3d 53 bc 6d 3d fe d6 6e 3d 8e 71 87 3d c6 12 88 3d e3 15 91 3d b0 c2 91 3d fa d8 92 3d e6 87 93 3d 6c ee 90 3d 0c 9b 91 3d b4 87 8a 3d b9 2c 8b 3d c4 87 7c 3d 77 b4 7d 3d cb 11 5e 3d fc 19 5f 3d 86 14 3e 3d 5b f6 3e Data Ascii: \|}9nZN5&&cIR`a:465jv=xBCST.N:':<;A;\$7<7<vKp<jbq<~<<<<1==(=)=J=K=Sm=n=q======l===,=\|=w}=^=_=>=[>
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: c4 b4 72 bc a1 b2 25 bc 44 78 26 bc 9c c5 a9 bb 23 8f aa bb 8e 6a 3d ba db 3b 3e ba b0 48 6e 3b 9a 6a 6f 3b 6d 59 1c 3c 39 16 1d 3c 41 fa 8a 3c 7c a1 8b 3c e8 ca d0 3c c1 c5 d1 3c 4c a7 0f 3d d5 53 10 3d 53 1f 37 3d 0e fb 37 3d 34 36 5b 3d 3f 3d 5c 3d df da 78 3d 73 05 7a 3d c6 60 85 3d cc 00 86 3d 68 08 89 3d cf ac 89 3d 4d 32 89 3d ed d6 89 3d 92 e4 83 3d df 82 84 3d 08 b5 72 3d 89 d8 73 3d b2 96 5c 3d af 9f 5d 3d ff 7e 49 3d 2e 71 4a 3d e7 8f 38 3d ef 6d 39 3d ca 2b 2a 3d ac f8 2a 3d ad 4f 1d 3d 17 0d 1e 3d 9b 89 12 3d 34 3a 13 3d 40 b5 09 3d 55 5b 0a 3d 51 23 f7 3c b7 4d f8 3c 19 99 c8 3c d0 8b c9 3c 0a 58 8e 3c 1b 05 8f 3c cf 80 0a 3c ee 2b 0b 3c 34 61 29 bb 38 16 2a bb 95 ac 67 bc 76 bc 68 bc 05 a9 ce bc 81 9d cf bc 9b 13 12 bd 06 c1 12 bd 08 87 36 Data Ascii: r%Dx&#j=;>Hn;jo;mY<9<A<\|<<<L=S=S7=7=46[=?=\=x=sz=`==h==M2====r=s=\=]=~I=.qJ=8=m9=+==O===4:=@=U[=Q#<M<<<X<<<+<4a)8*gvh6
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: ba 52 79 3d 1c 84 7a 3d 7f d5 71 3d f3 fd 72 3d 64 75 65 3d ff 8e 66 3d 9d 9b 5a 3d 39 a8 5b 3d 1c 1d 51 3d 7f 1e 52 3d c2 5c 47 3d 7a 52 48 3d e5 3e 40 3d 21 2c 41 3d 63 4e 3c 3d ef 36 3d 3d de 7a 38 3d e8 5e 39 3d bf e9 30 3d dd c4 31 3d 98 1b 21 3d cb e3 21 3d 2e 15 09 3d a7 c0 09 3d 2c c1 d7 3c 4a d2 d8 3c 80 1d 8f 3c d3 d7 8f 3c 31 c9 db 3b 0c 0d dd 3b f6 9d 91 bb ce 0f 92 bb 46 73 75 bc ac 7a 76 bc 32 7b c9 bc 1e 5d ca bc d7 de 04 bd 40 76 05 bd 2e 65 1c bd 9c 18 1d bd 17 a5 2c bd f7 6b 2d bd 99 cf 36 bd 7e a2 37 bd 49 23 3e bd 05 ff 3e bd 8f a9 44 bd fc 8c 45 bd c1 e0 49 bd 5d ca 4a bd fa ad 51 bd de a0 52 bd bb 85 5f bd 27 89 60 bd 3a 82 6e bd 97 97 6f bd a0 e2 79 bd 82 05 7b bd ba cb 80 bd c4 61 81 bd 27 05 82 bd 9b 9c 82 bd a5 b6 7e bd 30 df 7f Data Ascii: Ry=z=q=r=due=f=Z=9[=Q=R=\G=zRH=>@=!,A=cN<=6==z8=^9=0=1=!=!=.==,<J<<<1;;Fsuzv2{]@v.e,k-6~7I#>>DEI]JQR_'`:noy{a'~0
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: d0 9a ca 3c 2a ec 69 3c 36 39 6b 3c 98 e0 8b 3b 89 f1 8c 3b c9 cf 9f bb a3 24 a0 bb 3f c9 59 bc c9 98 5a bc a7 d0 a6 bc b8 7d a7 bc ff 95 d2 bc 63 77 d3 bc 2d f9 f2 bc 75 01 f4 bc 64 a4 05 bd 06 37 06 bd 1f 96 10 bd ee 35 11 bd 27 cc 1c bd 74 7a 1d bd bc b6 2a bd be 75 2b bd 57 ad 3b bd ae 80 3c bd ca 76 4f bd ba 61 50 bd 20 df 61 bd 29 e0 62 bd 91 00 71 bd a2 13 72 bd 41 19 7d bd ba 3a 7e bd f8 3d 81 bd ee d1 81 bd 5a 52 7d bd 17 74 7e bd b6 01 6e bd fa 10 6f bd 7a b7 56 bd cf aa 57 bd dc 85 3a bd 6e 57 3b bd 47 af 1b bd e6 5b 1c bd 88 3a f5 bc 67 44 f6 bc 8b 29 b5 bc b1 e6 b5 bc f2 0f 80 bc 75 8d 80 bc 1f ab 28 bc 24 3d 29 bc 80 20 b6 bb 91 8a b6 bb 97 33 b6 ba 7d 4e b5 ba 4b ff 34 3b f1 b9 36 3b fd a4 fa 3b f1 41 fc 3b df fd 5b 3c d7 3d 5d 3c eb 28 a5 Data Ascii: <i<69k<;;$?YZ}cw-ud75'tzu+W;<vOaP a)bqrA}:~=ZR}t~nozVW:nW;G[:gD)u($=) 3}NK4;6;;A;[<=]<(
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 77 96 51 bd 48 7f 52 bd d9 7f 64 bd 34 7f 65 bd d0 26 72 bd 85 36 73 bd 06 67 77 bd 01 7d 78 bd d4 0b 73 bd 81 1c 74 bd 13 42 67 bd b2 44 68 bd d8 6b 55 bd 14 59 56 bd 56 61 3e bd e7 32 3f bd de 61 24 bd 53 14 25 bd c0 3c 0a bd d4 cf 0a bd 14 46 e6 bc e7 34 e7 bc 91 a0 c0 bc 7d 62 c1 bc ed 68 9e bc d7 01 9f bc ea bf 78 bc 6c a0 79 bc a1 9d 37 bc 00 30 38 bc c6 dc e3 bb ee 59 e4 bb 59 68 da ba 40 20 d9 ba 05 b0 9d 3b e5 ff 9e 3b cb f4 4a 3c 93 31 4c 3c b2 18 aa 3c 1d 09 ab 3c 13 16 f0 3c 48 5a f1 3c 02 6b 19 3d 27 35 1a 3d a5 74 36 3d 87 61 37 3d d1 68 4c 3d 0a 70 4d 3d 16 37 5b 3d fc 4f 5c 3d 1e fb 62 3d 63 1d 64 3d 4d 65 62 3d c5 86 63 3d 7d 52 5b 3d 90 6b 5c 3d b2 3d 52 3d e6 4b 53 3d 08 4e 49 3d 73 51 4a 3d f5 e8 40 3d 4d e2 41 3d 55 56 39 3d a9 46 3a Data Ascii: wQHRd4e&r6sgw}xstBgDhkUYVVa>2?a$S%<F4}bhxly708YYh@ ;;J<1L<<<<HZ<k='5=t6=a7=hL=pM=7[=O\=b=cd=Meb=c=}R[=k\==R=KS=NI=sQJ=@=MA=UV9=F:
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 4c 9c c1 bc 7b b2 a4 bc 2c 56 a5 bc 80 c8 80 bc 6a 41 81 bc 18 2d 21 bc 50 ab 21 bc 24 b7 35 bb 0f 87 35 bb 35 14 a6 3b d7 5f a7 3b f6 96 5c 3c 89 e1 5d 3c 23 fc b3 3c dd f4 b4 3c f0 e1 f5 3c ae 29 f7 3c 31 50 17 3d 01 16 18 3d 7e d3 2c 3d 07 b3 2d 3d dc 61 3b 3d b7 52 3c 3d bd aa 43 3d 95 a5 44 3d c7 26 46 3d 8b 24 47 3d 74 26 45 3d fa 22 46 3d ae 56 43 3d ff 50 44 3d 6e 2e 41 3d 2e 26 42 3d 20 2b 3f 3d 67 20 40 3d e4 a3 3e 3d 8d 98 3f 3d a4 55 3f 3d 01 4b 40 3d b9 42 3f 3d 17 38 40 3d 8d af 3b 3d 7f a0 3c 3d bb 55 32 3d 73 3b 33 3d c6 2c 23 3d 60 00 24 3d 81 97 0e 3d 72 52 0f 3d 4b 07 e7 3c 1f 3c e8 3c 88 36 a5 3c 84 1c a6 3c 15 bf 3c 3c ff e0 3d 3c c9 86 3f 3b dc 6b 41 3b 3b a7 a8 bb 2f f2 a8 bb 6e e1 47 bc 25 91 48 bc 54 c5 93 bc a4 56 94 bc 60 d4 b9 Data Ascii: L{,VjA-!P!$555;_;\<]<#<<<)<1P==~,=-=a;=R<=C=D=&F=$G=t&E="F=VC=PD=n.A=.&B= +?=g @=>=?=U?=K@=B?=8@=;=<=U2=s;3=,#=`$==rR=K<<<6<<<<=<?;kA;;/nG%HTV`
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 52 e7 2b 3d 5e be 2c 3d d6 a7 2f 3d 7b 83 30 3d b6 04 34 3d 92 e5 34 3d d7 47 39 3d f9 2e 3a 3d 99 80 3f 3d 11 6f 40 3d a9 05 45 3d c3 fa 45 3d fc ad 47 3d 2e a6 48 3d f1 1d 46 3d 47 14 47 3d ee 41 3f 3d 0c 30 40 3d ca 56 32 3d 5a 35 33 3d a9 ce 1e 3d e4 95 1f 3d d8 be 04 3d c8 66 05 3d 65 1d cd 3c f8 24 ce 3c c3 2d 8f 3c 17 eb 8f 3c 38 2b 25 3c ea 14 26 3c 6e 04 48 3b ae 83 49 3b a1 f4 50 bb 1b 60 51 bb 4b 9a 09 bc b1 1b 0a bc e5 b2 4f bc 71 88 50 bc 8f d4 85 bc 38 63 86 bc 11 93 a2 bc 32 44 a3 bc ee c9 c0 bc 20 9f c1 bc 7a bc e1 bc 45 b9 e2 bc b6 61 03 bd 4b f6 03 bd f7 64 17 bd 7f 11 18 bd 9c 07 2b bd be cb 2b bd 7f 16 3d bd 32 f0 3d bd bd 4b 4c bd bc 37 4d bd 61 08 56 bd 0b 00 57 bd 5d 53 58 bd c5 4d 59 bd 9a 26 53 bd e8 1a 54 bd 61 a3 47 bd cf 89 48 Data Ascii: R+=^,=/={0=4=4=G9=.:=?=o@=E=E=G=.H=F=GG=A?=0@=V2=Z53====f=e<$<-<<8+%<&<nH;I;P`QKOqP8c2D zEaKd++=2=KL7MaVW]SXMY&STaGH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	49962	54.225.222.132	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	600	OUT	GET /j?se=e30&cd=.com&dtstmp=1711672890515&tv=8.38.0&did=did-004f&n3pc=true&wpn=prebid&pu=https%3A%2F%2Fwww.yahoo.com%2F&duid=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q&gdpr=0 HTTP/1.1 Host: rp.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=07571c18-3f04-4602-a656-288806fb242c; lidid=07571c18-3f04-4602-a656-288806fb242c
2024-03-29 00:41:33 UTC	308	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:33 GMT Content-Type: application/json Content-Length: 13 Connection: close X-Pixel-Event-Id: faded5bd-2433-4260-9705-728600877140 set-cookie: lidid=07571c18-3f04-4602-a656-288806fb242c; Max-Age=63072000; Domain=.liadm.com; Path=/j; Secure; SameSite=None
2024-03-29 00:41:33 UTC	13	IN	Data Raw: 7b 22 62 61 6b 65 72 73 22 3a 5b 5d 7d Data Ascii: {"bakers":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	49966	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	569	OUT	GET /pv/static/misc/voice-result-202105050733.wav HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.yahoo.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-03-29 00:41:33 UTC	898	IN	HTTP/1.1 206 Partial Content x-amz-id-2: PEj++zIx9TZ60S42Zod3cUvuVQnC2pIiqo9Bi1q/7YhtOn+A8DK5ttZwhgGcRpnzjnP2YuyxrwU= x-amz-request-id: 8STMT4GDFRP6HKDD Date: Thu, 28 Mar 2024 23:19:52 GMT Last-Modified: Wed, 05 May 2021 07:33:25 GMT ETag: "f536e8f265fbbd76a5f7b9fc0ea0ad69" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public Expires: Mon, 05 May 2031 07:33:23 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: binary/octet-stream Server: ATS Content-Length: 80336 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 4902 Content-Range: bytes 0-80335/80336 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 52 49 46 46 c8 39 01 00 57 41 56 45 66 6d 74 20 10 00 00 00 03 00 02 00 44 ac 00 00 20 62 05 00 08 00 20 00 64 61 74 61 48 07 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: RIFF9WAVEfmt D b dataH
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 03 a3 c1 3c 1f 1d 64 3c 4c 2c 65 3c ed 94 3f 3b 8b 71 40 3b 02 58 36 bc a0 34 37 bc 12 81 ce bc 9e 79 cf bc 21 91 18 bd 89 48 19 bd 62 75 45 bd 9e 62 46 bd f4 fb 67 bd 8e 12 69 bd 96 42 7b bd 41 70 7c bd f4 33 82 bd 44 d0 82 bd 0c 95 82 bd d9 31 83 bd 64 65 81 bd c7 00 82 bd f4 8a 81 bd 90 26 82 bd 69 14 80 bd 4b ae 80 bd 6b cc 7d bd 5b fd 7e bd 23 48 84 bd 10 e7 84 bd 12 f6 8b bd 3b 9e 8c bd 64 87 8f bd d6 33 90 bd cb 91 90 bd 7a 3f 91 bd 2b b3 8e bd 99 5e 8f bd ca 6f 87 bd 8e 12 88 bd 30 73 75 bd 51 9a 76 bd e4 5e 4d bd 1d 56 4e bd 04 f7 19 bd b8 b0 1a bd b2 0e ce bc 21 08 cf bc 95 32 4e bc 5f 2f 4f bc b8 88 ac 38 a9 69 aa 38 cc 2c 1f 3c 5a e5 1f 3c ed 72 87 3c 06 12 88 3c 0b 46 ba 3c f4 21 bb 3c 15 63 df 3c 5d 6b e0 3c 81 4e f5 3c f3 70 f6 3c cc b2 05 Data Ascii: <d<L,e<?;q@;X647y!HbuEbFgiB{Ap\|3D1de&iKk}[~#H;d3z?+^o0suQv^MVN!2N_/O8i8,<Z<r<<F<!<c<]k<N<p<
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 08 bb 7c bd 97 ec 7d bd 01 39 88 bd 8a dd 88 bd 6e e1 90 bd 5a 90 91 bd e8 80 95 bd 4e 35 96 bd 90 e9 98 bd 13 a2 99 bd e8 26 99 bd a3 df 99 bd 26 b4 91 bd f4 63 92 bd 49 52 83 bd db f0 83 bd 07 0e 60 bd d9 1c 61 bd e5 3a 34 bd 36 15 35 bd 6a d0 08 bd c2 76 09 bd 3d 97 b8 bc fb 78 b9 bc d1 eb 42 bc b5 de 43 bc 89 53 7f bb e3 54 80 bb 2e 4e f4 3a f8 27 f5 3a d4 3c e8 3b 0c 41 e9 3b 5c 24 37 3c ba f6 37 3c 76 4b 70 3c 6a 62 71 3c 7e d0 9f 3c 85 8b a0 3c eb ab d2 3c ef a3 d3 3c 31 0d 07 3d e8 ac 07 3d fb cf 28 3d 17 98 29 3d cc e7 4a 3d d5 d8 4b 3d 53 bc 6d 3d fe d6 6e 3d 8e 71 87 3d c6 12 88 3d e3 15 91 3d b0 c2 91 3d fa d8 92 3d e6 87 93 3d 6c ee 90 3d 0c 9b 91 3d b4 87 8a 3d b9 2c 8b 3d c4 87 7c 3d 77 b4 7d 3d cb 11 5e 3d fc 19 5f 3d 86 14 3e 3d 5b f6 3e Data Ascii: \|}9nZN5&&cIR`a:465jv=xBCST.N:':<;A;\$7<7<vKp<jbq<~<<<<1==(=)=J=K=Sm=n=q======l===,=\|=w}=^=_=>=[>
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: c4 b4 72 bc a1 b2 25 bc 44 78 26 bc 9c c5 a9 bb 23 8f aa bb 8e 6a 3d ba db 3b 3e ba b0 48 6e 3b 9a 6a 6f 3b 6d 59 1c 3c 39 16 1d 3c 41 fa 8a 3c 7c a1 8b 3c e8 ca d0 3c c1 c5 d1 3c 4c a7 0f 3d d5 53 10 3d 53 1f 37 3d 0e fb 37 3d 34 36 5b 3d 3f 3d 5c 3d df da 78 3d 73 05 7a 3d c6 60 85 3d cc 00 86 3d 68 08 89 3d cf ac 89 3d 4d 32 89 3d ed d6 89 3d 92 e4 83 3d df 82 84 3d 08 b5 72 3d 89 d8 73 3d b2 96 5c 3d af 9f 5d 3d ff 7e 49 3d 2e 71 4a 3d e7 8f 38 3d ef 6d 39 3d ca 2b 2a 3d ac f8 2a 3d ad 4f 1d 3d 17 0d 1e 3d 9b 89 12 3d 34 3a 13 3d 40 b5 09 3d 55 5b 0a 3d 51 23 f7 3c b7 4d f8 3c 19 99 c8 3c d0 8b c9 3c 0a 58 8e 3c 1b 05 8f 3c cf 80 0a 3c ee 2b 0b 3c 34 61 29 bb 38 16 2a bb 95 ac 67 bc 76 bc 68 bc 05 a9 ce bc 81 9d cf bc 9b 13 12 bd 06 c1 12 bd 08 87 36 Data Ascii: r%Dx&#j=;>Hn;jo;mY<9<A<\|<<<L=S=S7=7=46[=?=\=x=sz=`==h==M2====r=s=\=]=~I=.qJ=8=m9=+==O===4:=@=U[=Q#<M<<<X<<<+<4a)8*gvh6
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: ba 52 79 3d 1c 84 7a 3d 7f d5 71 3d f3 fd 72 3d 64 75 65 3d ff 8e 66 3d 9d 9b 5a 3d 39 a8 5b 3d 1c 1d 51 3d 7f 1e 52 3d c2 5c 47 3d 7a 52 48 3d e5 3e 40 3d 21 2c 41 3d 63 4e 3c 3d ef 36 3d 3d de 7a 38 3d e8 5e 39 3d bf e9 30 3d dd c4 31 3d 98 1b 21 3d cb e3 21 3d 2e 15 09 3d a7 c0 09 3d 2c c1 d7 3c 4a d2 d8 3c 80 1d 8f 3c d3 d7 8f 3c 31 c9 db 3b 0c 0d dd 3b f6 9d 91 bb ce 0f 92 bb 46 73 75 bc ac 7a 76 bc 32 7b c9 bc 1e 5d ca bc d7 de 04 bd 40 76 05 bd 2e 65 1c bd 9c 18 1d bd 17 a5 2c bd f7 6b 2d bd 99 cf 36 bd 7e a2 37 bd 49 23 3e bd 05 ff 3e bd 8f a9 44 bd fc 8c 45 bd c1 e0 49 bd 5d ca 4a bd fa ad 51 bd de a0 52 bd bb 85 5f bd 27 89 60 bd 3a 82 6e bd 97 97 6f bd a0 e2 79 bd 82 05 7b bd ba cb 80 bd c4 61 81 bd 27 05 82 bd 9b 9c 82 bd a5 b6 7e bd 30 df 7f Data Ascii: Ry=z=q=r=due=f=Z=9[=Q=R=\G=zRH=>@=!,A=cN<=6==z8=^9=0=1=!=!=.==,<J<<<1;;Fsuzv2{]@v.e,k-6~7I#>>DEI]JQR_'`:noy{a'~0
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: d0 9a ca 3c 2a ec 69 3c 36 39 6b 3c 98 e0 8b 3b 89 f1 8c 3b c9 cf 9f bb a3 24 a0 bb 3f c9 59 bc c9 98 5a bc a7 d0 a6 bc b8 7d a7 bc ff 95 d2 bc 63 77 d3 bc 2d f9 f2 bc 75 01 f4 bc 64 a4 05 bd 06 37 06 bd 1f 96 10 bd ee 35 11 bd 27 cc 1c bd 74 7a 1d bd bc b6 2a bd be 75 2b bd 57 ad 3b bd ae 80 3c bd ca 76 4f bd ba 61 50 bd 20 df 61 bd 29 e0 62 bd 91 00 71 bd a2 13 72 bd 41 19 7d bd ba 3a 7e bd f8 3d 81 bd ee d1 81 bd 5a 52 7d bd 17 74 7e bd b6 01 6e bd fa 10 6f bd 7a b7 56 bd cf aa 57 bd dc 85 3a bd 6e 57 3b bd 47 af 1b bd e6 5b 1c bd 88 3a f5 bc 67 44 f6 bc 8b 29 b5 bc b1 e6 b5 bc f2 0f 80 bc 75 8d 80 bc 1f ab 28 bc 24 3d 29 bc 80 20 b6 bb 91 8a b6 bb 97 33 b6 ba 7d 4e b5 ba 4b ff 34 3b f1 b9 36 3b fd a4 fa 3b f1 41 fc 3b df fd 5b 3c d7 3d 5d 3c eb 28 a5 Data Ascii: <i<69k<;;$?YZ}cw-ud75'tzu+W;<vOaP a)bqrA}:~=ZR}t~nozVW:nW;G[:gD)u($=) 3}NK4;6;;A;[<=]<(
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 77 96 51 bd 48 7f 52 bd d9 7f 64 bd 34 7f 65 bd d0 26 72 bd 85 36 73 bd 06 67 77 bd 01 7d 78 bd d4 0b 73 bd 81 1c 74 bd 13 42 67 bd b2 44 68 bd d8 6b 55 bd 14 59 56 bd 56 61 3e bd e7 32 3f bd de 61 24 bd 53 14 25 bd c0 3c 0a bd d4 cf 0a bd 14 46 e6 bc e7 34 e7 bc 91 a0 c0 bc 7d 62 c1 bc ed 68 9e bc d7 01 9f bc ea bf 78 bc 6c a0 79 bc a1 9d 37 bc 00 30 38 bc c6 dc e3 bb ee 59 e4 bb 59 68 da ba 40 20 d9 ba 05 b0 9d 3b e5 ff 9e 3b cb f4 4a 3c 93 31 4c 3c b2 18 aa 3c 1d 09 ab 3c 13 16 f0 3c 48 5a f1 3c 02 6b 19 3d 27 35 1a 3d a5 74 36 3d 87 61 37 3d d1 68 4c 3d 0a 70 4d 3d 16 37 5b 3d fc 4f 5c 3d 1e fb 62 3d 63 1d 64 3d 4d 65 62 3d c5 86 63 3d 7d 52 5b 3d 90 6b 5c 3d b2 3d 52 3d e6 4b 53 3d 08 4e 49 3d 73 51 4a 3d f5 e8 40 3d 4d e2 41 3d 55 56 39 3d a9 46 3a Data Ascii: wQHRd4e&r6sgw}xstBgDhkUYVVa>2?a$S%<F4}bhxly708YYh@ ;;J<1L<<<<HZ<k='5=t6=a7=hL=pM=7[=O\=b=cd=Meb=c=}R[=k\==R=KS=NI=sQJ=@=MA=UV9=F:
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 4c 9c c1 bc 7b b2 a4 bc 2c 56 a5 bc 80 c8 80 bc 6a 41 81 bc 18 2d 21 bc 50 ab 21 bc 24 b7 35 bb 0f 87 35 bb 35 14 a6 3b d7 5f a7 3b f6 96 5c 3c 89 e1 5d 3c 23 fc b3 3c dd f4 b4 3c f0 e1 f5 3c ae 29 f7 3c 31 50 17 3d 01 16 18 3d 7e d3 2c 3d 07 b3 2d 3d dc 61 3b 3d b7 52 3c 3d bd aa 43 3d 95 a5 44 3d c7 26 46 3d 8b 24 47 3d 74 26 45 3d fa 22 46 3d ae 56 43 3d ff 50 44 3d 6e 2e 41 3d 2e 26 42 3d 20 2b 3f 3d 67 20 40 3d e4 a3 3e 3d 8d 98 3f 3d a4 55 3f 3d 01 4b 40 3d b9 42 3f 3d 17 38 40 3d 8d af 3b 3d 7f a0 3c 3d bb 55 32 3d 73 3b 33 3d c6 2c 23 3d 60 00 24 3d 81 97 0e 3d 72 52 0f 3d 4b 07 e7 3c 1f 3c e8 3c 88 36 a5 3c 84 1c a6 3c 15 bf 3c 3c ff e0 3d 3c c9 86 3f 3b dc 6b 41 3b 3b a7 a8 bb 2f f2 a8 bb 6e e1 47 bc 25 91 48 bc 54 c5 93 bc a4 56 94 bc 60 d4 b9 Data Ascii: L{,VjA-!P!$555;_;\<]<#<<<)<1P==~,=-=a;=R<=C=D=&F=$G=t&E="F=VC=PD=n.A=.&B= +?=g @=>=?=U?=K@=B?=8@=;=<=U2=s;3=,#=`$==rR=K<<<6<<<<=<?;kA;;/nG%HTV`
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 52 e7 2b 3d 5e be 2c 3d d6 a7 2f 3d 7b 83 30 3d b6 04 34 3d 92 e5 34 3d d7 47 39 3d f9 2e 3a 3d 99 80 3f 3d 11 6f 40 3d a9 05 45 3d c3 fa 45 3d fc ad 47 3d 2e a6 48 3d f1 1d 46 3d 47 14 47 3d ee 41 3f 3d 0c 30 40 3d ca 56 32 3d 5a 35 33 3d a9 ce 1e 3d e4 95 1f 3d d8 be 04 3d c8 66 05 3d 65 1d cd 3c f8 24 ce 3c c3 2d 8f 3c 17 eb 8f 3c 38 2b 25 3c ea 14 26 3c 6e 04 48 3b ae 83 49 3b a1 f4 50 bb 1b 60 51 bb 4b 9a 09 bc b1 1b 0a bc e5 b2 4f bc 71 88 50 bc 8f d4 85 bc 38 63 86 bc 11 93 a2 bc 32 44 a3 bc ee c9 c0 bc 20 9f c1 bc 7a bc e1 bc 45 b9 e2 bc b6 61 03 bd 4b f6 03 bd f7 64 17 bd 7f 11 18 bd 9c 07 2b bd be cb 2b bd 7f 16 3d bd 32 f0 3d bd bd 4b 4c bd bc 37 4d bd 61 08 56 bd 0b 00 57 bd 5d 53 58 bd c5 4d 59 bd 9a 26 53 bd e8 1a 54 bd 61 a3 47 bd cf 89 48 Data Ascii: R+=^,=/={0=4=4=G9=.:=?=o@=E=E=G=.H=F=GG=A?=0@=V2=Z53====f=e<$<-<<8+%<&<nH;I;P`QKOqP8c2D zEaKd++=2=KL7MaVW]SXMY&STaGH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	49965	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	568	OUT	GET /pv/static/misc/voice-error-202105050733.wav HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.yahoo.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-03-29 00:41:33 UTC	919	IN	HTTP/1.1 206 Partial Content x-amz-id-2: Dc3x5xWbJMwe4a8zmXZ3nZ3gWuJMpX5bf0ggw0FO51HPQ5aYALgZh7akhREtt09iam+c9WqUORdj4E+g8csSnccGv8Fwn6mP x-amz-request-id: XNK392XQF921J3W9 Date: Thu, 28 Mar 2024 15:41:09 GMT Last-Modified: Wed, 05 May 2021 07:33:41 GMT ETag: "f35ad0c20d2f7e02b99e4866a98989d1" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public Expires: Mon, 05 May 2031 07:33:40 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: binary/octet-stream Server: ATS Content-Length: 85336 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 32425 Content-Range: bytes 0-85335/85336 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 52 49 46 46 50 4d 01 00 57 41 56 45 66 6d 74 20 10 00 00 00 03 00 02 00 44 ac 00 00 20 62 05 00 08 00 20 00 64 61 74 61 58 17 01 00 54 27 25 ba 77 77 6a bb 34 af 21 ba 90 1e 63 bb f5 39 1c ba c9 bb 5a bb f1 c1 14 ba 47 5d 51 bb cf 4c 0b ba c5 0f 47 bb d0 07 00 ba 67 e1 3b bb ee 9a e6 b9 7d dd 2f bb 2d 07 cb b9 ed 0d 23 bb 53 2b ae b9 08 7e 15 bb a6 e9 90 b9 1e 39 07 bb 99 1b 68 b9 cc a8 f0 ba f3 82 30 b9 00 cd d1 ba 05 aa f7 b8 c2 11 b2 ba 14 33 95 b8 d0 ac 91 ba 61 58 e9 b7 cb a7 61 ba 60 93 44 37 e4 62 1f ba f6 c1 47 38 34 b4 b9 b9 95 95 a7 38 40 5d d2 b8 3f 65 e4 38 c3 6c 20 39 7e 82 0d 39 be 43 d4 39 cc 58 26 39 71 a6 2b 3a 8e 6a 3d 39 ff 75 6c 3a aa b0 53 39 77 34 96 3a 48 51 6a 39 af 9d b5 3a 48 39 81 39 b6 54 d4 3a 56 9d 8e 39 f3 31 f2 3a 41 d1 9d Data Ascii: RIFFPMWAVEfmt D b dataXT'%wwj4!c9ZG]QLGg;}/-#S+~9h03aXa`D7bG848@]?e8l 9~9C9X&9q+:j=9ul:S9w4:HQj9:H99T:V91:A
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 86 43 5c 38 5a 97 1a 3a 2e 81 bd 37 df 71 b4 39 a5 79 ce b6 d3 d2 cb 38 05 14 13 b8 af 98 1d b9 fc a5 88 b8 e1 32 d0 b9 5a e2 cc b8 ea 55 28 ba 75 18 0c b9 b7 d7 67 ba f8 b9 35 b9 4e 30 93 ba 99 99 63 b9 31 d9 b1 ba 6b ae 8a b9 0e cd cf ba a4 32 a5 b9 72 f2 ec ba 65 c6 c0 b9 f4 97 04 bb ea e1 dc b9 93 34 12 bb dd c4 f8 b9 89 3f 1f bb 66 f9 09 ba 71 a6 2b bb 00 e1 16 ba 43 51 37 bb 54 e6 22 ba 31 2c 42 bb 28 cb 2d ba 31 1f 4c bb 43 51 37 ba df 17 55 bb 0b 51 3f ba 19 08 5d bb 97 97 45 ba 35 ea 63 bb a6 f7 49 ba 22 b7 69 bb 3e 60 4c ba 0b 6c 6e bb b9 cb 4c ba 86 07 72 bb 67 45 4b ba fe 8a 74 bb d8 05 48 ba 9d f3 75 bb 47 4b 43 ba 3a 44 76 bb 8e 6a 3d ba d2 7c 75 bb 7f c9 36 ba fd 9b 73 bb 46 c8 2f ba 62 a7 70 bb bd bb 28 ba 02 9f 6c bb 6d ed 21 ba c3 8c 67 Data Ascii: C\8Z:.7q9y82ZU(ug5N0c1k2re4?fq+CQ7T"1,B(-1LCQ7UQ?]E5cI"i>`LlnLrgEKtHuGKC:Dvj=\|u6sF/bp(lm!g
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: cb dd eb 3c 3a 54 08 3d 2d 4b 13 3d ba 53 17 3d dd 93 22 3d ca c7 0d 3d a4 41 19 3d 38 4f ce 3c 01 93 e5 3c 85 f4 47 3c 12 d9 76 3c 5e aa 83 3b 21 bf e1 3b 0d 67 a2 3b b7 34 00 3c da 0e 28 3c 47 ce 56 3c e6 46 48 3c 45 7f 76 3c 0e a2 e4 3b 73 b8 1f 3c 16 b6 8e bb 6e 57 d8 ba e8 ac 87 bc a3 5a 64 bc c8 c7 c1 bc 4a 07 ad bc 27 2a bf bc 33 3c ab bc 25 c8 8d bc 5b 80 75 bc 79 7f 21 bc 6a cf fa bb 2f cd fe bb f0 f5 ba bb f3 53 82 bc 91 1f 65 bc d3 97 fd bc fe 19 ef bc 8d 7e 39 bd 03 e8 32 bd aa d0 63 bd 73 e4 5d bd 7a cb 7f bd 79 8a 7a bd 06 bd 86 bd 41 72 84 bd 63 2e 8a bd c1 39 88 bd ac 2d 94 bd ad 90 92 bd 50 19 aa bd 2b d6 a8 bd b8 24 c7 bd 51 3d c6 bd c9 c5 e0 bd f9 3a e0 bd 83 23 eb bd cd f4 ea bd 37 0a e2 bd 96 36 e2 bd 18 bd d1 bd a3 44 d2 bd 79 f5 cb Data Ascii: <:T=-K=S="==A=8O<<G<v<^;!;g;4<(<GV<FH<Ev<;s<nWZdJ'*3<%[uy!j/Se~92cs]zyzArc.9-P+$Q=:#76Dy
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 47 8d 37 bd 94 56 3d bd bd 2e 1f bd 9a 61 24 bd 89 b9 01 bd f3 4f 06 bd 8b f4 e0 bc 86 e0 e8 bc aa 28 e2 bc f7 cd e8 bc 71 4c 05 bd 74 f9 07 bd aa 51 25 bd 79 56 27 bd e8 cf 3e bd 72 28 40 bd 82 65 47 bd ea 0c 48 bd b5 fc 45 bd 5c ef 45 bd 51 b1 48 bd 89 ed 47 bd f1 7b 5b bd 15 02 5a bd e0 d4 80 bd 39 7b 7f bd 70 10 98 bd 32 9f 96 bd 35 f4 aa bd 2a 29 a9 bd db f9 b4 bd 46 d5 b2 bd 87 d5 b4 bd 8f 58 b2 bd af 5c ab bd 72 89 a8 bd 93 56 a0 bd 0c 31 9d bd d7 2b a0 bd 4c ba 9c bd f8 74 af bd c0 be ab bd c1 17 c6 bd aa 23 c2 bd 05 72 d7 bd a0 45 d3 bd 91 dd db bd 8e 7d d7 bd f6 85 d5 bd 47 f7 d0 bd b3 c2 ce bd 3a 0b ca bd 4e db d0 bd 11 02 cc bd d3 e9 dc bd ce f5 d7 bd 8f 20 ee bd 1f 18 e9 bd 8e e0 fc bd 2e c9 f7 bd f9 1a 00 be 0d 14 fb bd e6 b9 f5 bd 82 91 f0 Data Ascii: G7V=.a$O(qLtQ%yV'>r(@eGHE\EQHG{[Z9{p25*)FX\rV1+Lt#rE}G:N .
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: da dd 79 bd 6c 0e 84 bd dc e4 87 bd 5f 94 89 bd 12 9e 8d bd e3 c4 86 bd c2 fb 8a bd 21 14 7d bd 4f e8 82 bd 21 a2 6b bd c4 a2 74 bd 7e c4 62 bd ff ff 6b bd c8 64 68 bd 05 d3 71 bd 32 d8 79 bd b2 b8 81 bd 01 22 87 bd ed ff 8b bd 58 65 8e bd 20 50 93 bd 48 ae 8f bd 48 a1 94 bd 3e a4 8c bd 00 9b 91 bd ee ed 8d bd d2 e4 92 bd 43 6b 9b bd 3d 5f a0 bd 77 12 b2 bd c5 ff b6 bd 45 0e c7 bd 6b ef cb bd 6f 58 d2 bd b6 26 d7 bd c5 2c d2 bd 04 e1 d6 bd 22 a2 c9 bd 52 35 ce bd 49 21 c0 bd 52 8d c4 bd 8f 4a bd bd 66 8a c1 bd 80 92 c2 bd 76 a1 c6 bd b0 f3 ca bd bb cc ce bd c5 9d cf bd 76 3b d3 bd c7 05 cc bd 54 62 cf bd 7b 19 c1 bd 7f 2f c4 bd 53 09 b5 bd 79 d4 b7 bd 9b 3d ad bd 88 ba af bd 2d 49 aa bd 24 75 ac bd ea c9 aa bd b4 a2 ac bd a3 2f ad bd 88 b3 ae bd a8 8e ad Data Ascii: yl_!}O!kt~bkdhq2y"Xe PHH>Ck=_wEkoX&,"R5I!RJfvv;Tb{/Sy=-I$u/
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: ab a7 5c bd 55 ce 54 bd af 82 67 bd 8e 0e 60 bd 9e fb 7d bd a0 f8 76 bd 1f 9d 89 bd d5 58 86 bd bc 28 8d bd 10 25 8a bd 0f 5a 88 bd a6 99 85 bd 8b 04 80 bd 4c 13 7b bd 5b c2 76 bd a4 5c 72 bd cc aa 7b bd 7c d9 77 bd 49 51 84 bd 1e b4 82 bd a1 6e 89 bd 35 1d 88 bd 39 24 8a bd 3d 1e 89 bd 07 62 86 bd ff a6 85 bd 6c f1 80 bd f3 80 80 bd 32 2a 7e bd 11 df 7d bd ca 95 84 bd 9e bb 84 bd 39 eb 8f bd c2 5c 90 bd 74 e2 9b bd 35 9f 9c bd bf 8b a3 bd 7b 92 a4 bd 65 47 a4 bd 58 96 a5 bd 49 da 9e bd 80 6f a0 bd 11 d5 96 bd 02 af 98 bd ab 98 8f bd f6 b5 91 bd 37 fd 8a bd b5 5c 8d bd 46 ec 89 bd d2 8c 8c bd 9b 81 8a bd 9d 61 8d bd a4 f0 86 bd 98 0d 8a bd d9 e1 75 bd c0 8e 7c bd 1f 45 52 bd 97 5d 59 bd 03 2e 30 bd fa aa 37 bd 16 99 18 bd 09 73 20 bd 3f e2 0c bd c9 10 15 Data Ascii: \UTg`}vX(%ZL{[v\r{\|wIQn59$=bl2*~}9\t5{eGXIo7\Fau\|ER]Y.07s ?
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: f8 aa 34 bd 95 f9 29 bd 5b 58 26 bd 07 77 26 bd d3 4b 22 bd 1b 88 2f bd 59 d7 2a bd 10 a0 3f bd ca 6e 3a bd 74 93 4e bd 3c e7 48 bd 64 fd 56 bd 69 dc 50 bd 2c 08 57 bd 6a 79 50 bd 1c 0d 51 bd e2 18 4a bd 68 7b 4b bd 14 2b 44 bd 8c 23 4b bd a3 81 43 bd 6d 2e 4e bd b7 45 46 bd 45 7c 4f bd ec 56 47 bd a7 d5 4b bd d6 7d 43 bd 41 fa 41 bd 38 7a 39 bd e6 62 32 bd e7 c4 29 bd bb 49 21 bd a5 98 18 bd 0e bd 15 bd 5d 04 0d bd e7 bc 14 bd 75 08 0c bd 78 b7 1c bd 67 12 14 bd 4c d2 24 bd 3f 46 1c bd 1c 9b 22 bd 95 2f 1a bd 66 10 13 bd da cb 0a bd d7 81 f9 bc 6e 53 e9 bc 63 79 d1 bc 47 b3 c1 bc 43 83 b8 bc c5 33 a9 bc 20 c8 ae bc 37 fd 9f bc f4 59 a9 bc b5 20 9b bc df 95 96 bc c7 f9 88 bc cb 3a 58 bc 7c 52 3e bc d1 12 bf bb 09 12 8e bb c3 7b e8 3a 77 31 50 3b 30 bc ff Data Ascii: 4)[X&w&K"/Y*?n:tN<HdViP,WjyPQJh{K+D#KCm.NEFE\|OVGK}CAA8z9b2)I!]uxgL$?F"/fnScyGC3 7Y :X\|R>{:w1P;0
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 37 c0 fa bc 63 1b 05 bd aa 69 e4 bc 0f a3 f3 bc 7d 89 ca bc 0c 77 d9 bc 9d c6 b8 bc 04 5a c7 bc ed e4 b5 bc 8f 10 c4 bc 48 84 c0 bc 01 3a ce bc 2c 1c d3 bc 50 4d e0 bc d6 55 e5 bc d7 f2 f1 bc 10 9d ec bc 7d 95 f8 bc 06 6d e4 bc 6d b0 ef bc f3 de d4 bc c8 5d df bc 91 b6 ca bc 08 63 d4 bc 4a 7d ca bc 4f 4a d3 bc aa 53 cd bc 56 34 d5 bc 6a 86 c6 bc f2 6c cd bc 45 95 ac bc 0c 74 b2 bc 7d 8e 81 bc ac 59 86 bc 43 9a 24 bc 87 f9 2b bc b8 a7 b0 bb ac e5 ba bb 3a b3 29 bb 4e 28 35 bb f9 15 b3 ba f0 0b b8 ba ba 53 f8 b9 e2 ed c4 b9 26 1d e3 3a 8f c9 00 3b 69 de c1 3b 10 d2 cd 3b 0c 4d 36 3c 39 65 3e 3c d7 6b 81 3c 9f 7e 86 3c 54 77 9b 3c 13 87 a1 3c 04 18 a9 3c 4d 1a b0 3c 68 36 b0 3c 72 20 b8 3c a7 ca b9 3c b9 92 c2 3c 89 4b cd 3c e9 e7 d6 3c 23 0a ed 3c ec 70 f7 Data Ascii: 7ci}wZH:,PMU}mm]cJ}OJSV4jlEt}YC$+:)N(5S&:;i;;M6<9e><k<~<Tw<<<M<h6<r <<<K<<#<p
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 79 87 0c bc 20 6a 19 bc 2a d4 1a bc 57 b8 16 bc 32 1a 1a bc 71 fe ed bb 06 99 f8 bb ca 80 7f bb b2 17 8e bb ac 9f 20 ba e6 3c 98 ba 42 ec 98 3a 07 8e 05 3a ba 5e 9c 3a da 85 e1 39 2c 01 a4 39 5e cd 10 ba c3 6c a0 b9 c5 69 a6 ba c6 74 e5 38 3d ae 78 ba b5 94 c7 3a 8d 2d c4 39 f4 69 53 3b 11 76 02 3b 51 c1 91 3b 56 1c 4d 3b 59 6b a0 3b ca 3a 65 3b 0b 1c a4 3b f2 b2 67 3b 45 8f bf 3b a1 04 8d 3b f9 7c 08 3c ce 5f dc 3b c3 05 4b 3c 59 cf 2f 3c 88 22 8c 3c d4 45 7c 3c fb 71 b0 3c 92 1e a2 3c 75 a7 cd 3c 3a 11 bf 3c bb e9 e1 3c 2e 22 d3 3c 93 6a f0 3c 16 84 e1 3c 96 82 00 3d 8b 13 f2 3c 7d f6 0c 3d 2f 82 05 3d 5f 27 1d 3d ea c1 15 3d b9 7a 2d 3d d7 2d 26 3d 1e 51 39 3d e9 25 32 3d 87 f4 3d 3d d6 f3 36 3d 49 ae 3c 3d af e0 35 3d 59 92 39 3d 7f 00 33 3d ea 52 38 Data Ascii: y j*W2q <B::^:9,9^lit8=x:-9iS;v;Q;VM;Yk;:e;;g;E;;\|<_;K<Y/<"<E\|<q<<u<:<<."<j<<=<}=/=_'==z-=-&=Q9=%2===6=I<=5=Y9=3=R8
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 18 7c 4f 3c 49 86 6b 3c 7d 98 3e 3c 74 ea 5a 3c 87 3a 2e 3c ca ae 4a 3c 22 e1 2b 3c fb 53 48 3c 7d 0d 40 3c 90 5b 5c 3c 6e 64 68 3c b8 35 82 3c 81 ad 8b 3c 82 7c 99 3c a3 15 9f 3c b3 9f ac 3c 69 71 ab 3c cb a6 b8 3c 11 c3 b2 3c fc 95 bf 3c 17 95 b9 3c b3 f9 c5 3c 89 be c3 3c 0e aa cf 3c 1b e6 d1 3c 57 4f dd 3c 25 a5 e1 3c 8c 82 ec 3c 34 72 ef 3c c3 ba f9 3c 82 3b f8 3c d6 f2 00 3d 3c 75 fb 3c e8 3b 02 3d 06 3e fd 3c 5b c8 02 3d da 3d 02 3d 73 0b 06 3d 7c 92 0a 3d 3e 01 0e 3d 3f 82 16 3d e5 8e 19 3d 7d dd 22 3d d8 84 25 3d 9a 79 2c 3d 37 b8 2e 3d 7f 01 32 3d ec d3 33 3d 10 ae 34 3d 62 11 36 3d f5 4b 37 3d 86 3d 38 3d 3a 6a 3c 3d 18 e8 3c 3d dd e1 44 3d 70 ea 44 3d a6 cf 4e 3d 9b 61 4e 3d 62 fb 55 3d c0 15 55 3d e0 d2 56 3d 09 75 55 3d 11 6b 51 3d 5f 95 4f Data Ascii: \|O<Ik<}><tZ<:.<J<"+<SH<}@<[\<ndh<5<<\|<<<iq<<<<<<<<<WO<%<<4r<<;<=<u<;=><[===s=\|=>=?==}"=%=y,=7.=2=3=4=b6=K7==8=:j<=<=D=pD=N=aN=bU=U=V=uU=kQ=_O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	49964	151.101.1.44	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	740	OUT	GET /scripts/ifs.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cdn.taboola.com/scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; t_pt_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:33 UTC	755	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2074 x-amz-id-2: XFdyo+6vTIJ75wZyPWv/9JrhpPfMY420ZszAf4ipCaslyea4WjDUaJ4AYWAOV+0Sgo5Ky5tOTzY= x-amz-request-id: V4GEX81VWJCSR0TX x-amz-replication-status: COMPLETED Last-Modified: Sun, 12 Mar 2023 12:23:45 GMT ETag: "93d5bb91c9a48c4edbc164a65354b00c" x-amz-server-side-encryption: AES256 x-amz-version-id: hHYTz8VC1WtMBCSsI42K1YQZ3IXPhs3V Content-Type: application/javascript Server: AmazonS3 Accept-Ranges: bytes Date: Fri, 29 Mar 2024 00:41:33 GMT Via: 1.1 varnish Age: 9096 X-Served-By: cache-iad-kiad7000119-IAD X-Cache: HIT X-Cache-Hits: 2 X-Timer: S1711672893.349157,VS0,VE0 Cache-Control: private,max-age=14400 Vary: Accept-Encoding abp: 11 Access-Control-Allow-Origin: *
2024-03-29 00:41:33 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 22 74 73 64 74 6f 63 6c 22 2c 65 3d 22 21 2d 23 40 22 2c 74 3d 22 75 6c 22 2c 69 3d 22 68 74 74 70 73 3a 22 2c 6f 3d 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 30 63 32 52 30 62 32 4e 73 4c 6d 4e 76 62 51 3d 3d 22 29 2c 72 3d 7b 7d 2c 61 3d 69 2c 64 3d 2d 31 2c 63 2c 75 3b 74 72 79 7b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 72 5b 65 2e 69 64 5d 26 26 28 72 5b 65 2e 69 64 5d 28 65 29 2c 64 65 6c 65 74 65 20 72 5b 65 2e 69 64 5d 29 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 69 3b 74 72 79 7b 69 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 2e 64 61 74 61 29 7d 63 61 74 63 68 28 6e 29 7b 7d 69 26 26 69 2e 6e 61 6d 65 73 70 61 63 65 3d 3d 3d 6e 26 26 73 28 69 29 Data Ascii: !function(){var n="tsdtocl",e="!-#@",t="ul",i="https:",o=atob("aHR0cHM6Ly90c2R0b2NsLmNvbQ=="),r={},a=i,d=-1,c,u;try{var s=function n(e){r[e.id]&&(r[e.id](e),delete r[e.id])},w=function e(t){var i;try{i=JSON.parse(t.data)}catch(n){}i&&i.namespace===n&&s(i)
2024-03-29 00:41:33 UTC	696	IN	Data Raw: 55 73 65 72 49 64 2e 67 65 74 55 73 65 72 49 64 3f 77 69 6e 64 6f 77 2e 54 46 41 53 43 2e 74 66 61 55 73 65 72 49 64 2e 67 65 74 55 73 65 72 49 64 28 29 3a 6e 75 6c 6c 2c 74 3d 77 69 6e 64 6f 77 2e 54 52 43 26 26 77 69 6e 64 6f 77 2e 54 52 43 2e 70 61 67 65 4d 61 6e 61 67 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 54 52 43 2e 70 61 67 65 4d 61 6e 61 67 65 72 2e 67 65 74 55 73 65 72 49 64 3f 77 69 6e 64 6f 77 2e 54 52 43 2e 70 61 67 65 4d 61 6e 61 67 65 72 2e 67 65 74 55 73 65 72 49 64 28 29 3a 6e 75 6c 6c 2c 69 3d 43 28 29 2c 6f 3d 62 28 29 3b 72 65 74 75 72 6e 20 65 7c 7c 74 7c 7c 69 7c 7c 6f 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e Data Ascii: UserId.getUserId?window.TFASC.tfaUserId.getUserId():null,t=window.TRC&&window.TRC.pageManager&&"function"==typeof window.TRC.pageManager.getUserId?window.TRC.pageManager.getUserId():null,i=C(),o=b();return e\|\|t\|\|i\|\|o},T=function n(e){window.addEventListen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	49968	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	568	OUT	GET /pv/static/misc/voice-close-202105050733.wav HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.yahoo.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-03-29 00:41:33 UTC	902	IN	HTTP/1.1 206 Partial Content x-amz-id-2: tx2/5X4hLdPbubPJNIF81iLeHjJ5jUTakYIYPPZDQKhw+1mugWXj4HqR7jxFfqcXJZwp4hGyM2g= x-amz-request-id: WNBTST9V549K0ZD4 Date: Thu, 28 Mar 2024 14:50:38 GMT Last-Modified: Wed, 05 May 2021 07:33:34 GMT ETag: "8f1c7f5187e8e78fdb31a5e6c688e803" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public Expires: Mon, 05 May 2031 07:33:32 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: binary/octet-stream Server: ATS Content-Length: 149336 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 35456 Content-Range: bytes 0-149335/149336 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 52 49 46 46 50 47 02 00 57 41 56 45 66 6d 74 20 10 00 00 00 03 00 02 00 44 ac 00 00 20 62 05 00 08 00 20 00 64 61 74 61 d0 14 02 00 1c 72 df 36 a7 3e f3 37 a2 ef 84 36 21 27 e0 37 f3 04 b5 35 8c f0 ca 37 42 55 c0 b5 ee 4f b4 37 ca 97 8a b6 46 45 9c 37 44 1a e5 b6 94 d0 82 37 55 64 1e b7 b9 4d 51 37 87 3b 4a b7 37 26 1a 37 b0 a8 74 b7 6a fd c5 36 e3 20 8e b7 a4 b4 29 36 6d ed a1 b7 ce e6 78 b5 ee 4f b4 b7 f2 3f 90 b6 65 48 c5 b7 85 b1 00 b7 d2 d6 d4 b7 07 d9 37 b7 35 fb e2 b7 7f 96 6d b7 8e b5 ef b7 f7 f4 90 b7 d8 50 fa b7 a4 b4 a9 b7 0c c1 01 b8 4c bf c1 b7 25 4a 05 b8 e6 aa d7 b7 39 1e 08 b8 75 2c ec b7 c5 e2 09 b8 f6 8e fe b7 48 3d 0a b8 b6 c3 07 b8 48 3d 0a b8 6a 30 0f b8 3e d3 08 b8 14 33 15 b8 ac 59 06 b8 b9 80 1a b8 16 2b 03 b8 55 64 1e b8 f1 d9 fd Data Ascii: RIFFPGWAVEfmt D b datar6>76!'757BUO7FE7D7UdMQ7;J7&7tj6 )6mxO?eH75mPL%J9u,H=H=j0>3Y+Ud
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 6a 82 83 bd 19 c2 83 bd 60 4e 87 bd 94 90 87 bd 6f c3 8e bd 68 0a 8f bd 8b 74 9b bd 4c c3 9b bd 98 69 a6 bd 32 bf a6 bd 61 17 a8 bd 93 6e a8 bd 8b 2f a2 bd 21 84 a2 bd ae 57 98 bd 68 a7 98 bd a0 7d 8a bd 48 c6 8a bd 16 c0 75 bd 4f 41 76 bd 6b 3a 5c bd d3 ae 5c bd 33 35 4c bd 5c a2 4c bd d4 31 46 bd 65 9d 46 bd e5 8a 47 bd 07 f9 47 bd ce 66 48 bd 53 d7 48 bd 0f 2f 47 bd d1 a0 47 bd 1b cd 4a bd c0 42 4b bd d9 0a 53 bd f2 86 53 bd 47 20 58 bd 0f a1 58 bd af 64 55 bd 8d e5 55 bd 8a ce 46 bd c8 48 47 bd bb 18 2c bd 5c 85 2c bd 1e 5e 12 bd 94 bd 12 bd be 2e 05 bd 04 88 05 bd 50 6c fe bc 9d 1a ff bc 6a e4 f5 bc 10 90 f6 bc 40 a5 f7 bc e7 53 f8 bc 41 e9 f9 bc 17 9b fa bc 19 ee e3 bc f9 94 e4 bc 90 5c b1 bc dd e7 b1 bc 5e ff 58 bc 9a c9 59 bc 85 a7 6b bb 7c 6d 6d Data Ascii: j`NohtLi2an/!Wh}HuOAvk:\\35L\L1FeFGGfHSH/GGJBKSSG XXdUUFHG,\,^.Plj@SA\^XYk\|mm
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 7e 2d 29 3d f6 fc 25 3d 47 5e 26 3d 84 95 23 3d 8f f3 23 3d 22 34 1f 3d d9 8d 1f 3d 9e 17 14 3d 33 69 14 3d 48 dc f5 3c 18 5f f6 3c d5 a3 a3 3c 72 f4 a3 3c bf 4b 0b 3c c5 7a 0b 3c c6 33 e3 ba 2e ea e4 ba 1f 5d 23 bc 5d e7 23 bc 15 7f 82 bc f6 e2 82 bc 85 66 a2 bc 6f df a2 bc b0 b8 bd bc d0 43 be bc 1a b8 d9 bc 6e 55 da bc aa 49 f1 bc 8e f6 f1 bc 55 50 05 bd e8 ae 05 bd 30 3d 17 bd d0 a6 17 bd b6 45 29 bd 35 ba 29 bd 90 aa 36 bd 5e 27 37 bd a2 4a 44 bd 91 cf 44 bd 53 61 55 bd 3f f0 55 bd 56 21 65 bd 5d b9 65 bd 9e bb 6d bd 99 58 6e bd 06 33 6b bd 69 ce 6b bd 54 bf 5d bd c2 52 5e bd 19 3d 4e bd 57 c7 4e bd a8 cd 46 bd 1f 53 47 bd 7e d0 49 bd 05 57 4a bd ff 3b 56 bd cd c8 56 bd 73 7e 6a bd db 15 6b bd 78 be 80 bd 3a 10 81 bd 7b 96 8b bd e5 ed 8b bd 0d 67 95 Data Ascii: ~-)=%=G^&=#=#="4===3i=H<_<<r<K<z<3.]#]#foCnUIUP0=E)5)6^'7JDDSaU?UV!e]emXn3kikT]R^=NWNFSG~IWJ;VVs~jkx:{g
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 77 eb c2 3c 5a 32 c3 3c b5 ae cd 3c 4e f9 cd 3c 40 d0 e2 3c 1a 25 e3 3c bb 6d 03 3d 87 a1 03 3d e2 54 1a 3d 0e 95 1a 3d 58 fc 32 3d dc 49 33 3d 48 32 4c 3d ad 8d 4c 3d 76 2b 60 3d fd 91 60 3d ae e5 67 3d 5d 50 68 3d 7b 1e 66 3d 1a 88 66 3d e9 e7 63 3d 63 50 64 3d 35 3b 66 3d 2f a5 66 3d 10 56 6d 3d 75 c4 6d 3d 29 fc 76 3d 92 70 77 3d 07 5f 7f 3d bd d8 7f 3d 7b 87 82 3d 53 c6 82 3d 03 53 84 3d 45 93 84 3d c1 02 84 3d 52 43 84 3d 76 6d 80 3d 7b ac 80 3d 71 3b 74 3d 79 b3 74 3d 4e 68 62 3d 69 d7 62 3d 77 37 4a 3d 1b 9a 4a 3d b8 aa 2d 3d 6c fe 2d 3d 3c c6 0f 3d 4b 0a 10 3d b8 ff e5 3c f6 69 e6 3c fe e2 bb 3c 60 38 bc 3c df 02 ad 3c c6 52 ad 3c 74 42 af 3c c7 96 af 3c ba 8c ae 3c e1 e3 ae 3c 37 19 a4 3c 89 6d a4 3c 07 7f 91 3c ec cb 91 3c bf 49 6e 3c 80 cb 6e Data Ascii: w<Z2<<N<@<%<m==T==X2=I3=H2L=L=v+`=`=g=]Ph={f=f=c=cPd=5;f=/f=Vm=um=)v=pw=_=={=S=S=E==RC=vm={=q;t=yt=Nhb=ib=w7J=J=-=l-=<=K=<i<<`8<<R<tB<<<<7<m<<<In<n
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: da 7d 3c bd 44 f3 31 bd d6 71 32 bd 39 04 2c bd d1 7e 2c bd 73 9c 28 bd 64 14 29 bd ad 24 25 bd ca 99 25 bd 1e c5 1e bd a2 35 1f bd c3 15 14 bd 35 7f 14 bd 82 2c 06 bd da 8c 06 bd ad 01 ec bc 54 ad ec bc 00 d5 c9 bc 8d 6a ca bc 04 32 af bc b7 b5 af bc 53 38 a4 bc d5 b2 a4 bc fb b2 a5 bc 5e 2b a6 bc 5e d0 aa bc 66 48 ab bc 1c c3 aa bc 22 38 ab bc 61 61 9c bc 18 cb 9c bc 5d 26 7c bc 6c d0 7c bc 88 c1 30 bc 72 3a 31 bc 1b 45 bc bb 29 cc bc bb a2 3e c0 39 2e c2 bf 39 3e b3 f6 3b 20 3d f7 3b dd aa 72 3c 0e 3a 73 3c 57 db b0 3c 95 45 b1 3c ac 3f e1 3c 52 c8 e1 3c ed 56 03 3d 46 a7 03 3d 73 21 10 3d 5e 7a 10 3d 1e 12 18 3d de 70 18 3d 3c 4f 1d 3d 24 b2 1d 3d d1 66 24 3d c3 ce 24 3d fe 43 31 3d 3f b4 31 3d d5 6b 42 3d b1 e6 42 3d 7e 0a 53 3d 84 8f 53 3d 8d e9 5e Data Ascii: }<D1q29,~,s(d)$%%55,Tj2S8^+^fH"8aa]&\|l\|0r:1E)>9.9>; =;r<:s<W<E<?<R<V=F=s!=^z==p=<O=$=f$=$=C1=?1=kB=B=~S=S=^
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: a6 65 a8 bc 43 d9 a8 bc d3 80 ca bc e1 04 cb bc 01 5b ea bc 15 ee ea bc 99 0d 05 bd a6 5e 05 bd bf 4e 15 bd 7d a7 15 bd 77 0e 26 bd 40 6f 26 bd 62 87 36 bd 09 f0 36 bd 26 e0 42 bd 5f 4e 43 bd 29 68 47 bd 87 d7 47 bd 71 ed 44 bd fc 59 45 bd 15 24 3e bd 68 8b 3e bd 71 cd 34 bd 0d 2e 35 bd 79 eb 2b bd cf 45 2c bd cc bd 27 bd af 14 28 bd 38 36 2a bd 5e 8d 2a bd 6f 10 32 bd 08 6b 32 bd 31 12 3c bd a7 71 3c bd 41 b4 44 bd de 17 45 bd 5a 07 4b bd e2 6d 4b bd 91 b0 50 bd c0 19 51 bd cb f9 55 bd 8a 65 56 bd 3b 27 59 bd 7b 94 59 bd a2 32 59 bd b4 9f 59 bd 4d 0e 56 bd 84 79 56 bd 20 b0 50 bd 56 18 51 bd 9b 43 4c bd 85 a9 4c bd 79 5c 4b bd 35 c2 4b bd 32 cb 4c bd 2b 32 4d bd f4 81 4e bd 9b ea 4e bd 41 96 4f bd 3c 00 50 bd 74 0b 4d bd d0 74 4d bd 81 6a 42 bd d4 ce 42 Data Ascii: eC[^N}w&@o&b66&B_NC)hGGqDYE$>h>q4.5y+E,'(86^o2k21<q<ADEZKmKPQUeV;'Y{Y2YYMVyV PVQCLLy\K5K2L+2MNNAO<PtMtMjBB
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 2f b7 4a 3d 65 c1 52 3d 87 3f 53 3d dc 92 5a 3d a6 16 5b 3d 39 2b 5f 3d a2 b2 5f 3d c2 50 60 3d c3 d9 60 3d e5 90 5e 3d b9 19 5f 3d 5a 5c 59 3d f8 e2 59 3d be 38 4f 3d 3b ba 4f 3d c5 d4 3e 3d 6b 4d 3f 3d 22 17 29 3d c3 83 29 3d 73 ec 11 3d 2d 4c 12 3d 5d 8e fa 3c 7a 36 fb 3c b8 42 d9 3c eb d7 d9 3c 1b 1e c0 3c cf a4 c0 3c 8d 5a ad 3c 1e d6 ad 3c 1e 0e 9c 3c 14 7f 9c 3c 38 d8 87 3c a1 3c 88 3c a4 2f 5f 3c 68 da 5f 3c c7 a3 25 3c d6 2a 26 3c 33 6a ca 3b b4 27 cb 3b 59 5a 21 3b 35 3b 22 3b 77 d4 0f ba 74 59 0e ba a6 e6 4a bb 09 f9 4a bb 93 83 b3 bb ec c3 b3 bb 63 c6 f4 bb d1 36 f5 bb e5 cf 0e bc 6f 19 0f bc a8 1a 16 bc 73 6e 16 bc dd 6f 16 bc 05 ca 16 bc f9 2e 1d bc 61 93 1d bc 8d 0a 37 bc 2c 84 37 bc a5 d0 67 bc ea 6c 68 bc bc 8a 96 bc 07 f0 96 bc f8 78 c0 Data Ascii: /J=eR=?S=Z=[=9+_=_=P`=`=^=_=Z\Y=Y=8O=;O=>=kM?=")=)=s=-L=]<z6<B<<<<Z<<<<8<<</_<h_<%<*&<3j;';YZ!;5;";wtYJJc6osno.a7,7glhx
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: b7 13 b8 bb f2 ee b7 bb 35 0b 9f bb b6 d9 9e bb 5a 46 5c bb 72 b0 5b bb 44 1f 7d ba 32 85 79 ba 8a 48 0c 3b 1f 99 0d 3b 14 45 bd 3b 98 2b be 3b 6a 6d 22 3c 07 04 23 3c d3 ac 6b 3c 9f 69 6c 3c c6 e1 9a 3c 17 53 9b 3c 6e 11 be 3c 6c 94 be 3c 7b c5 db 3c f8 56 dc 3c 8a 44 f1 3c 92 df f1 3c fb bd 00 3d ae 0e 01 3d 16 78 09 3d 52 cc 09 3d cf b9 14 3d e8 12 15 3d c7 50 22 3d 0f b0 22 3d c7 d8 30 3d b0 3e 31 3d 83 61 3e 3d 85 cd 3e 3d 53 3d 49 3d ee ad 49 3d fb 4b 50 3d e3 be 50 3d 3e ad 52 3d e2 1f 53 3d 06 74 50 3d bf e3 50 3d d4 09 4b 3d de 74 4b 3d f4 af 43 3d 3f 15 44 3d 1b d0 3a 3d f2 2e 3b 3d 6e 21 31 3d 61 79 31 3d 56 e4 27 3d a7 35 28 3d 7f 7c 20 3d 55 c8 20 3d a7 aa 1c 3d 39 f3 1c 3d af 32 1d 3d 8b 7a 1d 3d a2 de 1f 3d 33 27 20 3d 69 28 21 3d e3 70 21 Data Ascii: 5ZF\r[D}2yH;;E;+;jm"<#<k<il<<S<n<l<{<V<D<<==x=R===P"="=0=>1=a>=>=S=I=I=KP=P=>R=S=tP=P=K=tK=C=?D=:=.;=n!1=ay1=V'=5(=\| =U ==9=2=z==3' =i(!=p!
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 65 f6 19 bd 9e ef 18 bd fb 38 19 bd 9f 9b 19 bd d7 e6 19 bd 93 7f 1a bd bd cc 1a bd 98 77 1b bd e1 c6 1b bd 38 6a 1c bd 89 bb 1c bd 4e bd 1c bd 64 10 1d bd d0 f5 1b bd 0c 4a 1c bd e5 f4 19 bd 92 49 1a bd 7b e6 16 bd e4 3a 17 bd 7e 36 13 bd 60 8a 13 bd 01 52 0f bd 16 a5 0f bd 85 f9 0b bd 13 4c 0c bd 46 a0 0a bd 73 f3 0a bd 5f 1b 0c bd ab 70 0c bd 58 29 0f bd 8e 81 0f bd 3b 3b 11 bd a7 95 11 bd 31 f1 0f bd e0 4b 10 bd bc bd 09 bd c5 15 0a bd 55 46 fd bc 44 eb fd bc 41 6f e0 bc fc 04 e1 bc 4a de bf bc 57 62 c0 bc 61 a4 9c bc fc 14 9d bc 5e be 70 bc ec 76 71 bc 0b 25 2b bc 5a b6 2b bc 81 74 d5 bb e1 4c d6 bb 21 40 3d bb df 64 3e bb f5 c5 d0 39 91 a5 cb 39 31 42 59 3b ef 14 59 3b 16 42 c3 3b 9d 62 c3 3b 8b 8e 0c 3c 62 ba 0c 3c 18 e8 3c 3c c1 33 3d 3c 3f 84 75 Data Ascii: e8w8jNdJI{:~6`RLFs_pX);;1KUFDAoJWba^pvq%+Z+tL!@=d>991BY;Y;B;b;<b<<<3=<?u
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 99 be 9a 3c c1 18 9b 3c 46 a4 86 3c 49 f0 86 3c a8 29 5e 3c 38 a2 5e 3c f5 f8 26 3c 75 4d 27 3c 29 bb d7 3b 80 18 d8 3b 4b 11 43 3b 7a 37 43 3b 15 ee 09 ba b1 90 0b ba 13 2c 7a bb 14 1b 7b bb 43 11 de bb 29 c4 de bb 98 37 18 bc cb a9 18 bc 33 2d 37 bc 23 b2 37 bc cd 0b 4a bc b2 9b 4a bc 93 3a 53 bc c7 cf 53 bc 3b 9f 57 bc 32 36 58 bc 83 1a 5c bc 8a b2 5c bc 8f b1 66 bc 79 4d 67 bc 83 8c 7d bc 09 33 7e bc 73 20 91 bc ba 7c 91 bc d0 19 a8 bc 67 81 a8 bc fc d8 bf bc e4 4b c0 bc 23 28 d5 bc f1 a4 d5 bc c4 29 e7 bc 2c ae e7 bc 03 fb f6 bc c8 85 f7 bc 69 c6 02 bd 73 0e 03 bd ff 77 09 bd 6b c2 09 bd 57 af 0f bd 9f fb 0f bd 5f a8 15 bd 54 f6 15 bd c3 94 1b bd 66 e4 1b bd 12 ca 21 bd 7a 1b 22 bd b5 66 28 bd 26 ba 28 bd 53 c4 2e bd 88 19 2f bd 9b e8 33 bd f6 3e 34 Data Ascii: <<F<I<)^<8^<&<uM'<);;KC;z7C;,z{C)73-7#7JJ:SS;W26X\\fyMg}3~s \|gK#(),iswkW_Tf!z"f(&(S./3>4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	49971	151.101.1.44	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	838	OUT	GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb&us_privacy=1YNN HTTP/1.1 Host: trc.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; t_pt_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:33 UTC	969	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 29-Mar-2025 00:41:33 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 29-Mar-2025 00:41:33 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 7670 Accept-Ranges: bytes Date: Fri, 29 Mar 2024 00:41:33 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-iad-kiad7000174-IAD X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1711672893.392636,VS0,VE8 X-vcl-time-ms: 8 transfer-encoding: chunked
2024-03-29 00:41:33 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-03-29 00:41:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-03-29 00:41:33 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	49978	34.238.61.171	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	755	OUT	GET /ibs:dpid=30646?dpuuid=y-7weHGmVE2pGShYPAsA_2AZ9rP8SJTZiRMVg-~A&redir=https%3A%2F%2Fups.analytics.yahoo.com%2Fups%2F58782%2Fcms%3Fpartner_id%3DADOBE%26_origin%3Dfalse%26_redirect%3Dfalse%26_hosted_id%3D%24%7BDD_UUID%7D HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:33 UTC	736	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:33 GMT Content-Length: 0 Connection: close X-TID: cTBqOfx4SRs= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=30646 DCS: dcs-prod-va6-1-v057-0112796b1.edge-va6.demdex.com 0 ms set-cookie: demdex=18302510874207377964223395608090049346; Max-Age=15552000; Expires=Wed, 25 Sep 2024 00:41:33 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	49972	151.101.193.44	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	535	OUT	GET /sg/prebidJS/1/cm?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: trc.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; t_pt_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:33 UTC	962	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 29-Mar-2025 00:41:33 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 29-Mar-2025 00:41:33 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 1246 Accept-Ranges: bytes Date: Fri, 29 Mar 2024 00:41:33 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-lga21952-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1711672893.412094,VS0,VE2 X-vcl-time-ms: 2 transfer-encoding: chunked
2024-03-29 00:41:33 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-03-29 00:41:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-03-29 00:41:33 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	49974	34.111.85.214	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	402	OUT	GET /rtb/yhb?cid=8YHBJ3BJ0 HTTP/1.1 Host: m.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10
2024-03-29 00:41:33 UTC	303	IN	HTTP/1.1 204 No Content content-type: text/html;charset=utf-8 content-language: en date: Fri, 29 Mar 2024 00:41:33 GMT x-envoy-upstream-service-time: 0 server: istio-envoy via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	49975	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	596	OUT	GET /cv/apiv2/weather-svg/RAIN.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:33 UTC	818	IN	HTTP/1.1 200 OK x-amz-id-2: NxftqEUh+QlGbuZSQF5EH/Sliakcx7iA34m0wtkp751eRVl+2M/e46CjpQ5TI2EgDE0XRYrDxlI= x-amz-request-id: W6KNNT19NQEDKJJE Date: Sat, 09 Mar 2024 22:11:08 GMT Last-Modified: Fri, 13 Nov 2020 21:27:14 GMT ETag: "9398ffa95e2ffa35a1335a00d6e40260" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1221 Referrer-Policy: no-referrer-when-downgrade Age: 1650626 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-29 00:41:33 UTC	1221	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 36 34 2e 32 37 38 25 22 20 79 31 3d 22 31 30 30 25 22 20 78 32 3d 22 36 34 2e 32 37 38 25 22 20 79 32 3d 22 31 2e 33 35 31 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 42 35 42 44 43 38 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a"> <stop stop-color="#B5BDC8" offset="0%"/> <stop stop

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	49977	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	1329	OUT	GET /px.gif?ch=2&rn=9.35954851852123 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; YHB__li_dcdm_c=.com; YHB__lc2_fpi=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q; YHB__lc2_fpi_meta=%7B%22w%22%3A1711672890010%7D; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:33 UTC	1271	IN	HTTP/1.1 200 OK x-amz-id-2: TdC6e9o688fjBYYcrv2RejcAErSypWeM4phHARFBs0pGHWuySmz0ggTDslul3VDFuIWzgi1kdXo= x-amz-request-id: 4YHKEV0RS6BJ544E Date: Fri, 29 Mar 2024 00:41:34 GMT Last-Modified: Wed, 30 Nov 2022 19:09:07 GMT ETag: "b4682377ddfbe4e7dabfddb2e543e842" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 42 Referrer-Policy: no-referrer-when-downgrade Age: 0 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 Vary: Origin Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=17i0rptj0c3ht&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block
2024-03-29 00:41:33 UTC	35	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: X-Content-Type-Options: nosniff
2024-03-29 00:41:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	49969	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	1186	OUT	GET /service-worker.js HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.yahoo.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; YHB__li_dcdm_c=.com; YHB__lc2_fpi=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q; YHB__lc2_fpi_meta=%7B%22w%22%3A1711672890010%7D; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:33 UTC	1287	IN	HTTP/1.1 200 OK x-amz-id-2: HhSfdMPc+BS0FukxH/6uQ0lASmixDjRFOindkLX2lUvR6yx1erwe+CQ1uFPPueCzaLffy9vtl4c= x-amz-request-id: B4GNZKMDKB31PA5N Date: Fri, 29 Mar 2024 00:41:33 GMT Last-Modified: Thu, 25 May 2023 16:22:16 GMT x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=600 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 22980 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Strict-Transport-Security: max-age=31536000 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=583quvtj0c3ht&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com X-Frame-Options: SAMEORIGIN Etag: "008cbc7a6fa2b266bfaaf8ed0ece3960" Age: 0 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block
2024-03-29 00:41:33 UTC	35	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: X-Content-Type-Options: nosniff
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 2f 2a 20 76 65 72 73 69 6f 6e 3a 20 31 2e 31 2e 35 32 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 74 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 Data Ascii: /* version: 1.1.52 */!function(){"use strict";function e(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 29 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6e 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 72 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 72 2c 69 3d 7b 7d 2c 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 66 6f 72 28 72 3d 30 3b 72 3c 61 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 3d 61 5b 72 5d 2c 74 2e 69 6e 64 65 78 4f 66 28 6e 29 3e 3d 30 7c 7c 28 69 5b 6e Data Ascii: )in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function a(e,t){if(null==e)return{};var n,r,i=function(e,t){if(null==e)return{};var n,r,i={},a=Object.keys(e);for(r=0;r<a.length;r++)n=a[r],t.indexOf(n)>=0\|\|(i[n
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 28 76 61 72 20 6e 20 69 6e 20 74 29 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 28 65 5b 6e 5d 3d 74 5b 6e 5d 29 7d 2c 61 62 73 6f 72 62 56 61 6c 69 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 28 73 28 6e 2c 74 5b 6e 5d 29 2c 65 5b 6e 5d 3d 74 5b 6e 5d 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 63 6c 6f 6e 65 56 61 6c 69 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 6f 72 28 76 61 72 Data Ascii: (var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])},absorbValid:function(e,t){for(var n in t)t.hasOwnProperty(n)&&(s(n,t[n]),e[n]=t[n])},clone:function(e){var t={};for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n]);return t},cloneValid:function(e){var t={};for(var
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 73 65 72 67 65 6e 66 3a 31 7d 2c 45 56 45 4e 54 5f 54 52 49 47 47 45 52 5f 53 43 52 4f 4c 4c 3a 7b 65 74 72 67 3a 22 73 63 72 6f 6c 6c 22 2c 75 73 65 72 67 65 6e 66 3a 31 7d 2c 45 56 45 4e 54 5f 54 52 49 47 47 45 52 5f 48 4f 56 45 52 3a 7b 65 74 72 67 3a 22 68 6f 76 65 72 22 2c 75 73 65 72 67 65 6e 66 3a 31 7d 2c 45 56 45 4e 54 5f 54 52 49 47 47 45 52 5f 44 52 4f 50 3a 7b 65 74 72 67 3a 22 64 72 6f 70 22 2c 75 73 65 72 67 65 6e 66 3a 31 7d 2c 45 56 45 4e 54 5f 54 52 49 47 47 45 52 5f 44 52 41 47 3a 7b 65 74 72 67 3a 22 64 72 61 67 22 2c 75 73 65 72 67 65 6e 66 3a 31 7d 2c 45 56 45 4e 54 5f 54 52 49 47 47 45 52 5f 50 49 4e 43 48 3a 7b 65 74 72 67 3a 22 70 69 6e 63 68 22 2c 75 73 65 72 67 65 6e 66 3a 31 7d 2c 45 56 45 4e 54 5f 54 52 49 47 47 45 52 5f 4f 52 Data Ascii: sergenf:1},EVENT_TRIGGER_SCROLL:{etrg:"scroll",usergenf:1},EVENT_TRIGGER_HOVER:{etrg:"hover",usergenf:1},EVENT_TRIGGER_DROP:{etrg:"drop",usergenf:1},EVENT_TRIGGER_DRAG:{etrg:"drag",usergenf:1},EVENT_TRIGGER_PINCH:{etrg:"pinch",usergenf:1},EVENT_TRIGGER_OR
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 45 72 72 6f 72 28 22 69 6e 74 65 72 61 63 74 69 6f 6e 50 61 72 61 6d 73 20 61 72 65 20 49 4e 56 41 4c 49 44 22 29 7d 7d 72 65 74 75 72 6e 20 64 28 65 2c 22 63 6c 69 63 6b 22 2c 61 2c 69 29 7d 2c 75 6e 72 65 67 69 73 74 65 72 65 64 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 70 61 63 65 69 64 20 69 73 20 52 45 51 55 49 52 45 44 22 29 3b 69 66 28 70 61 72 73 65 49 6e 74 28 65 29 21 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 70 61 63 65 69 64 20 69 73 20 49 4e 56 41 4c 49 44 22 29 3b 69 66 28 21 74 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 Data Ascii: Error("interactionParams are INVALID")}}return d(e,"click",a,i)},unregisteredURL:function(e,t,n){if("string"!=typeof e&&"number"!=typeof e)throw new Error("Spaceid is REQUIRED");if(parseInt(e)!=e)throw new Error("Spaceid is INVALID");if(!t\|\|"string"!=type
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 69 6d 65 3a 44 61 74 65 2e 6e 6f 77 28 29 2d 65 7d 29 7d 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 28 29 2c 7b 75 6e 72 65 67 69 73 74 65 72 65 64 55 52 4c 3a 45 7d 3d 76 2c 53 3d 22 2f 5f 74 64 5f 61 70 69 2f 62 65 61 63 6f 6e 2f 22 2c 50 3d 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 73 77 22 2c 49 3d 65 3d 3e 72 28 28 66 75 6e 63 74 69 6f 6e 2a 28 2e 2e 2e 74 29 7b 6c 65 74 20 6e 3b 74 72 79 7b 72 65 74 75 72 6e 20 6e 3d 79 69 65 6c 64 20 65 28 2e 2e 2e 74 29 2c 79 69 65 6c 64 20 66 65 74 63 68 28 6e 2c 7b 6d 6f 64 65 3a 22 6e 6f 2d 63 6f 72 73 22 2c 63 72 65 64 65 6e 74 69 61 6c 73 3a 22 69 6e 63 6c 75 64 65 22 7d 29 2c 21 30 7d 63 61 74 Data Ascii: ime:Date.now()-e})}));return function(){return e.apply(this,arguments)}}(),{unregisteredURL:E}=v,S="/_td_api/beacon/",P="notification-sw",I=e=>r((function*(...t){let n;try{return n=yield e(...t),yield fetch(n,{mode:"no-cors",credentials:"include"}),!0}cat
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 65 2c 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 72 65 63 65 69 76 65 64 22 2c 74 29 29 29 2c 6b 3d 52 28 28 28 7b 73 70 61 63 65 49 64 3a 65 2c 70 61 72 61 6d 73 3a 74 7d 29 3d 3e 28 74 2e 6d 73 67 5f 61 63 74 69 6f 6e 3d 22 6f 70 65 6e 22 2c 45 28 65 2c 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 65 6e 67 61 67 65 64 22 2c 74 29 29 29 29 2c 78 3d 52 28 28 28 7b 73 70 61 63 65 49 64 3a 65 2c 70 61 72 61 6d 73 3a 74 7d 29 3d 3e 28 74 2e 6d 73 67 5f 61 63 74 69 6f 6e 3d 22 64 69 73 6d 69 73 73 65 64 22 2c 45 28 65 2c 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 65 6e 67 61 67 65 64 22 2c 74 29 29 29 29 2c 55 3d 65 3d 3e 74 3d 3e 74 2e 77 61 69 74 55 6e 74 69 6c 28 72 28 28 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 74 72 79 7b 79 69 65 6c 64 20 65 28 74 29 7d 63 61 74 Data Ascii: e,"notification_received",t))),k=R((({spaceId:e,params:t})=>(t.msg_action="open",E(e,"notification_engaged",t)))),x=R((({spaceId:e,params:t})=>(t.msg_action="dismissed",E(e,"notification_engaged",t)))),U=e=>t=>t.waitUntil(r((function*(){try{yield e(t)}cat
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 87 ce b5 cf 84 ce b5 20 ce bd ce ad ce b5 cf 82 20 ce b5 ce b9 ce b4 ce bf cf 80 ce bf ce b9 ce ae cf 83 ce b5 ce b9 cf 82 22 7d 2c 22 65 73 2d 45 53 22 3a 7b 22 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 22 3a 22 53 65 72 76 69 63 69 6f 20 6e 6f 20 64 69 73 70 6f 6e 69 62 6c 65 22 2c 22 59 6f 75 20 68 61 76 65 20 6e 65 77 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 3a 22 54 69 65 6e 65 73 20 6e 6f 74 69 66 69 63 61 63 69 6f 6e 65 73 20 6e 75 65 76 61 73 22 7d 2c 22 65 73 2d 55 53 22 3a 7b 22 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 22 3a 22 53 65 72 76 69 63 69 6f 20 6e 6f 20 64 69 73 70 6f 6e 69 62 6c 65 22 2c 22 59 6f 75 20 68 61 76 65 20 6e 65 77 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 3a 22 54 69 65 6e 65 73 20 6e Data Ascii: "},"es-ES":{"Service Unavailable":"Servicio no disponible","You have new notifications":"Tienes notificaciones nuevas"},"es-US":{"Service Unavailable":"Servicio no disponible","You have new notifications":"Tienes n
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 74 69 66 69 63 61 74 69 6f 6e 73 22 3a 22 44 65 74 20 66 69 6e 6e 73 20 6e 79 61 20 6d 65 64 64 65 6c 61 6e 64 65 6e 22 7d 2c 22 76 69 2d 56 4e 22 3a 7b 22 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 22 3a 22 44 e1 bb 8b 63 68 20 76 e1 bb a5 20 68 69 e1 bb 87 6e 20 6b 68 c3 b4 6e 67 20 68 6f e1 ba a1 74 20 c4 91 e1 bb 99 6e 67 22 2c 22 59 6f 75 20 68 61 76 65 20 6e 65 77 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 3a 22 42 e1 ba a1 6e 20 63 c3 b3 20 74 68 c3 b4 6e 67 20 62 c3 a1 6f 20 6d e1 bb 9b 69 22 7d 7d 3b 63 6f 6e 73 74 20 4c 3d 2f 5e 3a 28 5b 61 2d 7a 5d 29 28 5c 28 28 2e 2b 29 5c 29 29 3f 2f 3b 76 61 72 20 47 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 7b 7d 3b 72 65 74 75 72 6e 7b 75 73 65 28 7b 6c 6f 63 61 6c 65 3a 74 2c 64 65 66 61 Data Ascii: tifications":"Det finns nya meddelanden"},"vi-VN":{"Service Unavailable":"Dch v hin khng hot ng","You have new notifications":"Bn c thng bo mi"}};const L=/^:([a-z])($(.+)$)?/;var G=()=>{const e={};return{use({locale:t,defa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	49981	13.249.39.110	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	611	OUT	GET /adscores/g.pixel?sid=9202214988&yho=y-jGJ1.cVE2p6n9kNjUpUTsoysez2PNDSbgvg-~A HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:33 UTC	969	IN	HTTP/1.1 302 Found Transfer-Encoding: chunked Connection: close Date: Fri, 29 Mar 2024 00:41:33 GMT Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3Aksj%2ByvaRmHmyAUuIOsoo89ApLpekHFAG; Path=/; Domain=.agkn.com; Expires=Sat, 29-Mar-2025 00:41:33 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://cms.analytics.yahoo.com/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=214820604836000487369&gdpr=&gdpr_consent= X-Cache: Miss from cloudfront Via: 1.1 7f7e359e1c06a914d3d305785359b84c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: u74RclJm6CAnjW7mANYrboDsTI0_b6PKdZgPoMuBWE0SBQwnPbkamw==
2024-03-29 00:41:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	49979	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	1095	OUT	GET /px.gif?ch=1&rn=9.35954851852123 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; YHB__li_dcdm_c=.com; YHB__lc2_fpi=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q; YHB__lc2_fpi_meta=%7B%22w%22%3A1711672890010%7D; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:33 UTC	586	IN	HTTP/1.1 200 OK x-amz-id-2: RX0rTXh0Jz265/11he+pBkJkJLmZ+MYNdBjqhfO8s+qBFdMkGeBXOEQpaC8fIW1j/0LAtDlM16Y= x-amz-request-id: DEWQ08EQK6EE2SNP Date: Fri, 29 Mar 2024 00:41:33 GMT Last-Modified: Wed, 30 Nov 2022 19:09:07 GMT ETag: "b4682377ddfbe4e7dabfddb2e543e842" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 42 Referrer-Policy: no-referrer-when-downgrade Age: 1 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-03-29 00:41:33 UTC	991	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 62 75 69 6c 74 62 79 67 69 72 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 72 69 76 61 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 65 6e 67 61 64 67 65 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 69 6e 74 68 65 6b 6e 6f 77 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 75 74 6f 62 6c 6f 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 74 65 63 68 63 72 75 6e 63 68 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6f 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 75 66 66 69 6e 67 74 6f 6e 70 6f 73 74 2e 63 Data Ascii: Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://*.huffingtonpost.c
2024-03-29 00:41:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	49980	34.95.69.49	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	493	OUT	OPTIONS /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.yahoo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:33 UTC	492	IN	HTTP/1.1 204 No Content Server: nginx/1.21.6 Date: Fri, 29 Mar 2024 00:41:33 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key Access-Control-Max-Age: 1728000 Content-Type: text/plain; charset=utf-8 Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	49983	18.238.49.124	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	956	OUT	GET /p2?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1711672891922 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=10A5517d307ba86b59849b41711672893; PID=18A5517d3096d86b5984b671711672893; XID=10A5517d307ba86b59849b41711672893
2024-03-29 00:41:33 UTC	363	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Fri, 29 Mar 2024 00:41:33 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 7933995c46b01504206ecd6d3dfa5d10.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: FoTCaaRupCrJp4eCgGSXz6We1RxbhYU3JO6Dfg2aI_ZcV6GbNwvGzg==
2024-03-29 00:41:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	49982	104.18.38.76	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	713	OUT	GET /um/ixmatch.html HTTP/1.1 Host: js-sec.indexww.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:33 UTC	442	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Mon, 25 Jul 2022 19:18:19 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" CF-Cache-Status: HIT Age: 944 Expires: Fri, 29 Mar 2024 04:41:33 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86bbd0a0ce2238a6-IAD
2024-03-29 00:41:33 UTC	927	IN	Data Raw: 62 36 38 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 65 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: b68<!doctype html><head></head><body><script>!function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.def
2024-03-29 00:41:33 UTC	1369	IN	Data Raw: 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 72 2e 70 3d 22 22 2c 72 28 72 2e 73 3d 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 6c 65 74 20 72 3d 21 31 3b 63 6f 6e 73 74 20 6e 3d 7b 7d 3b 6c 65 74 20 69 2c 61 2c 6f 2c 63 3b 63 6f 6e 73 74 20 75 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 6c 65 74 20 65 2c 72 2c 6e 3d 77 69 6e 64 6f 77 2c 69 3d 22 54 43 46 22 3d 3d 3d 74 3f 22 5f 5f 74 63 66 61 70 69 22 3a 22 5f 5f 75 73 70 61 70 69 22 2c 61 3d 22 54 43 46 22 3d 3d 3d 74 3f 22 5f 5f 74 63 66 61 70 69 4c 6f 63 61 74 6f 72 22 3a 22 5f 5f 75 73 70 61 70 69 4c 6f 63 61 74 6f 72 22 3b 66 6f 72 28 3b 6e 3b 29 7b 74 72 79 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 5b 69 5d 29 7b 72 3d 6e 5b 69 5d 2c 65 3d 6e 3b 62 Data Ascii: ty.call(t,e)},r.p="",r(r.s=0)}([function(t,e){let r=!1;const n={};let i,a,o,c;const u={};function s(t){let e,r,n=window,i="TCF"===t?"__tcfapi":"__uspapi",a="TCF"===t?"__tcfapiLocator":"__uspapiLocator";for(;n;){try{if("function"==typeof n[i]){r=n[i],e=n;b
2024-03-29 00:41:33 UTC	631	IN	Data Raw: 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 2c 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 72 61 6d 65 62 6f 72 64 65 72 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 61 72 67 69 6e 68 65 69 67 68 74 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 61 72 67 69 6e 77 69 64 74 68 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 74 29 2c Data Ascii: setAttribute("style","display:none;"),i.setAttribute("width","0"),i.setAttribute("height","0"),i.setAttribute("frameborder","0"),i.setAttribute("marginheight","0"),i.setAttribute("marginwidth","0"),i.setAttribute("scrolling","no"),i.setAttribute("src",t),
2024-03-29 00:41:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	49985	172.64.151.101	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	366	OUT	GET /openrtb/pbjs?s=1057986 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:33 UTC	606	IN	HTTP/1.1 204 No Content Date: Fri, 29 Mar 2024 00:41:33 GMT Content-Type: application/json Connection: close CF-Ray: 86bbd0a0fb1c5b2e-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oqO5IKaM7sLUc8ETEHWBaWSUUqaARLOiv0tT%2F16o2pu28Purtf3vhcL%2FnEWy2mywOcwrB2nl1eIK0yR2vBPB7jjcMR%2FE44kpsKTOgO67rchi3vCsSHuFvf4SxFZfjBOssEnZROJi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	49987	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	1193	OUT	GET /tdv2_fp/api/resource/WeatherLocationService.favoriteLocation?returnMeta=true&lang=en-US&region=US&site=fp&ssl=1&crumb=VCpNxEjFVPV HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; YHB__li_dcdm_c=.com; YHB__lc2_fpi=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q; YHB__lc2_fpi_meta=%7B%22w%22%3A1711672890010%7D; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:33 UTC	470	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-frame-options: SAMEORIGIN content-type: application/json; charset=utf-8 content-length: 21 etag: W/"15-umwiS4rIitQ2ijB3W71Mutm+O6U" vary: Accept-Encoding date: Fri, 29 Mar 2024 00:41:33 GMT x-envoy-upstream-service-time: 10 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0
2024-03-29 00:41:33 UTC	1420	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 72 74 72 2e 69 6e 6e 6f 76 69 64 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 6f 61 74 68 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 6d 65 64 69 61 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 64 76 65 72 74 69 73 69 6e 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 63 64 6e 2e 79 69 6d 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 3b 20 Data Ascii: Content-Security-Policy-Report-Only: connect-src 'self' https://s.yimg.com https://rtr.innovid.com https://.yahoo.com https://.oath.com https://.media.net https://.advertising.com https://.cdn.yimg.com https://.yahoo.net https://ad.doubleclick.net;
2024-03-29 00:41:33 UTC	962	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 62 75 69 6c 74 62 79 67 69 72 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 72 69 76 61 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 65 6e 67 61 64 67 65 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 69 6e 74 68 65 6b 6e 6f 77 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 75 74 6f 62 6c 6f 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 74 65 63 68 63 72 75 6e 63 68 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6f 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 75 66 66 69 6e 67 74 6f 6e 70 6f 73 74 2e 63 Data Ascii: Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://*.huffingtonpost.c
2024-03-29 00:41:33 UTC	21	IN	Data Raw: 7b 22 64 61 74 61 22 3a 5b 5d 2c 22 6d 65 74 61 22 3a 7b 7d 7d Data Ascii: {"data":[],"meta":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	49986	207.65.37.181	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	668	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=64041032&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:33 UTC	897	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=1; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=0:2; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Fri, 29 Mar 2024 00:41:33 GMT Transfer-Encoding: chunked Connection: close
2024-03-29 00:41:33 UTC	2432	IN	Data Raw: 39 37 34 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 6d 65 62 26 67 6f 6f 67 6c 65 5f 73 63 3d 31 26 67 6f 6f 67 6c 65 5f 68 6d 3d 62 54 5a 6b 61 48 47 76 51 69 75 5a 71 78 4f 4b 62 61 75 55 39 77 25 33 44 25 33 44 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 33 33 37 31 26 70 61 72 74 6e 65 72 Data Ascii: 974PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=bTZkaHGvQiuZqxOKbauU9w%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	49967	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	1610	OUT	GET /checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHBJ3BJ0&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25235%2C25036%2C25278%2C25237%2C25159%2C25038%2C25118%2C25239%2C25117%2C25318%2C25317%2C25270%2C25072%2C25031%2C25030%2C25198%2C25274%2C25276%2C25071%2C25202%2C25003%2C25127%2C25006%2C25204%2C25126%2C25007%2C25208%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25243%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25250%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10
2024-03-29 00:41:33 UTC	491	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 31366 Content-Type: text/html; charset=UTF-8 Set-Cookie: usp_status=1; Expires=Wed, 25 Sep 2024 00:41:33 GMT; domain=.hb.yahoo.net; Path=/; sameSite=none; secure=true x-mnet-hl2: E Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Expires: Fri, 29 Mar 2024 00:41:33 GMT Cache-Control: max-age=0, no-cache Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:33 GMT Connection: close
2024-03-29 00:41:33 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-03-29 00:41:33 UTC	16384	IN	Data Raw: 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 7b 0a 76 61 72 20 63 6f 6f 6b 69 65 53 79 6e 63 43 6f 6e 66 69 67 20 3d 20 7b 22 64 61 74 61 6c 65 6e 22 3a 32 36 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 76 73 43 6b 22 3a 22 76 69 73 69 74 6f 72 2d 69 64 22 2c 22 76 73 44 61 43 6b 22 3a 22 64 61 74 61 22 2c 22 73 65 70 56 61 6c 22 3a 22 7c 22 2c 22 73 65 70 54 69 6d 65 22 3a 22 2a 22 2c 22 73 65 70 43 73 22 3a 22 7e 7e 22 2c 22 76 73 44 61 54 69 6d 65 22 3a 31 35 35 35 32 30 30 30 2c 22 63 63 22 3a 22 55 53 22 2c 22 7a 6f 6e 65 22 3a 22 20 65 20 22 2c 22 63 6f 63 22 3a 22 4e 41 22 7d 2c 22 63 73 22 3a 22 38 22 2c 22 6c 6f Data Ascii: <html> <head></head> <body> <script type="text/javascript">try{var cookieSyncConfig = {"datalen":26,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":15552000,"cc":"US","zone":" e ","coc":"NA"},"cs":"8","lo
2024-03-29 00:41:33 UTC	14981	IN	Data Raw: 61 6d 56 61 6c 75 65 46 72 6f 6d 55 72 6c 41 73 41 72 72 61 79 3a 6d 2c 47 65 74 50 61 72 61 6d 56 61 6c 75 65 46 72 6f 6d 55 72 6c 3a 68 2c 73 65 74 43 6f 6f 6b 69 65 3a 78 2c 67 65 74 43 6f 6f 6b 69 65 3a 77 2c 67 65 74 44 6f 6d 61 69 6e 46 6f 72 43 6f 6f 6b 69 65 3a 50 2c 67 65 74 51 75 65 72 79 50 61 72 61 6d 56 61 6c 75 65 46 72 6f 6d 43 68 65 63 6b 53 79 6e 63 55 72 6c 3a 4f 2c 67 65 74 52 61 6e 64 6f 6d 3a 43 2c 62 36 34 65 6e 63 6f 64 65 3a 46 2c 69 73 53 65 74 3a 6b 2c 65 76 65 6e 74 4c 69 62 3a 58 2c 65 78 74 65 6e 64 3a 4e 2c 73 65 74 53 63 72 69 70 74 3a 6a 2c 73 65 74 46 72 61 6d 65 3a 54 2c 73 65 74 49 6d 61 67 65 3a 52 2c 67 65 74 50 72 6f 78 79 3a 4c 2c 67 65 74 50 72 6f 74 6f 63 6f 6c 3a 4d 2c 73 75 70 70 6f 72 74 53 74 6f 72 61 67 65 3a Data Ascii: amValueFromUrlAsArray:m,GetParamValueFromUrl:h,setCookie:x,getCookie:w,getDomainForCookie:P,getQueryParamValueFromCheckSyncUrl:O,getRandom:C,b64encode:F,isSet:k,eventLib:X,extend:N,setScript:j,setFrame:T,setImage:R,getProxy:L,getProtocol:M,supportStorage:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	49984	50.57.31.206	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	644	OUT	GET /oath/1/info?sType=sync&_sdv&sExtCookieId=y-IH9AJJtE2oPnY32nwExO7SVPiRrzp2zgABI-~A&sInitiator=external HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:33 UTC	672	IN	HTTP/1.1 302 Found Location: /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-IH9AJJtE2oPnY32nwExO7SVPiRrzp2zgABI-~A&sInitiator=external UIP-Response-Status: Ok Frontend-ID: 4 Set-Cookie: SEUNCY=1388D61F0DA77E06; Expires=Sat, 29 Mar 2025 00:41:33 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Connection: close Date: Fri, 29 Mar 2024 00:41:33 GMT Content-Length: 0 Routing-Server-ID: -1 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	49989	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	604	OUT	GET /cv/apiv2/weather-svg/MOSTLY_SUNNY.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:33 UTC	794	IN	HTTP/1.1 200 OK x-amz-id-2: IaHdx0G//1xNXZPC5LD8IMpos6ocdke0BW5wUrsWnlK4RoVjUzFbLkVFU+J+BAsgxEUM4XyVrMg= x-amz-request-id: 9SHTW0J157NG5FE0 Date: Mon, 18 Mar 2024 15:14:02 GMT Last-Modified: Fri, 13 Nov 2020 21:27:14 GMT ETag: "03c10f2c4e36a75805f7735d1f07c98c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1650 Referrer-Policy: no-referrer-when-downgrade Age: 898052 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 2d 33 36 2e 33 39 36 25 22 20 79 31 3d 22 33 32 2e 38 35 34 25 22 20 78 32 3d 22 33 33 2e 33 39 36 25 22 20 79 32 3d 22 31 33 33 2e 33 31 33 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 46 35 42 32 22 20 6f 66 66 73 65 74 3d 22 2e 30 31 33 25 22 2f 3e 0a 20 20 20 20 20 20 3c Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="-36.396%" y1="32.854%" x2="33.396%" y2="133.313%" id="a"> <stop stop-color="#FFF5B2" offset=".013%"/> <
2024-03-29 00:41:33 UTC	350	IN	Data Raw: 35 39 20 31 38 20 31 38 20 31 38 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 61 29 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 34 20 34 32 63 36 2e 33 31 20 30 20 31 31 2e 38 36 32 2d 33 2e 32 34 37 20 31 35 2e 30 37 35 2d 38 2e 31 36 31 20 30 20 30 2d 39 2e 30 39 2d 33 2e 37 33 33 2d 31 37 2e 36 38 38 2d 37 2e 34 37 31 43 31 37 2e 31 30 33 20 33 32 2e 31 30 39 20 31 34 2e 30 35 39 20 34 32 20 32 34 20 34 32 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 62 29 22 20 6f 70 61 63 69 74 79 3d 22 2e 36 38 37 22 2f 3e 0a 20 20 20 20 3c 75 73 65 20 66 69 6c 6c 3d 22 75 72 6c 28 23 63 29 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 64 22 2f 3e 0a 20 20 20 20 3c 75 73 65 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 3d 22 2e 30 35 22 20 66 69 6c 6c 3d 22 23 37 44 Data Ascii: 59 18 18 18z" fill="url(#a)"/> <path d="M24 42c6.31 0 11.862-3.247 15.075-8.161 0 0-9.09-3.733-17.688-7.471C17.103 32.109 14.059 42 24 42z" fill="url(#b)" opacity=".687"/> <use fill="url(#c)" xlink:href="#d"/> <use fill-opacity=".05" fill="#7D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	49990	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	2143	OUT	POST /p?s=2023538075&t=3h832E6lROGjwEdU,0.038801888474145896&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03C2WZIAfuc5wHrRWD%04_w%03www.yahoo.com%2F%04_rid%032vl5n89j0c3hk%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLQ1AMEACWH4gQEAMAdNgUEAZlCNwcEACPSVQgEAWVv0QoFVkNEUEE%04A_utm%03%7B%22perf_ttfb%22%3A650%2C%22perf_ttfb_rating%22%3A%22good%22%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031711672892%04_ms%03994%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:33 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:33 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	49988	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	2140	OUT	POST /p?s=2023538075&t=iUXlnvTaUqntNEWE,0.8003329603964813&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03C2WZIAfuc5wHrRWD%04_w%03www.yahoo.com%2F%04_rid%032vl5n89j0c3hk%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLQ1AMEACWH4gQEAMAdNgUEAZlCNwcEACPSVQgEAWVv0QoFVkNEUEE%04A_utm%03%7B%22perf_fcp%22%3A1357%2C%22perf_fcp_rating%22%3A%22good%22%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031711672892%04_ms%03999%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:33 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:33 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	49992	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	609	OUT	GET /cv/apiv2/weather-svg/PARTLY_CLOUDY_DAY.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:33 UTC	817	IN	HTTP/1.1 200 OK x-amz-id-2: PVzboTxGIEtMWJWiaatRBA+Xe3sQhHPKztkIPErouYQKWYepkDt78oM88FL/oM61K+9Cw9uu598= x-amz-request-id: DC8HTVGP3YAAQ72J Date: Sat, 23 Mar 2024 16:03:15 GMT Last-Modified: Fri, 13 Nov 2020 21:27:14 GMT ETag: "93dc53d369dca8f09877c3ecc9a41de3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1695 Referrer-Policy: no-referrer-when-downgrade Age: 463099 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-29 00:41:33 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 2d 33 36 2e 33 39 36 25 22 20 79 31 3d 22 33 32 2e 38 35 34 25 22 20 78 32 3d 22 33 33 2e 33 39 36 25 22 20 79 32 3d 22 31 33 33 2e 33 31 33 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 46 35 42 32 22 20 6f 66 66 73 65 74 3d 22 2e 30 31 33 25 22 2f 3e 0a 20 20 20 20 20 20 3c Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="-36.396%" y1="32.854%" x2="33.396%" y2="133.313%" id="a"> <stop stop-color="#FFF5B2" offset=".013%"/> <
2024-03-29 00:41:33 UTC	395	IN	Data Raw: 36 29 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 34 2e 37 36 37 20 31 30 2e 34 37 36 4c 2e 38 36 36 20 32 33 2e 35 33 43 33 2e 31 39 39 20 33 30 2e 37 36 36 20 39 2e 39 38 38 20 33 36 20 31 38 20 33 36 63 39 2e 39 34 31 20 30 20 31 38 2d 38 2e 30 35 39 20 31 38 2d 31 38 6c 2d 31 31 2e 32 33 33 2d 37 2e 35 32 34 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 62 29 22 20 6f 70 61 63 69 74 79 3d 22 2e 37 37 33 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 36 20 36 29 22 2f 3e 0a 20 20 20 20 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 36 20 36 29 22 3e 0a 20 20 20 20 20 20 3c 75 73 65 20 66 69 6c 6c 3d 22 75 72 6c 28 23 63 29 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 64 22 2f 3e 0a 20 20 20 20 20 Data Ascii: 6)"/> <path d="M24.767 10.476L.866 23.53C3.199 30.766 9.988 36 18 36c9.941 0 18-8.059 18-18l-11.233-7.524z" fill="url(#b)" opacity=".773" transform="translate(6 6)"/> <g transform="translate(6 6)"> <use fill="url(#c)" xlink:href="#d"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	49994	34.238.61.171	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	629	OUT	GET /demconf.jpg?et:ibs%7cdata:dpid=30646 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=18302510874207377964223395608090049346
2024-03-29 00:41:33 UTC	903	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:33 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 5yP5P2xuRL0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Error: 300 X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v057-0f41c21f9.edge-va6.demdex.com 0 ms set-cookie: dpm=18302510874207377964223395608090049346; Max-Age=15552000; Expires=Wed, 25 Sep 2024 00:41:33 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=18302510874207377964223395608090049346; Max-Age=15552000; Expires=Wed, 25 Sep 2024 00:41:33 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-29 00:41:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	49993	207.65.37.179	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	377	OUT	GET /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:33 UTC	167	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Date: Fri, 29 Mar 2024 00:41:33 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	49997	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	363	OUT	GET /cv/apiv2/weather-svg/RAIN.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:33 UTC	818	IN	HTTP/1.1 200 OK x-amz-id-2: NxftqEUh+QlGbuZSQF5EH/Sliakcx7iA34m0wtkp751eRVl+2M/e46CjpQ5TI2EgDE0XRYrDxlI= x-amz-request-id: W6KNNT19NQEDKJJE Date: Sat, 09 Mar 2024 22:11:08 GMT Last-Modified: Fri, 13 Nov 2020 21:27:14 GMT ETag: "9398ffa95e2ffa35a1335a00d6e40260" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1221 Referrer-Policy: no-referrer-when-downgrade Age: 1650626 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-29 00:41:33 UTC	1221	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 36 34 2e 32 37 38 25 22 20 79 31 3d 22 31 30 30 25 22 20 78 32 3d 22 36 34 2e 32 37 38 25 22 20 79 32 3d 22 31 2e 33 35 31 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 42 35 42 44 43 38 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a"> <stop stop-color="#B5BDC8" offset="0%"/> <stop stop

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	49996	151.101.193.44	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	638	OUT	GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb&us_privacy=1YNN HTTP/1.1 Host: trc.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; t_pt_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:33 UTC	962	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 29-Mar-2025 00:41:33 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 29-Mar-2025 00:41:33 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 1904 Accept-Ranges: bytes Date: Fri, 29 Mar 2024 00:41:33 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-ewr18157-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1711672894.937386,VS0,VE3 X-vcl-time-ms: 3 transfer-encoding: chunked
2024-03-29 00:41:33 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-03-29 00:41:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-03-29 00:41:33 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50001	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	1095	OUT	GET /px.gif?ch=2&rn=9.35954851852123 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; YHB__li_dcdm_c=.com; YHB__lc2_fpi=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q; YHB__lc2_fpi_meta=%7B%22w%22%3A1711672890010%7D; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:33 UTC	1271	IN	HTTP/1.1 200 OK x-amz-id-2: TdC6e9o688fjBYYcrv2RejcAErSypWeM4phHARFBs0pGHWuySmz0ggTDslul3VDFuIWzgi1kdXo= x-amz-request-id: 4YHKEV0RS6BJ544E Date: Fri, 29 Mar 2024 00:41:34 GMT Last-Modified: Wed, 30 Nov 2022 19:09:07 GMT ETag: "b4682377ddfbe4e7dabfddb2e543e842" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 42 Referrer-Policy: no-referrer-when-downgrade Age: 0 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 Vary: Origin Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=17i0rptj0c3ht&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block
2024-03-29 00:41:33 UTC	817	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 59 48 42 5f 5f 6c 69 5f 64 63 64 6d 5f 63 3d 44 45 4c 45 54 45 3b 20 45 78 70 69 72 65 73 3d 46 72 69 2c 20 32 39 20 4d 61 72 20 32 30 32 34 20 30 30 3a 33 31 3a 33 33 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 30 3b 20 44 6f 6d 61 69 6e 3d 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 20 50 61 74 68 3d 3b 20 53 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 59 48 42 5f 5f 6c 69 5f 64 63 64 6d 5f 63 3d 44 45 4c 45 54 45 3b 20 45 78 70 69 72 65 73 3d 46 72 69 2c 20 32 39 20 4d 61 72 20 32 30 32 34 20 30 30 3a 33 31 3a 33 33 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 30 3b 20 44 6f 6d 61 69 Data Ascii: X-Content-Type-Options: nosniffSet-Cookie: YHB__li_dcdm_c=DELETE; Expires=Fri, 29 Mar 2024 00:31:33 GMT; Max-Age=0; Domain=www.yahoo.com; Path=; Secure; HttpOnlySet-Cookie: YHB__li_dcdm_c=DELETE; Expires=Fri, 29 Mar 2024 00:31:33 GMT; Max-Age=0; Domai
2024-03-29 00:41:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50000	34.95.69.49	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	590	OUT	POST /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive Content-Length: 495 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:33 UTC	495	OUT	Data Raw: 7b 22 61 63 74 69 6f 6e 5f 6e 61 6d 65 22 3a 22 45 76 65 6e 74 73 22 2c 22 66 22 3a 22 70 61 67 65 76 69 65 77 22 2c 22 6a 73 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 31 36 37 32 38 39 32 37 30 33 2c 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 36 2c 22 61 63 74 69 6f 6e 5f 67 72 6f 75 70 5f 69 64 22 3a 22 36 38 65 34 62 36 37 37 2d 32 32 35 37 2d 62 33 66 36 2d 31 63 63 34 2d 32 64 65 34 34 34 38 39 37 37 35 63 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 34 2e 32 36 2e 35 2d 61 71 2d 79 61 68 6f 6f 73 63 6c 22 2c 22 74 6f 70 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 6a 73 74 7a 6f 66 Data Ascii: {"action_name":"Events","f":"pageview","jstimestamp":1711672892703,"elapsed_time":16,"action_group_id":"68e4b677-2257-b3f6-1cc4-2de44489775c","version":"4.26.5-aq-yahooscl","topLocation":"https://www.yahoo.com/","referrer":"https://www.yahoo.com/","jstzof
2024-03-29 00:41:34 UTC	511	IN	HTTP/1.1 200 OK Server: nginx/1.21.6 Date: Fri, 29 Mar 2024 00:41:33 GMT Content-Type: application/octet-stream Content-Length: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key Access-Control-Expose-Headers: Content-Length,Content-Range Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	49999	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	2138	OUT	POST /p?s=2023538075&t=yj7OJTEO7iRG7T4n,0.6304751031642482&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03C2WZIAfuc5wHrRWD%04_w%03www.yahoo.com%2F%04_rid%032vl5n89j0c3hk%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLQ1AMEACWH4gQEAMAdNgUEAZlCNwcEACPSVQgEAWVv0QoFVkNEUEE%04A_utm%03%7B%22perf_fid%22%3A10%2C%22perf_fid_rating%22%3A%22good%22%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031711672893%04_ms%03001%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:34 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:33 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50002	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	611	OUT	GET /pv/games/images/JustWords_Spring_600x400.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:34 UTC	831	IN	HTTP/1.1 200 OK x-amz-id-2: ox1BXoUMJMNZvM5O98byPWZi51U14Z4PTHSACcycHaj0TdhhaBnXeSc6/7AHTIonuMynyRbxSiA= x-amz-request-id: M1H4WWKMRP968FQ2 Date: Mon, 25 Mar 2024 23:25:52 GMT Last-Modified: Wed, 13 Mar 2024 16:46:31 GMT ETag: "281da85394835ffd5d30df3f6ba6a474" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public Expires: Mon, 13 Mar 2034 16:46:27 GMT Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 399168 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 263742 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:34 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 01 90 08 02 00 00 00 fd 57 89 cf 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 76 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 61 38 64 34 37 35 33 34 39 2c 20 32 30 32 33 2f 30 33 2f 32 33 2d 31 33 3a 30 35 3a 34 Data Ascii: PNGIHDRXWtEXtSoftwareAdobe ImageReadyqe<viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:4
2024-03-29 00:41:34 UTC	1300	IN	Data Raw: 39 21 d2 d8 ee c2 b8 62 3f 71 09 65 86 48 4a fc f2 4a ea c2 95 14 06 13 ef 99 c1 f5 b6 d9 f0 a2 c0 36 e3 eb c6 de 1f 6e c2 71 f9 e1 05 f6 e6 f6 89 b6 6f 70 cd bc 31 0a 1f 54 b4 10 af 83 b7 72 db 1e 81 5d c0 5f 13 7b 2b bc 2d 25 15 7b 7d 71 43 6e ff ce d7 09 fc 90 da ef 78 73 fb 14 df fe 0a 7f 1d ec 82 09 6d d7 cc c2 5e a0 b6 c1 b8 32 b4 9c 46 c9 a9 d2 21 a3 43 87 8a 4c 76 07 e1 b7 26 79 36 1c 76 6b 34 5e ae b1 49 3f 78 f1 da 7f 72 1a 7d 6f 3c 51 6d ff 73 8c d5 8c 4a 72 93 6a a3 71 bb 69 65 a7 57 52 3b 76 5a c1 5a 56 0a de 52 5a e5 12 d6 b5 54 46 c2 68 19 0a c3 09 ef c3 6c 69 8d d7 e1 7c e2 84 9b 3c 97 b9 6d 35 a5 38 cf d0 46 66 5b 07 ef 44 ea 34 35 49 9e 85 6f dd 3d f5 a9 fb e2 f5 e0 ca 76 2d 9e b8 df 78 23 bc b2 d1 0a da e2 d1 bd 51 a3 e6 30 df ed 9f ea Data Ascii: 9!b?qeHJJ6nqop1Tr]_{+-%{}qCnxsm^2F!CLv&y6vk4^I?xr}o<QmsJrjqieWR;vZZVRZTFhli\|<m58Ff[D45Io=v-x#Q0
2024-03-29 00:41:34 UTC	1300	IN	Data Raw: bf 5d b9 ba 55 1d 4f 9d fb 27 30 80 dc 73 84 e0 ae 06 09 6d 17 99 10 d0 5d c0 23 1c 6b 50 fb b8 1e 0a 7a 4a 05 28 9d 22 f0 d2 87 bb 7b 37 3f e8 32 16 b4 60 b1 90 7c 18 b9 87 27 79 23 70 41 3f 0c 13 0d ff 33 9e 6c 2c c3 70 79 a3 89 89 23 25 5c b8 09 53 80 58 a0 1e 28 0a 12 22 4a 51 e8 6d ae ba e1 54 9e 1c e1 90 88 26 e1 0e cc 2b d3 a8 e0 d3 38 35 a3 71 ce 39 01 60 13 2e 45 25 4f 11 1f 04 40 ae 40 71 80 56 c9 94 36 1b dc d1 79 98 99 38 cb 65 96 07 2d 35 4d 55 7f a4 a5 c2 89 0f a4 aa bb a4 16 e8 d1 04 f4 26 1a 67 ca 71 49 10 d0 7a 15 04 ab 96 19 85 b9 80 a5 2f 95 f6 7c ae e0 c1 a0 22 75 75 1e 1b bf c2 ea 6d 36 3c d1 30 7f 9c 11 19 b3 2c d6 d3 91 f1 ea 2c 8f 50 8b db ba e4 03 e4 8c 72 dd 3f 49 41 96 5c bf dc cc 42 72 d8 05 00 37 b0 b2 a0 83 32 e7 07 43 13 e9 Data Ascii: ]UO'0sm]#kPzJ("{7?2`\|'y#pA?3l,py#%\SX("JQmT&+85q9`.E%O@@qV6y8e-5MU&gqIz/\|"uum6<0,,Pr?IA\Br72C
2024-03-29 00:41:34 UTC	1300	IN	Data Raw: e7 c0 b8 24 5d df 71 40 8d 3d 3d c9 8f 7b d4 0b d4 f3 d7 bd 83 27 d3 af ff 9b ae c3 d5 87 b7 07 32 27 ed 8e 73 f7 d1 94 4a 16 8d c8 d6 b6 d3 4d 33 d7 e1 ab 1b 40 c0 68 c5 73 06 83 b4 01 6c b2 46 54 aa 97 57 dd bd 47 d1 dd 9b 6a d0 63 8d 35 76 7a 9a 2f 5f 70 36 9e 0b 96 9a a2 7b d2 93 ed ce e9 db e9 c1 de a0 77 c8 7e f0 bd e3 57 3e bb 14 45 77 60 01 b7 da 82 06 f9 e6 65 5a 6b b9 1f be 6e a6 63 42 1d 3d 19 84 30 a4 d6 32 42 05 d3 8a 93 5b b7 92 34 64 2b 9b 22 49 50 6e 83 2e 82 c2 0d 0d 47 40 ec ad 75 84 16 8c 63 6e 47 23 c2 a1 da ea b1 84 a1 a9 af e6 57 dc 15 40 68 23 4a 04 2c d4 70 d4 73 cd 4f 46 9c 02 97 ff 7f 00 bf 45 73 df 53 e0 f7 4c 9b 4a 5e b3 f8 85 16 23 82 fa e1 4f c4 c9 39 d9 42 d9 63 a5 11 f4 3d 9e 9e d2 42 cd a6 e7 f9 d7 4f 46 58 d8 ee 4d 66 81 Data Ascii: $]q@=={'2'sJM3@hslFTWGjc5vz/_p6{w~W>Ew`eZkncB=02B[4d+"IPn.G@ucnG#W@h#J,psOFEsSLJ^#O9Bc=BOFXMf
2024-03-29 00:41:34 UTC	1300	IN	Data Raw: 63 b6 77 f8 be ed 79 81 82 96 ae d9 ab 39 aa ed 56 fa 17 cc 69 de f4 59 6b c4 82 fe 01 f7 56 05 17 2c 3c 7f 33 67 5e 01 1e 86 32 67 e6 9f b3 d6 c5 b2 f5 d0 c2 cc 72 2f f8 e3 15 de c1 59 df d4 cc 2e ca 2d 6b 54 33 ca 48 cf 3b 7d 73 8b 70 96 2f 52 be f0 33 9b 51 58 66 1f 67 ef 6c 92 f2 1a 7c 62 cd 36 38 9b b7 76 e6 02 e7 96 05 42 9b 13 cb c9 40 46 4b 04 45 55 78 e6 52 64 7e 1a 54 ab 50 cb 31 d2 74 05 db 24 b7 a3 04 af 4b aa a9 23 c8 24 7b e7 e1 c9 1b 71 16 0a 91 57 78 7b 33 f8 04 68 a3 20 9a 04 a9 50 40 03 ed 1c f4 0f 5f df ff 40 93 6b a7 d3 e6 68 a4 4f 55 ab 17 6f 46 d9 7a 24 97 26 a9 07 04 2c ca 84 84 cb 95 a5 ce c6 94 9d 9a 3b 99 8b d1 b5 7b b8 54 15 40 b0 5a 5a 5f 78 07 29 c2 a0 5d 10 96 a8 cd 56 17 b3 5a 81 bd 95 9e 9b 9f 67 ea 84 b1 0b 02 1f 27 09 57 Data Ascii: cwy9ViYkV,<3g^2gr/Y.-kT3H;}sp/R3QXfgl\|b68vB@FKEUxRd~TP1t$K#${qWx{3h P@_@khOUoFz$&,;{T@ZZ_x)]VZg'W
2024-03-29 00:41:34 UTC	1300	IN	Data Raw: 88 02 79 45 e1 c4 64 5e 0d 92 46 43 3e 79 14 7f fd eb fd e7 2e 35 1c 0f 18 43 ec 08 16 a5 f4 ce c3 43 19 67 20 50 2f 5e f2 1e e7 f9 2b 57 d9 37 df 52 ef dc 4b 34 61 b0 80 1e ed 67 cd 00 e6 88 4b cb f8 61 1c 4f 7a e9 0b 17 ab d5 ba 73 f8 30 53 8c 3e b8 15 25 09 d9 de e4 d5 2a f7 03 f7 f1 a3 69 2c c9 52 c3 c4 b1 1a 4c 50 69 a8 56 45 ab 61 54 a6 96 9a 0e 6c da c1 38 8f 40 b0 c6 d9 4e 8b 3a 2d f4 c8 66 19 83 e7 af 75 80 e5 08 00 d7 d1 44 45 c7 a4 da 14 47 27 ea e0 56 56 f7 58 bd 46 97 5a 2c 0d d5 f6 a6 f3 e1 83 1c 1e 57 ad 01 45 c5 35 39 0d 4d 7f ac 91 ae 52 32 3a 95 46 39 f5 25 51 5f a6 e1 84 9d 1e c0 88 27 5e 03 75 14 c7 a3 f1 54 7a 75 60 5e ba 3f a0 fb bb b2 d6 00 4c 22 e1 c4 59 dd f4 8f c7 91 1f 70 18 0d 97 eb 70 92 2f 2f b5 b8 93 0e fa 32 9a 22 2e 36 57 Data Ascii: yEd^FC>y.5CCg P/^+W7RK4agKaOzs0S>%*i,RLPiVEaTl8@N:-fuDEG'VVXFZ,WE59MR2:F9%Q_'^uTzu`^?L"Ypp//2".6W
2024-03-29 00:41:34 UTC	1300	IN	Data Raw: f4 d1 bd 2c 8d 69 00 7c 74 6a 78 1d e8 b2 d8 ba 5c 8f c6 72 ef ee 24 4b c9 68 a0 82 1a 9f c2 5b 2e ac 16 96 a4 66 3a 91 99 64 bb ef 4c 65 1c bc dd 3d f8 d8 e7 fc bf f3 7b 97 bf f6 95 71 ef 28 bd 7c cd 7b f5 97 2e fc c9 bf fc de af 7f e9 57 1a f5 bc 7f 7c fb c6 d5 da db df be b9 fc ea ab fe a5 ff 6c 78 7a d8 de f9 c6 e5 17 06 df fa 57 d9 fe 6d c7 71 60 e3 a0 b8 00 35 82 09 5a c8 3a 34 e5 9c 09 04 2b 87 4a bf 90 b1 41 f1 25 12 21 92 1b c4 43 8d 4a a7 01 46 db d8 70 a6 51 22 9e 21 39 3f 15 16 7e 24 f8 3d 15 e7 f9 54 44 49 81 55 ae 80 85 23 b2 34 a4 7f 5d 2f e3 82 61 93 d1 59 9e 07 25 f3 30 7b 76 16 47 79 16 8c 81 63 51 5c 99 c6 43 d4 b0 d9 47 b5 9b 3e 1b 80 72 ee 65 ba 60 a5 2c b8 d7 bc 17 38 19 e6 7c 26 03 7d 1a 06 17 0c a1 08 78 1a c9 13 13 c2 b1 60 05 f8 Data Ascii: ,i\|tjx\r$Kh[.f:dLe={q(\|{.W\|lxzWmq`5Z:4+JA%!CJFpQ"!9?~$=TDIU#4]/aY%0{vGycQ\CG>re`,8\|&}x`
2024-03-29 00:41:34 UTC	1300	IN	Data Raw: a5 cc f2 4c e5 29 e0 1f a8 db 54 82 f4 48 6c f4 2f 08 32 12 2a ef 54 37 8f a3 da fd e9 f2 2d 40 be 11 3f 0e ab a3 cc cf 33 b8 5b 11 03 ac 5c 1e 42 77 59 91 61 69 03 b7 17 f3 75 cc 62 50 93 fe 39 e5 e6 fe a4 75 6d 83 8a c9 2b 1f 5f 59 5d 0b df 7a bb fb bd d3 df 39 cc 2e fe ee fa 97 b5 cc b9 8b 4c 02 e4 87 02 7d 9e d1 6a c0 2b 01 0b 13 dc 5f 0c 93 16 34 bc d9 6e 90 49 0a 42 53 03 77 56 e9 04 00 c1 e1 0e e8 1c 4b 4d 45 f2 dd 5c 4d 02 67 23 80 bb b0 4c 39 aa 59 65 d3 2c 0a 98 01 04 9d f6 a7 eb 4b 7c eb c2 f2 57 bf 31 68 78 ee d6 ba 04 ee f2 c1 07 83 24 64 eb 6b c8 cd a5 27 fc 86 be 7a b1 73 ff ce 78 73 cd db 3f c9 84 70 81 a6 8e 48 0a c0 23 18 55 2c 77 84 b8 bc 49 93 65 d3 ac 3b 99 61 f7 1e 25 6b 4d de aa 99 c3 d3 fc ce 9d 31 d3 32 a8 08 e1 91 ad 55 16 7a 48 Data Ascii: L)THl/2*T7-@?3[\BwYaiubP9um+_Y]z9.L}j+_4nIBSwVKME\Mg#L9Ye,K\|W1hx$dk'zsxs?pH#U,wIe;a%kM12UzH
2024-03-29 00:41:34 UTC	1300	IN	Data Raw: 5c 10 5b 97 83 c1 20 3d 39 4c f2 84 72 4f 2f ad 78 d3 89 c9 25 ee 45 4c e4 81 1d 25 f4 ca 1a 07 9d cd 38 00 6f 68 4f 9a 4e f5 da 16 1a a4 1d 07 ba 2c 80 90 3a 55 dc ec ae 4f e3 89 9e 9e 12 9d b2 c9 40 85 a1 d5 1d 35 86 3f 73 aa 41 51 60 f3 cc 29 8a cc bd 58 c2 2e a6 9a 63 88 2c 86 a6 d8 fd 26 13 d2 db c7 ed f6 d8 98 4a 25 07 f1 53 a9 b3 d5 0b 6c 79 b5 be b6 0e 13 ad 78 85 90 18 08 a2 84 1b d6 9a 14 20 34 0a 49 14 32 18 e4 7f ef 3f 16 1f be 17 bd f4 d2 ba a1 e9 0f df f8 ee e5 2b ea 1b 7f f6 f6 6f ff ee 3f f8 85 cf 5e 88 c7 e1 fd c3 93 28 95 8f ef be a3 79 be b4 dd da 5e 83 79 8c bc e7 5f 72 fc e5 27 7b 8f 77 2e 5c 1b f7 76 93 d8 5c ba e1 0e aa f4 f0 1e ec 59 9b ea a0 ac bf cc ca 40 cc d3 41 47 0d 86 32 a1 b0 b4 06 32 c1 51 5a 14 b9 62 86 ce 33 14 0c 72 7d Data Ascii: \[ =9LrO/x%EL%8ohON,:UO@5?sAQ`)X.c,&J%Slyx 4I2?+o?^(y^y_r'{w.\v\Y@AG22QZb3r}
2024-03-29 00:41:34 UTC	1300	IN	Data Raw: 18 a0 81 c5 2d 64 08 72 79 c6 c6 9e 49 a5 60 cc af b4 a0 49 5a 96 40 68 2d 82 66 d6 35 63 eb 6e 11 9b 40 81 a4 90 71 5a 56 57 2b b8 1a 29 e2 0e 67 c5 cc 0a 67 5b d9 bb 22 ed 01 cb c1 14 38 87 de b5 33 0f 9f ad bd 77 e6 1a 65 b3 61 d3 a5 67 08 eb d7 88 c2 a4 6a d1 8e cf 42 43 91 ed 59 ff 5c b1 ae 8a 9c c5 85 90 25 a3 66 85 66 0a f8 56 0b 3c 9c 92 79 a9 9a 32 07 31 b3 ac 5e 5b 13 a8 2d 15 82 a6 4e c0 29 2c c1 02 03 28 65 ac 72 f8 9e 01 af 83 81 96 69 9c c7 53 99 4c b3 24 ca 92 71 06 42 22 9e e6 e9 58 86 27 32 9e c4 c3 61 37 e4 80 7c df 8b 3f fd cd ec 57 be 31 fe dc 9b d1 27 76 e3 d5 b1 ac 48 d8 38 79 92 45 69 1c ab 28 04 c5 59 45 31 49 33 98 23 fa d1 1a 14 25 f4 6f 1b aa d1 b9 9e 62 c8 59 f9 22 92 49 9d 66 d8 09 c1 9e 6e 32 c8 ba 9a cf 97 ea 02 29 b6 36 cd Data Ascii: -dryI`IZ@h-f5cn@qZVW+)gg["83weagjBCY\%ffV<y21^[-N),(eriSL$qB"X'2a7\|?W1'vH8yEi(YE1I3#%obY"Ifn2)6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50005	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	620	OUT	GET /cv/apiv2/yahoo_weather_web/accuweather-horizontal.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:34 UTC	813	IN	HTTP/1.1 200 OK x-amz-id-2: oWeoDQpGCJAUwXM2trjdiGeNfcEIqV5BadEd0sRiQHjP1hD0GeMd8IzP66ElhJ54LzCaBhI8FUE= x-amz-request-id: DC8KWBKKXEX6X2T9 Date: Sat, 23 Mar 2024 16:03:15 GMT Last-Modified: Thu, 08 Sep 2022 20:32:20 GMT ETag: "d0e45188f6a8f2e8f2528e762fe55d33" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 2331 Referrer-Policy: no-referrer-when-downgrade Age: 463100 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-29 00:41:34 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 22 08 03 00 00 00 56 7d a4 84 00 00 00 7b 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bd 78 1c b0 00 00 00 28 74 52 4e 53 00 05 fa f5 21 0d 6b 36 c0 13 e0 4c b1 b6 e8 d7 1b 7f 85 ac 29 c5 8c 2e a7 92 59 a1 d0 44 ca ec 9b 71 3e ba 77 64 53 5f 87 5f b6 44 00 00 08 27 49 44 41 54 68 de e5 59 e9 ba 9a 30 10 4d 80 b0 c8 a2 08 2e b8 a1 e2 92 f7 7f c2 9e 99 21 88 Data Ascii: PNGIHDR"V}{PLTEx(tRNS!k6L).YDq>wdS__D'IDAThY0M.!
2024-03-29 00:41:34 UTC	1031	IN	Data Raw: d7 f0 ae 4a 35 6c 3b 21 62 45 22 6a a2 e5 52 40 35 1a 72 d3 2f 80 21 32 68 51 79 86 88 be 38 65 36 12 d3 86 d5 5b 3c aa f8 eb fd 5f bf 05 2c 8d 69 8e a7 cc c0 6f 80 5f 20 e9 12 f1 dd e1 1e 12 dd 7b 87 6a a0 da 94 cd f1 d8 4c df 02 7e b4 01 9a 0f e5 b2 50 89 8c 2b 01 be 0b e0 ad 2c c2 33 85 5c d2 ec 15 70 48 41 b2 54 03 1d 48 4f ca 9c b3 cf 62 cc 18 1f 17 b1 57 c6 3b c0 5a b3 9d 3a 18 9f 8d ae 4a 72 48 4d 4a e2 a5 19 db dd f7 f9 12 1b 54 03 cf fb 0e e0 c5 48 86 e7 81 e5 be 97 08 71 67 3b 80 f7 da 96 fc e0 d1 96 b8 22 73 de 0b 61 94 a9 57 87 7e 65 bc 07 cc b9 31 49 3d 4f a4 47 58 b1 28 39 1a 0d 03 1e 53 46 c5 c0 fe 14 b0 50 29 80 4b 59 24 65 dc 9e 25 e5 07 92 68 3a d8 7c 7c e5 f6 dc 0a 82 ec cf d4 cf 3c cc b1 62 7d d4 68 ba 49 4a ea f9 05 38 01 03 46 b2 75 Data Ascii: J5l;!bE"jR@5r/!2hQy8e6[<_,io_ {jL~P+,3\pHATHObW;Z:JrHMJTHqg;"saW~e1I=OGX(9SFP)KY$e%h:\|\|<b}hIJ8Fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50006	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	563	OUT	GET /aaq/wf/wf-autocomplete-1.31.8-modern-a4f31e10ae.chunk.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:34 UTC	884	IN	HTTP/1.1 200 OK x-amz-id-2: UHNhO6m7HxtiWlx7nCiU5bprx26fePrULeFz2fAsp2dEFNQKCIR/TbsG7sESRSuuILBXVwpGxVAqvfx81YJZkYnQuuJKOX2MEIFCYtLsIUY= x-amz-request-id: 2EBVN9GS5DV4DXZ5 Date: Thu, 28 Mar 2024 15:14:19 GMT Last-Modified: Mon, 04 Dec 2023 12:09:37 GMT ETag: "dfa69f455efa8a49a71af52519927c3f" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: VedLc9cHVmcl0hDYflz_FEvaIOBOYa99 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 8260 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 34036 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:34 UTC	1300	IN	Data Raw: 77 65 62 70 61 63 6b 4a 73 6f 6e 70 77 61 66 65 72 5f 77 61 66 65 72 73 5f 77 61 66 65 72 5f 61 75 74 6f 63 6f 6d 70 6c 65 74 65 28 5b 30 5d 2c 7b 22 2e 2f 73 72 63 2f 74 79 70 65 73 20 72 65 63 75 72 73 69 76 65 20 5e 5c 5c 2e 5c 5c 2f 2e 2a 24 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 65 74 75 72 6e 20 72 28 73 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 76 61 72 20 74 3d 69 5b 65 5d 3b 69 66 28 21 28 74 2b 31 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 65 2b 22 27 2e 22 29 3b 72 65 74 75 72 6e 20 74 7d 76 61 72 20 69 3d 7b 22 2e 2f 61 6f 6c 2d 6c 6f 63 61 74 69 6f 6e 22 3a 22 2e 2f 73 72 63 2f 74 79 70 65 Data Ascii: webpackJsonpwafer_wafers_wafer_autocomplete([0],{"./src/types recursive ^\\.\\/.*$":function(e,t,r){function a(e){return r(s(e))}function s(e){var t=i[e];if(!(t+1))throw new Error("Cannot find module '"+e+"'.");return t}var i={"./aol-location":"./src/type
2024-03-29 00:41:34 UTC	1300	IN	Data Raw: 21 3d 3d 6c 29 7b 76 61 72 20 75 3d 70 61 72 73 65 49 6e 74 28 6c 2c 31 30 29 3b 6f 5b 75 5d 3d 65 5b 6c 5d 7d 72 65 74 75 72 6e 20 6f 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 74 3d 65 2e 63 69 74 79 2c 61 3d 65 2e 63 6f 75 6e 74 72 79 2c 69 3d 65 2e 64 69 73 70 6c 61 79 5f 6e 61 6d 65 2c 6f 3d 65 2e 66 75 6c 6c 5f 64 69 73 70 6c 61 79 5f 6e 61 6d 65 2c 6c 3d 65 2e 6e 2c 75 3d 65 2e 71 75 61 6c 69 66 69 65 64 4e 61 6d 65 2c 63 3d 65 2e 73 74 61 74 65 63 6f 64 65 2c 64 3d 65 2e 77 6f 65 69 64 2c 70 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 6d 3d 64 Data Ascii: !==l){var u=parseInt(l,10);o[u]=e[l]}return o.forEach(function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},t=e.city,a=e.country,i=e.display_name,o=e.full_display_name,l=e.n,u=e.qualifiedName,c=e.statecode,d=e.woeid,p=arguments[1],m=d
2024-03-29 00:41:34 UTC	1300	IN	Data Raw: 7c 7c 7b 7d 2c 76 3d 66 2e 65 78 63 68 61 6e 67 65 2c 68 3d 66 2e 73 79 6d 62 6f 6c 3b 69 66 28 68 2e 73 75 62 73 74 72 28 30 2c 69 2e 6c 65 6e 67 74 68 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3d 3d 3d 69 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 30 29 2c 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 6f 70 74 69 6f 6e 22 29 2c 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 22 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 72 65 73 75 6c 74 2d 22 2b 6c 2b 22 2d 22 2b 6d 29 3b 76 61 72 20 67 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 Data Ascii: \|\|{},v=f.exchange,h=f.symbol;if(h.substr(0,i.length).toUpperCase()===i.toUpperCase()){var b=document.createElement("li");b.setAttribute("tabindex",0),b.setAttribute("role","option"),b.setAttribute("id","wf-autocomplete-result-"+l+"-"+m);var g=document.cre
2024-03-29 00:41:34 UTC	1300	IN	Data Raw: 76 6f 69 64 20 30 3d 3d 3d 74 3f 7b 7d 3a 74 2c 73 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 69 3d 72 2c 6e 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 6f 3d 6e 2e 69 64 49 6e 64 65 78 2c 6c 3d 6e 2e 6c 69 73 74 45 6c 65 6d 2c 75 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 2c 63 3d 30 3b 63 3c 69 2e 6c 65 6e 67 74 68 26 26 63 3c 35 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 69 5b 63 5d 2c 70 3d 64 2e 74 69 74 6c 65 2c 6d 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 29 3b 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 30 29 2c 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 6f 70 74 69 6f 6e 22 29 2c 6d 2e 73 65 74 41 74 74 Data Ascii: void 0===t?{}:t,s=arguments[1],i=r,n=this._util,o=n.idIndex,l=n.listElem,u=document.createDocumentFragment(),c=0;c<i.length&&c<5;c++){var d=i[c],p=d.title,m=document.createElement("li");m.setAttribute("tabindex",0),m.setAttribute("role","option"),m.setAtt
2024-03-29 00:41:34 UTC	1300	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 72 6f 6e 67 3e 22 2b 75 2e 6b 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 29 2b 22 3c 2f 73 74 72 6f 6e 67 3e 22 2b 75 2e 6b 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 29 2b 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 2c 63 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 69 74 65 6d 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 22 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 72 65 73 75 6c 74 2d 22 2b 69 2b 22 2d 22 2b 6c 29 2c 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 7d 7d 72 65 74 75 72 6e 20 6e 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f Data Ascii: <strong>"+u.k.substr(0,a.length)+"</strong>"+u.k.substr(a.length)+"\n ",c.classList.add("wafer-autocomplete-item"),c.setAttribute("id","wf-autocomplete-result-"+i+"-"+l),o.appendChild(c)}}return n.innerHTML="",n.appendChild(o
2024-03-29 00:41:34 UTC	1300	IN	Data Raw: 74 61 2d 76 61 6c 75 65 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 69 64 3a 67 2c 61 63 74 69 6f 6e 3a 22 66 6f 6c 6c 6f 77 65 64 22 3d 3d 3d 4c 3f 22 52 45 4d 4f 56 45 22 3a 22 41 44 44 45 44 22 7d 29 29 2c 79 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 79 6c 6b 22 2c 22 63 69 64 3a 22 2b 67 2b 22 3b 73 6c 6b 3a 22 2b 76 29 2c 79 2e 69 6e 6e 65 72 48 54 4d 4c 3d 69 2e 72 65 70 6c 61 63 65 28 22 54 45 41 4d 5f 4c 45 41 47 55 45 5f 50 4c 41 43 45 48 4f 4c 44 45 52 22 2c 68 29 2e 72 65 70 6c 61 63 65 28 22 54 45 41 4d 5f 4c 4f 47 4f 5f 55 52 4c 5f 50 4c 41 43 45 48 4f 4c 44 45 52 22 2c 62 2e 75 72 6c 29 2e 72 65 70 6c 61 63 65 28 22 54 45 41 4d 5f 4e 41 4d 45 5f 50 4c 41 43 45 48 4f 4c 44 45 52 22 2c 76 29 2c 6c 2e 61 70 70 65 6e Data Ascii: ta-value",JSON.stringify({id:g,action:"followed"===L?"REMOVE":"ADDED"})),y.setAttribute("data-ylk","cid:"+g+";slk:"+v),y.innerHTML=i.replace("TEAM_LEAGUE_PLACEHOLDER",h).replace("TEAM_LOGO_URL_PLACEHOLDER",b.url).replace("TEAM_NAME_PLACEHOLDER",v),l.appen
2024-03-29 00:41:34 UTC	460	IN	Data Raw: 2c 65 2e 71 75 61 6c 69 66 69 65 64 4e 61 6d 65 3d 68 2c 76 2b 3d 22 22 2c 66 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 69 74 65 6d 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 30 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 6f 70 74 69 6f 6e 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 22 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 72 65 73 75 6c 74 2d 22 2b 69 2b 22 2d 22 2b 74 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 76 61 6c 75 65 22 2c 76 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6d 65 74 61 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 Data Ascii: ,e.qualifiedName=h,v+="",f.classList.add("wafer-autocomplete-item"),f.setAttribute("tabindex",0),f.setAttribute("role","option"),f.setAttribute("id","wf-autocomplete-result-"+i+"-"+t),f.setAttribute("data-value",v),f.setAttribute("data-meta",JSON.stringif

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50007	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	1293	OUT	GET /_td_api/beacon/info?event=activate&spaceId=1197802003&version=1.1.52&scope=https://www.yahoo.com/&subscription_endpoint=null&metadataTime=3&src=notification-sw&code=info HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/service-worker.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; YHB__li_dcdm_c=.com; YHB__lc2_fpi=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q; YHB__lc2_fpi_meta=%7B%22w%22%3A1711672890010%7D; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:34 UTC	1138	IN	HTTP/1.1 204 No Content referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-type: image/gif content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Fri, 29 Mar 2024 00:41:33 GMT x-envoy-upstream-service-time: 3 server: ATS Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=7v8dvqpj0c3ht&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50008	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	1453	OUT	POST /_td_api/beacon/info?beaconSrc=HomepagePWA&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&eventName=svcWkrRegSuccess&rid=2vl5n89j0c3hk HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; YHB__li_dcdm_c=.com; YHB__lc2_fpi=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q; YHB__lc2_fpi_meta=%7B%22w%22%3A1711672890010%7D; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:34 UTC	1113	IN	HTTP/1.1 204 No Content referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Fri, 29 Mar 2024 00:41:34 GMT x-envoy-upstream-service-time: 1 server: ATS Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=2mquiklj0c3hu&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50004	3.225.218.10	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	1352	OUT	GET /cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=214820604836000487369&gdpr=&gdpr_consent= HTTP/1.1 Host: cms.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0"
2024-03-29 00:41:34 UTC	355	IN	HTTP/1.1 302 Redirect Date: Fri, 29 Mar 2024 00:41:34 GMT Connection: close Server: ATS/9.1.10.106 Cache-Control: no-store Location: https://ups.analytics.yahoo.com/ups/58692/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=214820604836000487369&gdpr=&gdpr_consent= Content-Type: text/html Content-Language: en Content-Length: 427
2024-03-29 00:41:34 UTC	427	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 77 68 69 74 65 22 20 46 47 43 4f 4c 4f 52 3d 22 62 6c 61 63 6b 22 3e 0a 3c 48 31 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 22 3e 3c 42 3e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 2e 20 20 54 68 65 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 20 69 73 20 22 68 Data Ascii: <HTML><HEAD><TITLE>Document Has Moved</TITLE></HEAD><BODY BGCOLOR="white" FGCOLOR="black"><H1>Document Has Moved</H1><HR><FONT FACE="Helvetica,Arial"><B>Description: The document you requested has moved to a new location. The new location is "h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50009	50.57.31.206	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	678	OUT	GET /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-IH9AJJtE2oPnY32nwExO7SVPiRrzp2zgABI-~A&sInitiator=external HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=1388D61F0DA77E06
2024-03-29 00:41:34 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 1 Set-Cookie: SEUNCY=1388D61F0DA77E06; Expires=Sat, 29 Mar 2025 00:41:34 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:34 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2024-03-29 00:41:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50010	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:33 UTC	1453	OUT	POST /_td_api/beacon/info?beaconSrc=HomepagePWA&bucket=drop_heimdall_homepage_control_bucket,MimicProviderListv2-copy,seamless&eventName=svcWkrRegSuccess&rid=2vl5n89j0c3hk HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; YHB__li_dcdm_c=.com; YHB__lc2_fpi=5fb552a76ef3--01ht3tf4mtfbyykn4bgdbez75q; YHB__lc2_fpi_meta=%7B%22w%22%3A1711672890010%7D; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:34 UTC	1113	IN	HTTP/1.1 204 No Content referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Fri, 29 Mar 2024 00:41:34 GMT x-envoy-upstream-service-time: 1 server: ATS Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=4r6fqudj0c3hu&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50014	34.200.65.202	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	1362	OUT	GET /ups/58692/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=214820604836000487369&gdpr=&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0"
2024-03-29 00:41:34 UTC	463	IN	HTTP/1.1 204 No Content Date: Fri, 29 Mar 2024 00:41:34 GMT Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 29-Mar-2025 00:41:34 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Connection: close Server: ATS/9.1.10.106

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50011	52.46.151.131	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	800	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=6D366468-71AF-422B-99AB-138A6DAB94F7&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:34 UTC	815	IN	HTTP/1.1 302 Found Server: Server Date: Fri, 29 Mar 2024 00:41:34 GMT Content-Length: 0 Connection: close x-amz-rid: KQ33Y7K7Y1BQDSZH526Q Set-Cookie: ad-id=A4eCPhvW4k2tpPNlaxpmTNk\|t; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 00:41:34 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=6D366468-71AF-422B-99AB-138A6DAB94F7&redir=true&gdpr=0&gdpr_consent=&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50012	68.67.160.117	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	812	OUT	GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:34 UTC	1573	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Fri, 29 Mar 2024 00:41:34 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA%3D%26piggybackCookie%3D%24UID%26gdpr%3D0%26gdpr_consent%3D AN-X-Request-Uuid: 80eca842-48c4-4514-a333-4f591735a6a2 Set-Cookie: XANDR_PANID=2ccsNGEvAK9h7vfNtGzRn_RRJT1AKee7bavoyH5tTpwT8YKtjWbVywIp2RP2fX6jtSW9r53_YxvyCl05OXRTNa1CDvDDO0-m4dgQWHQJv2A.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 27-Jun-2024 00:41:34 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 17-Mar-2034 00:41:34 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=5866711843062603349; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 27-Jun-2024 00:41:34 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.43; 102.165.48.43; 676.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50013	54.156.236.4	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	716	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:34 UTC	388	IN	HTTP/1.1 303 See Other Date: Fri, 29 Mar 2024 00:41:34 GMT location: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Fri, 29 Mar 2024 00:51:34 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50016	34.111.113.62	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	663	OUT	GET /idsync/ex/receive?partner_id=3371&partner_device_id=6D366468-71AF-422B-99AB-138A6DAB94F7 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:34 UTC	1087	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:34 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711672894631;Expires=Tue, 28 May 2024 00:41:34 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069;Expires=Tue, 28 May 2024 00:41:34 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=3371&partner_device_id=6D366468-71AF-422B-99AB-138A6DAB94F7 Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50025	3.225.218.10	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	1183	OUT	GET /ups/58292/sync?_origin=1&uid=6D366468-71AF-422B-99AB-138A6DAB94F7&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0"
2024-03-29 00:41:34 UTC	833	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:34 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0:18z8~2hk0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 29-Mar-2025 00:41:34 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://image4.pubmatic.com/AdServer/SPug?partnerID=156078&xid=y-edejGYFE2uVsfbouHZuc9q9b5ME1.tw-~A&gdpr=0 Age: 0 Connection: close Server: ATS/9.1.10.106 Set-Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; Expires=Sat, 29 Mar 2025 06:41:34 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50020	35.71.139.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	661	OUT	GET /xuid?mid=7976&xuid=6D366468-71AF-422B-99AB-138A6DAB94F7&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:34 UTC	701	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:34 GMT Content-Length: 0 Connection: close Location: /xuid?ld=1&mid=7976&xuid=6D366468-71AF-422B-99AB-138A6DAB94F7&dongle=u6nf&gdpr=0&cmp_cs=&us_privacy= Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=1910044241478282443237; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 27 Jun 2024 00:41:34 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=1910044241478282443237; Max-Age=7776000; Expires=Thu, 27 Jun 2024 00:41:34 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50024	52.223.40.198	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	641	OUT	GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:34 UTC	501	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:34 GMT Content-Length: 211 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= set-cookie: TDID=de959f04-5668-4cc4-9c45-9e4a8efcd9a8; expires=Sat, 29 Mar 2025 00:41:34 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsIpoXb9vbk5zwQBTgB; expires=Sat, 29 Mar 2025 00:41:34 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-29 00:41:34 UTC	211	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 70 75 62 6d 61 74 69 63 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 70 75 62 6d 61 74 69 63 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=">https://match.adsrvr.org/track/cmb/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50026	172.64.151.101	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	958	OUT	GET /usermatch?s=183875&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Didx%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26axid_e%3D%26ovsid%3D_UID_ HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-03-29 00:41:34 UTC	1347	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:34 GMT Content-Length: 0 Connection: close Location: /usermatch?cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fgpp%3DDBAA%26gpp_sid%3D-1%26cs%3D1%26vsid%3D3546744890180387000V10%26type%3Didx%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26axid_e%3D%26ovsid%3D_UID_&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&s=183875&C=1 CF-Ray: 86bbd0a81e705b58-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:34 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:34 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:34 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5VxGpoR%2F71JBVOgutqVNbfaBUQQBHVR59lx3mTNVwKykJyumn%2F889i3wcKlZebC1pY4i%2B0BVOarZxu0t%2BAj1JV81CNuyZv1Er2mySvVxsgmBYxoQWyfh3RaCG99Dt2HzgAHCQ8VdNtz4iQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-29 00:41:34 UTC	32	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50039	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	371	OUT	GET /cv/apiv2/weather-svg/MOSTLY_SUNNY.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:34 UTC	817	IN	HTTP/1.1 200 OK x-amz-id-2: IaHdx0G//1xNXZPC5LD8IMpos6ocdke0BW5wUrsWnlK4RoVjUzFbLkVFU+J+BAsgxEUM4XyVrMg= x-amz-request-id: 9SHTW0J157NG5FE0 Date: Mon, 18 Mar 2024 15:14:02 GMT Last-Modified: Fri, 13 Nov 2020 21:27:14 GMT ETag: "03c10f2c4e36a75805f7735d1f07c98c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1650 Referrer-Policy: no-referrer-when-downgrade Age: 898053 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-29 00:41:34 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 2d 33 36 2e 33 39 36 25 22 20 79 31 3d 22 33 32 2e 38 35 34 25 22 20 78 32 3d 22 33 33 2e 33 39 36 25 22 20 79 32 3d 22 31 33 33 2e 33 31 33 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 46 35 42 32 22 20 6f 66 66 73 65 74 3d 22 2e 30 31 33 25 22 2f 3e 0a 20 20 20 20 20 20 3c Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="-36.396%" y1="32.854%" x2="33.396%" y2="133.313%" id="a"> <stop stop-color="#FFF5B2" offset=".013%"/> <
2024-03-29 00:41:34 UTC	350	IN	Data Raw: 35 39 20 31 38 20 31 38 20 31 38 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 61 29 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 34 20 34 32 63 36 2e 33 31 20 30 20 31 31 2e 38 36 32 2d 33 2e 32 34 37 20 31 35 2e 30 37 35 2d 38 2e 31 36 31 20 30 20 30 2d 39 2e 30 39 2d 33 2e 37 33 33 2d 31 37 2e 36 38 38 2d 37 2e 34 37 31 43 31 37 2e 31 30 33 20 33 32 2e 31 30 39 20 31 34 2e 30 35 39 20 34 32 20 32 34 20 34 32 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 62 29 22 20 6f 70 61 63 69 74 79 3d 22 2e 36 38 37 22 2f 3e 0a 20 20 20 20 3c 75 73 65 20 66 69 6c 6c 3d 22 75 72 6c 28 23 63 29 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 64 22 2f 3e 0a 20 20 20 20 3c 75 73 65 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 3d 22 2e 30 35 22 20 66 69 6c 6c 3d 22 23 37 44 Data Ascii: 59 18 18 18z" fill="url(#a)"/> <path d="M24 42c6.31 0 11.862-3.247 15.075-8.161 0 0-9.09-3.733-17.688-7.471C17.103 32.109 14.059 42 24 42z" fill="url(#b)" opacity=".687"/> <use fill="url(#c)" xlink:href="#d"/> <use fill-opacity=".05" fill="#7D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50030	52.223.40.198	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	665	OUT	GET /track/cmf/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&US_PRIVACY=1YNN HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:34 UTC	529	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:34 GMT Content-Length: 267 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&US_PRIVACY=1YNN set-cookie: TDID=07fcc24c-9275-471b-97a4-9134b8a683be; expires=Sat, 29 Mar 2025 00:41:34 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsI4Nae9_bk5zwQBTgB; expires=Sat, 29 Mar 2025 00:41:34 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-29 00:41:34 UTC	267	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 72 69 67 68 74 6d 65 64 69 61 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 26 55 53 5f 50 52 49 56 41 43 59 3d 31 59 4e 4e 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 72 69 67 68 74 6d 65 64 69 61 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 26 55 53 5f 50 52 49 56 Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&US_PRIVACY=1YNN">https://match.adsrvr.org/track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&US_PRIV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50038	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	376	OUT	GET /cv/apiv2/weather-svg/PARTLY_CLOUDY_DAY.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:34 UTC	817	IN	HTTP/1.1 200 OK x-amz-id-2: PVzboTxGIEtMWJWiaatRBA+Xe3sQhHPKztkIPErouYQKWYepkDt78oM88FL/oM61K+9Cw9uu598= x-amz-request-id: DC8HTVGP3YAAQ72J Date: Sat, 23 Mar 2024 16:03:15 GMT Last-Modified: Fri, 13 Nov 2020 21:27:14 GMT ETag: "93dc53d369dca8f09877c3ecc9a41de3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1695 Referrer-Policy: no-referrer-when-downgrade Age: 463100 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-29 00:41:34 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 2d 33 36 2e 33 39 36 25 22 20 79 31 3d 22 33 32 2e 38 35 34 25 22 20 78 32 3d 22 33 33 2e 33 39 36 25 22 20 79 32 3d 22 31 33 33 2e 33 31 33 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 46 35 42 32 22 20 6f 66 66 73 65 74 3d 22 2e 30 31 33 25 22 2f 3e 0a 20 20 20 20 20 20 3c Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="-36.396%" y1="32.854%" x2="33.396%" y2="133.313%" id="a"> <stop stop-color="#FFF5B2" offset=".013%"/> <
2024-03-29 00:41:34 UTC	395	IN	Data Raw: 36 29 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 34 2e 37 36 37 20 31 30 2e 34 37 36 4c 2e 38 36 36 20 32 33 2e 35 33 43 33 2e 31 39 39 20 33 30 2e 37 36 36 20 39 2e 39 38 38 20 33 36 20 31 38 20 33 36 63 39 2e 39 34 31 20 30 20 31 38 2d 38 2e 30 35 39 20 31 38 2d 31 38 6c 2d 31 31 2e 32 33 33 2d 37 2e 35 32 34 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 62 29 22 20 6f 70 61 63 69 74 79 3d 22 2e 37 37 33 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 36 20 36 29 22 2f 3e 0a 20 20 20 20 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 36 20 36 29 22 3e 0a 20 20 20 20 20 20 3c 75 73 65 20 66 69 6c 6c 3d 22 75 72 6c 28 23 63 29 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 64 22 2f 3e 0a 20 20 20 20 20 Data Ascii: 6)"/> <path d="M24.767 10.476L.866 23.53C3.199 30.766 9.988 36 18 36c9.941 0 18-8.059 18-18l-11.233-7.524z" fill="url(#b)" opacity=".773" transform="translate(6 6)"/> <g transform="translate(6 6)"> <use fill="url(#c)" xlink:href="#d"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50028	68.67.160.117	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	1041	OUT	GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA%3D%26piggybackCookie%3D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=2ccsNGEvAK9h7vfNtGzRn_RRJT1AKee7bavoyH5tTpwT8YKtjWbVywIp2RP2fX6jtSW9r53_YxvyCl05OXRTNa1CDvDDO0-m4dgQWHQJv2A.; receive-cookie-deprecation=1; uuid2=5866711843062603349
2024-03-29 00:41:34 UTC	1512	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 29 Mar 2024 00:41:34 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=5866711843062603349&gdpr=0&gdpr_consent= AN-X-Request-Uuid: ab42cdcd-ce26-47a9-a570-882839498043 Set-Cookie: XANDR_PANID=2ccsNGEvAK9h7vfNtGzRn_RRJT1AKee7bavoyH5tTpwT8YKtjWbVywIp2RP2fX6jtSW9r53_YxvyCl05OXRTNa1CDvDDO0-m4dgQWHQJv2A.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 27-Jun-2024 00:41:34 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 17-Mar-2034 00:41:34 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=5866711843062603349; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 27-Jun-2024 00:41:34 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.43; 102.165.48.43; 676.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50044	54.156.236.4	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	758	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-03-29 00:41:34 UTC	795	IN	HTTP/1.1 303 See Other Date: Fri, 29 Mar 2024 00:41:34 GMT location: https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFGSkJrN01EQndBQUJTbGlaZGt1Zw&gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Cpp%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Server: gunicorn set-cookie: bito=AAFJBk7MDBwAABSliZdkug; Domain=bidr.io; expires=Sun, 27 Apr 2025 20:41:34 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Sun, 27 Apr 2025 20:41:34 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50041	108.139.47.92	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	645	OUT	GET /p2?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1711672891922 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=10A5517d307ba86b59849b41711672893
2024-03-29 00:41:34 UTC	363	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Fri, 29 Mar 2024 00:41:34 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 694c2ab22098fd212b8d6808ee6c5aaa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 X-Amz-Cf-Id: wj6guHPTAHpTCvyDcuORjRaBco8NXlEfpV_EtCLHeWZzjrmPf1x1TA==
2024-03-29 00:41:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50029	35.71.139.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	793	OUT	GET /getuid?gdpr=0&cmp_cs=&gpp_sid=-1&gpp=DBAA&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dtlt%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:34 UTC	823	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:34 GMT Content-Length: 0 Connection: close Location: /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dtlt%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26ovsid%3D%24UID%26axid_e%3D Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=2655740461122826734561; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 27 Jun 2024 00:41:34 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=2655740461122826734561; Max-Age=7776000; Expires=Thu, 27 Jun 2024 00:41:34 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50023	44.195.186.221	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	1053	OUT	GET /sync/pubmatic/6D366468-71AF-422B-99AB-138A6DAB94F7?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:34 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:34 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; Expires=Sat, 29 Mar 2025 06:41:34 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-29 00:41:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50021	40.76.134.238	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	832	OUT	GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%206D366468-71AF-422B-99AB-138A6DAB94F7&rnd=RND HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:34 UTC	176	IN	HTTP/1.1 403 Forbidden Server: Microsoft-Azure-Application-Gateway/v2 Date: Fri, 29 Mar 2024 00:41:34 GMT Content-Type: text/html Content-Length: 581 Connection: close
2024-03-29 00:41:34 UTC	581	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 4d 69 63 72 6f 73 6f 66 74 2d 41 7a 75 72 65 2d 41 70 70 6c 69 63 61 74 69 6f 6e 2d 47 61 74 65 77 61 79 2f 76 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>Microsoft-Azure-Application-Gateway/v2</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50031	35.244.159.8	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	831	OUT	GET /w/1.0/cm?id=9e0a35ea-c8e3-4b1b-9efa-4af6f54a373e&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&r=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dopx%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26axid_e%3D%26ovsid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:34 UTC	708	IN	HTTP/1.1 302 Found Set-Cookie: i=acaeb6da-c35c-4846-acd5-3bb6b6a37bb8\|1711672894; Version=1; Expires=Sat, 29-Mar-2025 00:41:34 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://us-u.openx.net/w/1.0/cm?cc=1&id=9e0a35ea-c8e3-4b1b-9efa-4af6f54a373e&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&r=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dopx%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26axid_e%3D%26ovsid%3D Date: Fri, 29 Mar 2024 00:41:34 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50040	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	387	OUT	GET /cv/apiv2/yahoo_weather_web/accuweather-horizontal.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:34 UTC	814	IN	HTTP/1.1 200 OK x-amz-id-2: bfNopBhzBk5vSoXYN6HVxy1OhqRL3ioWtgbmYpKf/dTr143wtfVlNSEr4zmV3D8ao+TScqvoHhg= x-amz-request-id: XE7WZN1S06GSHHFE Date: Sat, 09 Mar 2024 15:40:56 GMT Last-Modified: Thu, 08 Sep 2022 20:32:20 GMT ETag: "d0e45188f6a8f2e8f2528e762fe55d33" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 2331 Referrer-Policy: no-referrer-when-downgrade Age: 1674039 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-29 00:41:34 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 22 08 03 00 00 00 56 7d a4 84 00 00 00 7b 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bd 78 1c b0 00 00 00 28 74 52 4e 53 00 05 fa f5 21 0d 6b 36 c0 13 e0 4c b1 b6 e8 d7 1b 7f 85 ac 29 c5 8c 2e a7 92 59 a1 d0 44 ca ec 9b 71 3e ba 77 64 53 5f 87 5f b6 44 00 00 08 27 49 44 41 54 68 de e5 59 e9 ba 9a 30 10 4d 80 b0 c8 a2 08 2e b8 a1 e2 92 f7 7f c2 9e 99 21 88 Data Ascii: PNGIHDR"V}{PLTEx(tRNS!k6L).YDq>wdS__D'IDAThY0M.!
2024-03-29 00:41:34 UTC	1031	IN	Data Raw: d7 f0 ae 4a 35 6c 3b 21 62 45 22 6a a2 e5 52 40 35 1a 72 d3 2f 80 21 32 68 51 79 86 88 be 38 65 36 12 d3 86 d5 5b 3c aa f8 eb fd 5f bf 05 2c 8d 69 8e a7 cc c0 6f 80 5f 20 e9 12 f1 dd e1 1e 12 dd 7b 87 6a a0 da 94 cd f1 d8 4c df 02 7e b4 01 9a 0f e5 b2 50 89 8c 2b 01 be 0b e0 ad 2c c2 33 85 5c d2 ec 15 70 48 41 b2 54 03 1d 48 4f ca 9c b3 cf 62 cc 18 1f 17 b1 57 c6 3b c0 5a b3 9d 3a 18 9f 8d ae 4a 72 48 4d 4a e2 a5 19 db dd f7 f9 12 1b 54 03 cf fb 0e e0 c5 48 86 e7 81 e5 be 97 08 71 67 3b 80 f7 da 96 fc e0 d1 96 b8 22 73 de 0b 61 94 a9 57 87 7e 65 bc 07 cc b9 31 49 3d 4f a4 47 58 b1 28 39 1a 0d 03 1e 53 46 c5 c0 fe 14 b0 50 29 80 4b 59 24 65 dc 9e 25 e5 07 92 68 3a d8 7c 7c e5 f6 dc 0a 82 ec cf d4 cf 3c cc b1 62 7d d4 68 ba 49 4a ea f9 05 38 01 03 46 b2 75 Data Ascii: J5l;!bE"jR@5r/!2hQy8e6[<_,io_ {jL~P+,3\pHATHObW;Z:JrHMJTHqg;"saW~e1I=OGX(9SFP)KY$e%h:\|\|<b}hIJ8Fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50033	69.166.1.34	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	800	OUT	GET /us?gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&loc=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dson%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26ovsid%3D%5BUID%5D%26axid_e%3D HTTP/1.1 Host: sync.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:34 UTC	850	IN	HTTP/1.1 302 Found date: Fri, 29 Mar 2024 00:41:34 GMT content-type: text/plain; charset=utf8 content-length: 0 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-6-22 x-xss-protection: 0 location: https://hb.yahoo.net/cksync.php?cs=1&vsid=3546744890180387000V10&type=son&refUrl=&vid=16728938013546744890180387000V10&ovsid=d8bfd039-9f04-449c-875f-e04a2484e308&axid_e= set-cookie: __uis=d8bfd039-9f04-449c-875f-e04a2484e308; expires=Sun, 28 Apr 2024 00:41:34 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s8622\|ZgYOQ; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50032	52.20.213.72	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	715	OUT	GET /pixel?a=0&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dsov%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:34 UTC	619	IN	HTTP/1.1 307 Temporary Redirect Date: Fri, 29 Mar 2024 00:41:34 GMT Content-Length: 0 Connection: close Location: https://ap.lijit.com/pixel?a=0&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dsov%26ovsid%3D%24UID%26axid_e%3D&sovrn_retry=true Set-Cookie: ljt_reader=IZjJALZHIXjbUV1jQgKNiPaF;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50022	35.236.220.17	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	723	OUT	GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:34 UTC	961	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 29 Mar 2024 00:41:34 GMT Content-Type: text/html Content-Length: 142 Connection: close Set-Cookie: suid=45E09433ABCF443988615F414991A294; Path=/; domain=simpli.fi; Expires=Sun, 30-Mar-25 00:41:34 GMT; SameSite=none; Secure; Set-Cookie: suid_legacy=45E09433ABCF443988615F414991A294; Path=/; domain=simpli.fi; Expires=Sun, 30-Mar-25 00:41:34 GMT; Secure; Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:45E09433ABCF443988615F414991A294 Expires: Thu, 28 Mar 2024 00:41:34 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-03-29 00:41:34 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50048	50.57.31.206	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	478	OUT	GET /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-IH9AJJtE2oPnY32nwExO7SVPiRrzp2zgABI-~A&sInitiator=external HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=1388D61F0DA77E06
2024-03-29 00:41:35 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 1 Set-Cookie: SEUNCY=1388D61F0DA77E06; Expires=Sat, 29 Mar 2025 00:41:34 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:34 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2024-03-29 00:41:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50037	23.222.200.28	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	713	OUT	GET /cksync?cs=3&type=yhb&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dmn%26ovsid%3D%3Cvsid1%3E%26axid_e%3D HTTP/1.1 Host: cs.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:35 UTC	668	IN	HTTP/1.1 302 Moved Temporarily Server: Apache Content-Length: 154 Content-Type: text/html Location: https://hb.yahoo.net/cksync.php?cs=1&type=mn&ovsid=3546744950180300000V10&axid_e= Set-Cookie: visitor-id=3546744950180300000V10; Expires=Sat, 29 Mar 2025 00:41:35 GMT; domain=.media.net; Path=/; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:35 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:35 GMT Connection: close
2024-03-29 00:41:35 UTC	154	IN	Data Raw: 3c 48 54 4d 4c 3e 0d 0a 3c 48 45 41 44 3e 0d 0a 3c 54 49 54 4c 45 3e 45 72 72 6f 72 20 50 61 67 65 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 0d 0a 41 6e 20 65 72 72 6f 72 20 28 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 29 20 68 61 73 20 6f 63 63 75 72 72 65 64 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 68 69 73 20 72 65 71 75 65 73 74 2e 0d 0a 3c 2f 42 4f 44 59 3e 0d 0a 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><TITLE>Error Page</TITLE></HEAD><BODY>An error (302 Moved Temporarily) has occurred in response to this request.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50043	52.46.151.131	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	847	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=6D366468-71AF-422B-99AB-138A6DAB94F7&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4eCPhvW4k2tpPNlaxpmTNk\|t
2024-03-29 00:41:35 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 29 Mar 2024 00:41:35 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: ZSGC3MRNMHZSARN2HFWP Set-Cookie: ad-id=A4eCPhvW4k2tpPNlaxpmTNk; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 00:41:35 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 00:41:35 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-29 00:41:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50047	3.214.164.33	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	473	OUT	GET /demconf.jpg?et:ibs%7cdata:dpid=30646 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=18302510874207377964223395608090049346; dpm=18302510874207377964223395608090049346
2024-03-29 00:41:35 UTC	903	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:35 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: t0S+wtB6Qf4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Error: 300 X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v057-014971108.edge-va6.demdex.com 0 ms set-cookie: dpm=18302510874207377964223395608090049346; Max-Age=15552000; Expires=Wed, 25 Sep 2024 00:41:35 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=18302510874207377964223395608090049346; Max-Age=15552000; Expires=Wed, 25 Sep 2024 00:41:35 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-29 00:41:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50045	68.67.160.117	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	665	OUT	GET /getuid?https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dapx%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:35 UTC	1529	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Fri, 29 Mar 2024 00:41:35 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fhb.yahoo.net%252Fcksync.php%253Fcs%253D1%2526type%253Dapx%2526ovsid%253D%2524UID%2526axid_e%253D AN-X-Request-Uuid: 1636648c-3864-4ba5-8784-2423a08da2d5 Set-Cookie: XANDR_PANID=JdhWkazzA7-l-SJBnb9vWXLWZRZHRTHbCkah-EW3O2ECAhxSYsqS4OFO_2Ig6DeQZPtzrEcTco9BU0aHgalK869BAW6WsG83Dwoyx1UwJrs.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 27-Jun-2024 00:41:35 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 17-Mar-2034 00:41:35 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=5423405387794830934; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 27-Jun-2024 00:41:35 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.43; 102.165.48.43; 676.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50046	34.95.69.49	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:34 UTC	336	OUT	GET /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:35 UTC	230	IN	HTTP/1.1 200 OK Server: nginx/1.21.6 Date: Fri, 29 Mar 2024 00:41:35 GMT Content-Type: application/octet-stream Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50050	34.111.113.62	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:35 UTC	749	OUT	GET /idsync/ex/receive/check?partner_id=3371&partner_device_id=6D366468-71AF-422B-99AB-138A6DAB94F7 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1711672894631; TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069
2024-03-29 00:41:35 UTC	1227	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:35 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711672894631;Expires=Tue, 28 May 2024 00:41:35 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069;Expires=Tue, 28 May 2024 00:41:35 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Tue, 28 May 2024 00:41:35 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=55bb0499-3b94-4610-88d6-811dcbabb069%252C%252C&gdpr=0&gdpr_consent= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50053	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:35 UTC	378	OUT	GET /pv/games/images/JustWords_Spring_600x400.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:35 UTC	831	IN	HTTP/1.1 200 OK x-amz-id-2: ox1BXoUMJMNZvM5O98byPWZi51U14Z4PTHSACcycHaj0TdhhaBnXeSc6/7AHTIonuMynyRbxSiA= x-amz-request-id: M1H4WWKMRP968FQ2 Date: Mon, 25 Mar 2024 23:25:52 GMT Last-Modified: Wed, 13 Mar 2024 16:46:31 GMT ETag: "281da85394835ffd5d30df3f6ba6a474" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public Expires: Mon, 13 Mar 2034 16:46:27 GMT Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 399168 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 263744 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:35 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 01 90 08 02 00 00 00 fd 57 89 cf 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 76 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 61 38 64 34 37 35 33 34 39 2c 20 32 30 32 33 2f 30 33 2f 32 33 2d 31 33 3a 30 35 3a 34 Data Ascii: PNGIHDRXWtEXtSoftwareAdobe ImageReadyqe<viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:4
2024-03-29 00:41:35 UTC	1300	IN	Data Raw: 39 21 d2 d8 ee c2 b8 62 3f 71 09 65 86 48 4a fc f2 4a ea c2 95 14 06 13 ef 99 c1 f5 b6 d9 f0 a2 c0 36 e3 eb c6 de 1f 6e c2 71 f9 e1 05 f6 e6 f6 89 b6 6f 70 cd bc 31 0a 1f 54 b4 10 af 83 b7 72 db 1e 81 5d c0 5f 13 7b 2b bc 2d 25 15 7b 7d 71 43 6e ff ce d7 09 fc 90 da ef 78 73 fb 14 df fe 0a 7f 1d ec 82 09 6d d7 cc c2 5e a0 b6 c1 b8 32 b4 9c 46 c9 a9 d2 21 a3 43 87 8a 4c 76 07 e1 b7 26 79 36 1c 76 6b 34 5e ae b1 49 3f 78 f1 da 7f 72 1a 7d 6f 3c 51 6d ff 73 8c d5 8c 4a 72 93 6a a3 71 bb 69 65 a7 57 52 3b 76 5a c1 5a 56 0a de 52 5a e5 12 d6 b5 54 46 c2 68 19 0a c3 09 ef c3 6c 69 8d d7 e1 7c e2 84 9b 3c 97 b9 6d 35 a5 38 cf d0 46 66 5b 07 ef 44 ea 34 35 49 9e 85 6f dd 3d f5 a9 fb e2 f5 e0 ca 76 2d 9e b8 df 78 23 bc b2 d1 0a da e2 d1 bd 51 a3 e6 30 df ed 9f ea Data Ascii: 9!b?qeHJJ6nqop1Tr]_{+-%{}qCnxsm^2F!CLv&y6vk4^I?xr}o<QmsJrjqieWR;vZZVRZTFhli\|<m58Ff[D45Io=v-x#Q0
2024-03-29 00:41:35 UTC	1300	IN	Data Raw: bf 5d b9 ba 55 1d 4f 9d fb 27 30 80 dc 73 84 e0 ae 06 09 6d 17 99 10 d0 5d c0 23 1c 6b 50 fb b8 1e 0a 7a 4a 05 28 9d 22 f0 d2 87 bb 7b 37 3f e8 32 16 b4 60 b1 90 7c 18 b9 87 27 79 23 70 41 3f 0c 13 0d ff 33 9e 6c 2c c3 70 79 a3 89 89 23 25 5c b8 09 53 80 58 a0 1e 28 0a 12 22 4a 51 e8 6d ae ba e1 54 9e 1c e1 90 88 26 e1 0e cc 2b d3 a8 e0 d3 38 35 a3 71 ce 39 01 60 13 2e 45 25 4f 11 1f 04 40 ae 40 71 80 56 c9 94 36 1b dc d1 79 98 99 38 cb 65 96 07 2d 35 4d 55 7f a4 a5 c2 89 0f a4 aa bb a4 16 e8 d1 04 f4 26 1a 67 ca 71 49 10 d0 7a 15 04 ab 96 19 85 b9 80 a5 2f 95 f6 7c ae e0 c1 a0 22 75 75 1e 1b bf c2 ea 6d 36 3c d1 30 7f 9c 11 19 b3 2c d6 d3 91 f1 ea 2c 8f 50 8b db ba e4 03 e4 8c 72 dd 3f 49 41 96 5c bf dc cc 42 72 d8 05 00 37 b0 b2 a0 83 32 e7 07 43 13 e9 Data Ascii: ]UO'0sm]#kPzJ("{7?2`\|'y#pA?3l,py#%\SX("JQmT&+85q9`.E%O@@qV6y8e-5MU&gqIz/\|"uum6<0,,Pr?IA\Br72C
2024-03-29 00:41:35 UTC	1300	IN	Data Raw: e7 c0 b8 24 5d df 71 40 8d 3d 3d c9 8f 7b d4 0b d4 f3 d7 bd 83 27 d3 af ff 9b ae c3 d5 87 b7 07 32 27 ed 8e 73 f7 d1 94 4a 16 8d c8 d6 b6 d3 4d 33 d7 e1 ab 1b 40 c0 68 c5 73 06 83 b4 01 6c b2 46 54 aa 97 57 dd bd 47 d1 dd 9b 6a d0 63 8d 35 76 7a 9a 2f 5f 70 36 9e 0b 96 9a a2 7b d2 93 ed ce e9 db e9 c1 de a0 77 c8 7e f0 bd e3 57 3e bb 14 45 77 60 01 b7 da 82 06 f9 e6 65 5a 6b b9 1f be 6e a6 63 42 1d 3d 19 84 30 a4 d6 32 42 05 d3 8a 93 5b b7 92 34 64 2b 9b 22 49 50 6e 83 2e 82 c2 0d 0d 47 40 ec ad 75 84 16 8c 63 6e 47 23 c2 a1 da ea b1 84 a1 a9 af e6 57 dc 15 40 68 23 4a 04 2c d4 70 d4 73 cd 4f 46 9c 02 97 ff 7f 00 bf 45 73 df 53 e0 f7 4c 9b 4a 5e b3 f8 85 16 23 82 fa e1 4f c4 c9 39 d9 42 d9 63 a5 11 f4 3d 9e 9e d2 42 cd a6 e7 f9 d7 4f 46 58 d8 ee 4d 66 81 Data Ascii: $]q@=={'2'sJM3@hslFTWGjc5vz/_p6{w~W>Ew`eZkncB=02B[4d+"IPn.G@ucnG#W@h#J,psOFEsSLJ^#O9Bc=BOFXMf
2024-03-29 00:41:35 UTC	1300	IN	Data Raw: 63 b6 77 f8 be ed 79 81 82 96 ae d9 ab 39 aa ed 56 fa 17 cc 69 de f4 59 6b c4 82 fe 01 f7 56 05 17 2c 3c 7f 33 67 5e 01 1e 86 32 67 e6 9f b3 d6 c5 b2 f5 d0 c2 cc 72 2f f8 e3 15 de c1 59 df d4 cc 2e ca 2d 6b 54 33 ca 48 cf 3b 7d 73 8b 70 96 2f 52 be f0 33 9b 51 58 66 1f 67 ef 6c 92 f2 1a 7c 62 cd 36 38 9b b7 76 e6 02 e7 96 05 42 9b 13 cb c9 40 46 4b 04 45 55 78 e6 52 64 7e 1a 54 ab 50 cb 31 d2 74 05 db 24 b7 a3 04 af 4b aa a9 23 c8 24 7b e7 e1 c9 1b 71 16 0a 91 57 78 7b 33 f8 04 68 a3 20 9a 04 a9 50 40 03 ed 1c f4 0f 5f df ff 40 93 6b a7 d3 e6 68 a4 4f 55 ab 17 6f 46 d9 7a 24 97 26 a9 07 04 2c ca 84 84 cb 95 a5 ce c6 94 9d 9a 3b 99 8b d1 b5 7b b8 54 15 40 b0 5a 5a 5f 78 07 29 c2 a0 5d 10 96 a8 cd 56 17 b3 5a 81 bd 95 9e 9b 9f 67 ea 84 b1 0b 02 1f 27 09 57 Data Ascii: cwy9ViYkV,<3g^2gr/Y.-kT3H;}sp/R3QXfgl\|b68vB@FKEUxRd~TP1t$K#${qWx{3h P@_@khOUoFz$&,;{T@ZZ_x)]VZg'W
2024-03-29 00:41:35 UTC	1300	IN	Data Raw: 88 02 79 45 e1 c4 64 5e 0d 92 46 43 3e 79 14 7f fd eb fd e7 2e 35 1c 0f 18 43 ec 08 16 a5 f4 ce c3 43 19 67 20 50 2f 5e f2 1e e7 f9 2b 57 d9 37 df 52 ef dc 4b 34 61 b0 80 1e ed 67 cd 00 e6 88 4b cb f8 61 1c 4f 7a e9 0b 17 ab d5 ba 73 f8 30 53 8c 3e b8 15 25 09 d9 de e4 d5 2a f7 03 f7 f1 a3 69 2c c9 52 c3 c4 b1 1a 4c 50 69 a8 56 45 ab 61 54 a6 96 9a 0e 6c da c1 38 8f 40 b0 c6 d9 4e 8b 3a 2d f4 c8 66 19 83 e7 af 75 80 e5 08 00 d7 d1 44 45 c7 a4 da 14 47 27 ea e0 56 56 f7 58 bd 46 97 5a 2c 0d d5 f6 a6 f3 e1 83 1c 1e 57 ad 01 45 c5 35 39 0d 4d 7f ac 91 ae 52 32 3a 95 46 39 f5 25 51 5f a6 e1 84 9d 1e c0 88 27 5e 03 75 14 c7 a3 f1 54 7a 75 60 5e ba 3f a0 fb bb b2 d6 00 4c 22 e1 c4 59 dd f4 8f c7 91 1f 70 18 0d 97 eb 70 92 2f 2f b5 b8 93 0e fa 32 9a 22 2e 36 57 Data Ascii: yEd^FC>y.5CCg P/^+W7RK4agKaOzs0S>%*i,RLPiVEaTl8@N:-fuDEG'VVXFZ,WE59MR2:F9%Q_'^uTzu`^?L"Ypp//2".6W
2024-03-29 00:41:35 UTC	1300	IN	Data Raw: f4 d1 bd 2c 8d 69 00 7c 74 6a 78 1d e8 b2 d8 ba 5c 8f c6 72 ef ee 24 4b c9 68 a0 82 1a 9f c2 5b 2e ac 16 96 a4 66 3a 91 99 64 bb ef 4c 65 1c bc dd 3d f8 d8 e7 fc bf f3 7b 97 bf f6 95 71 ef 28 bd 7c cd 7b f5 97 2e fc c9 bf fc de af 7f e9 57 1a f5 bc 7f 7c fb c6 d5 da db df be b9 fc ea ab fe a5 ff 6c 78 7a d8 de f9 c6 e5 17 06 df fa 57 d9 fe 6d c7 71 60 e3 a0 b8 00 35 82 09 5a c8 3a 34 e5 9c 09 04 2b 87 4a bf 90 b1 41 f1 25 12 21 92 1b c4 43 8d 4a a7 01 46 db d8 70 a6 51 22 9e 21 39 3f 15 16 7e 24 f8 3d 15 e7 f9 54 44 49 81 55 ae 80 85 23 b2 34 a4 7f 5d 2f e3 82 61 93 d1 59 9e 07 25 f3 30 7b 76 16 47 79 16 8c 81 63 51 5c 99 c6 43 d4 b0 d9 47 b5 9b 3e 1b 80 72 ee 65 ba 60 a5 2c b8 d7 bc 17 38 19 e6 7c 26 03 7d 1a 06 17 0c a1 08 78 1a c9 13 13 c2 b1 60 05 f8 Data Ascii: ,i\|tjx\r$Kh[.f:dLe={q(\|{.W\|lxzWmq`5Z:4+JA%!CJFpQ"!9?~$=TDIU#4]/aY%0{vGycQ\CG>re`,8\|&}x`
2024-03-29 00:41:35 UTC	1300	IN	Data Raw: a5 cc f2 4c e5 29 e0 1f a8 db 54 82 f4 48 6c f4 2f 08 32 12 2a ef 54 37 8f a3 da fd e9 f2 2d 40 be 11 3f 0e ab a3 cc cf 33 b8 5b 11 03 ac 5c 1e 42 77 59 91 61 69 03 b7 17 f3 75 cc 62 50 93 fe 39 e5 e6 fe a4 75 6d 83 8a c9 2b 1f 5f 59 5d 0b df 7a bb fb bd d3 df 39 cc 2e fe ee fa 97 b5 cc b9 8b 4c 02 e4 87 02 7d 9e d1 6a c0 2b 01 0b 13 dc 5f 0c 93 16 34 bc d9 6e 90 49 0a 42 53 03 77 56 e9 04 00 c1 e1 0e e8 1c 4b 4d 45 f2 dd 5c 4d 02 67 23 80 bb b0 4c 39 aa 59 65 d3 2c 0a 98 01 04 9d f6 a7 eb 4b 7c eb c2 f2 57 bf 31 68 78 ee d6 ba 04 ee f2 c1 07 83 24 64 eb 6b c8 cd a5 27 fc 86 be 7a b1 73 ff ce 78 73 cd db 3f c9 84 70 81 a6 8e 48 0a c0 23 18 55 2c 77 84 b8 bc 49 93 65 d3 ac 3b 99 61 f7 1e 25 6b 4d de aa 99 c3 d3 fc ce 9d 31 d3 32 a8 08 e1 91 ad 55 16 7a 48 Data Ascii: L)THl/2*T7-@?3[\BwYaiubP9um+_Y]z9.L}j+_4nIBSwVKME\Mg#L9Ye,K\|W1hx$dk'zsxs?pH#U,wIe;a%kM12UzH
2024-03-29 00:41:35 UTC	1300	IN	Data Raw: 5c 10 5b 97 83 c1 20 3d 39 4c f2 84 72 4f 2f ad 78 d3 89 c9 25 ee 45 4c e4 81 1d 25 f4 ca 1a 07 9d cd 38 00 6f 68 4f 9a 4e f5 da 16 1a a4 1d 07 ba 2c 80 90 3a 55 dc ec ae 4f e3 89 9e 9e 12 9d b2 c9 40 85 a1 d5 1d 35 86 3f 73 aa 41 51 60 f3 cc 29 8a cc bd 58 c2 2e a6 9a 63 88 2c 86 a6 d8 fd 26 13 d2 db c7 ed f6 d8 98 4a 25 07 f1 53 a9 b3 d5 0b 6c 79 b5 be b6 0e 13 ad 78 85 90 18 08 a2 84 1b d6 9a 14 20 34 0a 49 14 32 18 e4 7f ef 3f 16 1f be 17 bd f4 d2 ba a1 e9 0f df f8 ee e5 2b ea 1b 7f f6 f6 6f ff ee 3f f8 85 cf 5e 88 c7 e1 fd c3 93 28 95 8f ef be a3 79 be b4 dd da 5e 83 79 8c bc e7 5f 72 fc e5 27 7b 8f 77 2e 5c 1b f7 76 93 d8 5c ba e1 0e aa f4 f0 1e ec 59 9b ea a0 ac bf cc ca 40 cc d3 41 47 0d 86 32 a1 b0 b4 06 32 c1 51 5a 14 b9 62 86 ce 33 14 0c 72 7d Data Ascii: \[ =9LrO/x%EL%8ohON,:UO@5?sAQ`)X.c,&J%Slyx 4I2?+o?^(y^y_r'{w.\v\Y@AG22QZb3r}
2024-03-29 00:41:35 UTC	1300	IN	Data Raw: 18 a0 81 c5 2d 64 08 72 79 c6 c6 9e 49 a5 60 cc af b4 a0 49 5a 96 40 68 2d 82 66 d6 35 63 eb 6e 11 9b 40 81 a4 90 71 5a 56 57 2b b8 1a 29 e2 0e 67 c5 cc 0a 67 5b d9 bb 22 ed 01 cb c1 14 38 87 de b5 33 0f 9f ad bd 77 e6 1a 65 b3 61 d3 a5 67 08 eb d7 88 c2 a4 6a d1 8e cf 42 43 91 ed 59 ff 5c b1 ae 8a 9c c5 85 90 25 a3 66 85 66 0a f8 56 0b 3c 9c 92 79 a9 9a 32 07 31 b3 ac 5e 5b 13 a8 2d 15 82 a6 4e c0 29 2c c1 02 03 28 65 ac 72 f8 9e 01 af 83 81 96 69 9c c7 53 99 4c b3 24 ca 92 71 06 42 22 9e e6 e9 58 86 27 32 9e c4 c3 61 37 e4 80 7c df 8b 3f fd cd ec 57 be 31 fe dc 9b d1 27 76 e3 d5 b1 ac 48 d8 38 79 92 45 69 1c ab 28 04 c5 59 45 31 49 33 98 23 fa d1 1a 14 25 f4 6f 1b aa d1 b9 9e 62 c8 59 f9 22 92 49 9d 66 d8 09 c1 9e 6e 32 c8 ba 9a cf 97 ea 02 29 b6 36 cd Data Ascii: -dryI`IZ@h-f5cn@qZVW+)gg["83weagjBCY\%ffV<y21^[-N),(eriSL$qB"X'2a7\|?W1'vH8yEi(YE1I3#%obY"Ifn2)6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50051	35.71.139.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:35 UTC	741	OUT	GET /xuid?ld=1&mid=7976&xuid=6D366468-71AF-422B-99AB-138A6DAB94F7&dongle=u6nf&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=1910044241478282443237; tluid=1910044241478282443237
2024-03-29 00:41:35 UTC	612	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:35 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=1910044241478282443237; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 27 Jun 2024 00:41:35 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=1910044241478282443237; Max-Age=7776000; Expires=Thu, 27 Jun 2024 00:41:35 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-03-29 00:41:35 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50056	8.28.7.84	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:35 UTC	885	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-edejGYFE2uVsfbouHZuc9q9b5ME1.tw-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223
2024-03-29 00:41:35 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:35 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1711672895; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:35 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50058	172.64.151.101	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:35 UTC	1044	OUT	GET /usermatch?cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fgpp%3DDBAA%26gpp_sid%3D-1%26cs%3D1%26vsid%3D3546744890180387000V10%26type%3Didx%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26axid_e%3D%26ovsid%3D_UID_&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&s=183875&C=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:35 UTC	996	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:35 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 86bbd0ab98eb6ff7-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:35 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:35 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d6%2BukbXTtEE%2BtGym1WWKlvFf5u46Rx4j3v5g4%2BVbboEkAAV%2FIXsY9pzhHCCibzgmhGFs0w7dqIACrEFuOsGfG7RuX8Dd4lwBb9hnR3sZKbtVYhoGbjpxQDj0jE7E71g%2F4u47HYMBczwZhw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:35 UTC	373	IN	Data Raw: 38 34 64 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 72 75 6d 3f 69 78 69 3d 31 26 61 6d 70 3b 63 6d 5f 64 73 70 5f 69 64 3d 38 35 26 61 6d 70 3b 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 25 32 46 70 69 78 65 6c 25 33 46 67 6f 6f 67 6c 65 5f 6e 69 64 25 33 44 63 61 73 61 6c 65 5f 6d 65 64 69 61 32 5f 64 62 6d 25 32 36 67 6f 6f 67 6c 65 5f 63 6d 25 32 36 67 6f 6f 67 6c 65 5f 73 63 25 32 36 67 6f 6f 67 6c 65 5f 68 6d 25 33 44 26 61 6d 70 3b 67 70 70 3d 44 42 41 41 26 61 6d 70 3b Data Ascii: 84d<html><head><title></title></head><body><img src="https://dsum-sec.casalemedia.com/rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D&gpp=DBAA&
2024-03-29 00:41:35 UTC	1369	IN	Data Raw: 70 69 64 3d 37 38 61 66 39 31 34 63 2d 65 37 35 35 2d 34 62 39 30 2d 62 64 65 64 2d 31 62 31 37 32 61 65 64 63 37 36 33 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 69 64 3d 5a 67 59 4f 50 73 41 6f 4a 49 30 41 41 41 69 34 41 44 6c 68 61 77 41 41 42 6c 45 41 41 41 49 42 26 61 6d 70 3b 67 70 70 3d 44 42 41 41 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 2d 31 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f Data Ascii: pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://cm.g.doubleclick.net/
2024-03-29 00:41:35 UTC	390	IN	Data Raw: 44 42 41 41 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 2d 31 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 67 70 70 3d 44 42 41 41 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 2d 31 26 61 6d 70 3b 63 73 3d 31 26 61 6d 70 3b 76 73 69 64 3d 33 35 34 36 37 34 34 38 39 30 31 38 30 33 38 37 30 30 30 56 31 30 26 61 6d 70 3b 74 79 70 65 3d 69 64 78 26 61 6d 70 3b 72 65 66 55 72 6c 3d 26 61 6d 70 3b 76 69 64 3d 31 36 37 32 38 39 33 38 30 31 33 35 34 36 37 34 34 38 39 30 31 38 30 33 38 37 30 30 30 56 31 30 Data Ascii: DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://hb.yahoo.net/cksync.php?gpp=DBAA&gpp_sid=-1&cs=1&vsid=3546744890180387000V10&type=idx&refUrl=&vid=16728938013546744890180387000V10
2024-03-29 00:41:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50055	52.223.40.198	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:35 UTC	728	OUT	GET /track/cmb/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=de959f04-5668-4cc4-9c45-9e4a8efcd9a8; TDCPM=CAEYBSgCMgsIpoXb9vbk5zwQBTgB
2024-03-29 00:41:35 UTC	609	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:35 GMT Content-Length: 355 Connection: close server: Kestrel location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&gdpr=0&gdpr_consent= set-cookie: TDID=de959f04-5668-4cc4-9c45-9e4a8efcd9a8; expires=Sat, 29 Mar 2025 00:41:35 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjEkpDP4OTnPBAFGAUgASgCMgsIpoXb9vbk5zwQBTgB; expires=Sat, 29 Mar 2025 00:41:35 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-29 00:41:35 UTC	355	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 34 4e 44 6b 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 64 65 39 35 39 66 30 34 2d 35 36 36 38 2d 34 63 63 34 2d 39 63 34 35 2d 39 65 34 61 38 65 66 63 64 39 61 38 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 Data Ascii: Redirecting to: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&gdpr=0&gdpr_consent=">https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50049	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:35 UTC	779	OUT	GET /cksync.php?cs=1&type=58267&ovsid=969751699754991983 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1
2024-03-29 00:41:35 UTC	661	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-zta=969751699754991983~~1;Expires=Mon, 13 May 2024 00:41:35 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:35 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:35 GMT Connection: close
2024-03-29 00:41:35 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:35 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50060	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:35 UTC	1741	OUT	POST /p?s=2023538075&t=1711672894582&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamMetric&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&ads_failure_total=0&ads_fetch_total=1&ads_refresh_total=0&ads_slot_right_failure=0&ads_slot_right_total=1&ads_slot_top_failure=0&ads_slot_top_total=0 HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gads=ID=c32c0374dd5baf6c:T=1711672894:RT=1711672894:S=ALNI_MYwb58aWk-8FI6FUQH1-2J5iCgo8g; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:35 UTC	801	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:35 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" set-cookie: __gads=COOKIECLEANER; domain=noa.yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50064	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:35 UTC	1027	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=5866711843062603349&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223
2024-03-29 00:41:35 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:34 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 27-Jun-2024 00:41:34 GMT; path=/ Set-Cookie: PugT=1711672894; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:34 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50061	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:35 UTC	1817	OUT	POST /p?s=2023538075&t=1711672894582&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=2vl5n89j0c3hk&limitedAds=false&NPA=false&pd=unknown&pt=home&id=sda-LREC-iframe&isRefresh=false&loc=top_right&renderCount=1&status=succeeded HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gads=ID=c32c0374dd5baf6c:T=1711672894:RT=1711672894:S=ALNI_MYwb58aWk-8FI6FUQH1-2J5iCgo8g; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:35 UTC	801	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:35 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" set-cookie: __gads=COOKIECLEANER; domain=noa.yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 2 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50063	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:35 UTC	1741	OUT	POST /p?s=2023538075&t=1711672894752&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamMetric&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&ads_failure_total=0&ads_fetch_total=1&ads_refresh_total=0&ads_slot_right_failure=0&ads_slot_right_total=0&ads_slot_top_failure=0&ads_slot_top_total=1 HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gads=ID=c32c0374dd5baf6c:T=1711672894:RT=1711672894:S=ALNI_MYwb58aWk-8FI6FUQH1-2J5iCgo8g; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:35 UTC	801	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:35 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" set-cookie: __gads=COOKIECLEANER; domain=noa.yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50070	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:35 UTC	1818	OUT	POST /p?s=2023538075&t=1711672894752&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=2vl5n89j0c3hk&limitedAds=false&NPA=false&pd=unknown&pt=home&id=sda-MAST-iframe&isRefresh=false&loc=top_center&renderCount=1&status=succeeded HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gads=ID=c32c0374dd5baf6c:T=1711672894:RT=1711672894:S=ALNI_MYwb58aWk-8FI6FUQH1-2J5iCgo8g; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:35 UTC	801	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:35 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" set-cookie: __gads=COOKIECLEANER; domain=noa.yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50065	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:35 UTC	1819	OUT	POST /p?s=2023538075&t=1711672894896&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=2vl5n89j0c3hk&limitedAds=false&NPA=false&pd=unknown&pt=home&id=sda-MON2-iframe&isRefresh=false&loc=mid_right_c&renderCount=1&status=succeeded HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gads=ID=c32c0374dd5baf6c:T=1711672894:RT=1711672894:S=ALNI_MYwb58aWk-8FI6FUQH1-2J5iCgo8g; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:35 UTC	801	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:35 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" set-cookie: __gads=COOKIECLEANER; domain=noa.yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50066	52.86.217.207	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:35 UTC	752	OUT	GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:35 UTC	549	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Fri, 29 Mar 2024 00:41:35 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=9022f636-a349-4fa5-9774-4b667b1cdee3&gdpr=0&gdpr_consent= Set-Cookie: cu=9022f636-a349-4fa5-9774-4b667b1cdee3\|1711672895602; Path=/; Domain=ipredictive.com; Expires=Sat, 29 Mar 2025 00:41:35 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: d389a0fa-30a6-4121-9310-f56d939ad6cf Content-Length: 205 Connection: Close
2024-03-29 00:41:35 UTC	205	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 7a 49 31 4d 43 5a 30 62 44 30 78 4d 6a 6b 32 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 39 30 32 32 66 36 33 36 2d 61 33 34 39 2d 34 66 61 35 2d 39 37 37 34 2d 34 62 36 36 37 62 31 63 64 65 65 33 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=9022f636-a349-4fa5-9774-4b667b1cdee3&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50071	54.156.236.4	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:35 UTC	881	OUT	GET /cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Cpp%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAFJBk7MDBwAABSliZdkug; bitoIsSecure=ok
2024-03-29 00:41:35 UTC	637	IN	HTTP/1.1 303 See Other Date: Fri, 29 Mar 2024 00:41:35 GMT location: https://rtb-csync.smartadserver.com/redir?partneruserid=AAFJBk7MDBwAABSliZdkug&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dpp%252Csyn%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID&gdpr=0 Server: gunicorn set-cookie: bito=AAFJBk7MDBwAABSliZdkug; Domain=bidr.io; expires=Sun, 27 Apr 2025 20:41:35 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50062	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:35 UTC	635	OUT	GET /ucreative.php?cv=1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1
2024-03-29 00:41:35 UTC	342	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 7668 Content-Type: application/javascript x-mnet-hl2: E Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Cache-Control: max-age=432000 Expires: Wed, 03 Apr 2024 00:41:35 GMT Date: Fri, 29 Mar 2024 00:41:35 GMT Connection: close
2024-03-29 00:41:35 UTC	3251	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 69 73 53 65 74 28 76 61 6c 29 20 7b 0a 20 20 20 20 73 77 69 74 63 68 20 28 74 79 70 65 6f 66 20 76 61 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 22 73 74 72 69 6e 67 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 61 6c 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 26 26 20 76 61 6c 20 21 3d 3d 20 22 22 20 26 26 20 76 61 6c 20 21 3d 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 61 6c 20 21 3d 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 Data Ascii: function isSet(val) { switch (typeof val) { case "string": return val !== undefined && val !== "" && val !== null; case "object": return val !== null; case "number": case "boolean": r
2024-03-29 00:41:35 UTC	4417	IN	Data Raw: 69 6e 67 50 61 72 61 6d 73 2e 63 72 69 64 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 75 63 74 69 6f 6e 49 64 3a 20 68 62 54 61 72 67 65 74 69 6e 67 50 61 72 61 6d 73 2e 61 75 63 74 69 6f 6e 49 64 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 69 64 64 65 72 3a 20 68 62 54 61 72 67 65 74 69 6e 67 50 61 72 61 6d 73 2e 62 69 64 64 65 72 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 73 45 78 74 65 72 6e 61 6c 3a 20 68 62 54 61 72 67 65 74 69 6e 67 50 61 72 61 6d 73 2e 69 73 45 78 74 65 72 6e 61 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 73 50 6d 70 3a 20 68 62 54 61 72 67 65 74 69 6e 67 50 61 72 61 6d 73 2e 69 73 50 6d 70 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 75 73 74 6f 6d 4f 62 6a 3a 20 68 62 43 75 73 74 6f 6d 50 61 72 61 6d 73 0a 20 20 20 20 20 Data Ascii: ingParams.crid, auctionId: hbTargetingParams.auctionId, bidder: hbTargetingParams.bidder, isExternal: hbTargetingParams.isExternal, isPmp: hbTargetingParams.isPmp, customObj: hbCustomParams

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50072	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:35 UTC	2378	OUT	POST /p?s=2023538075&t=emQV14rotgXGITC9,0.5228990990260007&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03C2WZIAfuc5wHrRWD%04_w%03www.yahoo.com%2F%04_rid%032vl5n89j0c3hk%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLQ1AMEACWH4gQEAMAdNgUEAZlCNwcEACPSVQgEAWVv0QoFVkNEUEE%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031711672887%04A_prems%03530%04_E%03dwell%04_ts%031711672895%04_ms%03159%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gads=ID=c32c0374dd5baf6c:T=1711672894:RT=1711672894:S=ALNI_MYwb58aWk-8FI6FUQH1-2J5iCgo8g; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:35 UTC	801	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:35 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" set-cookie: __gads=COOKIECLEANER; domain=geo.yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50079	23.105.12.150	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:36 UTC	970	OUT	GET /redir?partneruserid=AAFJBk7MDBwAABSliZdkug&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dpp%252Csyn%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID&gdpr=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:36 UTC	815	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 29 Mar 2024 00:41:36 GMT cache-control: no-cache,no-store location: https://match.prod.bidr.io/cookie-sync?gdpr=0&bee_sync_partners=pp%2Csyn%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=2&userid=4433599061245380871&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: pid=4433599061245380871; expires=Sun, 27 Apr 2025 00:41:36 GMT; domain=smartadserver.com; path=/; SameSite=None; secure set-cookie: TestIfCookieP=ok; expires=Sun, 27 Apr 2025 00:41:36 GMT; domain=smartadserver.com; path=/; SameSite=None; secure set-cookie: csync=127:AAFJBk7MDBwAABSliZdkug; expires=Sat, 29 Mar 2025 00:41:36 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50076	23.43.243.50	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:36 UTC	980	OUT	GET /log?logid=kfk&evtid=l1log&ct=&cid=8YHBJ3BJ0&crid=827382134&pvid=25307&act=headerBid&aid=1&size=300x600&sc_pvid=-3&cc=US&ugd=4&td=&abte=yhb&requrl=https%3A%2F%2F02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&r=1711672895353&gdpr_consent= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1
2024-03-29 00:41:36 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Fri, 29 Mar 2024 00:41:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:36 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-29 00:41:36 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50082	209.204.229.30	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:36 UTC	935	OUT	GET /impression/v2/1057986/85/co30sf1lk6ksdr06ud1g/2ec7436d-80ce-4942-9c83-5a9e0e4475fb?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1711673492&profileIDs=&creativeID=e9e66a&pubID=201422&format=banner&channel=site HTTP/1.1 Host: a5589.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:36 UTC	223	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:36 GMT Server: Apache Access-Control-Allow-Origin: * Cache-Control: no-cache Content-Type: image/gif Expires: 0 Pragma: no-cache Content-Length: 43 Connection: close
2024-03-29 00:41:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50077	23.43.243.50	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:36 UTC	1012	OUT	GET /log?logid=kfk&evtid=l1log&ct=&cid=8YHBJ3BJ0&crid=206512146&pvid=-3&act=headerBid&aid=3&size=970x250&sc_pvid=25307&cc=US&ugd=4&td=&abte=yhb&requrl=https%3A%2F%2F02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&r=1711672895386&gdpr_consent= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:36 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Fri, 29 Mar 2024 00:41:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:36 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-29 00:41:36 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50078	23.43.243.50	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:36 UTC	1010	OUT	GET /log?logid=kfk&evtid=l1log&ct=&cid=8YHBJ3BJ0&crid=533126705&pvid=25307&act=headerBid&aid=5&size=300x600&sc_pvid=&cc=US&ugd=4&td=&abte=yhb&requrl=https%3A%2F%2F02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&r=1711672895395&gdpr_consent= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:36 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Fri, 29 Mar 2024 00:41:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:36 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-29 00:41:36 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50087	209.204.229.30	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:36 UTC	935	OUT	GET /impression/v2/1057984/85/co30sf1lk6ksdr06ud1g/5b9350cb-0895-4b93-8784-111a03fe0aea?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1711673492&profileIDs=&creativeID=c4ad37&pubID=201422&format=banner&channel=site HTTP/1.1 Host: a5589.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:36 UTC	223	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:36 GMT Server: Apache Access-Control-Allow-Origin: * Cache-Control: no-cache Content-Type: image/gif Expires: 0 Pragma: no-cache Content-Length: 43 Connection: close
2024-03-29 00:41:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50091	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:36 UTC	1056	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=9022f636-a349-4fa5-9774-4b667b1cdee3&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; PugT=1711672894
2024-03-29 00:41:36 UTC	696	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:36 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:36 GMT; path=/ Set-Cookie: PugT=1711672896; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:36 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:36 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50092	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:36 UTC	1048	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; PugT=1711672894
2024-03-29 00:41:36 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:35 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 27-Jun-2024 00:41:35 GMT; path=/ Set-Cookie: PugT=1711672895; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:35 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50089	52.223.40.198	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:36 UTC	817	OUT	GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=55bb0499-3b94-4610-88d6-811dcbabb069%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=de959f04-5668-4cc4-9c45-9e4a8efcd9a8; TDCPM=CAESFwoIcHVibWF0aWMSCwjEkpDP4OTnPBAFGAUgASgCMgsIpoXb9vbk5zwQBTgB
2024-03-29 00:41:36 UTC	655	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:36 GMT Content-Length: 359 Connection: close server: Kestrel location: https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&ttd_puid=55bb0499-3b94-4610-88d6-811dcbabb069%2C%2C set-cookie: TDID=de959f04-5668-4cc4-9c45-9e4a8efcd9a8; expires=Sat, 29 Mar 2025 00:41:36 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjEkpDP4OTnPBAFEhQKBXRhcGFkEgsI7qj62-Dk5zwQBRgBIAEoAjILCMae_Yj35Oc8EAU4AVoFdGFwYWRgAg..; expires=Sat, 29 Mar 2025 00:41:36 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-29 00:41:36 UTC	359	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 72 5f 64 65 76 69 63 65 5f 69 64 3d 64 65 39 35 39 66 30 34 2d 35 36 36 38 2d 34 63 63 34 2d 39 63 34 35 2d 39 65 34 61 38 65 66 63 64 39 61 38 26 74 74 64 5f 70 75 69 64 3d 35 35 62 62 30 34 39 39 2d 33 62 39 34 2d 34 36 31 30 2d 38 38 64 36 2d 38 31 31 64 63 62 61 62 62 30 36 39 25 32 43 25 32 43 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 Data Ascii: Redirecting to: <a href="https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&ttd_puid=55bb0499-3b94-4610-88d6-811dcbabb069%2C%2C">https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50093	192.40.39.248	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:36 UTC	789	OUT	GET /prebid-cache/cache?uuid=02e0f33f-1ced-4fac-a08c-7c29c84516af&iurl=e06fecc7-223f-41a3-93ce-dab22cdfe305&ap=2.210&source=audit HTTP/1.1 Host: prebid-ny.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:36 UTC	170	IN	HTTP/1.1 200 OK Server: nginx/1.19.9 Date: Fri, 29 Mar 2024 00:41:36 GMT Content-Type: application/xml Transfer-Encoding: chunked Connection: close Vary: Origin
2024-03-29 00:41:36 UTC	6968	IN	Data Raw: 66 39 62 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 33 35 35 38 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 69 6d 70 72 65 73 73 69 6f 6e 2f 76 32 2f 39 38 31 37 30 33 2f 38 35 2f 63 6f 33 30 73 66 30 73 69 67 74 75 71 70 34 62 64 6c 34 67 2f 38 38 61 33 64 62 33 63 2d 63 65 63 32 2d 34 64 33 34 2d 39 64 30 33 2d 38 32 66 66 33 64 37 61 61 33 66 35 3f 76 65 72 69 66 69 65 44 3d 31 26 75 73 65 72 49 44 3d 26 63 6d 70 72 6f 3d 30 26 64 65 76 69 63 65 54 79 70 65 3d 32 26 65 78 70 69 72 79 54 69 6d 65 3d 31 37 31 31 36 37 33 34 39 32 26 70 72 6f 66 69 6c 65 49 44 73 3d 26 63 72 65 61 74 69 76 65 49 44 3d 31 37 65 33 36 32 64 26 70 75 62 49 44 3d 31 38 33 38 37 35 26 66 6f 72 6d 61 74 Data Ascii: f9bdocument.write('<img src="https://a3558.casalemedia.com/impression/v2/981703/85/co30sf0sigtuqp4bdl4g/88a3db3c-cec2-4d34-9d03-82ff3d7aa3f5?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1711673492&profileIDs=&creativeID=17e362d&pubID=183875&format

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50098	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:36 UTC	1026	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:45E09433ABCF443988615F414991A294 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; PugT=1711672894
2024-03-29 00:41:36 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:36 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:36 GMT; path=/ Set-Cookie: PugT=1711672896; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:36 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50099	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:36 UTC	994	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; PugT=1711672894
2024-03-29 00:41:36 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:35 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50097	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:36 UTC	1052	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESECwFCJ1S0AHUyXWwZK-bCuI&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; PugT=1711672894
2024-03-29 00:41:36 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:36 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 27-Jun-2024 00:41:36 GMT; path=/ Set-Cookie: PugT=1711672896; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:36 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50096	23.43.243.136	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:36 UTC	5368	OUT	GET /log?logid=awlog&itype=YHB&tElp=5743&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-6cdd6846-77zvf&svr=285_20_20_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001711672890119017221018037423&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=%5B%7B%22source%22%3A%22liveintent.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22vN_RikZwhoZWxTMpfJBcDcT8RWafL19T6LauHA%22%2C%22atype%22%3A3%7D%5D%7D%2C%7B%22source%22%3A%22rubiconproject.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22LMPI0LLB-19-JSO6%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22liveintent.indexexchange.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ZQjYrf.1D0shOWRRRk909QAA%261008%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubmatic.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228DDE491A-31A6-4A5B-9E11-D4969B43F97B%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%5D&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&pvid=25307&exid=10025&req_mtype%3C%3E=0&res_mtype=0&pv_adtype=0&adtypes=0&pbasrc=0&mang=0&dpa=2&crid=827382134&g=0&nms=2&ptype=43&supcrid=us_yhp_main_dt_top_right&r_fp%3C%3E=3900443&acid=176264509238088091711672891609&astat=dp&auMxTm=1400&actltime=1409&acwtime=1409&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=2&agid%3C%3E=&asagid=&asbkt=&sr=0&adj1=0&dpsh_src=1&adj0=0&pst=0&adj2=0&incentive_expense=0&incentive_type=0&discount=0&bdp=1.240000&cpm=1.24&ogbdp=1.240000&cbdp=1.240000&dfpBd=1.24&aogbdp=&true_bdp=1.24&abtest_status=0&bucket_id=-1571&exp_id=-380&flrver=&flrrule=827382134%7C%7C25307&bfa_al=exploitation&bfa_pr=0.50&bfa_stat=1&flr_price=0&flr_strat=dynamic&advId=&advNm=&pvAgNm=&pvAgId=&advUrl=chevrolet.com&ba=2940&prspt=headerBid&act=headerBid&mowxReqId=&ckfl=&cs=&iurl=&di=&dt=O&dp=0&dsrc=&dbf=0&epc=1057986&epc2=&epc3=&pbidflr=0.50&bfs=&nbr=0&prvAccId=1057986&pcrid=15328874&size=300x600&req_size=300x600&s=1&snm=success&toconsider=1&mnet_ckfl=&rbr=&ruct=0&ae=0&ftr%3C%3E=&og_bid=0&pcon=&adType=BANNER&gtime=4&htime=-1&stime=-1&ltime=1122&brc=0&brt=1711672892&but=1711672892&bidId=146020580947701411711672892745&mpvid=&aqtime=0&in_lurl=&out_lurl=&loss_id=&abs=&apid=&ybnca_bbid=&binfobid=&bdata=&bId=&cmpid=&cat=&attr=&dtc=&prvReqId=&ybnca_erpm=&exp=&ybnca_gbid=&htps=&patint=&patkey=&fpuReq=&prvApiId=&mp_seg%3C%3E=&pcId=&pvNbr=&pvNbrDtls=&pseat=&rtime=&seat=85&ortbseat=1982032&sbdrid=&ybnca_vbid=&wsip=&pvdTmax=0&td=%7B%22ydevice%22%3A%22desktop%22%2C%22ylang%22%3A%22en-US%22%2C%22yregion%22%3A%22US%22%2C%22ysection%22%3A%22main%22%2C%22ysite%22%3A%22fp%22%2C%22ysrc%22%3A%222%22%7D&sec=&chnl=&csent=1&zn=e&dfpadvId=&dfpcmpId=&isEmp=&dfpAdPath=%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_top_right&dfpDiv=sda-LREC-iframe&sz=&srcAgCrid=&srcAgLid=&lbid=&isbckfl=&srvcnm=&sspReq=&csip=&sspReg=&mnrf=0&mnrfc=0&invw=-1&strg=&dStat=&dcbdp=0&adfpBd=&dcs=&tref=0&rfc=0&repchn1=%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_top_right&iwr=0&aqp=3&acrid=&aqm=&aqb=&aqws=&clopvid=%5B25307%5D&clobdp=1.240000&clocbdp=1.240000&clodp=0&uid_mod_avb%3C%3E=liveIntentId&uid_mod_sent%3C%3E=liveIntentId&def_size=300x250%7C300x600&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Abf1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Afp%3Bver%3Amegastrm%7C%7C2023538075%7C%7C%7C%7Cdrop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%7C%22%7D&k2=%7B%22k%22%3A%22bucket%22%2C%22v%22%3A%22drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%22%7D&k3=%7B%22k%22%3A%22cobrand%22%2C%22v%22%3A%22none%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22top_right%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22fp%22%7D&k39=fp&ydt=desktop&ylang=en-US&yr=US&ysec=main&ys=fp&sc_pvid=-3&sc_ogbdp=0.750000&sc_bdp=0.750000&sc_cbdp=0.750000&sc_bdata=&sc_dp=0&top=572&btm=1172&lft=951&rght=1243&lper=1&rme=SFR&ra_sz=&udc=0&oyaf=0&cpr=0.5832568661251989&omul=1&currsrc=NA&ocurr=&mview=0&ebuid=&rti=69&requrl=https%3A%2F%2Fwww.yahoo.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:37 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Fri, 29 Mar 2024 00:41:37 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:37 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-29 00:41:37 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50100	54.156.236.4	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:36 UTC	906	OUT	GET /cookie-sync?gdpr=0&bee_sync_partners=pp%2Csyn%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=2&userid=4433599061245380871&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAFJBk7MDBwAABSliZdkug; bitoIsSecure=ok
2024-03-29 00:41:36 UTC	646	IN	HTTP/1.1 303 See Other Date: Fri, 29 Mar 2024 00:41:36 GMT location: https://bh.contextweb.com/bh/rtset?ev=AAFJBk7MDBwAABSliZdkug&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D4433599061245380871%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dsyn%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&gdpr=0 Server: gunicorn set-cookie: bito=AAFJBk7MDBwAABSliZdkug; Domain=bidr.io; expires=Sun, 27 Apr 2025 20:41:36 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50094	23.43.243.136	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:36 UTC	5485	OUT	GET /log?logid=awlog&itype=YHB&tElp=5761&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-6cdd6846-77zvf&svr=285_20_20_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001711672890119017221018037423&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=%5B%7B%22source%22%3A%22liveintent.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22vN_RikZwhoZWxTMpfJBcDcT8RWafL19T6LauHA%22%2C%22atype%22%3A3%7D%5D%7D%2C%7B%22source%22%3A%22rubiconproject.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22LMPI0LLB-19-JSO6%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22liveintent.indexexchange.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ZQjYrf.1D0shOWRRRk909QAA%261008%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubmatic.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228DDE491A-31A6-4A5B-9E11-D4969B43F97B%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%5D&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&pvid=-3&exid=0&req_mtype%3C%3E=0&res_mtype=0&pv_adtype=0&adtypes=0&pbasrc=0&mang=0&dpa=&pbAcid=347818279457200221711672891606&pbBidId=20086357115156131711672891626&crid=206512146&g=0&nms=2&ptype=43&supcrid=us_yhp_main_dt_top_center&r_fp%3C%3E=3900443&acid=244154801216068341711672891614&astat=dp&auMxTm=1400&actltime=1410&acwtime=1410&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=2&agid%3C%3E=&asagid=&asbkt=&sr=0&adj1=0&dpsh_src=1&adj0=0&pst=0&adj2=0&incentive_expense=0&incentive_type=0&discount=0&bdp=2.210000&cpm=2.21&ogbdp=2.210000&cbdp=2.210000&dfpBd=2.21&aogbdp=&true_bdp=2.21&abtest_status=0&bucket_id=-1571&exp_id=-380&flrver=&flrrule=&bfa_al=&bfa_pr=&bfa_stat=&flr_price=0&flr_strat=dynamic&advId=&advNm=&pvAgNm=&pvAgId=11611&advUrl=denturerescue.com&ba=3215&prspt=headerBid&act=headerBid&mowxReqId=&ckfl=&cs=&iurl=&di=&dt=O&dp=0&dsrc=-2&dbf=1&epc=206512146&epc2=&epc3=&pbidflr=0.00&bfs=&nbr=0&prvAccId=206512146&pcrid=695100154993717199&size=970x250&req_size=728x90%7C970x250&s=1&snm=success&toconsider=0&mnet_ckfl=&rbr=&ruct=0&ae=0&ftr%3C%3E=&og_bid=0&pcon=&adType=BANNER&gtime=6&htime=-1&stime=-1&ltime=869&brc=0&brt=1711672892&but=1711672892&bidId=215705401661407401711672892495&mpvid=25052&aqtime=0&in_lurl=&out_lurl=&loss_id=&abs=&apid=&ybnca_bbid=&binfobid=&bdata=&bId=&cmpid=&cat=&attr=&dtc=&prvReqId=&ybnca_erpm=&exp=&ybnca_gbid=&htps=&patint=&patkey=&fpuReq=&prvApiId=&mp_seg%3C%3E=&pcId=&pvNbr=&pvNbrDtls=&pseat=&rtime=&seat=&ortbseat=Index%20Exchange&sbdrid=&ybnca_vbid=&wsip=&pvdTmax=0&td=%7B%22ydevice%22%3A%22desktop%22%2C%22ylang%22%3A%22en-US%22%2C%22yregion%22%3A%22US%22%2C%22ysection%22%3A%22main%22%2C%22ysite%22%3A%22fp%22%2C%22ysrc%22%3A%222%22%7D&sec=&chnl=&csent=1&zn=e&dfpadvId=&dfpcmpId=&isEmp=&dfpAdPath=%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_top_center&dfpDiv=sda-MAST-iframe&sz=&srcAgCrid=&srcAgLid=&lbid=&isbckfl=&srvcnm=&sspReq=&csip=&sspReg=&mnrf=0&mnrfc=0&invw=-1&strg=&dStat=&dcbdp=0&adfpBd=&dcs=&tref=0&rfc=0&repchn1=%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_top_center&iwr=0&aqp=3&acrid=&aqm=&aqb=&aqws=&clopvid=%5B-3%5D&clobdp=2.210000&clocbdp=2.210000&clodp=0&uid_mod_avb%3C%3E=liveIntentId&uid_mod_sent%3C%3E=liveIntentId&def_size=3x1%7C728x90%7C970x250&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Abf1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Afp%3Bver%3Amegastrm%7C%7C2023538075%7C%7C%7C%7Cdrop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%7C%22%7D&k2=%7B%22k%22%3A%22bucket%22%2C%22v%22%3A%22drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%22%7D&k3=%7B%22k%22%3A%22cobrand%22%2C%22v%22%3A%22none%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22top_center%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22fp%22%7D&k39=fp&ydt=desktop&ylang=en-US&yr=US&ysec=main&ys=fp&sc_pvid=25307&sc_ogbdp=1.290000&sc_bdp=1.290000&sc_cbdp=1.290000&sc_bdata=&sc_dp=0&top=84&btm=354&lft=-8.5&rght=1271.5&lper=1&rme=SFR&ra_sz=&udc=0&oyaf=0&cpr=0.8045973616953757&omul=1&currsrc=NA&ocurr=&mview=0&ebuid=d4a6d1f6b130c0c2027605e4e3bee299&rti=84&requrl=https%3A%2F%2Fwww.yahoo.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:37 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Fri, 29 Mar 2024 00:41:37 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:37 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-29 00:41:37 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50095	23.43.243.136	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:36 UTC	5372	OUT	GET /log?logid=awlog&itype=YHB&tElp=5776&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-6cdd6846-77zvf&svr=285_20_20_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001711672890119017221018037423&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=%5B%7B%22source%22%3A%22liveintent.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22vN_RikZwhoZWxTMpfJBcDcT8RWafL19T6LauHA%22%2C%22atype%22%3A3%7D%5D%7D%2C%7B%22source%22%3A%22rubiconproject.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22LMPI0LLB-19-JSO6%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22liveintent.indexexchange.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ZQjYrf.1D0shOWRRRk909QAA%261008%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubmatic.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228DDE491A-31A6-4A5B-9E11-D4969B43F97B%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%5D&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&pvid=25307&exid=10025&req_mtype%3C%3E=0&res_mtype=0&pv_adtype=0&adtypes=0&pbasrc=0&mang=0&dpa=2&crid=533126705&g=0&nms=1&ptype=43&supcrid=us_yhp_main_dt_as_mid_right_c&r_fp%3C%3E=3900443&acid=287329703247762331711672891614&astat=dp&auMxTm=1400&actltime=1412&acwtime=1415&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=2&agid%3C%3E=77452003106345491711672891614&asagid=77452003106345491711672891614&asbkt=v2&sr=0&adj1=0&dpsh_src=1&adj0=0&pst=0&adj2=0&incentive_expense=0&incentive_type=0&discount=0&bdp=2.500000&cpm=2.5&ogbdp=2.500000&cbdp=2.500000&dfpBd=2.50&aogbdp=&true_bdp=2.5&abtest_status=0&bucket_id=-1571&exp_id=-380&flrver=&flrrule=533126705%7C%7C25307&bfa_al=exploitation&bfa_pr=0.45&bfa_stat=1&flr_price=0&flr_strat=dynamic&advId=&advNm=&pvAgNm=&pvAgId=&advUrl=ford.com&ba=2983&prspt=headerBid&act=headerBid&mowxReqId=&ckfl=&cs=&iurl=&di=&dt=O&dp=0&dsrc=&dbf=1&epc=1057984&epc2=&epc3=&pbidflr=0.45&bfs=&nbr=0&prvAccId=1057984&pcrid=12889399&size=300x600&req_size=300x600&s=1&snm=success&toconsider=1&mnet_ckfl=&rbr=&ruct=0&ae=0&ftr%3C%3E=&og_bid=0&pcon=&adType=BANNER&gtime=4&htime=-1&stime=-1&ltime=1119&brc=0&brt=1711672892&but=1711672892&bidId=124332210445997721711672892743&mpvid=&aqtime=0&in_lurl=&out_lurl=&loss_id=&abs=&apid=&ybnca_bbid=&binfobid=&bdata=&bId=&cmpid=&cat=&attr=&dtc=&prvReqId=&ybnca_erpm=&exp=&ybnca_gbid=&htps=&patint=&patkey=&fpuReq=&prvApiId=&mp_seg%3C%3E=&pcId=&pvNbr=&pvNbrDtls=&pseat=&rtime=&seat=85&ortbseat=1385045&sbdrid=&ybnca_vbid=&wsip=&pvdTmax=0&td=%7B%22ydevice%22%3A%22desktop%22%2C%22ylang%22%3A%22en-US%22%2C%22yregion%22%3A%22US%22%2C%22ysection%22%3A%22main%22%2C%22ysite%22%3A%22fp%22%2C%22ysrc%22%3A%222%22%7D&sec=&chnl=&csent=1&zn=e&dfpadvId=&dfpcmpId=&isEmp=&dfpAdPath=%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_as_mid_right_c&dfpDiv=sda-MON2-iframe&sz=&srcAgCrid=&srcAgLid=&lbid=&isbckfl=&srvcnm=&sspReq=&csip=&sspReg=&mnrf=0&mnrfc=0&invw=-1&strg=&dStat=&dcbdp=0&adfpBd=&dcs=&tref=0&rfc=0&repchn1=%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_as_mid_right_c&iwr=0&aqp=3&acrid=&aqm=&aqb=&aqws=&clopvid=%5B25307%5D&clobdp=2.500000&clocbdp=2.500000&clodp=0&uid_mod_avb%3C%3E=liveIntentId&uid_mod_sent%3C%3E=liveIntentId&def_size=300x250%7C300x600&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Abf1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Afp%3Bver%3Amegastrm%7C%7C2023538075%7C%7C%7C%7Cdrop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%7C%22%7D&k2=%7B%22k%22%3A%22bucket%22%2C%22v%22%3A%22drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%22%7D&k3=%7B%22k%22%3A%22cobrand%22%2C%22v%22%3A%22none%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22mid_right_c%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22fp%22%7D&k39=fp&ydt=desktop&ylang=en-US&yr=US&ysec=main&ys=fp&top=2035.265625&btm=2635.265625&lft=951&rght=1251&lper=1&rme=SFR&ra_sz=&udc=0&oyaf=0&cpr=0.648373721781754&omul=1&currsrc=NA&ocurr=&mview=0&ebuid=&rti=99&requrl=https%3A%2F%2Fwww.yahoo.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:37 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Fri, 29 Mar 2024 00:41:37 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:37 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-29 00:41:37 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50084	23.43.243.50	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:36 UTC	1180	OUT	GET /log?logid=kfke&evtid=plutol1&__q=AYgEIwKELAQCAAABAIAAAgAAAAAAAAEABgAAQIABAAgAoNAIVDQzMDMyMzQxMzE0NDIzXzEyMzAyMzQ5MzlfMjA2NTEyMTQ2MjI1MDUyMUAxNGU1YTI5NDIwZWFhYTkyMzFkZmI0MDBmZjc1NTBlY7iHA65H4XoUrgFAKmh0dHBzOi8vd3d3LnlhaG9vLmNvbQRVUxJ5YWhvby5jb20SOFlIQkozQkowCA45NzB4MjUwCjIuMjEwEnlfZWFzdF9zYxg2OTQ5OTM3MTcxOTkGWUhCBmFkbQAAAAAAAIBWQNzyvPrQYwIxAAAAAAAA8L9EcnRiLWhvbWllMS16MS03OTZkNmZiN2JkLXJja2JjLllTQwAec2RhLU1BU1QtaWZyYW1lEGJmZWY4N2VkAmQCCnlhaG9v&cpr=0.997136726333627 HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:37 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Fri, 29 Mar 2024 00:41:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:36 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-29 00:41:37 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50085	23.43.243.50	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:36 UTC	6407	OUT	GET /clog?pixel_len_bucket=5697&logid=awlog&lper=1&itypeid=84&itype=YHB&itype_override=YHB&cc=US&cid=8YHBJ3BJ0&reqid=347818279457200221711672891606&vid=347818279457200221711672891606&dn=yahoo.com&rawDn=yahoo.com&requrl_dn=yahoo.com&pid=8PR6KY355&ugd=4&fleet=yahoo&vsid=3546744890180387&requrl=https%3A%2F%2Fwww.yahoo.com&cliIPType=v4&coppa_status=N&coppa_applied=N&coppa_enf=true&lmt_enf=true&dnt_enf=true&geo_source=2&sc=DC&ct=washington&zip=20011&pubid=pub-8YHBJ3BJ0&tgtval=pub-8YHBJ3BJ0&csip=rtb-homie1-z1-796d6fb7bd-rckbc.YSC&dtc=y_east_sc&zone=d&sd=-1&ptype=43&tmax=1400&xtmax=545&gdpr=0&gsi=0&gpp_present=true&gpp_sid%3C%3E=-1&app=0&sat=0&screeninfo=1280x907&ortb_device_id=2&asn=174&sckfl=0&sckfl2=0&usp_status=1&usp_enf=1&usp_string=1YNN&ufca=13&mspa_enforced=true&pexid=YHB-8YHBJ3BJ0&geoll=false&is_ortb=false&s_city=Reston&commit_id=bfef87ed&ocurr=USD&omul=1.0&currsrc=API&currsrc_date=2024-03-28+00%3A00%3A00&pbasrc=1&dummy_vsid=false&second_call=false&ipcc=US&abte=SSP_CLIENT&is_msnnative_src=false&abtest_status=0&svr=285_20_20_ssp&dapp=green&ysec=main&ydt=desktop&yr=US&ylang=en-US&ys=fp&proxy=g-use1c-rtb-envoy-2&header_lang=true&rtttime=464&req_tid_present=false&pvid=25052&parent_pvid=25051&prvAccId=4309697&prvApiId=60157&adj0=0.0&adj1=0.0&adj2=0.0&pst=0&crid=206512146&prspt=headerBid&prvReqId=43032341314423_1230234939_2065121462250521&size=970x250&bdp=2.210&bid_uuid=d4a6d1f6b130c0c2027605e4e3bee299&cbdp=2.210&og_cbdp=2.210&ogbdp=2.21&pv_adtype=0&res_mtype=0&mnet_ckfl=1&ckfl=0&be=0&advUrl=denturerescue.com&dfpBd=2.210&dsrc=-2&dp=0&dbf=1&epc=us_yhp_main_dt_top_center&s=1&snm=SUCCESS&bId=4309697&pcrid=694993717199&tpbTkn=false&pvAgId=Index+Exchange&exid=10015&bidflr=0.000&pbidflr=0.050&basebidflr=0.05&opbidflr=0.050&spbf=0&bfa_pr=0.05&bfa_rr=0.0&flr_price=0.05&viewability=90&exp=sfl%3Dfalse%7CssBucket%3D0%7Cbfl%3D-100%7Cfl_rl%3D1%7CssProfile%3D0%7Cdbr%3D1%7Csfl%3Dfalse%7Cbfl%3D-100&mnrf=0&seat=85&ortbseat=Index+Exchange&brsrclk=0&bidrestime=1711672892590&fpuReq=1&bfs=101&acsn=1&bcrid=695100154993717199&stagid=sda-MAST-iframe&vls=2&mang=0&pvdTmax=335&fpusp=false&ae=false&epcexp=false&ucrid_ver=2&omid=0&mnet_static_share=0.0&req_bucket_id=1&dt=O&flr_strat=dynamic&mx_svc_mode=http&incentive_type=0&aogbdp=0.0&spIvt=0&spId=75bc0e19-4df6-4d4e-befb-a13ec2acb7cf&spSource=1&spTo=3&spIsReq=1&spFst=0&spCst=0&mx_page_url=https%3A%2F%2Fwww.yahoo.com&mx_sbp=-10.0&mx_badv_count=3&mx_epbc=60157&mx_ssProfile=0&mx_g_uid_source_cvrg%3C%3E=index%23EIDS%23%23magnite%23EIDS%23%23liveintentId%23EIDS%23%23pubmatic%23EIDS&mx_int_dsp_id=1007&mx_sua_os_n=Windows&mx_lr=0&mx_lr_seg_deal=0&mx_aqcpl_crid=0&mx_g_uid_cvrg%3C%3E=magnite%23%23liveintentId%23%23pubmatic%23%23index&mx_dup_profile=343&mx_bsAlgoBucket=NOT_APPLICABLE&mx_g_uid_sent%3C%3E=liveintentId%23%23index&mx_dup_algo=AVERAGE_DECAYED_CPM&mx_bsVerdictAlgo=V1&mx_gpid_format=EPC&mx_bss_algos%3C%3E=0&mx_bsAlgoProfile=NOT_APPLICABLE&mx_aurl_hc=0&mx_aabpc=0&mx_isLossNtf=false&mx_ssBucket=0&mx_bcat_count=20&mx_gpid_sent=true&mx_commit_id=fc4a7657ab&mx_exp_tokens%3C%3E=loss_notification_exp%3ADEFAULT%23%23duplication%3ACTV_EXTREMELY_AGGRESSIVE_L7%23%23prll_req%3Atrue&mx_sdr=false&mx_sua_cvg=0001010&mx_tid_sent=false&mx_SPRIG=0&mx_ep_sent%3C%3E=badv&mx_g_one_uid_sent=Multiple%28UIDs%29&mx_uid_sent=0&mx_SC=0&mx_adid=25048621&mx_nsz=2&mx_GCID=0&mx_maq_call=false&mx_aurt=0&mx_divid=sda-MAST-iframe&mx_tgs=728x90%7C970x250&mx_vsidFlt=false&mx_cklsrc=OTHERS&mx_IAB2=0&mx_dup_bucket=MARK_NOT_DUPLICATE&mx_PC=1&mx_UCC=1&mx_gpid=us_yhp_main_dt_top_center&mx_int_agency_id=11611&mx_bsWhitelistBucket=0&mx_bsWhitelistAlgo=0&mx_isNed=0&isFledge=false&acid=14e5a29420eaaa9231dfb400ff7550ec&rtime=321.0&wsip=adex-z1-6c54475bc8-bglzq&ltime=336.0&act=headerBid&abs=0%7C0%7Cnxblock%3D-1%7Cxtmax%3D545%7Cbrr%3D0&adtypes=0&cacid=244154801216068341711672891614&impId=20086357115156131711672891626&reftime=15000&reftype=0&dsid=sda-MAST-iframe&mowxReqId=14e5a29420eaaa9231dfb400ff7550ec_1&supcrid=sda-MAST-iframe&req_size=970x250%7C728x90&renderer=0&ifst=0&iframingState=0&ifdp=0&slotVisibility=1&adpos=1&media=0&repchn1=%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_top_center&native_asset=0&req_mtype%3C%3E=0&g=0&ctr=-1.0&rfc=1&dfpDiv=sda-MAST-iframe&dfpAdPath=%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_top_center&feedback_id=25962250838375251711672891606&supplyTagId=206512146&mnrfc=1&r_fp%3C%3E=3900443&r_tim%3C%3E=3821649&viewability_vendor=MEDIA.NET+EXCHANGE&viewability_mnet=90&v_mkey=gen-vblt_yhb_8YHBJ3BJ0_0&v_mver=202403282028_gen-vblt_yhb_8YHBJ3BJ0&v_alg=gen-vblt_all&vcmplrt=-1.0&exp_id=-380&bucket_id=-1571&bfa_al=exploitation&bfa_stat=1&imp_tid_present=true&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Abf1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Afp%3Bver%3Amegastrm%7C%7C2023538075%7C%7C%7C%7Cdrop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%7C%22%7D&k2=%7B%22k%22%3A%22bucket%22%2C%22v%22%3A%22drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%22%7D&k3=%7B%22k%22%3A%22cobrand%22%2C%22v%22%3A%22none%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22top_center%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22fp%22%7D&debug_ts=2024-03-29+00%3A41%3A32&__expireat=1711673492858&mview=0&toconsider=1&sc_pvid=25017&sc_dp=0&sc_bdp=0.507&sc_cbdp=0.507&sc_ogbdp=0.507&sc_adj0=0.0&sc_adj1=0.0&sc_adj2=0.0&sc_prspt=headerBid&lo_pvid=%5B25052%5D&lo_dp=0&lo_bdp=2.210&lo_cbdp=2.210&actltime=354&clo_dp=0&ads_sc_pvid=&ads_sc_cbdp=&clo_pvid=[-3]&isVs=&ads_sc_ogbdp=&clo_bdp=2.210000&clo_cbdp=2.210000&ads_sc_bdp=&rme=adm&utime=3116&sf=0&cpr=0.19761077132952942 HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:37 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Fri, 29 Mar 2024 00:41:37 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:37 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-29 00:41:37 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50109	34.111.113.62	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:37 UTC	814	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&ttd_puid=55bb0499-3b94-4610-88d6-811dcbabb069%2C%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1711672894631; TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069; TapAd_3WAY_SYNCS=
2024-03-29 00:41:37 UTC	1101	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:37 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711672894631;Expires=Tue, 28 May 2024 00:41:37 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069;Expires=Tue, 28 May 2024 00:41:37 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!2136;Expires=Tue, 28 May 2024 00:41:37 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:37 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50111	209.204.233.130	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:37 UTC	955	OUT	GET /impression/v2/981703/85/co30sf0sigtuqp4bdl4g/88a3db3c-cec2-4d34-9d03-82ff3d7aa3f5?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1711673492&profileIDs=&creativeID=17e362d&pubID=183875&format=banner&channel=site&ap=${AUCTION_PRICE} HTTP/1.1 Host: a3558.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:37 UTC	223	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:37 GMT Server: Apache Access-Control-Allow-Origin: * Cache-Control: no-cache Content-Type: image/gif Expires: 0 Pragma: no-cache Content-Length: 43 Connection: close
2024-03-29 00:41:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50108	69.20.43.192	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:37 UTC	722	OUT	GET /cs?partnerId=59&redirect=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dlkqd_dbm%26google_hm%3D%24%24rawlkqduserid%7Cbase64%24%24 HTTP/1.1 Host: cs.lkqd.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:37 UTC	748	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 29 Mar 2024 00:41:37 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=lkqd_dbm&google_hm=OXVxRzE3YjFFTDg Set-Cookie: sr59=1\|\|1711672897; Max-Age=31536000; Domain=.lkqd.net; Secure; SameSite=None Set-Cookie: lkqdid=9uqG17b1EL8; Max-Age=31536000; Domain=.lkqd.net; Secure; SameSite=None Set-Cookie: lkqdidts=1711672897; Max-Age=31536000; Domain=.lkqd.net; Secure; SameSite=None Access-Control-Max-Age: 0 Cache-Control: max-age=0 Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: Content-Type Access-Control-Expose-Headers: Content-Type, Content-Disposition Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50112	198.148.27.131	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:37 UTC	979	OUT	GET /bh/rtset?ev=AAFJBk7MDBwAABSliZdkug&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D4433599061245380871%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dsyn%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&gdpr=0 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:37 UTC	1512	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-59c5665d85-t2v6n Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=glREkghP1gNb;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Mon, 24-Mar-2025 00:41:37 GMT;Max-Age=31104000;SameSite=None Set-Cookie: VP=part_glREkghP1gNb;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Mon, 24-Mar-2025 00:41:37 GMT;SameSite=None;Partitioned Set-Cookie: pb_rtb_ev=3-1qhv\|7dN.0.AAFJBk7MDBwAABSliZdkug;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sat, 29-Mar-2025 00:41:37 GMT;Max-Age=31536000;SameSite=None Set-Cookie: pb_rtb_ev_part=3-1qhv\|7dN.0.AAFJBk7MDBwAABSliZdkug;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Sat, 29-Mar-2025 00:41:37 GMT;SameSite=None;Partitioned Location: https://match.prod.bidr.io/cookie-sync?gdpr=0&userid=4433599061245380871&gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=3&ev=AAFJBk7MDBwAABSliZdkug&pid=558502&do=add&gdpr=0 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000 Set-Cookie: INGRESSCOOKIE=cdc701ceaeee0979; path=/; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50132	68.67.160.117	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:37 UTC	890	OUT	GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fhb.yahoo.net%252Fcksync.php%253Fcs%253D1%2526type%253Dapx%2526ovsid%253D%2524UID%2526axid_e%253D HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=JdhWkazzA7-l-SJBnb9vWXLWZRZHRTHbCkah-EW3O2ECAhxSYsqS4OFO_2Ig6DeQZPtzrEcTco9BU0aHgalK869BAW6WsG83Dwoyx1UwJrs.; uuid2=5423405387794830934
2024-03-29 00:41:37 UTC	1446	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 29 Mar 2024 00:41:37 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://hb.yahoo.net/cksync.php?cs=1&type=apx&ovsid=5423405387794830934&axid_e= AN-X-Request-Uuid: 5511c6e0-15a5-4cf7-9250-af1aa0fd5741 Set-Cookie: XANDR_PANID=JdhWkazzA7-l-SJBnb9vWXLWZRZHRTHbCkah-EW3O2ECAhxSYsqS4OFO_2Ig6DeQZPtzrEcTco9BU0aHgalK869BAW6WsG83Dwoyx1UwJrs.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 27-Jun-2024 00:41:37 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 17-Mar-2034 00:41:37 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=5423405387794830934; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 27-Jun-2024 00:41:37 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.43; 102.165.48.43; 676.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50127	35.71.139.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:37 UTC	859	OUT	GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dtlt%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=1910044241478282443237; tluid=1910044241478282443237
2024-03-29 00:41:37 UTC	757	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:37 GMT Content-Length: 0 Connection: close Location: https://hb.yahoo.net/cksync.html?cs=1&vsid=3546744890180387000V10&type=tlt&refUrl=&vid=16728938013546744890180387000V10&ovsid=1910044241478282443237&axid_e= Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=1910044241478282443237; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 27 Jun 2024 00:41:37 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=1910044241478282443237; Max-Age=7776000; Expires=Thu, 27 Jun 2024 00:41:37 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50120	52.46.151.131	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:37 UTC	774	OUT	GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4eCPhvW4k2tpPNlaxpmTNk; ad-privacy=0
2024-03-29 00:41:37 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 29 Mar 2024 00:41:37 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 5EF7KZ0S36SMDCEJS49P Set-Cookie: ad-id=A4eCPhvW4k2tpPNlaxpmTNk; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 00:41:37 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 00:41:37 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-29 00:41:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50122	69.20.43.192	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:37 UTC	653	OUT	GET /cs?partnerId=59&partnerUserId=CAESEJTzVPhxsNbxAo83M2QShqc&google_cver=1 HTTP/1.1 Host: cs.lkqd.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:37 UTC	706	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:37 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: sr59=1\|CAESEJTzVPhxsNbxAo83M2QShqc\|1711672897; Max-Age=31536000; Domain=.lkqd.net; Secure; SameSite=None Set-Cookie: lkqdid=IaVp1j-rtk0; Max-Age=31536000; Domain=.lkqd.net; Secure; SameSite=None Set-Cookie: lkqdidts=1711672897; Max-Age=31536000; Domain=.lkqd.net; Secure; SameSite=None Access-Control-Max-Age: 0 Cache-Control: max-age=0 Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: Content-Type Access-Control-Expose-Headers: Content-Type, Content-Disposition Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: *
2024-03-29 00:41:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50131	52.20.213.72	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:37 UTC	777	OUT	GET /pixel?a=0&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dsov%26ovsid%3D%24UID%26axid_e%3D&sovrn_retry=true HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IZjJALZHIXjbUV1jQgKNiPaF
2024-03-29 00:41:37 UTC	518	IN	HTTP/1.1 307 Temporary Redirect Date: Fri, 29 Mar 2024 00:41:37 GMT Content-Length: 0 Connection: close Location: https://hb.yahoo.net/cksync.php?cs=1&type=sov&ovsid=IZjJALZHIXjbUV1jQgKNiPaF&axid_e= Set-Cookie: ljt_reader=IZjJALZHIXjbUV1jQgKNiPaF;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50146	207.65.37.182	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:37 UTC	1603	OUT	GET /AdServer/SPug?partnerID=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; PugT=1711672896; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294
2024-03-29 00:41:37 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:37 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1711672897; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:37 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50143	207.65.37.181	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:37 UTC	1695	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=61089829&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; PugT=1711672896; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294
2024-03-29 00:41:37 UTC	1013	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156078:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Fri, 29 Mar 2024 00:41:37 GMT Transfer-Encoding: chunked Connection: close
2024-03-29 00:41:37 UTC	3592	IN	Data Raw: 64 66 63 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 76 78 69 69 5f 70 69 64 3d 31 30 30 36 37 26 76 78 69 69 5f 70 64 69 64 3d 36 44 33 36 36 34 36 38 2d 37 31 41 46 2d 34 32 32 42 2d 39 39 41 42 2d 31 33 38 41 36 44 41 42 39 34 46 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 34 30 32 34 35 31 39 33 26 76 61 6c 3d 36 44 33 36 36 34 36 38 2d 37 31 41 46 2d 34 32 32 42 2d 39 39 41 42 2d 31 33 38 41 36 44 Data Ascii: dfcPubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=6D366468-71AF-422B-99AB-138A6D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50126	52.223.40.198	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:37 UTC	832	OUT	GET /track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&US_PRIVACY=1YNN HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=de959f04-5668-4cc4-9c45-9e4a8efcd9a8; TDCPM=CAESFwoIcHVibWF0aWMSCwjEkpDP4OTnPBAFEhQKBXRhcGFkEgsI7qj62-Dk5zwQBRgBIAEoAjILCMae_Yj35Oc8EAU4AVoFdGFwYWRgAg..
2024-03-29 00:41:37 UTC	638	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:37 GMT Content-Length: 253 Connection: close server: Kestrel location: https://hb.yahoo.net/cksync.php?cs=1&type=55953&ovsid=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&gdpr=0&gdpr_consent= set-cookie: TDID=de959f04-5668-4cc4-9c45-9e4a8efcd9a8; expires=Sat, 29 Mar 2025 00:41:37 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjEkpDP4OTnPBAFEhQKBXRhcGFkEgsI7qj62-Dk5zwQBRIZCgpyaWdodG1lZGlhEgsI8KWh6ODk5zwQBRgBIAIoAjILCMae_Yj35Oc8EAU4AVoFdGFwYWRgAg..; expires=Sat, 29 Mar 2025 00:41:37 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-29 00:41:37 UTC	253	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 31 26 74 79 70 65 3d 35 35 39 35 33 26 6f 76 73 69 64 3d 64 65 39 35 39 66 30 34 2d 35 36 36 38 2d 34 63 63 34 2d 39 63 34 35 2d 39 65 34 61 38 65 66 63 64 39 61 38 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 31 26 74 79 70 65 3d 35 35 39 35 33 26 6f 76 73 69 64 3d 64 65 39 35 39 66 30 34 2d 35 36 36 38 2d 34 63 63 34 2d 39 63 34 35 2d 39 65 34 61 38 65 66 63 64 39 61 38 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://hb.yahoo.net/cksync.php?cs=1&type=55953&ovsid=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&gdpr=0&gdpr_consent=">https://hb.yahoo.net/cksync.php?cs=1&type=55953&ovsid=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50141	192.184.68.166	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:37 UTC	641	OUT	GET /pixel/p-Z8PuJEk6U7Hyq.gif?idmatch=0&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:37 UTC	720	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:37 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=81&gdpr=0&external_user_id=fACR1npTldFnUsSFfwaM1HNUkdJnUpSCeVLXvzrJ P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EG4BDQG-K7jvsQA; expires=Thu, 27-Jun-2024 00:41:37 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=66060e41-dee50-49b02-d5b3d; expires=Tue, 29-Apr-2025 00:41:37 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50142	107.22.223.168	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:37 UTC	750	OUT	GET /s/31327?bidder_id=14481&bidder_uuid=ZgYOPsAoJI0AAAi4ADlhawAA%261617&gpdr=&gdpr_consent=&us_privacy=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=07571c18-3f04-4602-a656-288806fb242c
2024-03-29 00:41:37 UTC	565	IN	HTTP/1.1 303 See Other Date: Fri, 29 Mar 2024 00:41:37 GMT Content-Length: 0 Connection: close Location: https://x.bidswitch.net/sync?ssp=liveintent&user_id=07571c18-3f04-4602-a656-288806fb242c Set-Cookie: _li_ss=CgcKBQgMENEX; Max-Age=2592000; Expires=Sun, 28 Apr 2024 00:41:37 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=07571c18-3f04-4602-a656-288806fb242c; Max-Age=63072000; Expires=Sun, 29 Mar 2026 00:41:37 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50139	70.42.32.191	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:37 UTC	653	OUT	GET /usersync/index/?us_privacy=&gdpr=&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:38 UTC	594	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 115 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: /usersync/index/?gdpr=&gdpr_consent=&gpp=DBAA&gpp_sid=-1&s=2&us_privacy= P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=P1GEqyyk_OouTnS49Tqs; Path=/; Domain=zemanta.com; Expires=Sat, 29 Mar 2025 00:41:37 GMT; Max-Age=31536000; Secure; SameSite=None Date: Fri, 29 Mar 2024 00:41:37 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-03-29 00:41:38 UTC	115	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 79 6e 63 2f 69 6e 64 65 78 2f 3f 67 64 70 72 3d 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 67 70 70 3d 44 42 41 41 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 2d 31 26 61 6d 70 3b 73 3d 32 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/usersync/index/?gdpr=&gdpr_consent=&gpp=DBAA&gpp_sid=-1&s=2&us_privacy=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50147	35.190.90.30	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:37 UTC	665	OUT	GET /t/v2/sync?tagid=V2_2739&src.visitorId=CAESELOW-bAw-t_N6FeT1fJfGXo&google_cver=1 HTTP/1.1 Host: odr.mookie1.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:38 UTC	884	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:38 GMT Server: Apache P3P: CP="NON DSP COR NID CURa PSAa PSDa OUR STP UNI COM NAV STA LOC OTC",policyref="/w3c/p3p.xml" X-Application-Context: application Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: id=10599221728013791818; Domain=.mookie1.com; Expires=Mon, 28-Apr-2025 00:41:38 GMT; Path=/; SameSite=None; Secure Set-Cookie: mdata=1\|10599221728013791818\|1711672898035; Domain=.mookie1.com; Expires=Mon, 28-Apr-2025 00:41:38 GMT; Path=/; SameSite=None; Secure Set-Cookie: ov=77e82fce471901823e343a703f27757b; Domain=.mookie1.com; Expires=Mon, 28-Apr-2025 00:41:38 GMT; Path=/; SameSite=None; Secure Content-Type: image/gif;charset=UTF-8 Content-Length: 43 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50140	54.236.94.254	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:37 UTC	615	OUT	GET /CookieIndex?gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:38 UTC	128	IN	HTTP/1.1 204 No Content Date: Fri, 29 Mar 2024 00:41:38 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50133	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	1687	OUT	GET /checksync.php?vsSync=1&cs=9&cv=31&https=1&cid=8YHBJ3BJ0&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25235%2C25036%2C25278%2C25237%2C25159%2C25038%2C25118%2C25239%2C25117%2C25318%2C25317%2C25270%2C25072%2C25031%2C25030%2C25198%2C25274%2C25276%2C25071%2C25202%2C25003%2C25127%2C25006%2C25204%2C25126%2C25007%2C25208%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25243%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25250%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:38 UTC	368	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 31365 Content-Type: text/html; charset=UTF-8 x-mnet-hl2: E Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Expires: Fri, 29 Mar 2024 00:41:38 GMT Cache-Control: max-age=0, no-cache Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:38 GMT Connection: close
2024-03-29 00:41:38 UTC	214	IN	Data Raw: 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 7b 0a 76 61 72 20 63 6f 6f 6b 69 65 53 79 6e 63 43 6f 6e 66 69 67 20 3d 20 7b 22 64 61 74 61 6c 65 6e 22 3a 32 36 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 76 73 43 6b 22 3a 22 76 69 73 69 74 6f 72 2d 69 64 22 2c 22 76 73 44 61 43 6b 22 3a 22 64 61 74 61 22 2c 22 73 65 70 56 61 6c 22 3a 22 7c 22 2c 22 73 65 70 54 69 6d 65 22 3a 22 2a 22 2c 22 73 65 70 43 73 22 3a 22 7e 7e 22 2c 22 76 73 44 61 54 69 6d 65 22 3a 31 35 35 35 32 30 30 30 2c 22 63 63 22 3a 22 Data Ascii: <html> <head></head> <body> <script type="text/javascript">try{var cookieSyncConfig = {"datalen":26,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":15552000,"cc":"
2024-03-29 00:41:38 UTC	16384	IN	Data Raw: 55 53 22 2c 22 7a 6f 6e 65 22 3a 22 20 65 20 22 2c 22 63 6f 63 22 3a 22 4e 41 22 7d 2c 22 63 73 22 3a 22 39 22 2c 22 6c 6f 6f 6b 75 70 22 3a 7b 22 6d 6e 22 3a 7b 22 6e 61 6d 65 22 3a 22 6d 6e 22 2c 22 74 69 6d 65 22 3a 31 38 30 2c 22 63 6f 6f 6b 69 65 22 3a 22 64 61 74 61 2d 6d 6e 22 2c 22 75 72 6c 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 6f 74 68 65 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 5c 2f 63 6b 73 79 6e 63 3f 63 73 3d 33 26 74 79 70 65 3d 79 68 62 26 67 64 70 72 3d 24 7b 47 44 50 52 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 24 7b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 7d 26 72 65 64 69 72 65 63 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 25 32 46 63 6b 73 Data Ascii: US","zone":" e ","coc":"NA"},"cs":"9","lookup":{"mn":{"name":"mn","time":180,"cookie":"data-mn","urls":[{"type":"other","url":"https:\/\/cs.media.net\/cksync?cs=3&type=yhb&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&redirect=https%3A%2F%2Fhb.yahoo.net%2Fcks
2024-03-29 00:41:38 UTC	14767	IN	Data Raw: 2c 67 65 74 50 72 6f 78 79 3a 4c 2c 67 65 74 50 72 6f 74 6f 63 6f 6c 3a 4d 2c 73 75 70 70 6f 72 74 53 74 6f 72 61 67 65 3a 49 2c 74 72 69 6d 3a 42 2c 69 6e 68 65 72 69 74 73 3a 4a 2c 66 72 6f 6d 49 45 3a 5f 2c 69 73 53 65 6e 64 42 65 61 63 6f 6e 3a 51 2c 69 73 44 69 73 61 62 6c 65 64 57 69 74 68 46 72 65 71 3a 56 2c 67 65 74 55 55 49 44 3a 47 2c 62 75 69 6c 64 43 6f 6c 6c 65 63 74 69 6f 6e 55 72 6c 49 74 65 6d 3a 7a 7d 7d 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 77 69 6e 64 6f 77 2e 5f 6d 4e 43 6b 2c 77 69 6e 64 6f 77 2e 63 6f 6f 6b 69 65 53 79 6e 63 43 6f 6e 66 69 67 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 Data Ascii: ,getProxy:L,getProtocol:M,supportStorage:I,trim:B,inherits:J,fromIE:_,isSendBeacon:Q,isDisabledWithFreq:V,getUUID:G,buildCollectionUrlItem:z}}(window,document,window._mNCk,window.cookieSyncConfig);!function(){"use strict";function n(n){return"[object Arra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50130	35.244.159.8	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	895	OUT	GET /w/1.0/cm?cc=1&id=9e0a35ea-c8e3-4b1b-9efa-4af6f54a373e&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&r=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dopx%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26axid_e%3D%26ovsid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=acaeb6da-c35c-4846-acd5-3bb6b6a37bb8\|1711672894
2024-03-29 00:41:38 UTC	644	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=acaeb6da-c35c-4846-acd5-3bb6b6a37bb8\|1711672894; Version=1; Expires=Sat, 29-Mar-2025 00:41:38 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://hb.yahoo.net/cksync.php?cs=1&vsid=3546744890180387000V10&type=opx&refUrl=&vid=16728938013546744890180387000V10&axid_e=&ovsid=51c60a0a-b2b1-4df8-a524-32544527bc2c Date: Fri, 29 Mar 2024 00:41:38 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50138	34.193.223.137	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	681	OUT	GET /bct?pid=24bab642-4268-4c70-a970-0bea528d1f03&google_gid=CAESECSg4fn9yW5Gv1GawLnrWMA&google_cver=1 HTTP/1.1 Host: mid.rkdms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:38 UTC	674	IN	HTTP/1.1 302 FOUND Server: awselb/2.0 Date: Fri, 29 Mar 2024 00:41:38 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close set-cookie: sc=10%3A116064; Domain=rkdms.com; Expires=Sat, 29 Mar 2025 00:41:38 GMT; Secure; Path=/; SameSite=None set-cookie: sessionid=h-2a76b4ca64ed4b9dbe8faaecce219970_t-1711672898; Domain=rkdms.com; Expires=Sat, 29 Mar 2025 00:41:38 GMT; Secure; Path=/; SameSite=None Vary: Accept-Encoding Pragma: no-cache Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Location: https://cm.g.doubleclick.net/pixel?google_nid=m1_dmp&google_cm&google_hm=2a76b4ca64ed4b9dbe8faaecce219970

Session ID	Source IP	Source Port	Destination IP	Destination Port
329	192.168.2.4	50137	104.18.36.155	443

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	844	OUT	GET /rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:38 UTC	1113	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:38 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?gpp=DBAA&gpp_sid=-1&google_nid=casale_media2_dbm&google_cm&google_sc&google_hm=ZgYOPsAoJI0AAAi4ADlhawAA CF-Ray: 86bbd0bdcbc58256-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:38 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:38 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gAqNfwJozZkPqRdQmzBhTfQ2GWup0PyTFeSgHbjaEUIvoyXAmEnhSFHvAWegx5X62TCU4oGcXEw%2FsWTNJyo5iwaOp3UxZnb%2BA1imzHfaQaJ5rGyvf311egxMSiiTOEoDYPhxpCSf%2FB%2FgVA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50128	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	833	OUT	GET /cksync.php?gpp=DBAA&gpp_sid=-1&cs=1&vsid=3546744890180387000V10&type=idx&refUrl=&vid=16728938013546744890180387000V10&axid_e=&ovsid=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:38 UTC	675	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1;Expires=Mon, 13 May 2024 00:41:38 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:38 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:38 GMT Connection: close
2024-03-29 00:41:38 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:38 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50144	172.64.151.101	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	956	OUT	GET /usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=183875&gdpr=0&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:38 UTC	992	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:38 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 86bbd0be69088260-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:38 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:38 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SPvhSFMuHIJmeoYAJ7CPgFJuDsDC84VimDPkId9E2sO2tyNfsv7PWQvo0P9R8Li%2BMTiwMKENBK38gYmtW7ioxzjBQ9a4T6SOy8cFjkpZ3In%2BlCj3Lr9DpA%2FUXgWZ3SNHu5TPl73EdHjJtg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:38 UTC	377	IN	Data Raw: 36 66 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 63 61 73 61 6c 65 3f 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 61 6d 70 3b 67 70 70 3d 44 42 41 41 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 2d 31 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 75 70 73 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 75 70 73 2f 35 35 39 34 30 Data Ascii: 6f6<html><head><title></title></head><body><img src="https://match.adsrvr.org/track/cmf/casale?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://ups.analytics.yahoo.com/ups/55940
2024-03-29 00:41:38 UTC	1369	IN	Data Raw: 6d 70 3b 67 70 70 3d 44 42 41 41 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 2d 31 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 74 69 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 75 73 65 72 2d 72 65 67 69 73 74 65 72 69 6e 67 3f 64 61 74 61 50 72 6f 76 69 64 65 72 49 64 3d 31 30 32 35 26 61 6d 70 3b 75 73 65 72 49 64 3d 5a 67 59 4f 50 73 41 6f 4a 49 30 41 41 41 69 34 41 44 6c 68 61 77 41 41 42 6c 45 41 41 41 49 42 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 61 6d 70 3b 67 64 70 72 Data Ascii: mp;gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://ads.stickyadstv.com/user-registering?dataProviderId=1025&userId=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB&gdpr_consent=&us_privacy=1YNN&gdpr
2024-03-29 00:41:38 UTC	43	IN	Data Raw: 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: ht="0" alt="" border="0" /></body></html>
2024-03-29 00:41:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50135	69.20.43.192	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	722	OUT	GET /cs?partnerId=59&redirect=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dlkqd_dbm%26google_hm%3D%24%24rawlkqduserid%7Cbase64%24%24 HTTP/1.1 Host: cs.lkqd.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:38 UTC	748	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 29 Mar 2024 00:41:38 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=lkqd_dbm&google_hm=TWJEdm1vNjhKcjQ Set-Cookie: sr59=1\|\|1711672898; Max-Age=31536000; Domain=.lkqd.net; Secure; SameSite=None Set-Cookie: lkqdid=MbDvmo68Jr4; Max-Age=31536000; Domain=.lkqd.net; Secure; SameSite=None Set-Cookie: lkqdidts=1711672898; Max-Age=31536000; Domain=.lkqd.net; Secure; SameSite=None Access-Control-Max-Age: 0 Cache-Control: max-age=0 Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: Content-Type Access-Control-Expose-Headers: Content-Type, Content-Disposition Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50145	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	713	OUT	GET /cksync.php?cs=1&type=58160&ovsid=LUBXUGUO-1P-87GV&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:38 UTC	659	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-mag=LUBXUGUO-1P-87GV~~1;Expires=Sat, 29 Mar 2025 00:41:38 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:38 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:38 GMT Connection: close
2024-03-29 00:41:38 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:38 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50149	54.156.236.4	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	951	OUT	GET /cookie-sync?gdpr=0&userid=4433599061245380871&gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=3&ev=AAFJBk7MDBwAABSliZdkug&pid=558502&do=add&gdpr=0 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAFJBk7MDBwAABSliZdkug; bitoIsSecure=ok
2024-03-29 00:41:38 UTC	634	IN	HTTP/1.1 303 See Other Date: Fri, 29 Mar 2024 00:41:38 GMT location: https://sync.technoratimedia.com/services?uid=AAFJBk7MDBwAABSliZdkug&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D4433599061245380871%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 Server: gunicorn set-cookie: bito=AAFJBk7MDBwAABSliZdkug; Domain=bidr.io; expires=Sun, 27 Apr 2025 20:41:38 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50177	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	1507	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=9022f636-a349-4fa5-9774-4b667b1cdee3&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; PugT=1711672896; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294
2024-03-29 00:41:38 UTC	696	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:38 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:38 GMT; path=/ Set-Cookie: PugT=1711672898; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:38 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:38 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50158	69.20.43.192	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	722	OUT	GET /cs?partnerId=59&partnerUserId=CAESEJTzVPhxsNbxAo83M2QShqc&google_cver=1 HTTP/1.1 Host: cs.lkqd.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sr59=1\|\|1711672897; lkqdid=9uqG17b1EL8; lkqdidts=1711672897
2024-03-29 00:41:38 UTC	523	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:38 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: sr59=1\|CAESEJTzVPhxsNbxAo83M2QShqc\|1711672898; Max-Age=31536000; Domain=.lkqd.net; Secure; SameSite=None Access-Control-Max-Age: 0 Cache-Control: max-age=0 Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: Content-Type Access-Control-Expose-Headers: Content-Type, Content-Disposition Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: *
2024-03-29 00:41:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50129	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	805	OUT	GET /cksync.php?cs=1&vsid=3546744890180387000V10&type=son&refUrl=&vid=16728938013546744890180387000V10&ovsid=d8bfd039-9f04-449c-875f-e04a2484e308&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:38 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1;Expires=Wed, 25 Sep 2024 00:41:38 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:38 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:38 GMT Connection: close
2024-03-29 00:41:38 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:38 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50125	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	717	OUT	GET /cksync.php?cs=1&type=mn&ovsid=3546744950180300000V10&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:38 UTC	664	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-mn=3546744950180300000V10~~1;Expires=Wed, 25 Sep 2024 00:41:38 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:38 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:38 GMT Connection: close
2024-03-29 00:41:38 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:38 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50174	70.42.32.191	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	692	OUT	GET /usersync/index/?gdpr=&gdpr_consent=&gpp=DBAA&gpp_sid=-1&s=2&us_privacy= HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=P1GEqyyk_OouTnS49Tqs
2024-03-29 00:41:38 UTC	616	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 125 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=17&external_user_id=P1GEqyyk_OouTnS49Tqs&puid= P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=P1GEqyyk_OouTnS49Tqs; Path=/; Domain=zemanta.com; Expires=Sat, 29 Mar 2025 00:41:38 GMT; Max-Age=31536000; Secure; SameSite=None Date: Fri, 29 Mar 2024 00:41:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-03-29 00:41:38 UTC	125	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 37 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 50 31 47 45 71 79 79 6b 5f 4f 6f 75 54 6e 53 34 39 54 71 73 26 61 6d 70 3b 70 75 69 64 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://dsum-sec.casalemedia.com/crum?cm_dsp_id=17&external_user_id=P1GEqyyk_OouTnS49Tqs&puid=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50192	209.204.233.130	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	641	OUT	GET /impression/v2/981703/85/co30sf0sigtuqp4bdl4g/88a3db3c-cec2-4d34-9d03-82ff3d7aa3f5?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1711673492&profileIDs=&creativeID=17e362d&pubID=183875&format=banner&channel=site&ap=${AUCTION_PRICE} HTTP/1.1 Host: a3558.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:38 UTC	223	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:38 GMT Server: Apache Access-Control-Allow-Origin: * Cache-Control: no-cache Content-Type: image/gif Expires: 0 Pragma: no-cache Content-Length: 43 Connection: close
2024-03-29 00:41:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50191	34.111.113.62	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	584	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&ttd_puid=55bb0499-3b94-4610-88d6-811dcbabb069%2C%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1711672894631; TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069; TapAd_3WAY_SYNCS=1!2136
2024-03-29 00:41:38 UTC	1101	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:38 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711672894631;Expires=Tue, 28 May 2024 00:41:38 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069;Expires=Tue, 28 May 2024 00:41:38 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!2136;Expires=Tue, 28 May 2024 00:41:38 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:38 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50175	209.204.229.30	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	621	OUT	GET /impression/v2/1057986/85/co30sf1lk6ksdr06ud1g/2ec7436d-80ce-4942-9c83-5a9e0e4475fb?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1711673492&profileIDs=&creativeID=e9e66a&pubID=201422&format=banner&channel=site HTTP/1.1 Host: a5589.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:38 UTC	223	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:38 GMT Server: Apache Access-Control-Allow-Origin: * Cache-Control: no-cache Content-Type: image/gif Expires: 0 Pragma: no-cache Content-Length: 43 Connection: close
2024-03-29 00:41:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50180	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	1503	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESECwFCJ1S0AHUyXWwZK-bCuI&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; PugT=1711672896; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294
2024-03-29 00:41:38 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:37 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 27-Jun-2024 00:41:37 GMT; path=/ Set-Cookie: PugT=1711672897; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:37 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:38 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50203	172.64.151.101	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	956	OUT	GET /usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=201422&gdpr=0&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:38 UTC	1000	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:38 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 86bbd0c188920688-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:38 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:38 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kFYsrXZiSEsvkaJ5Qp5Oz9PfFqkne%2Fi1QkgbdooBmYrT6dOUjza3pH0E1nlmkXUrVEFDyZlUggINsNC0vz8%2F4C%2BXP2vdS4vJ5DdpvTg%2BI3p8%2FS6VTHchvY%2Fa1GVrPFXCmG41i%2BLuE8xoCg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:38 UTC	369	IN	Data Raw: 37 35 35 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 34 36 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 24 55 49 44 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 61 6d 70 3b 67 70 70 3d 44 42 41 41 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 2d 31 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 Data Ascii: 755<html><head><title></title></head><body><img src="https://secure.adnxs.com/getuid?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=$UID&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0"
2024-03-29 00:41:38 UTC	1369	IN	Data Raw: 74 3d 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 70 70 3d 44 42 41 41 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 2d 31 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 63 6f 6d 70 61 6e 79 2d 74 61 72 67 65 74 2e 63 6f 6d 2f 73 2f 69 78 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 38 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 67 70 70 3d 44 42 41 41 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 2d Data Ascii: t=&us_privacy=1YNN&gdpr=&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://s.company-target.com/s/ix?cm_dsp_id=18&us_privacy=1YNN&gdpr=&gdpr_consent=&gpp=DBAA&gpp_sid=-
2024-03-29 00:41:38 UTC	146	IN	Data Raw: 69 34 41 44 6c 68 61 77 41 41 25 32 36 31 36 31 37 3d 26 61 6d 70 3b 67 70 70 3d 44 42 41 41 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 2d 31 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: i4ADlhawAA%261617=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN" style="display:none" width="0" height="0" alt="" border="0" /></body></html>
2024-03-29 00:41:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50166	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	754	OUT	GET /rum?cm_dsp_id=88&external_user_id=ZgYOPgAB7vmzSgAj&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:38 UTC	984	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:38 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0c20b855842-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:38 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:38 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GwNNZhYZXTl1IEXaiaypUEsJ9Zak9z1wNCFUBV%2BMO%2Fv3KhyYwYsvzh42FZLhFYvRZvvjb%2FMd0qH2DgmLJMWS2wtx7ckyfQAbZmGbJdy3kymDIuPTjQOWgNxYoJUnmtG8LSgT6MbFwLP96Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50198	52.46.130.91	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	530	OUT	GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4eCPhvW4k2tpPNlaxpmTNk; ad-privacy=0
2024-03-29 00:41:38 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 29 Mar 2024 00:41:38 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: PPDAJW4K5VGWH2K1RDEV Set-Cookie: ad-id=A4eCPhvW4k2tpPNlaxpmTNk; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 00:41:38 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 00:41:38 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-29 00:41:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50176	209.204.229.30	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	621	OUT	GET /impression/v2/1057984/85/co30sf1lk6ksdr06ud1g/5b9350cb-0895-4b93-8784-111a03fe0aea?verifieD=1&userID=&cmpro=0&deviceType=2&expiryTime=1711673492&profileIDs=&creativeID=c4ad37&pubID=201422&format=banner&channel=site HTTP/1.1 Host: a5589.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:38 UTC	223	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:38 GMT Server: Apache Access-Control-Allow-Origin: * Cache-Control: no-cache Content-Type: image/gif Expires: 0 Pragma: no-cache Content-Length: 43 Connection: close
2024-03-29 00:41:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50206	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	645	OUT	GET /simgad/6285427163810943659 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:38 UTC	822	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 68094 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 28 Mar 2024 15:56:27 GMT Expires: Fri, 28 Mar 2025 15:56:27 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 13 Jun 2023 20:56:49 GMT Content-Type: image/jpeg Age: 31511 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:38 UTC	430	IN	Data Raw: ff d8 ff e1 15 6f 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 93 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 35 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 33 3a 30 36 3a 31 33 20 31 31 3a 32 31 3a 33 33 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 01 2c a0 03 00 04 00 00 00 01 00 00 02 58 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: oExifMM*bj(1!r2i''Adobe Photoshop 24.5 (Macintosh)2023:06:13 11:21:33,X"
2024-03-29 00:41:38 UTC	1252	IN	Data Raw: 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 a0 00 50 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 05 ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 Data Ascii: P"?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv
2024-03-29 00:41:38 UTC	1252	IN	Data Raw: f4 f7 50 6a 18 8f 37 fa ad 61 dc 5b ee 2e 70 f7 3e 98 f6 7a 2c 77 b3 d4 fc c7 ff 00 84 5d 6f 55 e8 b7 57 d1 5f 7e 53 40 f4 eb 6b db 59 01 c6 36 4f ad ed dd b5 ab 13 a6 3e 96 0a f7 b2 22 aa dc c9 e0 d6 5a 27 64 fb 7d b9 0e b7 d4 fe 5a 82 53 23 5e df 8b 62 10 07 eb ff 00 35 bf 85 5e 37 d5 ba 99 5b b7 df 93 90 41 2e 63 75 71 8f a2 d7 bb db ed fe ba eb ba 06 50 e9 b6 b3 36 ff 00 d2 5f 65 4e 65 b5 02 00 6e e7 0b 1b 16 0d db bd ad 6a e6 3e d9 92 e2 2b a6 5f 53 c8 68 2d 68 30 78 67 d3 ff 00 06 df f0 9b 7f 31 37 52 cc 7e 28 03 7c de f0 0e e0 36 7f 20 3b 68 f8 26 e0 12 94 b4 f9 8e e5 7f 30 63 18 88 de 83 68 bd a7 59 ff 00 18 58 d8 94 be 8c 5a 1d 66 71 11 b4 b8 7a 75 cf e7 5c f6 1d fb ff 00 e0 19 ef ff 00 89 5e 4a fc 81 8c c3 43 db b4 35 ee f4 cb a4 6a fd 5e cf 54 Data Ascii: Pj7a[.p>z,w]oUW_~S@kY6O>"Z'd}ZS#^b5^7[A.cuqP6_eNenj>+_Sh-h0xg17R~(\|6 ;h&0chYXZfqzu\^JC5j^T
2024-03-29 00:41:38 UTC	1252	IN	Data Raw: 44 9a 1e 4b a0 40 ab 75 30 a8 73 08 35 d3 6d 0e 69 da 7d 2b db 63 4b 8f f2 49 5a 15 e1 f4 ea 69 b2 fb 04 be f6 b8 b5 85 a5 ad 1b 77 d4 f7 06 b7 db ea 7a ac f7 ff 00 e0 4b 16 9c cb 69 66 d7 56 2e ed b8 c0 23 f7 9b f4 1c ba 2a 7a 07 53 cc c1 c2 c8 7b ea c5 c1 75 27 d0 71 71 7b c8 b0 db 94 e7 d9 4b 3f 3b d5 7f a4 ef e6 fd 1f d0 ff 00 c6 28 0c 27 19 6b a5 f6 3b b6 06 48 18 8d 2e bb 8d 9f ff d4 e9 e8 70 fb 3d 3a ff 00 82 af fe a1 aa 37 d4 c7 d7 e9 ba ba ed aa 67 63 db 20 1f ec fd 15 93 4f 5e e9 22 8a 9b fb 4b 19 a4 56 c0 47 ad 5c 82 1a d1 fb c9 ff 00 6e f4 ce dd 57 1b fe de af ff 00 24 a2 30 9d fc a7 ec 66 b1 dd d3 6e 2e 33 f1 46 23 f1 ab b3 1c 6a 29 78 f5 18 0f f2 7d 5d cb 3f 33 a2 d3 e9 be ac 7c 7b 58 c8 f6 d6 db 05 95 4f f2 b0 b3 5b 75 2d 6f fc 5a 88 eb dd Data Ascii: DK@u0s5mi}+cKIZiwzKifV.#*zS{u'qq{K?;('k;H.p=:7gc O^"KVG\nW$0fn.3F#j)x}]?3\|{XO[u-oZ
2024-03-29 00:41:38 UTC	1252	IN	Data Raw: 5c a1 5d 75 55 79 bc a2 4b 4e ef ab 5d 72 8c 7b 72 6d c4 73 6a c7 60 7d de e6 17 30 18 fe 72 90 ff 00 59 af 63 5f 5d 97 55 e9 fa b4 53 6d 57 5d fa 2b 6b 59 8a 51 20 76 36 b5 ff d6 f3 bc 3c fc bc 1b 1d 66 2d 86 a7 3d bb 1c 40 06 5b b9 b6 8d 1e 1c df 6d b5 55 6b 3f d1 db 5d 76 31 11 dd 63 a9 bb 09 f8 0e c8 73 b1 5f cd 26 08 fa 46 ef 67 b7 75 7b ac 77 e9 3d 3f e7 3f c2 2a 69 2d ae 11 bd 30 b7 87 5b ea a3 d3 8c 97 fe 8b d1 f4 e6 0e df b3 b6 ca 71 43 64 7f 80 ab 22 e6 33 fe 31 12 bf ac 7d 6e a6 53 5b 32 de 19 8c 41 a4 43 4e d0 2b fb 2f a6 37 37 f9 97 63 fe 8e ca 3f 99 b7 fc 23 15 0a 69 bb 22 e6 51 43 1d 6d d6 38 36 ba d8 0b 9c e7 1f a2 c6 31 be e7 39 74 1f f8 de 7d 74 ff 00 ca bb 3f cf ab ff 00 4a a6 4b da 8f cd c2 3c d3 ab 96 de b9 d5 1b 90 cc 9f 58 3e ea d9 Data Ascii: \]uUyKN]r{rmsj`}0rYc_]USmW]+kYQ v6<f-=@[mUk?]v1cs_&Fgu{w=??*i-0[qCd"31}nS[2ACN+/77c?#i"QCm8619t}t?JK<X>
2024-03-29 00:41:38 UTC	1252	IN	Data Raw: fa 4f d9 bf a6 63 d9 95 f6 3c 0b fa 5f a3 88 72 7e d9 8b 69 04 34 d1 5d bb ad d4 b9 9b b6 6d 0d 73 7d 9f 98 f5 49 11 00 76 94 be d5 5f 82 92 49 25 2a 1f ff d9 ff ed 1e 30 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 cd cf fa 7d a8 c7 be 09 05 70 76 ae af 05 c3 4e 38 42 49 4d 04 3a 00 00 00 00 00 f9 00 00 00 10 00 00 00 01 00 00 00 00 00 0b 70 72 69 6e 74 4f 75 74 70 75 74 00 00 00 05 00 00 00 00 50 73 74 53 62 6f 6f 6c 01 00 00 00 00 49 6e 74 65 65 6e 75 6d 00 00 00 00 49 6e 74 65 00 00 00 00 43 6c 72 6d 00 00 00 0f 70 72 69 6e 74 53 69 78 74 65 65 6e 42 69 74 62 6f 6f 6c 00 00 00 00 0b 70 72 69 6e 74 65 72 4e 61 6d 65 54 45 58 54 00 00 00 Data Ascii: Oc<_r~i4]ms}Iv_I%*0Photoshop 3.08BIMZ%G8BIM%}pvN8BIM:printOutputPstSboolInteenumInteClrmprintSixteenBitboolprinterNameTEXT
2024-03-29 00:41:38 UTC	1252	IN	Data Raw: ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 38 42 49 4d 04 00 00 00 00 00 00 02 00 08 38 42 49 4d 04 02 00 00 00 00 00 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 42 49 4d 04 30 00 00 00 00 00 11 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 00 38 42 49 4d 04 2d 00 00 00 00 00 06 00 01 00 00 00 0f 38 42 49 4d 04 08 00 00 00 00 00 15 00 00 00 01 00 00 02 40 00 00 02 40 00 00 00 01 00 00 02 42 00 00 38 42 49 4d 04 44 00 00 00 00 00 19 00 00 00 02 00 00 02 40 00 00 02 40 00 00 00 01 00 00 02 42 00 00 4a ff ff 00 38 42 49 4d 04 1e 00 00 Data Ascii: 8BIM8BIM"8BIM08BIM-8BIM@@B8BIMD@@BJ8BIM
2024-03-29 00:41:38 UTC	1252	IN	Data Raw: 01 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 a0 00 50 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 05 ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 Data Ascii: AdobedP"?3
2024-03-29 00:41:38 UTC	1252	IN	Data Raw: 79 ab 1b a8 b5 c5 af c6 0e d1 fe 16 e2 9b 0f e9 1b fb d5 ef 7d 8c 4a 03 42 7f 95 23 29 d4 0f ec f5 3b 72 a1 91 fd 1e ff 00 f8 ab 3f ea 1c a6 41 06 1c 08 23 b1 d0 a1 df fd 1e ef f8 ab 3f ea 1c 9c 37 63 7f ff d1 ca fa ff 00 d5 f2 33 6a e9 3b 9c d2 cc 7a 5e 06 cd 06 e7 36 ae 75 77 fa 25 ce e7 f4 f7 50 6a 18 8f 37 fa ad 61 dc 5b ee 2e 70 f7 3e 98 f6 7a 2c 77 b3 d4 fc c7 ff 00 84 5d 6f 55 e8 b7 57 d1 5f 7e 53 40 f4 eb 6b db 59 01 c6 36 4f ad ed dd b5 ab 13 a6 3e 96 0a f7 b2 22 aa dc c9 e0 d6 5a 27 64 fb 7d b9 0e b7 d4 fe 5a 82 53 23 5e df 8b 62 10 07 eb ff 00 35 bf 85 5e 37 d5 ba 99 5b b7 df 93 90 41 2e 63 75 71 8f a2 d7 bb db ed fe ba eb ba 06 50 e9 b6 b3 36 ff 00 d2 5f 65 4e 65 b5 02 00 6e e7 0b 1b 16 0d db bd ad 6a e6 3e d9 92 e2 2b a6 5f 53 c8 68 2d 68 30 Data Ascii: y}JB#);r?A#?7c3j;z^6uw%Pj7a[.p>z,w]oUW_~S@kY6O>"Z'd}ZS#^b5^7[A.cuqP6_eNenj>+_Sh-h0
2024-03-29 00:41:38 UTC	1252	IN	Data Raw: f8 b2 d6 07 1f a4 f2 5e ef 29 ff 00 7a 96 1a 80 7b ac 90 a2 41 67 95 69 a4 0d bf 4c 34 31 9e 47 f3 9d fd 95 5f 13 1d cf 26 df b3 b7 26 8a a1 b6 31 d6 0a c4 bc 38 55 ef df 5b fd ae 6e ff 00 6f fd 71 2c 8a ee b6 d7 59 00 b7 86 fb 87 01 09 ac c8 6b b7 31 ae 6b a0 8d cd 3d 88 87 77 fd d4 cc 82 44 9a 1e 4b a0 40 ab 75 30 a8 73 08 35 d3 6d 0e 69 da 7d 2b db 63 4b 8f f2 49 5a 15 e1 f4 ea 69 b2 fb 04 be f6 b8 b5 85 a5 ad 1b 77 d4 f7 06 b7 db ea 7a ac f7 ff 00 e0 4b 16 9c cb 69 66 d7 56 2e ed b8 c0 23 f7 9b f4 1c ba 2a 7a 07 53 cc c1 c2 c8 7b ea c5 c1 75 27 d0 71 71 7b c8 b0 db 94 e7 d9 4b 3f 3b d5 7f a4 ef e6 fd 1f d0 ff 00 c6 28 0c 27 19 6b a5 f6 3b b6 06 48 18 8d 2e bb 8d 9f ff d4 e9 e8 70 fb 3d 3a ff 00 82 af fe a1 aa 37 d4 c7 d7 e9 ba ba ed aa 67 63 db 20 1f Data Ascii: ^)z{AgiL41G_&&18U[noq,Yk1k=wDK@u0s5mi}+cKIZiwzKifV.#*zS{u'qq{K?;('k;H.p=:7gc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50179	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	1477	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:45E09433ABCF443988615F414991A294 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; PugT=1711672896; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294
2024-03-29 00:41:39 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:38 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:38 GMT; path=/ Set-Cookie: PugT=1711672898; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:38 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:39 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50187	23.43.243.147	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	728	OUT	GET /log?logid=kfk&evtid=l1log&ct=&cid=8YHBJ3BJ0&crid=827382134&pvid=25307&act=headerBid&aid=1&size=300x600&sc_pvid=-3&cc=US&ugd=4&td=&abte=yhb&requrl=https%3A%2F%2F02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&r=1711672895353&gdpr_consent= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:39 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Fri, 29 Mar 2024 00:41:39 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:39 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-29 00:41:39 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50181	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	1445	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; PugT=1711672896; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294
2024-03-29 00:41:39 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:37 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:39 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50173	52.223.22.214	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	474	OUT	GET /xuid?ld=1&mid=7976&xuid=6D366468-71AF-422B-99AB-138A6DAB94F7&dongle=u6nf&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=1910044241478282443237
2024-03-29 00:41:39 UTC	612	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=1910044241478282443237; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 27 Jun 2024 00:41:39 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=1910044241478282443237; Max-Age=7776000; Expires=Thu, 27 Jun 2024 00:41:39 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-03-29 00:41:39 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50205	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	689	OUT	GET /879366/express_html_inpage_rendering_lib_200_278.js HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:39 UTC	774	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 113329 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 28 Mar 2024 22:48:22 GMT Expires: Fri, 29 Mar 2024 22:48:22 GMT Cache-Control: public, max-age=86400 Age: 6797 Last-Modified: Tue, 14 Mar 2023 18:44:05 GMT Content-Type: text/javascript Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:39 UTC	478	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 68 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 63 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 Data Ascii: (function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var h,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.define
2024-03-29 00:41:39 UTC	1252	IN	Data Raw: 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 0a 7d 2c 65 61 3d 64 61 28 74 68 69 73 29 2c 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 65 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 Data Ascii: ject"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ea=da(this),fa=function(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c)
2024-03-29 00:41:39 UTC	1252	IN	Data Raw: 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 6a 61 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 29 6a 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6d 61 3b 61 3a 7b 76 61 72 20 6e 61 3d 7b 61 3a 21 30 7d 2c 6f 61 3d 7b 7d 3b 74 72 79 7b 6f 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 61 3b 6d 61 3d 6f 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6d 61 3d 21 31 7d 6a 61 3d 6d 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 Data Ascii: e?Object.create:function(a){var b=function(){};b.prototype=a;return new b},ja;if("function"==typeof Object.setPrototypeOf)ja=Object.setPrototypeOf;else{var ma;a:{var na={a:!0},oa={};try{oa.__proto__=na;ma=oa.a;break a}catch(a){}ma=!1}ja=ma?function(a,b){a
2024-03-29 00:41:39 UTC	1252	IN	Data Raw: 72 20 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 6e 75 6c 6c 3d 3d 62 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 2c 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 62 26 26 6e 75 6c 6c 21 3d 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 62 7d 2c 73 61 3d 22 63 6c 6f 73 75 72 65 5f 75 69 64 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2c 75 61 3d 30 2c 76 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 61 2e 62 69 6e 64 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 77 61 3d 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: r c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b},ra=function(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b},sa="closure_uid_"+(1E9*Math.random()>>>0),ua=0,va=function(a,b,c){return a.call.apply(a.bind,arguments)},wa=function(a
2024-03-29 00:41:39 UTC	1252	IN	Data Raw: 6e 74 73 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 67 5b 6b 2d 32 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6b 5d 3b 72 65 74 75 72 6e 20 62 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 2e 61 70 70 6c 79 28 64 2c 67 29 7d 7d 2c 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 41 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 41 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 Data Ascii: nts.length;k++)g[k-2]=arguments[k];return b.prototype[e].apply(d,g)}},za=function(a){return a};function A(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,A);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(t
2024-03-29 00:41:39 UTC	1252	IN	Data Raw: 2f 28 5c 64 2a 29 28 5c 44 2a 29 28 2e 2a 29 2f 2e 65 78 65 63 28 67 29 7c 7c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 5d 3b 69 66 28 30 3d 3d 66 5b 30 5d 2e 6c 65 6e 67 74 68 26 26 30 3d 3d 67 5b 30 5d 2e 6c 65 6e 67 74 68 29 62 72 65 61 6b 3b 63 3d 4f 61 28 30 3d 3d 66 5b 31 5d 2e 6c 65 6e 67 74 68 3f 30 3a 70 61 72 73 65 49 6e 74 28 66 5b 31 5d 2c 31 30 29 2c 30 3d 3d 67 5b 31 5d 2e 6c 65 6e 67 74 68 3f 30 3a 70 61 72 73 65 49 6e 74 28 67 5b 31 5d 2c 31 30 29 29 7c 7c 4f 61 28 30 3d 3d 66 5b 32 5d 2e 6c 65 6e 67 74 68 2c 30 3d 3d 67 5b 32 5d 2e 6c 65 6e 67 74 68 29 7c 7c 4f 61 28 66 5b 32 5d 2c 67 5b 32 5d 29 3b 66 3d 66 5b 33 5d 3b 67 3d 67 5b 33 5d 7d 77 68 69 6c 65 28 30 3d 3d 63 29 7d 72 65 74 75 72 6e 20 63 7d 2c 4f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: /(\d)(\D)(.*)/.exec(g)\|\|["","","",""];if(0==f[0].length&&0==g[0].length)break;c=Oa(0==f[1].length?0:parseInt(f[1],10),0==g[1].length?0:parseInt(g[1],10))\|\|Oa(0==f[2].length,0==g[2].length)\|\|Oa(f[2],g[2]);f=f[3];g=g[3]}while(0==c)}return c},Oa=function(a
2024-03-29 00:41:39 UTC	1252	IN	Data Raw: 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 5b 5d 2c 65 3d 30 2c 66 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 67 3d 30 3b 67 3c 63 3b 67 2b 2b 29 69 66 28 67 20 69 6e 20 66 29 7b 76 61 72 20 6b 3d 66 5b 67 5d 3b 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 6b 2c 67 2c 61 29 26 26 28 64 5b 65 2b 2b 5d 3d 6b 29 7d 72 65 74 75 72 6e 20 64 7d 2c 67 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 41 72 72 61 79 28 63 29 2c 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 0a 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 66 3d 30 3b 66 3c 63 3b 66 2b 2b 29 66 20 69 6e 20 65 26 26 28 64 5b 66 5d 3d 62 Data Ascii: b){for(var c=a.length,d=[],e=0,f="string"===typeof a?a.split(""):a,g=0;g<c;g++)if(g in f){var k=f[g];b.call(void 0,k,g,a)&&(d[e++]=k)}return d},gb=function(a,b){for(var c=a.length,d=Array(c),e="string"===typeof a?a.split(""):a,f=0;f<c;f++)f in e&&(d[f]=b
2024-03-29 00:41:39 UTC	1252	IN	Data Raw: 2c 75 62 3d 43 28 22 45 64 67 65 22 29 2c 76 62 3d 43 28 22 47 65 63 6b 6f 22 29 26 26 21 28 2d 31 21 3d 55 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 26 26 21 43 28 22 45 64 67 65 22 29 29 26 26 21 28 43 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 43 28 22 4d 53 49 45 22 29 29 26 26 21 43 28 22 45 64 67 65 22 29 2c 77 62 3d 2d 31 21 3d 55 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 26 26 21 43 28 22 45 64 67 65 22 29 2c 78 62 3d 51 61 26 26 56 61 26 26 56 61 2e 70 6c 61 74 66 6f 72 6d 3f 22 41 6e 64 72 6f 69 64 22 3d 3d 3d 56 61 2e 70 6c 61 74 66 6f 72 6d 3a 43 28 22 41 6e 64 72 6f 69 64 22 29 2c 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: ,ub=C("Edge"),vb=C("Gecko")&&!(-1!=Ua().toLowerCase().indexOf("webkit")&&!C("Edge"))&&!(C("Trident")\|\|C("MSIE"))&&!C("Edge"),wb=-1!=Ua().toLowerCase().indexOf("webkit")&&!C("Edge"),xb=Qa&&Va&&Va.platform?"Android"===Va.platform:C("Android"),yb=function(){
2024-03-29 00:41:39 UTC	1252	IN	Data Raw: 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 29 3f 53 79 6d 62 6f 6c 28 29 3a 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 58 62 28 61 29 7b 76 61 72 20 62 3b 57 62 3f 62 3d 61 5b 57 62 5d 3a 62 3d 61 2e 6a 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 62 3f 30 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 59 62 28 61 2c 62 29 7b 57 62 3f 61 5b 57 62 5d 3d 62 3a 76 6f 69 64 20 30 21 3d 3d 61 2e 6a 3f 61 2e 6a 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 61 2c 7b 6a 3a 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 7d 7d 29 3b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 5a 62 3d 7b 7d Data Ascii: mbol&&"symbol"===typeof Symbol()?Symbol():void 0;function Xb(a){var b;Wb?b=a[Wb]:b=a.j;return null==b?0:b}function Yb(a,b){Wb?a[Wb]=b:void 0!==a.j?a.j=b:Object.defineProperties(a,{j:{value:b,configurable:!0,writable:!0,enumerable:!1}});return a};var Zb={}
2024-03-29 00:41:39 UTC	1252	IN	Data Raw: 66 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 7b 76 61 72 20 6b 3d 66 5b 67 5d 3b 76 6f 69 64 20 30 3d 3d 3d 54 62 5b 6b 5d 26 26 28 54 62 5b 6b 5d 3d 67 29 7d 7d 7d 62 3d 4f 62 5b 62 5d 3b 63 3d 41 72 72 61 79 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2e 6c 65 6e 67 74 68 2f 33 29 29 3b 64 3d 62 5b 36 34 5d 7c 7c 22 22 3b 66 6f 72 28 65 3d 66 3d 30 3b 66 3c 61 2e 6c 65 6e 67 74 68 2d 32 3b 66 2b 3d 33 29 7b 76 61 72 20 6e 3d 61 5b 66 5d 2c 72 3d 61 5b 66 2b 31 5d 3b 6b 3d 61 5b 66 2b 32 5d 3b 67 3d 62 5b 6e 3e 3e 32 5d 3b 6e 3d 62 5b 28 6e 26 33 29 3c 3c 34 7c 72 3e 3e 34 5d 3b 72 3d 62 5b 28 72 26 31 35 29 3c 3c 32 7c 6b 3e 3e 36 5d 3b 6b 3d 62 5b 6b 26 36 33 5d 3b 63 5b 65 2b 2b 5d 3d 22 22 2b 67 2b 6e 2b 72 2b 6b 7d 67 3d 30 3b 6b 3d 64 3b 73 77 69 74 63 68 28 Data Ascii: f.length;g++){var k=f[g];void 0===Tb[k]&&(Tb[k]=g)}}}b=Ob[b];c=Array(Math.floor(a.length/3));d=b[64]\|\|"";for(e=f=0;f<a.length-2;f+=3){var n=a[f],r=a[f+1];k=a[f+2];g=b[n>>2];n=b[(n&3)<<4\|r>>4];r=b[(r&15)<<2\|k>>6];k=b[k&63];c[e++]=""+g+n+r+k}g=0;k=d;switch(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50189	23.43.243.147	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:38 UTC	728	OUT	GET /log?logid=kfk&evtid=l1log&ct=&cid=8YHBJ3BJ0&crid=206512146&pvid=-3&act=headerBid&aid=3&size=970x250&sc_pvid=25307&cc=US&ugd=4&td=&abte=yhb&requrl=https%3A%2F%2F02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&r=1711672895386&gdpr_consent= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:39 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Fri, 29 Mar 2024 00:41:39 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:39 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-29 00:41:39 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50201	172.64.151.101	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	956	OUT	GET /usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=201422&gdpr=0&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:39 UTC	992	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 86bbd0c3184538ac-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:39 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:39 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uS0W3%2Bjk3VaS%2FbRlB6DX4iT2W4zKECOB5GqcTgQD6e9aBpM1vuaBtfubveHlggJBVFnYTXn9OJmyrkFaqeq3Hqu4ExeXg1Rd1nEBPRHmLQsZjHS%2FdikE5KvFsgLng4XZfk9ScIMeNF4wzg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:39 UTC	377	IN	Data Raw: 36 35 66 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2d 73 79 6e 63 2e 73 69 74 65 73 63 6f 75 74 2e 63 6f 6d 2f 64 6d 70 2f 70 69 78 65 6c 53 79 6e 63 3f 6e 69 64 3d 34 38 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 61 6d 70 3b 67 70 70 3d 44 42 41 41 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 2d 31 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 2e 74 75 72 6e 2e 63 6f 6d 2f 72 2f 63 73 3f Data Ascii: 65f<html><head><title></title></head><body><img src="https://pixel-sync.sitescout.com/dmp/pixelSync?nid=48&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://ad.turn.com/r/cs?
2024-03-29 00:41:39 UTC	1261	IN	Data Raw: 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 31 2e 61 64 66 6f 72 6d 2e 6e 65 74 2f 73 65 72 76 69 6e 67 2f 63 6f 6f 6b 69 65 2f 6d 61 74 63 68 3f 70 61 72 74 79 3d 32 39 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 61 6d 70 3b 67 70 70 3d 44 42 41 41 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 2d 31 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 72 65 61 74 69 76 65 63 64 6e 2e 63 6f 6d 2f 63 6d 2d 6e 6f 74 69 66 79 3f 70 69 3d 69 6e 64 65 78 26 61 6d 70 3b 67 70 64 72 3d 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 Data Ascii: src="https://c1.adform.net/serving/cookie/match?party=29&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://creativecdn.com/cm-notify?pi=index&gpdr=&gdpr_consent=&u
2024-03-29 00:41:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50186	23.43.243.147	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	726	OUT	GET /log?logid=kfk&evtid=l1log&ct=&cid=8YHBJ3BJ0&crid=533126705&pvid=25307&act=headerBid&aid=5&size=300x600&sc_pvid=&cc=US&ugd=4&td=&abte=yhb&requrl=https%3A%2F%2F02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&r=1711672895395&gdpr_consent= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:39 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Fri, 29 Mar 2024 00:41:39 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:39 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-29 00:41:39 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50184	23.43.243.147	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	6123	OUT	GET /clog?pixel_len_bucket=5697&logid=awlog&lper=1&itypeid=84&itype=YHB&itype_override=YHB&cc=US&cid=8YHBJ3BJ0&reqid=347818279457200221711672891606&vid=347818279457200221711672891606&dn=yahoo.com&rawDn=yahoo.com&requrl_dn=yahoo.com&pid=8PR6KY355&ugd=4&fleet=yahoo&vsid=3546744890180387&requrl=https%3A%2F%2Fwww.yahoo.com&cliIPType=v4&coppa_status=N&coppa_applied=N&coppa_enf=true&lmt_enf=true&dnt_enf=true&geo_source=2&sc=DC&ct=washington&zip=20011&pubid=pub-8YHBJ3BJ0&tgtval=pub-8YHBJ3BJ0&csip=rtb-homie1-z1-796d6fb7bd-rckbc.YSC&dtc=y_east_sc&zone=d&sd=-1&ptype=43&tmax=1400&xtmax=545&gdpr=0&gsi=0&gpp_present=true&gpp_sid%3C%3E=-1&app=0&sat=0&screeninfo=1280x907&ortb_device_id=2&asn=174&sckfl=0&sckfl2=0&usp_status=1&usp_enf=1&usp_string=1YNN&ufca=13&mspa_enforced=true&pexid=YHB-8YHBJ3BJ0&geoll=false&is_ortb=false&s_city=Reston&commit_id=bfef87ed&ocurr=USD&omul=1.0&currsrc=API&currsrc_date=2024-03-28+00%3A00%3A00&pbasrc=1&dummy_vsid=false&second_call=false&ipcc=US&abte=SSP_CLIENT&is_msnnative_src=false&abtest_status=0&svr=285_20_20_ssp&dapp=green&ysec=main&ydt=desktop&yr=US&ylang=en-US&ys=fp&proxy=g-use1c-rtb-envoy-2&header_lang=true&rtttime=464&req_tid_present=false&pvid=25052&parent_pvid=25051&prvAccId=4309697&prvApiId=60157&adj0=0.0&adj1=0.0&adj2=0.0&pst=0&crid=206512146&prspt=headerBid&prvReqId=43032341314423_1230234939_2065121462250521&size=970x250&bdp=2.210&bid_uuid=d4a6d1f6b130c0c2027605e4e3bee299&cbdp=2.210&og_cbdp=2.210&ogbdp=2.21&pv_adtype=0&res_mtype=0&mnet_ckfl=1&ckfl=0&be=0&advUrl=denturerescue.com&dfpBd=2.210&dsrc=-2&dp=0&dbf=1&epc=us_yhp_main_dt_top_center&s=1&snm=SUCCESS&bId=4309697&pcrid=694993717199&tpbTkn=false&pvAgId=Index+Exchange&exid=10015&bidflr=0.000&pbidflr=0.050&basebidflr=0.05&opbidflr=0.050&spbf=0&bfa_pr=0.05&bfa_rr=0.0&flr_price=0.05&viewability=90&exp=sfl%3Dfalse%7CssBucket%3D0%7Cbfl%3D-100%7Cfl_rl%3D1%7CssProfile%3D0%7Cdbr%3D1%7Csfl%3Dfalse%7Cbfl%3D-100&mnrf=0&seat=85&ortbseat=Index+Exchange&brsrclk=0&bidrestime=1711672892590&fpuReq=1&bfs=101&acsn=1&bcrid=695100154993717199&stagid=sda-MAST-iframe&vls=2&mang=0&pvdTmax=335&fpusp=false&ae=false&epcexp=false&ucrid_ver=2&omid=0&mnet_static_share=0.0&req_bucket_id=1&dt=O&flr_strat=dynamic&mx_svc_mode=http&incentive_type=0&aogbdp=0.0&spIvt=0&spId=75bc0e19-4df6-4d4e-befb-a13ec2acb7cf&spSource=1&spTo=3&spIsReq=1&spFst=0&spCst=0&mx_page_url=https%3A%2F%2Fwww.yahoo.com&mx_sbp=-10.0&mx_badv_count=3&mx_epbc=60157&mx_ssProfile=0&mx_g_uid_source_cvrg%3C%3E=index%23EIDS%23%23magnite%23EIDS%23%23liveintentId%23EIDS%23%23pubmatic%23EIDS&mx_int_dsp_id=1007&mx_sua_os_n=Windows&mx_lr=0&mx_lr_seg_deal=0&mx_aqcpl_crid=0&mx_g_uid_cvrg%3C%3E=magnite%23%23liveintentId%23%23pubmatic%23%23index&mx_dup_profile=343&mx_bsAlgoBucket=NOT_APPLICABLE&mx_g_uid_sent%3C%3E=liveintentId%23%23index&mx_dup_algo=AVERAGE_DECAYED_CPM&mx_bsVerdictAlgo=V1&mx_gpid_format=EPC&mx_bss_algos%3C%3E=0&mx_bsAlgoProfile=NOT_APPLICABLE&mx_aurl_hc=0&mx_aabpc=0&mx_isLossNtf=false&mx_ssBucket=0&mx_bcat_count=20&mx_gpid_sent=true&mx_commit_id=fc4a7657ab&mx_exp_tokens%3C%3E=loss_notification_exp%3ADEFAULT%23%23duplication%3ACTV_EXTREMELY_AGGRESSIVE_L7%23%23prll_req%3Atrue&mx_sdr=false&mx_sua_cvg=0001010&mx_tid_sent=false&mx_SPRIG=0&mx_ep_sent%3C%3E=badv&mx_g_one_uid_sent=Multiple%28UIDs%29&mx_uid_sent=0&mx_SC=0&mx_adid=25048621&mx_nsz=2&mx_GCID=0&mx_maq_call=false&mx_aurt=0&mx_divid=sda-MAST-iframe&mx_tgs=728x90%7C970x250&mx_vsidFlt=false&mx_cklsrc=OTHERS&mx_IAB2=0&mx_dup_bucket=MARK_NOT_DUPLICATE&mx_PC=1&mx_UCC=1&mx_gpid=us_yhp_main_dt_top_center&mx_int_agency_id=11611&mx_bsWhitelistBucket=0&mx_bsWhitelistAlgo=0&mx_isNed=0&isFledge=false&acid=14e5a29420eaaa9231dfb400ff7550ec&rtime=321.0&wsip=adex-z1-6c54475bc8-bglzq&ltime=336.0&act=headerBid&abs=0%7C0%7Cnxblock%3D-1%7Cxtmax%3D545%7Cbrr%3D0&adtypes=0&cacid=244154801216068341711672891614&impId=20086357115156131711672891626&reftime=15000&reftype=0&dsid=sda-MAST-iframe&mowxReqId=14e5a29420eaaa9231dfb400ff7550ec_1&supcrid=sda-MAST-iframe&req_size=970x250%7C728x90&renderer=0&ifst=0&iframingState=0&ifdp=0&slotVisibility=1&adpos=1&media=0&repchn1=%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_top_center&native_asset=0&req_mtype%3C%3E=0&g=0&ctr=-1.0&rfc=1&dfpDiv=sda-MAST-iframe&dfpAdPath=%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_top_center&feedback_id=25962250838375251711672891606&supplyTagId=206512146&mnrfc=1&r_fp%3C%3E=3900443&r_tim%3C%3E=3821649&viewability_vendor=MEDIA.NET+EXCHANGE&viewability_mnet=90&v_mkey=gen-vblt_yhb_8YHBJ3BJ0_0&v_mver=202403282028_gen-vblt_yhb_8YHBJ3BJ0&v_alg=gen-vblt_all&vcmplrt=-1.0&exp_id=-380&bucket_id=-1571&bfa_al=exploitation&bfa_stat=1&imp_tid_present=true&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Abf1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Afp%3Bver%3Amegastrm%7C%7C2023538075%7C%7C%7C%7Cdrop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%7C%22%7D&k2=%7B%22k%22%3A%22bucket%22%2C%22v%22%3A%22drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%22%7D&k3=%7B%22k%22%3A%22cobrand%22%2C%22v%22%3A%22none%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22top_center%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22fp%22%7D&debug_ts=2024-03-29+00%3A41%3A32&__expireat=1711673492858&mview=0&toconsider=1&sc_pvid=25017&sc_dp=0&sc_bdp=0.507&sc_cbdp=0.507&sc_ogbdp=0.507&sc_adj0=0.0&sc_adj1=0.0&sc_adj2=0.0&sc_prspt=headerBid&lo_pvid=%5B25052%5D&lo_dp=0&lo_bdp=2.210&lo_cbdp=2.210&actltime=354&clo_dp=0&ads_sc_pvid=&ads_sc_cbdp=&clo_pvid=[-3]&isVs=&ads_sc_ogbdp=&clo_bdp=2.210000&clo_cbdp=2.210000&ads_sc_bdp=&rme=adm&utime=3116&sf=0&cpr=0.19761077132952942 HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:39 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Fri, 29 Mar 2024 00:41:39 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:39 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-29 00:41:39 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50200	35.211.178.172	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	728	OUT	GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:39 UTC	781	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= Set-Cookie: tuuid=9bd3933c-0a52-4830-a023-563ef18ab8c1; path=/; expires=Sat, 29-Mar-2025 00:41:39 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1711672899; path=/; expires=Sat, 29-Mar-2025 00:41:39 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1711672899; path=/; expires=Sat, 29-Mar-2025 00:41:39 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1711672899; path=/; expires=Sat, 29-Mar-2025 00:41:39 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50230	150.136.25.38	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	967	OUT	GET /services?uid=AAFJBk7MDBwAABSliZdkug&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D4433599061245380871%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 HTTP/1.1 Host: sync.technoratimedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:39 UTC	1477	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Location: https://ssum-sec.casalemedia.com/usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3DDD9B07CFC8814B5991D3EF05248CDFB5%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526userid%253D4433599061245380871%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D Set-Cookie: tads_uidp_73=AAFJBk7MDBwAABSliZdkug; Max-Age=63072000; Expires=Sun, 29 Mar 2026 00:41:39 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid=DD9B07CFC8814B5991D3EF05248CDFB5; Max-Age=63072000; Expires=Sun, 29 Mar 2026 00:41:39 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid_cd=20240329004139+0000; Max-Age=63072000; Expires=Sun, 29 Mar 2026 00:41:39 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_zora=2; Max-Age=63072000; Expires=Sun, 29 Mar 2026 00:41:39 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None access-control-allow-origin: https://ads.pubmatic.com/ access-control-allow-credentials: true access-control-allow-methods: POST,GET,HEAD,OPTIONS X-Varnish: 964226851 Age: 0 Via: 1.1 varnish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50221	52.223.40.198	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	839	OUT	GET /track/cmf/casale?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=de959f04-5668-4cc4-9c45-9e4a8efcd9a8; TDCPM=CAESFwoIcHVibWF0aWMSCwjEkpDP4OTnPBAFEhQKBXRhcGFkEgsI7qj62-Dk5zwQBRIZCgpyaWdodG1lZGlhEgsI8KWh6ODk5zwQBRgBIAIoAjILCMae_Yj35Oc8EAU4AVoFdGFwYWRgAg..
2024-03-29 00:41:39 UTC	701	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Length: 323 Connection: close server: Kestrel location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&expiration=1714264899&gdpr=0&gdpr_consent= set-cookie: TDID=de959f04-5668-4cc4-9c45-9e4a8efcd9a8; expires=Sat, 29 Mar 2025 00:41:39 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjEkpDP4OTnPBAFEhQKBXRhcGFkEgsI7qj62-Dk5zwQBRIZCgpyaWdodG1lZGlhEgsI8KWh6ODk5zwQBRIVCgZjYXNhbGUSCwi81bH04OTnPBAFGAEgAygCMgsIxp79iPfk5zwQBTgBWgV0YXBhZGAC; expires=Sat, 29 Mar 2025 00:41:39 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-29 00:41:39 UTC	323	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 33 39 26 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 64 65 39 35 39 66 30 34 2d 35 36 36 38 2d 34 63 63 34 2d 39 63 34 35 2d 39 65 34 61 38 65 66 63 64 39 61 38 26 65 78 70 69 72 61 74 69 6f 6e 3d 31 37 31 34 32 36 34 38 39 39 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 33 39 26 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 64 65 39 35 39 66 30 34 2d 35 36 36 38 2d 34 Data Ascii: Redirecting to: <a href="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&expiration=1714264899&gdpr=0&gdpr_consent=">https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=de959f04-5668-4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50238	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	765	OUT	GET /rum?cm_dsp_id=81&gdpr=0&external_user_id=fACR1npTldFnUsSFfwaM1HNUkdJnUpSCeVLXvzrJ HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:39 UTC	988	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0c40d091763-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:39 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:39 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6BGwYqrg9DnrL8%2FcUpLOH2uph18RlwcEe9pkYWGL%2BM%2BOw3xUYLJEsNZBQpbka91RH%2FY3EocLR9ksdVy82Hhis8jLSw7DaGoU%2BIicyZxB6ANF3G8Zn5THIlMsZBICSTjyKvgrozBqR4LPWA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50188	23.43.243.147	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	896	OUT	GET /log?logid=kfke&evtid=plutol1&__q=AYgEIwKELAQCAAABAIAAAgAAAAAAAAEABgAAQIABAAgAoNAIVDQzMDMyMzQxMzE0NDIzXzEyMzAyMzQ5MzlfMjA2NTEyMTQ2MjI1MDUyMUAxNGU1YTI5NDIwZWFhYTkyMzFkZmI0MDBmZjc1NTBlY7iHA65H4XoUrgFAKmh0dHBzOi8vd3d3LnlhaG9vLmNvbQRVUxJ5YWhvby5jb20SOFlIQkozQkowCA45NzB4MjUwCjIuMjEwEnlfZWFzdF9zYxg2OTQ5OTM3MTcxOTkGWUhCBmFkbQAAAAAAAIBWQNzyvPrQYwIxAAAAAAAA8L9EcnRiLWhvbWllMS16MS03OTZkNmZiN2JkLXJja2JjLllTQwAec2RhLU1BU1QtaWZyYW1lEGJmZWY4N2VkAmQCCnlhaG9v&cpr=0.997136726333627 HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:39 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Fri, 29 Mar 2024 00:41:39 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:39 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-29 00:41:39 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50167	35.169.97.227	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	1193	OUT	GET /sync/pubmatic/6D366468-71AF-422B-99AB-138A6DAB94F7?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:39 UTC	550	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-03-29 00:41:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50178	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	1499	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; PugT=1711672896; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294
2024-03-29 00:41:39 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:38 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 27-Jun-2024 00:41:38 GMT; path=/ Set-Cookie: PugT=1711672898; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:38 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:39 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50164	172.253.115.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	993	OUT	GET /ads/measurement/l?ebcid=ALh7CaTUVUObAcmCoK-YXFXK2HNNEsIi1byrg0AIm93VMh5msJ1UkkJFa8G-PxEAZQ-QqYslmwWIW5GuURLK1vvF6KBGb5xJug HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-29 00:41:39 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 29 Mar 2024 00:41:39 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50185	23.43.243.147	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	5135	OUT	GET /log?logid=awlog&itype=YHB&tElp=5743&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-6cdd6846-77zvf&svr=285_20_20_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001711672890119017221018037423&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=%5B%7B%22source%22%3A%22liveintent.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22vN_RikZwhoZWxTMpfJBcDcT8RWafL19T6LauHA%22%2C%22atype%22%3A3%7D%5D%7D%2C%7B%22source%22%3A%22rubiconproject.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22LMPI0LLB-19-JSO6%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22liveintent.indexexchange.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ZQjYrf.1D0shOWRRRk909QAA%261008%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubmatic.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228DDE491A-31A6-4A5B-9E11-D4969B43F97B%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%5D&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&pvid=25307&exid=10025&req_mtype%3C%3E=0&res_mtype=0&pv_adtype=0&adtypes=0&pbasrc=0&mang=0&dpa=2&crid=827382134&g=0&nms=2&ptype=43&supcrid=us_yhp_main_dt_top_right&r_fp%3C%3E=3900443&acid=176264509238088091711672891609&astat=dp&auMxTm=1400&actltime=1409&acwtime=1409&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=2&agid%3C%3E=&asagid=&asbkt=&sr=0&adj1=0&dpsh_src=1&adj0=0&pst=0&adj2=0&incentive_expense=0&incentive_type=0&discount=0&bdp=1.240000&cpm=1.24&ogbdp=1.240000&cbdp=1.240000&dfpBd=1.24&aogbdp=&true_bdp=1.24&abtest_status=0&bucket_id=-1571&exp_id=-380&flrver=&flrrule=827382134%7C%7C25307&bfa_al=exploitation&bfa_pr=0.50&bfa_stat=1&flr_price=0&flr_strat=dynamic&advId=&advNm=&pvAgNm=&pvAgId=&advUrl=chevrolet.com&ba=2940&prspt=headerBid&act=headerBid&mowxReqId=&ckfl=&cs=&iurl=&di=&dt=O&dp=0&dsrc=&dbf=0&epc=1057986&epc2=&epc3=&pbidflr=0.50&bfs=&nbr=0&prvAccId=1057986&pcrid=15328874&size=300x600&req_size=300x600&s=1&snm=success&toconsider=1&mnet_ckfl=&rbr=&ruct=0&ae=0&ftr%3C%3E=&og_bid=0&pcon=&adType=BANNER&gtime=4&htime=-1&stime=-1&ltime=1122&brc=0&brt=1711672892&but=1711672892&bidId=146020580947701411711672892745&mpvid=&aqtime=0&in_lurl=&out_lurl=&loss_id=&abs=&apid=&ybnca_bbid=&binfobid=&bdata=&bId=&cmpid=&cat=&attr=&dtc=&prvReqId=&ybnca_erpm=&exp=&ybnca_gbid=&htps=&patint=&patkey=&fpuReq=&prvApiId=&mp_seg%3C%3E=&pcId=&pvNbr=&pvNbrDtls=&pseat=&rtime=&seat=85&ortbseat=1982032&sbdrid=&ybnca_vbid=&wsip=&pvdTmax=0&td=%7B%22ydevice%22%3A%22desktop%22%2C%22ylang%22%3A%22en-US%22%2C%22yregion%22%3A%22US%22%2C%22ysection%22%3A%22main%22%2C%22ysite%22%3A%22fp%22%2C%22ysrc%22%3A%222%22%7D&sec=&chnl=&csent=1&zn=e&dfpadvId=&dfpcmpId=&isEmp=&dfpAdPath=%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_top_right&dfpDiv=sda-LREC-iframe&sz=&srcAgCrid=&srcAgLid=&lbid=&isbckfl=&srvcnm=&sspReq=&csip=&sspReg=&mnrf=0&mnrfc=0&invw=-1&strg=&dStat=&dcbdp=0&adfpBd=&dcs=&tref=0&rfc=0&repchn1=%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_top_right&iwr=0&aqp=3&acrid=&aqm=&aqb=&aqws=&clopvid=%5B25307%5D&clobdp=1.240000&clocbdp=1.240000&clodp=0&uid_mod_avb%3C%3E=liveIntentId&uid_mod_sent%3C%3E=liveIntentId&def_size=300x250%7C300x600&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Abf1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Afp%3Bver%3Amegastrm%7C%7C2023538075%7C%7C%7C%7Cdrop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%7C%22%7D&k2=%7B%22k%22%3A%22bucket%22%2C%22v%22%3A%22drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%22%7D&k3=%7B%22k%22%3A%22cobrand%22%2C%22v%22%3A%22none%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22top_right%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22fp%22%7D&k39=fp&ydt=desktop&ylang=en-US&yr=US&ysec=main&ys=fp&sc_pvid=-3&sc_ogbdp=0.750000&sc_bdp=0.750000&sc_cbdp=0.750000&sc_bdata=&sc_dp=0&top=572&btm=1172&lft=951&rght=1243&lper=1&rme=SFR&ra_sz=&udc=0&oyaf=0&cpr=0.5832568661251989&omul=1&currsrc=NA&ocurr=&mview=0&ebuid=&rti=69&requrl=https%3A%2F%2Fwww.yahoo.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:39 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Fri, 29 Mar 2024 00:41:39 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:39 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-29 00:41:39 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50154	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	745	OUT	GET /crum?cm_dsp_id=17&external_user_id=P1GEqyyk_OouTnS49Tqs&puid= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:39 UTC	978	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0c44edd0684-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:39 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:39 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=My4opAHyyzmWbdelIloGnkivEFrs4bd7W6Z8VONRN4PRUsnK3RGNEebeKGQJ7YtQmSRtLbuusjexRhYzJ5S8KQwnSxSLvth9eWWlSzKgUEJFLv45Q43GTlVoOJby5Gj7VUqcZD7wOohipA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50213	52.54.57.187	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	848	OUT	GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:39 UTC	711	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Fri, 29 Mar 2024 00:41:39 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://pm.w55c.net/ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-0f57f68aff6e2ea95@us-east-1e@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=JcUsekky1RQ0jp5; Domain=.w55c.net; Expires=Mon, 28 Apr 2025 10:41:39 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50209	172.253.63.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	2886	OUT	GET /pcs/view?xai=AKAOjstwHX522iG5wGpEq0zJeFYulisc6XLfScQneT6JvStPRRy8Hi6oAqCmaZB6WJZskmfQZUS0I8EiLrurHkf5KtVWKV2dntl1JfqL386zfPmjnH13y_pfC74zAZf9mmwn7OgVkgITSHaZYMPuXoHqjLer3ZBBeOflyL2OUlUlOsGCr3XVtlrepYyHnnJm1FtX7u8K6ZKNTFslo6vwVnm9Ok41SjHuqLDLZG4eYk36fN0XdG8RbNpHw2bzl7PZsK8VUOIsnWYOoxnMMoVZUdJMrJdAsOo6y76sTPw_9wVjtRqVpzdMDFVwL2ev-gWHp5z6H9R4O9uDqtSJ-gZ70t5aETMiNJbYava4xo27pQsfqCwc5c_0ziZ_sG55QgJdDdgs28FtnTiU2w-d1-iS2Lz_mR449XgxHoeTDQ5OiBnwifzFgG9CU8ALOX6J02VVGT1L25O6JCjHz0QL6ep3Mea5W9kYVZmGk8kQASyfpE9-ghN_zkDF1ngl9p1K1jb0DVidkV7AWcG2hY3-0QQrk-5SU_NltUpXyRZs3tYyb2E05lw5v-RekFrGsg1ynRCsTk80UZgzVmhJQvbcrxXxfJilBzUe-EmPO5YFF_KJpTnfRcnpYMHZf4zNbensPpPDgTfTzlKxiauRSeOXmqsA4H7TkSJzm1RKtki0gji2KVijqcQ3_JrA6gL53MJUE6fWZ2nNf0_o1-ANVaL8BR31UFbsCZ7XKDbqvykcG9Aia2imrnmKOUUx4eBIG24gMiQq1hObADTbyoEHEdJu-HImVRLeaZKxtY2F3TGHYVsmSHN5aR1Gc9MI12R6AjDIefz2fUj1RrFDWIQahpUNrcxPhBtEwNcwqKsLHET0JO8j-CvScQm9jBk595gK8zpTxhtF7sM6MGxSXbeuLo0U7fOnV84ea0n8d0efDur-KB6vTXA_qoHEc6mvOfw-8AHNUq9AerXzRqxEaO97lDhihAvp_qUtwk7iBFzLZhJ18wH9qpMQsGZiD_r5nh-DmqeuqfaFTeyVShUxainzrn1uMC1Y47me2Z2IFHp1Sm116sKaE8UVUql9zvMGIfUP_R-Zs95Wc9Z2HTVufCLqJJws5MXNPIBCvBxK-dDnI5FKdbSGL0GZ4CWWauHJSxhvp2h4shFjYjJt5jQSD5XyeO61va9HaWBuLTMPBgKZtSQ_IsvNY7g8ZDyvLexQmSXhVgtjaM9i4fsCi1KSIwfrgypqToqi4iXhwWQAx5xzgLCScnBMADiP5dO1afnJWRgm6QigHIPw1k_oqPDMKtM130z56-QZm7Ze5iUY2s6Y7P90vHeruW5nKkHRQ7rcIMlkQ91kPFPv67cIlWRckuefnwIfrcQWBquDnXooZSBmxyjkA0vsiHXJW6ihtjcsw_nlWoKqbQhDyynDiJifdFdN3nEF9a8RZsUQwUkA5gUCVf3bSvcxg4A2CHva0EY6kwMQSocGBzv32Ho0uFla0xgxbaQfD3BfncGqp3b-1QK3Q3QZ_MUz2625O6_oDXIDJTD4UJyFKwGoGg&sai=AMfl-YREyLylDBG7IUUKnudbj-kfqF28S-HTe-R2DGlymntOwHDVVf302UtMKk-f92bHAAa0IDuMeSTj52eOgepRGESO9E37BYZ-iYHz8iFjcWBjHowuWuTXoNnNAkou1WAH-WxtiszqTLn1Hyg5P4sEt_UiMSbTV3m0UmUupqBi-lzwgH4CsRSq3XqR6azAbRz4qPsSXiAFratKAQIbQuluIOVVmw&sig=Cg0ArKJSzGL_hwGFS5VzEAE&uach_m=%5BUACH%5D&pr=13:ZgYOPAAAAAB2m_3QsatYZTYYSiy_qBI09Znk9w&cry=1&crd=aHR0cHM6Ly9mb3JkYmx1ZWFkdmFudGFnZS5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=3&cbvp=1&cstd=0&cisv=r20240327.96706&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: event-source=trigger Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlaJk6bHByEIRBO0irO6IoozSM4-tSRZhT2IlYufwWUI_XHABPzon6zqXxim80; APC=AfxxVi7JxYIYbMX27B2vewpU13WV8PTDneLxWQzURDLa0C2HmfqVBQ
2024-03-29 00:41:39 UTC	1676	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0xb22e2f0e5a3e3f2a0000000000000000","13":"0x3f9cec862f714b9d0000000000000000","14":"0x81d72c5a5c7da4f30000000000000000","15":"0x8cf72d1e85abbd800000000000000000"},"debug_key":"16161275096222382524","debug_reporting":true,"destination":["https://ford.com","https://buyfordnow.com","https://fordpro.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["313305","313307","313310","313316","313317","313318","313319","313321","313322","313326"],"21":[],"8":["690327"]},"priority":"0","source_event_id":"6716347349787885595"} X-Content-Type-Options: nosniff Date: Fri, 29 Mar 2024 00:41:39 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 28-Apr-2024 00:41:39 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Fri, 29 Mar 2024 00:41:39 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50196	69.20.43.192	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	502	OUT	GET /cs?partnerId=59&partnerUserId=CAESEJTzVPhxsNbxAo83M2QShqc&google_cver=1 HTTP/1.1 Host: cs.lkqd.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lkqdidts=1711672897; sr59=1\|CAESEJTzVPhxsNbxAo83M2QShqc\|1711672897; lkqdid=IaVp1j-rtk0
2024-03-29 00:41:39 UTC	523	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: sr59=1\|CAESEJTzVPhxsNbxAo83M2QShqc\|1711672899; Max-Age=31536000; Domain=.lkqd.net; Secure; SameSite=None Access-Control-Max-Age: 0 Cache-Control: max-age=0 Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: Content-Type Access-Control-Expose-Headers: Content-Type, Content-Disposition Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: *
2024-03-29 00:41:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50223	54.156.236.4	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	690	OUT	GET /cookie-sync/ie?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAFJBk7MDBwAABSliZdkug; bitoIsSecure=ok
2024-03-29 00:41:39 UTC	450	IN	HTTP/1.1 303 See Other Date: Fri, 29 Mar 2024 00:41:39 GMT location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=130&external_user_id=AAFJBk7MDBwAABSliZdkug&expiration=1712882499&us_privacy=1YNN Server: gunicorn set-cookie: bito=AAFJBk7MDBwAABSliZdkug; Domain=bidr.io; expires=Sun, 27 Apr 2025 20:41:39 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50172	207.65.37.182	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	1443	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-edejGYFE2uVsfbouHZuc9q9b5ME1.tw-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; chkChromeAb67Sec=1; pi=0:2; DPSync3=1712880000%3A201_263%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1712880000%3A71_250_3_104_21_54_166_220_13%7C1712275200%3A223; SPugT=1711672895; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; PugT=1711672896; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294
2024-03-29 00:41:39 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:39 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1711672899; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:39 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50210	52.41.168.67	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	912	OUT	GET /event?d_src=1233&d_event=imp&d_adv=3971573&d_site=3093372&d_creative=193540874&d_adgroup=578358183&d_placement=383884886&d_campaign=31236918&d_cb=3631931756 HTTP/1.1 Host: ford.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=18302510874207377964223395608090049346
2024-03-29 00:41:39 UTC	893	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 6FtjFdPvRpE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-1-v054-01917363a.edge-usw2.demdex.com 6 ms set-cookie: demdex=18302510874207377964223395608090049346; Max-Age=15552000; Expires=Wed, 25 Sep 2024 00:41:39 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: ford=18302510874207377964223395608090049346; Max-Age=15552000; Expires=Wed, 25 Sep 2024 00:41:39 GMT; Path=/; Domain=.ford.demdex.net; Secure; SameSite=None
2024-03-29 00:41:39 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50227	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	792	OUT	GET /cksync.html?cs=1&vsid=3546744890180387000V10&type=tlt&refUrl=&vid=16728938013546744890180387000V10&ovsid=1910044241478282443237&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:39 UTC	680	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-tlt=1910044241478282443237~~1;Expires=Mon, 13 May 2024 00:41:39 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:39 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:39 GMT Connection: close
2024-03-29 00:41:39 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-03-29 00:41:39 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50232	216.22.16.68	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	748	OUT	GET /api/sync?callerId=82&gdpr=$%7bGDPR%7d&gdpr_consent=$%7bGDPR_CONSENT%7d HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=4433599061245380871; TestIfCookieP=ok; csync=127:AAFJBk7MDBwAABSliZdkug
2024-03-29 00:41:39 UTC	218	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 29 Mar 2024 00:41:39 GMT location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=196&external_user_id=4433599061245380871&gdpr=0&gdpr_consent= connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50214	35.211.178.172	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	821	OUT	GET /ul_cb/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=9bd3933c-0a52-4830-a023-563ef18ab8c1; c=1711672899; tuuid_lu=1711672899
2024-03-29 00:41:39 UTC	583	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //pool.admedo.com/sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic&bsw_custom_parameter=9bd3933c-0a52-4830-a023-563ef18ab8c1 Set-Cookie: tuuid=9bd3933c-0a52-4830-a023-563ef18ab8c1; path=/; expires=Sat, 29-Mar-2025 00:41:39 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1711672899; path=/; expires=Sat, 29-Mar-2025 00:41:39 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50244	44.195.186.221	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	1090	OUT	GET /sync/casale/ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB?gdpr_consent=&us_privacy=1YNN&gdpr=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:39 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; Expires=Sat, 29 Mar 2025 06:41:39 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-29 00:41:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50204	38.91.45.7	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	716	OUT	GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:39 UTC	528	IN	HTTP/1.1 200 OK p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' set-cookie: CDIUSER=di_001d890b57a6445e9783e; Max-Age=47260800; SameSite=None; Expires=Sat, 27 Sep 2025 00:41:39 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240329%22%7D; Max-Age=47260800; SameSite=None; Expires=Sat, 27 Sep 2025 00:41:39 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Fri, 29 Mar 2024 00:41:38 GMT server: c connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50216	192.184.68.166	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	795	OUT	GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: d=EG4BDQG-K7jvsQA; mc=66060e41-dee50-49b02-d5b3d
2024-03-29 00:41:39 UTC	695	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EOcBEgG-K_ijC_vLEA; expires=Thu, 27-Jun-2024 00:41:39 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	50247	104.18.38.76	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	672	OUT	GET /ht/htw-pixel.gif?ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: js-sec.indexww.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:39 UTC	483	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Type: image/gif Content-Length: 43 Connection: close Last-Modified: Tue, 24 Jan 2017 19:36:04 GMT ETag: "da1f1d-2b-546dc3a097100" Cache-Control: public, max-age=14400 Expires: Fri, 29 Mar 2024 04:41:39 GMT Edge-Control: cache-maxage=1h P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" CF-Cache-Status: HIT Age: 775 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86bbd0c6ec3072e7-IAD
2024-03-29 00:41:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	50150	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	715	OUT	GET /cksync.php?cs=1&type=apx&ovsid=5423405387794830934&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:39 UTC	662	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-apx=5423405387794830934~~1;Expires=Wed, 26 Jun 2024 00:41:39 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:39 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:39 GMT Connection: close
2024-03-29 00:41:39 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:39 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	50251	35.186.193.173	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	631	OUT	GET /int/cm?exc=19&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: cm.ctnsnet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:39 UTC	674	IN	HTTP/1.1 302 Found P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_0bf86f4e7d934cb7b5daae7a5c7d8db5=1; path=/; domain=.ctnsnet.com; expires=Sat, 29 Mar 2025 00:41:39 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT x-xss-protection: 1; mode=block Status: 302 Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=109&external_user_id=0bf86f4e7d934cb7b5daae7a5c7d8db5&expiration=1714264899 Content-Type: text/html;charset=UTF-8 Content-Length: 0 Date: Fri, 29 Mar 2024 00:41:39 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	50246	107.22.223.168	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	775	OUT	GET /s/31327?bidder_id=14481&bidder_uuid=ZgYOPsAoJI0AAAi4ADlhawAA%261617&gpdr=&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CgcKBQgMENEX; lidid=07571c18-3f04-4602-a656-288806fb242c
2024-03-29 00:41:39 UTC	648	IN	HTTP/1.1 303 See Other Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Length: 0 Connection: close Location: https://d.turn.com/r/dd/id/L21rdC8xOTcxL2NpZC8xNzQ5ODczMjc1L3QvMg/url/https://i.liadm.com/s/53233?bidder_id=183658&bidder_uuid=$!%7BTURN_UUID%7D&us_privacy=1YNN Set-Cookie: _li_ss=Cg8KBQgMENEXCgYI0gEQxxc; Max-Age=2592000; Expires=Sun, 28 Apr 2024 00:41:39 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=07571c18-3f04-4602-a656-288806fb242c; Max-Age=63072000; Expires=Sun, 29 Mar 2026 00:41:39 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	50250	34.160.19.107	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	682	OUT	GET /cm/api/index?cm_dsp_id=191&cm_user_id=%3cIndex_user_id%3e&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: dmp.brand-display.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:39 UTC	595	IN	HTTP/1.1 302 Found Server: nginx/1.24.0 Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Type: text/html; charset=utf-8 Content-Length: 119 Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Location: https://dsum.casalemedia.com/crum?cm_dsp_id=191&external_user_id=08726e86-cf36-54f6-8d6ab380 P3p: CP='This is not a P3P policy!' Set-Cookie: _knxq_=08726e86-cf36-54f6-8d6ab380.1711672899.0.1711672899.1711672899; Path=/; Domain=brand-display.com; Max-Age=63072000; Secure; SameSite=None Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:39 UTC	119	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 39 31 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 30 38 37 32 36 65 38 36 2d 63 66 33 36 2d 35 34 66 36 2d 38 64 36 61 62 33 38 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://dsum.casalemedia.com/crum?cm_dsp_id=191&external_user_id=08726e86-cf36-54f6-8d6ab380">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	50242	185.184.8.90	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	638	OUT	GET /cm-notify?pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:39 UTC	790	IN	HTTP/1.1 302 Found date: Fri, 29 Mar 2024 00:41:39 GMT vary: Accept-Encoding set-cookie: g=YdtgSj0svp2Z2ieaFv7X_1711672899702;Path=/;Domain=.creativecdn.com;Expires=Sat, 29-Mar-2025 00:41:39 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: ts=1711672899;Path=/;Domain=.creativecdn.com;Expires=Sat, 29-Mar-2025 00:41:39 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" location: https://creativecdn.com/cm-notify?pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Fri, 29 Mar 2024 00:41:39 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	50229	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	720	OUT	GET /cksync.php?cs=1&type=sov&ovsid=IZjJALZHIXjbUV1jQgKNiPaF&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:39 UTC	667	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1;Expires=Wed, 25 Sep 2024 00:41:39 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:39 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:39 GMT Connection: close
2024-03-29 00:41:39 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:39 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	50258	172.64.151.101	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	1206	OUT	GET /usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3DDD9B07CFC8814B5991D3EF05248CDFB5%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526userid%253D4433599061245380871%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:40 UTC	1344	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:40 GMT Content-Length: 0 Connection: close Location: https://sync.technoratimedia.com/services?srv=cs&nuid=DD9B07CFC8814B5991D3EF05248CDFB5&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D4433599061245380871%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&uid=ZgYOPsAoJI0AAAi4ADlhawAA%261617 CF-Ray: 86bbd0c8da4d3892-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:40 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:40 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0Bb5HLkx4Wdd%2B1lizSbuJ9%2F8pY9xsi2l1hnTsB%2F5kHE6zrWcwIJ0uBdhW322gTojSM%2BgMMiGpXu0lEc%2F%2BZeF37qp3ess%2Fl8xSZecR1SY0AMGqeIaJbtFouOcHr%2BK%2BnNo8T0DipVOXagE8w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	50243	172.64.151.101	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	800	OUT	GET /usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=DBAA&gpp_sid=-1&google_gid=CAESEBlRho78gpmMlRUqfBGx8XY&google_cver=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:40 UTC	990	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:40 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0c8d994241e-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:39 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:39 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PF5AOIi%2F4cGq4ask%2F8l4uxe%2B1X9Jf%2Fcwm6kEnE2zUSe%2FjA6rQUYuuORbIxXg24vjlgYVnM47TWqFd9pLkTnCw%2B1cVVzvGLHsKuR5w3WiGY2SkorwCHh7muItn9OhUvQQ9973VEWOL7Ww3A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	50234	44.222.46.243	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	816	OUT	GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:40 UTC	337	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=8b7fe8e3-752d-4da2-8d7e-64baea716a5a&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	50222	3.225.218.10	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	1233	OUT	GET /ups/55940/sync?_origin=1&redir2=true&uid=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB&gdpr_consent=&us_privacy=1YNN&gdpr=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0:18z8~2hk0"
2024-03-29 00:41:40 UTC	809	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0:18z8~2hk0:175w~2hk0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 29-Mar-2025 00:41:39 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://pr-bh.ybp.yahoo.com/sync/casale/ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB Age: 0 Connection: close Server: ATS/9.1.10.106 Set-Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; Expires=Sat, 29 Mar 2025 06:41:39 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	50248	34.96.71.22	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	661	OUT	GET /s/ix?cm_dsp_id=18&us_privacy=1YNN&gdpr=&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:40 UTC	688	IN	HTTP/1.1 302 Found Access-Control-Allow-Methods: GET,OPTIONS Access-Control-Allow-Origin: *.casalemedia.com Content-Type: text/html; charset=utf-8 Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=18&expiration=1727570499&external_user_id=1186a2d5-5631-4997-9cd5-d010d9cb78b1 Set-Cookie: tuuid=1186a2d5-5631-4997-9cd5-d010d9cb78b1; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Set-Cookie: tuuid_lu=1711672899\|ix:0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Length: 157 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:40 UTC	157	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 38 26 61 6d 70 3b 65 78 70 69 72 61 74 69 6f 6e 3d 31 37 32 37 35 37 30 34 39 39 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 31 31 38 36 61 32 64 35 2d 35 36 33 31 2d 34 39 39 37 2d 39 63 64 35 2d 64 30 31 30 64 39 63 62 37 38 62 31 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://dsum-sec.casalemedia.com/crum?cm_dsp_id=18&expiration=1727570499&external_user_id=1186a2d5-5631-4997-9cd5-d010d9cb78b1">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	50233	44.222.46.243	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	638	OUT	GET /ix.gif?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:40 UTC	558	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=8&external_user_id=0b2e56bd-231c-4ec2-ba2a-78dde1fe3a07&expiration=1743208899 Set-Cookie: UID=0b2e56bd-231c-4ec2-ba2a-78dde1fe3a07; expires=Sat, 29 Mar 2025 00:41:39 GMT; path=/; secure; samesite=none Set-Cookie: ss=WyPvdDzgshiwWSK1x6NOShALlVh98PDi4yG7ErXAOjUDLOlyzjC2dPuU%2B828lk5tJ%2BTFQvaMmdMz6sryo0xxZQ%3D%3D; expires=Sat, 29 Mar 2025 00:41:39 GMT; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	50249	68.67.178.10	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	886	OUT	GET /getuid?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=$UID&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=JdhWkazzA7-l-SJBnb9vWXLWZRZHRTHbCkah-EW3O2ECAhxSYsqS4OFO_2Ig6DeQZPtzrEcTco9BU0aHgalK869BAW6WsG83Dwoyx1UwJrs.; uuid2=5423405387794830934
2024-03-29 00:41:40 UTC	1490	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=5423405387794830934&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 AN-X-Request-Uuid: 6f0c51a3-e76f-473a-bc4b-adb5cc78ff10 Set-Cookie: XANDR_PANID=JdhWkazzA7-l-SJBnb9vWXLWZRZHRTHbCkah-EW3O2ECAhxSYsqS4OFO_2Ig6DeQZPtzrEcTco9BU0aHgalK869BAW6WsG83Dwoyx1UwJrs.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 27-Jun-2024 00:41:39 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 17-Mar-2034 00:41:39 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=5423405387794830934; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 27-Jun-2024 00:41:39 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.43; 102.165.48.43; 634.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	50217	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	747	OUT	GET /cksync.php?cs=1&type=55953&ovsid=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&gdpr=0&gdpr_consent= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:40 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1;Expires=Fri, 12 Apr 2024 00:41:40 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:40 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:40 GMT Connection: close
2024-03-29 00:41:40 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:40 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	50237	74.119.119.73	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	644	OUT	GET /user-sync/redirect?profile=73&gdprapplies=0&gdpr=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: ssp-sync.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:40 UTC	537	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 29 Mar 2024 00:41:39 GMT server: Kestrel cache-control: no-store,max-age=0 location: https://dis.criteo.com/dis/usersync.aspx?r=12&p=73&dis=0&url=https%3a%2f%2fssp-sync.criteo.com%2fuser-sync%2fredirect%3fprofile%3d73%26gdprapplies%3d0%26gdpr%3d%26gpp%3dDBAA%26gpp_sid%3d-1%26uid%3d%40%40CRITEO_USERID%40%40%26dised%3dtrue&gdpr=&gdpr_consent=&gpp=DBAA&gpp_sid=-1 cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	50256	172.253.63.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	3141	OUT	GET /pcs/view?xai=AKAOjstwHX522iG5wGpEq0zJeFYulisc6XLfScQneT6JvStPRRy8Hi6oAqCmaZB6WJZskmfQZUS0I8EiLrurHkf5KtVWKV2dntl1JfqL386zfPmjnH13y_pfC74zAZf9mmwn7OgVkgITSHaZYMPuXoHqjLer3ZBBeOflyL2OUlUlOsGCr3XVtlrepYyHnnJm1FtX7u8K6ZKNTFslo6vwVnm9Ok41SjHuqLDLZG4eYk36fN0XdG8RbNpHw2bzl7PZsK8VUOIsnWYOoxnMMoVZUdJMrJdAsOo6y76sTPw_9wVjtRqVpzdMDFVwL2ev-gWHp5z6H9R4O9uDqtSJ-gZ70t5aETMiNJbYava4xo27pQsfqCwc5c_0ziZ_sG55QgJdDdgs28FtnTiU2w-d1-iS2Lz_mR449XgxHoeTDQ5OiBnwifzFgG9CU8ALOX6J02VVGT1L25O6JCjHz0QL6ep3Mea5W9kYVZmGk8kQASyfpE9-ghN_zkDF1ngl9p1K1jb0DVidkV7AWcG2hY3-0QQrk-5SU_NltUpXyRZs3tYyb2E05lw5v-RekFrGsg1ynRCsTk80UZgzVmhJQvbcrxXxfJilBzUe-EmPO5YFF_KJpTnfRcnpYMHZf4zNbensPpPDgTfTzlKxiauRSeOXmqsA4H7TkSJzm1RKtki0gji2KVijqcQ3_JrA6gL53MJUE6fWZ2nNf0_o1-ANVaL8BR31UFbsCZ7XKDbqvykcG9Aia2imrnmKOUUx4eBIG24gMiQq1hObADTbyoEHEdJu-HImVRLeaZKxtY2F3TGHYVsmSHN5aR1Gc9MI12R6AjDIefz2fUj1RrFDWIQahpUNrcxPhBtEwNcwqKsLHET0JO8j-CvScQm9jBk595gK8zpTxhtF7sM6MGxSXbeuLo0U7fOnV84ea0n8d0efDur-KB6vTXA_qoHEc6mvOfw-8AHNUq9AerXzRqxEaO97lDhihAvp_qUtwk7iBFzLZhJ18wH9qpMQsGZiD_r5nh-DmqeuqfaFTeyVShUxainzrn1uMC1Y47me2Z2IFHp1Sm116sKaE8UVUql9zvMGIfUP_R-Zs95Wc9Z2HTVufCLqJJws5MXNPIBCvBxK-dDnI5FKdbSGL0GZ4CWWauHJSxhvp2h4shFjYjJt5jQSD5XyeO61va9HaWBuLTMPBgKZtSQ_IsvNY7g8ZDyvLexQmSXhVgtjaM9i4fsCi1KSIwfrgypqToqi4iXhwWQAx5xzgLCScnBMADiP5dO1afnJWRgm6QigHIPw1k_oqPDMKtM130z56-QZm7Ze5iUY2s6Y7P90vHeruW5nKkHRQ7rcIMlkQ91kPFPv67cIlWRckuefnwIfrcQWBquDnXooZSBmxyjkA0vsiHXJW6ihtjcsw_nlWoKqbQhDyynDiJifdFdN3nEF9a8RZsUQwUkA5gUCVf3bSvcxg4A2CHva0EY6kwMQSocGBzv32Ho0uFla0xgxbaQfD3BfncGqp3b-1QK3Q3QZ_MUz2625O6_oDXIDJTD4UJyFKwGoGg&sai=AMfl-YREyLylDBG7IUUKnudbj-kfqF28S-HTe-R2DGlymntOwHDVVf302UtMKk-f92bHAAa0IDuMeSTj52eOgepRGESO9E37BYZ-iYHz8iFjcWBjHowuWuTXoNnNAkou1WAH-WxtiszqTLn1Hyg5P4sEt_UiMSbTV3m0UmUupqBi-lzwgH4CsRSq3XqR6azAbRz4qPsSXiAFratKAQIbQuluIOVVmw&sig=Cg0ArKJSzGL_hwGFS5VzEAE&uach_m=%5BUACH%5D&pr=13:ZgYOPAAAAAB2m_3QsatYZTYYSiy_qBI09Znk9w&cry=1&crd=aHR0cHM6Ly9mb3JkYmx1ZWFkdmFudGFnZS5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1177&vt=11&dtpt=1174&dett=2&cstd=0&cisv=r20240327.96706&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: event-source;trigger;navigation-source Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlaJk6bHByEIRBO0irO6IoozSM4-tSRZhT2IlYufwWUI_XHABPzon6zqXxim80; APC=AfxxVi7JxYIYbMX27B2vewpU13WV8PTDneLxWQzURDLa0C2HmfqVBQ
2024-03-29 00:41:40 UTC	1572	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0xb22e2f0e5a3e3f2a0000000000000000","13":"0x3f9cec862f714b9d0000000000000000","14":"0x81d72c5a5c7da4f30000000000000000","15":"0x8cf72d1e85abbd800000000000000000"},"debug_key":"8461987471747381660","debug_reporting":true,"destination":["https://ford.com","https://buyfordnow.com","https://fordpro.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["313305","313307","313310","313316","313317","313318","313319","313321","313322","313326"],"21":[],"8":["690327"]},"priority":"0","source_event_id":"8481419910684769878"} X-Content-Type-Options: nosniff Date: Fri, 29 Mar 2024 00:41:40 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 28-Apr-2024 00:41:40 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Fri, 29 Mar 2024 00:41:40 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50239	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	808	OUT	GET /cksync.php?cs=1&vsid=3546744890180387000V10&type=adb&refUrl=&vid=16728938013546744890180387000V10&ovsid=ZgYOPgAB7vmzSgAj&axid_e=&_test=ZgYOPgAB7vmzSgAj HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:40 UTC	659	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-adb=ZgYOPgAB7vmzSgAj~~1;Expires=Wed, 25 Sep 2024 00:41:40 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:40 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:40 GMT Connection: close
2024-03-29 00:41:40 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:40 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	50226	104.18.38.76	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	671	OUT	GET /ht/htw-pixel.gif?ZgYOPsAoJI0AAAi4ADlhawAA%261617=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: js-sec.indexww.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:40 UTC	483	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Type: image/gif Content-Length: 43 Connection: close Last-Modified: Tue, 24 Jan 2017 19:36:04 GMT ETag: "da1f1d-2b-546dc3a097100" Cache-Control: public, max-age=14400 Expires: Fri, 29 Mar 2024 04:41:39 GMT Edge-Control: cache-maxage=1h P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" CF-Cache-Status: HIT Age: 775 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86bbd0c8d86f6ffb-IAD
2024-03-29 00:41:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	50257	52.54.57.187	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	890	OUT	GET /ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=JcUsekky1RQ0jp5
2024-03-29 00:41:40 UTC	773	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Fri, 29 Mar 2024 00:41:39 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:JcUsekky1RQ0jp5&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-074b4a44331b33f65@us-east-1e@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=JcUsekky1RQ0jp5; Domain=.w55c.net; Expires=Tue, 29 Apr 2025 00:41:39 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchpubmatic=5; Domain=.w55c.net; Expires=Sun, 28 Apr 2024 00:41:39 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	50235	54.156.138.144	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	718	OUT	GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:40 UTC	1383	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Fri, 29 Mar 2024 00:41:39 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=TjMxskYIXe9LRDfaNGZeQmalMCs&gdpr=0&gdpr_consent= Set-Cookie: sa-user-id=s%3A0-4e3331b2-4608-5def-4b44-37da34665e42.whFqKzgCw18m%2FSCYS5yWxVR2rG1ZAITd2%2Fm9ZGidAuE; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-4e3331b2-4608-5def-4b44-37da34665e42.whFqKzgCw18m%2FSCYS5yWxVR2rG1ZAITd2%2Fm9ZGidAuE; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3ATjMxskYIXe9LRDfaNGZeQmalMCs.jz60r%2BxCkCaevdt8UZTBS0VL4AlTE8Txkni1XZXv9Vo; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3ATjMxskYIXe9LRDfaNGZeQmalMCs.jz60r%2BxCkCaevdt8UZTBS0VL4AlTE8Txkni1XZXv9Vo; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIPreYZwXJZmBcmhsw0h0Dk4f9Z2guQWvxvtGD5yd9LWdEHwYBCDDnJiwBjABOgT87-jmQgQ7U_2w.IIbeenDSVjT6Vb4BH6csouzFrhVyxaj4gifv7y6Hp0M; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIPreYZwXJZmBcmhsw0h0Dk4f9Z2guQWvxvtGD5yd9LWdEHwYBCDDnJiwBjABOgT87-jmQgQ7U_2w.IIbeenDSVjT6Vb4BH6csouzFrhVyxaj4gifv7y6Hp0M; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 188 Connection: Close
2024-03-29 00:41:40 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 7a 45 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 54 6a 4d 78 73 6b 59 49 58 65 39 4c 52 44 66 61 4e 47 5a 65 51 6d 61 6c 4d 43 73 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=TjMxskYIXe9LRDfaNGZeQmalMCs&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	50254	23.43.243.147	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	5252	OUT	GET /log?logid=awlog&itype=YHB&tElp=5761&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-6cdd6846-77zvf&svr=285_20_20_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001711672890119017221018037423&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=%5B%7B%22source%22%3A%22liveintent.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22vN_RikZwhoZWxTMpfJBcDcT8RWafL19T6LauHA%22%2C%22atype%22%3A3%7D%5D%7D%2C%7B%22source%22%3A%22rubiconproject.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22LMPI0LLB-19-JSO6%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22liveintent.indexexchange.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ZQjYrf.1D0shOWRRRk909QAA%261008%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubmatic.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228DDE491A-31A6-4A5B-9E11-D4969B43F97B%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%5D&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&pvid=-3&exid=0&req_mtype%3C%3E=0&res_mtype=0&pv_adtype=0&adtypes=0&pbasrc=0&mang=0&dpa=&pbAcid=347818279457200221711672891606&pbBidId=20086357115156131711672891626&crid=206512146&g=0&nms=2&ptype=43&supcrid=us_yhp_main_dt_top_center&r_fp%3C%3E=3900443&acid=244154801216068341711672891614&astat=dp&auMxTm=1400&actltime=1410&acwtime=1410&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=2&agid%3C%3E=&asagid=&asbkt=&sr=0&adj1=0&dpsh_src=1&adj0=0&pst=0&adj2=0&incentive_expense=0&incentive_type=0&discount=0&bdp=2.210000&cpm=2.21&ogbdp=2.210000&cbdp=2.210000&dfpBd=2.21&aogbdp=&true_bdp=2.21&abtest_status=0&bucket_id=-1571&exp_id=-380&flrver=&flrrule=&bfa_al=&bfa_pr=&bfa_stat=&flr_price=0&flr_strat=dynamic&advId=&advNm=&pvAgNm=&pvAgId=11611&advUrl=denturerescue.com&ba=3215&prspt=headerBid&act=headerBid&mowxReqId=&ckfl=&cs=&iurl=&di=&dt=O&dp=0&dsrc=-2&dbf=1&epc=206512146&epc2=&epc3=&pbidflr=0.00&bfs=&nbr=0&prvAccId=206512146&pcrid=695100154993717199&size=970x250&req_size=728x90%7C970x250&s=1&snm=success&toconsider=0&mnet_ckfl=&rbr=&ruct=0&ae=0&ftr%3C%3E=&og_bid=0&pcon=&adType=BANNER&gtime=6&htime=-1&stime=-1&ltime=869&brc=0&brt=1711672892&but=1711672892&bidId=215705401661407401711672892495&mpvid=25052&aqtime=0&in_lurl=&out_lurl=&loss_id=&abs=&apid=&ybnca_bbid=&binfobid=&bdata=&bId=&cmpid=&cat=&attr=&dtc=&prvReqId=&ybnca_erpm=&exp=&ybnca_gbid=&htps=&patint=&patkey=&fpuReq=&prvApiId=&mp_seg%3C%3E=&pcId=&pvNbr=&pvNbrDtls=&pseat=&rtime=&seat=&ortbseat=Index%20Exchange&sbdrid=&ybnca_vbid=&wsip=&pvdTmax=0&td=%7B%22ydevice%22%3A%22desktop%22%2C%22ylang%22%3A%22en-US%22%2C%22yregion%22%3A%22US%22%2C%22ysection%22%3A%22main%22%2C%22ysite%22%3A%22fp%22%2C%22ysrc%22%3A%222%22%7D&sec=&chnl=&csent=1&zn=e&dfpadvId=&dfpcmpId=&isEmp=&dfpAdPath=%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_top_center&dfpDiv=sda-MAST-iframe&sz=&srcAgCrid=&srcAgLid=&lbid=&isbckfl=&srvcnm=&sspReq=&csip=&sspReg=&mnrf=0&mnrfc=0&invw=-1&strg=&dStat=&dcbdp=0&adfpBd=&dcs=&tref=0&rfc=0&repchn1=%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_top_center&iwr=0&aqp=3&acrid=&aqm=&aqb=&aqws=&clopvid=%5B-3%5D&clobdp=2.210000&clocbdp=2.210000&clodp=0&uid_mod_avb%3C%3E=liveIntentId&uid_mod_sent%3C%3E=liveIntentId&def_size=3x1%7C728x90%7C970x250&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Abf1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Afp%3Bver%3Amegastrm%7C%7C2023538075%7C%7C%7C%7Cdrop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%7C%22%7D&k2=%7B%22k%22%3A%22bucket%22%2C%22v%22%3A%22drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%22%7D&k3=%7B%22k%22%3A%22cobrand%22%2C%22v%22%3A%22none%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22top_center%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22fp%22%7D&k39=fp&ydt=desktop&ylang=en-US&yr=US&ysec=main&ys=fp&sc_pvid=25307&sc_ogbdp=1.290000&sc_bdp=1.290000&sc_cbdp=1.290000&sc_bdata=&sc_dp=0&top=84&btm=354&lft=-8.5&rght=1271.5&lper=1&rme=SFR&ra_sz=&udc=0&oyaf=0&cpr=0.8045973616953757&omul=1&currsrc=NA&ocurr=&mview=0&ebuid=d4a6d1f6b130c0c2027605e4e3bee299&rti=84&requrl=https%3A%2F%2Fwww.yahoo.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:40 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Fri, 29 Mar 2024 00:41:40 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:40 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-29 00:41:40 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	50245	54.156.138.144	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	638	OUT	GET /sync?nid=68&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:40 UTC	1329	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Fri, 29 Mar 2024 00:41:39 GMT Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=123&external_user_id=TjMxskYIXe9LRDfaNGZeQmalMCs Set-Cookie: sa-user-id=s%3A0-4e3331b2-4608-5def-4b44-37da34665e42.whFqKzgCw18m%2FSCYS5yWxVR2rG1ZAITd2%2Fm9ZGidAuE; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-4e3331b2-4608-5def-4b44-37da34665e42.whFqKzgCw18m%2FSCYS5yWxVR2rG1ZAITd2%2Fm9ZGidAuE; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3ATjMxskYIXe9LRDfaNGZeQmalMCs.jz60r%2BxCkCaevdt8UZTBS0VL4AlTE8Txkni1XZXv9Vo; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3ATjMxskYIXe9LRDfaNGZeQmalMCs.jz60r%2BxCkCaevdt8UZTBS0VL4AlTE8Txkni1XZXv9Vo; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIPreYZwXJZmBcmhsw0h0Dk4f9Z2guQWvxvtGD5yd9LWdEHwYBCDDnJiwBjABOgT87-jmQgQYPPwu.1p602I2nl2f9sYeRPvPARLcY1tgGMcRC%2FsfoIlMkuuQ; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIPreYZwXJZmBcmhsw0h0Dk4f9Z2guQWvxvtGD5yd9LWdEHwYBCDDnJiwBjABOgT87-jmQgQYPPwu.1p602I2nl2f9sYeRPvPARLcY1tgGMcRC%2FsfoIlMkuuQ; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 122 Connection: Close
2024-03-29 00:41:40 UTC	122	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 32 33 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 54 6a 4d 78 73 6b 59 49 58 65 39 4c 52 44 66 61 4e 47 5a 65 51 6d 61 6c 4d 43 73 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=123&external_user_id=TjMxskYIXe9LRDfaNGZeQmalMCs">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50219	23.43.243.136	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	5562	OUT	GET /log?logid=kfk&evtid=adplog&itype=YHB&tElp=8183&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-6cdd6846-77zvf&svr=285_20_20_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001711672890119017221018037423&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=%5B%7B%22source%22%3A%22liveintent.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22vN_RikZwhoZWxTMpfJBcDcT8RWafL19T6LauHA%22%2C%22atype%22%3A3%7D%5D%7D%2C%7B%22source%22%3A%22rubiconproject.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22LMPI0LLB-19-JSO6%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22liveintent.indexexchange.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ZQjYrf.1D0shOWRRRk909QAA%261008%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubmatic.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228DDE491A-31A6-4A5B-9E11-D4969B43F97B%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%5D&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&pvid=25307&exid=10025&req_mtype%3C%3E=2%23%230&res_mtype=&pv_adtype=&adtypes=2%7C0&pbasrc=0&mang=0&dpa=2&crid=827382134&g=0&nms=2&ptype=43&supcrid=us_yhp_main_dt_top_right&r_fp%3C%3E=3900443&adj1=0&dpsh_src=1&adj0=0&pst=0&adj2=0&incentive_expense=0&incentive_type=0&discount=0&bdp=1.240000&cpm=1.24&ogbdp=1.240000&cbdp=1.240000&dfpBd=1.24&aogbdp=&true_bdp=1.24&advId=&advNm=&pvAgNm=&pvAgId=&advUrl=chevrolet.com&ba=4022&prspt=headerBid&act=headerBid&mowxReqId=&ckfl=&cs=&iurl=&di=&dt=O&dp=0&dsrc=&dbf=0&epc=1057986&epc2=&epc3=&pbidflr=0.50&bfs=&nbr=0&prvAccId=1057986&pcrid=15328874&size=300x600&req_size=300x600&s=1&snm=success&toconsider=1&mnet_ckfl=&rbr=&ruct=0&ae=0&ftr%3C%3E=&og_bid=0&pcon=&adType=BANNER&gtime=4&htime=-1&stime=-1&ltime=1122&brc=0&brt=1711672892&but=1711672892&bidId=146020580947701411711672892745&mpvid=&aqtime=0&in_lurl=&out_lurl=&loss_id=&abs=&apid=&ybnca_bbid=&binfobid=&bdata=&bId=&cmpid=&cat=&attr=&dtc=&prvReqId=&ybnca_erpm=&exp=&ybnca_gbid=&htps=&patint=&patkey=&fpuReq=&prvApiId=&mp_seg%3C%3E=&pcId=&pvNbr=&pvNbrDtls=&pseat=&rtime=&seat=85&ortbseat=1982032&sbdrid=&ybnca_vbid=&wsip=&pvdTmax=0&td=%7B%7D&dfpadvId=&dfpcmpId=&isEmp=&dfpAdPath=&dfpDiv=sda-LREC-iframe&sz=&srcAgCrid=&srcAgLid=&lbid=&isbckfl=&srvcnm=&sspReq=&csip=&sspReg=&top=572&btm=1172&lft=951&rght=1243&sec=&chnl=&csent=1&zn=e&acid=176264509238088091711672891609&astat=dp&auMxTm=1400&actltime=1409&acwtime=1409&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=2&agid%3C%3E=&asagid=&asbkt=&sr=0&rti=1144&evttyp=1&spost=0.00&sposl=0.00&rme=SFR&ra_sz=&mview=0&apstrat=3&pvid=25052&exid=0&req_mtype%3C%3E=0%23%231%23%232&res_mtype=&pv_adtype=&adtypes=0%7C1%7C2&pbasrc=0&mang=0&dpa=&crid=206512146&g=0&nms=2&ptype=43&supcrid=us_yhp_main_dt_top_center&r_fp%3C%3E=3900443&adj1=0&dpsh_src=1&adj0=0&pst=0&adj2=0&incentive_expense=0&incentive_type=0&discount=0&bdp=2.210000&cpm=2.21&ogbdp=2.210000&cbdp=2.210000&dfpBd=2.21&aogbdp=&true_bdp=2.21&advId=&advNm=&pvAgNm=&pvAgId=11611&advUrl=denturerescue.com&ba=4272&prspt=headerBid&act=headerBid&mowxReqId=&ckfl=&cs=&iurl=&di=&dt=O&dp=0&dsrc=-2&dbf=1&epc=206512146&epc2=&epc3=&pbidflr=0.00&bfs=&nbr=0&prvAccId=206512146&pcrid=695100154993717199&size=970x250&req_size=728x90%7C970x250&s=1&snm=success&toconsider=1&mnet_ckfl=&rbr=&ruct=0&ae=0&ftr%3C%3E=&og_bid=0&pcon=&adType=BANNER&gtime=6&htime=-1&stime=-1&ltime=869&brc=0&brt=1711672892&but=1711672892&bidId=215705401661407401711672892495&mpvid=25052&aqtime=0&in_lurl=&out_lurl=&loss_id=&abs=&apid=&ybnca_bbid=&binfobid=&bdata=&bId=&cmpid=&cat=&attr=&dtc=&prvReqId=&ybnca_erpm=&exp=&ybnca_gbid=&htps=&patint=&patkey=&fpuReq=&prvApiId=&mp_seg%3C%3E=&pcId=&pvNbr=&pvNbrDtls=&pseat=&rtime=&seat=&ortbseat=Index%20Exchange&sbdrid=&ybnca_vbid=&wsip=&pvdTmax=0&td=%7B%7D&dfpadvId=&dfpcmpId=&isEmp=&dfpAdPath=&dfpDiv=sda-MAST-iframe&sz=&srcAgCrid=&srcAgLid=&lbid=&isbckfl=&srvcnm=&sspReq=&csip=&sspReg=&top=84&btm=354&lft=-8.5&rght=1271.5&sec=&chnl=&csent=1&zn=e&acid=244154801216068341711672891614&astat=dp&auMxTm=1400&actltime=1410&acwtime=1410&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=2&agid%3C%3E=&asagid=&asbkt=&sr=0&rti=1140&evttyp=1&spost=0.00&sposl=0.00&rme=SFR&ra_sz=&mview=0&apstrat=3&requrl=https%3A%2F%2Fwww.yahoo.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1
2024-03-29 00:41:40 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Fri, 29 Mar 2024 00:41:40 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:40 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-29 00:41:40 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50255	35.211.178.172	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	647	OUT	GET /sync?ssp=liveintent&user_id=07571c18-3f04-4602-a656-288806fb242c HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:40 UTC	795	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync?ssp=liveintent&user_id=07571c18-3f04-4602-a656-288806fb242c Set-Cookie: tuuid=ca57c23d-569f-46f3-a577-3e6f6bd561b5; path=/; expires=Sat, 29-Mar-2025 00:41:39 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1711672899; path=/; expires=Sat, 29-Mar-2025 00:41:39 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1711672899; path=/; expires=Sat, 29-Mar-2025 00:41:39 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1711672899; path=/; expires=Sat, 29-Mar-2025 00:41:39 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	50236	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	805	OUT	GET /cksync.php?cs=1&vsid=3546744890180387000V10&type=opx&refUrl=&vid=16728938013546744890180387000V10&axid_e=&ovsid=51c60a0a-b2b1-4df8-a524-32544527bc2c HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:40 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1;Expires=Wed, 25 Sep 2024 00:41:40 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:40 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:40 GMT Connection: close
2024-03-29 00:41:40 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:40 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	50261	172.253.63.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	3093	OUT	GET /pcs/view?xai=AKAOjsvdEyCMha1EgGA-oMXI6iXVqeXerKqHh7L9CM-EmzMPYg0dkA1rWyWqq2iv6U8M0NS4tnJqkTtwGQgLau33oqv6S8TWrB9ClDKSBilRHnU5Zy8_EcPM4pfcJaiepsjKHAHGm7LDSRIc8qPvyDzeVhpkiTc0F8tzVgLM8rIGYzLRA66kzf1pg-uUIaYh-1h9xp58TdN91a0_zVp85LBIr4si2UXATVceecfzkIc68hV9KqeV7E2XfxFS-s5oexYAbTrv96dsaZfCHOmx3-ktmCBBVscoRg6rkliRgA0_IeBZxnM0vjhEZM1I_n5n1qxjVsBfsIsw9VwQz8jFnBGfSXcFyfxcyZ_LciSm8r2mlpnRPX2F-97iSz88jeWZEwsrz8X_7KnRpIeTVma_LntjyL5BkNPtsj4TKQHdc1jdzVtshMVfbBb3iuM7PhWmXID2tGY6f8tW_05uzXLvTRHQE2CPWw0uvNkFOmHjJD-2VBtNFElxoAxPkUDqQ-OQyZm_oEmM1LGnzadaQatNLa9ZMZa9yoghIWzRTxpYRppbQ4SPTqeTnoJp4K0NvgdrubU0J-77m3q3KaYodp-Zv80l_nm3uSYqQh4-q2y1n6AUtOr4mgbhntncZ3zst3_5JfA0t9CaWHp6CVA82DuluX3O_sR3Y61oWb2JHE-oYznpdp8ryLcpIiOBAW8Nh8Y6l9MpivlPtjqUv_AtLrwzLxQxQesZpjQvgHtTe7RpblnjsK0se4-Iqw0GlFsZtqvnDYcjIWMNKT3DDK9I92CSwWovdzkGdjh1xG07U_eQCa4p1UvLvB8Tbul0nUxTeINoFzjDOkj43L9cFrIwTSrp59maV1b-N15CZjjKf4Jo3r3yNyLXCSZppTQk6c8ODQLWzOuLUSFO_YFnQbIyoMukooYgqaHh3hL14Qxz2e5YJjkj5BjjCZurCYkCjJZcqCSXx7Czmot6FmUpWh8Kv5KYm3guv2RWYs0utIeXehlipnm7sz1KMSxG1Wb6_zpBRz7sacRREXVq2a-dxptS_-HZND91EyzRU6559yS4hht49WXjCc0DnzIWDPgAgtl88LMLT2JGpG-gndyc9-nLn6D1L5BI3clmJxdKdhooZcnKwyGAOAIYRf413G5yD8oNk40pTR1ps_N2FIDs-HFBqGkWmeA1svEhZlmnqktS3G7S9QrBBAO_I5Q9Us9f1-qZAhKqQYSQhwjVK_zeIrn242W1M7dgi79mu0pXK2QYfoxaDryBu-2oLTlzRR-kwsQ0D1dwyzqdsCk9IsbW9yfsILT7V72DyS-QFkmWLs1S9t1dOMKct-B8Pk3G_akstjtGiT-mPrfNxhpcR4PZKmbycyuVOUgFSlsU7VVRHNlqCl-hNfWvjuhk6ZuLu1_uj7YOXZO1faFOWzjyplrXb_MxT4RwLeZywEr5Tv6KbSyNJJlNAXHOzxins3fGKYPmh16KvKM144O-UV89YSyHBWUGCwQnG_1R&sai=AMfl-YQYjcAqWSD84XojUqontl4RSIrVprfYKa8wLO0wTNMQpyWmIm-MVZC-QWjcQyODnARkujd6HcAaLHzR7VZu3UY0WY0Uu65vBrqAInlduL0JchP77FIa1iCnhX_2SqpUKd6hzrucbeqjWVvGGDEkslaRWX_0x_3pNHugusTLznDcj_stOHUG0CxVfJxniUdCH3C4IoK4I69_biWOtBOrOcMVbw4&sig=Cg0ArKJSzAER363Y5OLJEAE&uach_m=%5BUACH%5D&pr=13:ZgYOPAAAAAA82sLIIxTNCSKTH3jb2L6duZ5lxw&cry=1&crd=aHR0cHM6Ly9jaGV2cm9sZXQuY29tLGh0dHBzOi8vYWdrbi5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1505&cbvp=1&cstd=1495&cisv=r20240327.93139&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: event-source;trigger Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlaJk6bHByEIRBO0irO6IoozSM4-tSRZhT2IlYufwWUI_XHABPzon6zqXxim80; APC=AfxxVi7JxYIYbMX27B2vewpU13WV8PTDneLxWQzURDLa0C2HmfqVBQ; ar_debug=1
2024-03-29 00:41:40 UTC	1727	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x64983baeaf07a1970000000000000000","13":"0x384eacc73c10d9330000000000000000","14":"0x3d9166c0cde1a3670000000000000000","15":"0xcd75166f47f11e5a0000000000000000"},"debug_key":"286877778422380015","debug_reporting":true,"destination":["https://chevrolet.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["9842510","10171443","10227236","10447536","10282874","10572791","10253637","10208144","10209116","10531420"],"21":[],"8":["3924042"]},"priority":"0","source_event_id":"12366777306986830950"} X-Content-Type-Options: nosniff Date: Fri, 29 Mar 2024 00:41:40 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 28-Apr-2024 00:41:40 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Fri, 29 Mar 2024 00:41:40 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	50260	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	771	OUT	GET /sadbundle/473513299895995753/index.html?ev=01_250 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:40 UTC	831	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 7057 Date: Fri, 29 Mar 2024 00:41:40 GMT Expires: Sat, 29 Mar 2025 00:41:40 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:40 UTC	421	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 09 0d 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 64 2e 73 69 7a 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 33 30 30 2c 68 65 69 67 68 74 3d 36 30 30 22 3e 0d 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="ad.size" content="width=300,height=600"><meta name="viewport" content="width=device-width, initial
2024-03-29 00:41:40 UTC	1252	IN	Data Raw: 74 6c 65 3e 0d 0a 0d 0a 09 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 67 73 61 70 2f 31 2e 31 39 2e 30 2f 54 77 65 65 6e 4d 61 78 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 09 3c 73 63 72 69 70 74 20 73 72 63 3d 22 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 09 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 73 74 79 6c 65 73 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 0d 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 69 63 6b 54 61 67 Data Ascii: tle><script src="https://cdnjs.cloudflare.com/ajax/libs/gsap/1.19.0/TweenMax.min.js"></script><script src="script.js"></script><link href="styles.css" rel="stylesheet" type="text/css"><script type="text/javascript"> var clickTag
2024-03-29 00:41:40 UTC	1252	IN	Data Raw: 74 44 61 74 61 2e 63 6c 69 63 6b 54 61 67 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 6b 54 61 67 20 3d 20 65 76 65 6e 74 44 61 74 61 2e 63 6c 69 63 6b 54 61 67 73 5b 69 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 63 6c 6b 54 61 67 2e 6e 61 6d 65 5d 20 3d 20 63 6c 6b 54 61 67 2e 75 72 6c 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6c 6b 54 61 67 2e 65 54 6c 64 50 6c 75 73 4f 6e 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 54 6c 64 50 6c 75 73 4f 6e 65 73 5b 63 6c 6b 54 61 67 2e 75 72 6c 5d 20 3d 20 63 6c 6b 54 61 67 2e 65 54 6c 64 50 6c 75 73 4f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 Data Ascii: tData.clickTags.length; i++) { var clkTag = eventData.clickTags[i]; window[clkTag.name] = clkTag.url; if (clkTag.eTldPlusOne) { eTldPlusOnes[clkTag.url] = clkTag.eTldPlusOne; } if
2024-03-29 00:41:40 UTC	1252	IN	Data Raw: 53 65 74 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 76 61 72 20 73 74 6f 72 65 43 6c 69 63 6b 43 6f 6f 72 64 69 6e 61 74 65 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 75 72 6c 50 61 72 61 6d 4d 61 70 5b 43 4c 49 43 4b 5f 58 5f 55 52 4c 5f 4b 45 59 5d 20 3d 20 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2e 63 6c 69 65 6e 74 58 29 3b 0a 20 20 20 20 20 20 75 72 6c 50 61 72 61 6d 4d 61 70 5b 43 4c 49 43 4b 5f 59 5f 55 52 4c 5f 4b 45 59 5d 20 3d 20 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2e 63 6c 69 65 6e 74 59 29 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 76 61 72 20 67 65 74 43 72 65 61 74 69 76 65 44 69 6d 65 6e 73 69 6f 6e 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 72 65 Data Ascii: Set = true; } }; var storeClickCoordinates = function(e) { urlParamMap[CLICK_X_URL_KEY] = Math.round(e.clientX); urlParamMap[CLICK_Y_URL_KEY] = Math.round(e.clientY); }; var getCreativeDimensions = function() { re
2024-03-29 00:41:40 UTC	1252	IN	Data Raw: 72 65 70 6f 72 74 69 6e 67 49 64 73 5b 75 72 6c 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 63 6c 69 63 6b 58 27 3a 20 75 72 6c 50 61 72 61 6d 4d 61 70 5b 43 4c 49 43 4b 5f 58 5f 55 52 4c 5f 4b 45 59 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 63 6c 69 63 6b 59 27 3a 20 75 72 6c 50 61 72 61 6d 4d 61 70 5b 43 4c 49 43 4b 5f 59 5f 55 52 4c 5f 4b 45 59 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 63 72 65 61 74 69 76 65 44 69 6d 73 27 3a 20 67 65 74 43 72 65 61 74 69 76 65 44 69 6d 65 6e 73 69 6f 6e 73 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6d 65 73 73 61 67 65 29 2c 20 27 Data Ascii: reportingIds[url], 'clickX': urlParamMap[CLICK_X_URL_KEY], 'clickY': urlParamMap[CLICK_Y_URL_KEY], 'creativeDims': getCreativeDimensions() }; parent.postMessage(JSON.stringify(message), '
2024-03-29 00:41:40 UTC	1252	IN	Data Raw: 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 65 6e 2e 61 70 70 6c 79 28 77 69 6e 64 6f 77 2c 61 72 67 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 7d 28 77 69 6e 64 6f 77 2e 6f 70 65 6e 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 20 7b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 0a 20 20 20 20 20 20 20 20 20 20 27 6d 65 73 73 61 67 65 27 2c 20 68 61 6e 64 6c 65 43 6c 69 63 6b 54 61 67 4d 65 73 73 61 67 65 2c 20 66 61 6c 73 65 29 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6d 6f 75 73 65 64 6f 77 6e Data Ascii: } open.apply(window,args); } }; }(window.open); } if (window.addEventListener) { window.addEventListener( 'message', handleClickTagMessage, false); window.addEventListener('mousedown
2024-03-29 00:41:40 UTC	376	IN	Data Raw: 6d 67 20 63 6c 61 73 73 3d 22 68 65 61 64 6c 69 6e 65 22 20 69 64 3d 22 68 65 61 64 6c 69 6e 65 34 22 20 73 72 63 3d 22 69 6d 61 67 65 73 2f 68 65 61 64 6c 69 6e 65 34 2e 70 6e 67 22 3e 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 69 64 3d 22 6d 6f 64 65 6c 22 20 73 72 63 3d 22 69 6d 61 67 65 73 2f 6d 6f 64 65 6c 2e 70 6e 67 22 3e 0d 0a 0d 0a 09 09 09 3c 69 6d 67 20 69 64 3d 22 6c 6f 63 6b 6f 75 74 22 20 73 72 63 3d 22 69 6d 61 67 65 73 2f 6c 6f 63 6b 6f 75 74 2e 70 6e 67 22 3e 0d 0a 09 09 09 3c 69 6d 67 20 69 64 3d 22 63 74 61 2d 6f 76 65 72 22 20 73 72 63 3d 22 69 6d 61 67 65 73 2f 63 74 61 5f 6f 76 65 72 2e 70 6e 67 22 3e 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 Data Ascii: mg class="headline" id="headline4" src="images/headline4.png"></div> <img id="model" src="images/model.png"><img id="lockout" src="images/lockout.png"><img id="cta-over" src="images/cta_over.png">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50262	142.251.167.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:39 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 246 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:39 UTC	246	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 62 75 79 66 6f 72 64 6e 6f 77 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 66 6f 72 64 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 66 6f 72 64 70 72 6f 2e 63 6f 6d 22 5d 2c 22 73 6f 75 72 63 65 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 36 31 36 31 32 37 35 30 39 36 32 32 32 33 38 32 35 32 34 22 2c 22 73 6f 75 72 63 65 5f 65 76 65 6e 74 5f 69 64 22 3a 22 36 37 31 36 33 34 37 33 34 39 37 38 37 38 38 35 35 39 35 22 2c 22 73 6f 75 72 63 65 5f 73 69 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 79 61 68 6f 6f 2e 63 6f 6d 22 7d 2c 22 74 79 70 65 22 3a 22 73 6f 75 72 63 65 2d 73 75 63 63 65 73 73 22 7d 5d Data Ascii: [{"body":{"attribution_destination":["https://buyfordnow.com","https://ford.com","https://fordpro.com"],"source_debug_key":"16161275096222382524","source_event_id":"6716347349787885595","source_site":"https://yahoo.com"},"type":"source-success"}]
2024-03-29 00:41:40 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 29 Mar 2024 00:41:40 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	50253	23.43.243.147	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	5139	OUT	GET /log?logid=awlog&itype=YHB&tElp=5776&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-6cdd6846-77zvf&svr=285_20_20_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001711672890119017221018037423&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=%5B%7B%22source%22%3A%22liveintent.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22vN_RikZwhoZWxTMpfJBcDcT8RWafL19T6LauHA%22%2C%22atype%22%3A3%7D%5D%7D%2C%7B%22source%22%3A%22rubiconproject.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22LMPI0LLB-19-JSO6%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22liveintent.indexexchange.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ZQjYrf.1D0shOWRRRk909QAA%261008%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubmatic.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228DDE491A-31A6-4A5B-9E11-D4969B43F97B%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%5D&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&pvid=25307&exid=10025&req_mtype%3C%3E=0&res_mtype=0&pv_adtype=0&adtypes=0&pbasrc=0&mang=0&dpa=2&crid=533126705&g=0&nms=1&ptype=43&supcrid=us_yhp_main_dt_as_mid_right_c&r_fp%3C%3E=3900443&acid=287329703247762331711672891614&astat=dp&auMxTm=1400&actltime=1412&acwtime=1415&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=2&agid%3C%3E=77452003106345491711672891614&asagid=77452003106345491711672891614&asbkt=v2&sr=0&adj1=0&dpsh_src=1&adj0=0&pst=0&adj2=0&incentive_expense=0&incentive_type=0&discount=0&bdp=2.500000&cpm=2.5&ogbdp=2.500000&cbdp=2.500000&dfpBd=2.50&aogbdp=&true_bdp=2.5&abtest_status=0&bucket_id=-1571&exp_id=-380&flrver=&flrrule=533126705%7C%7C25307&bfa_al=exploitation&bfa_pr=0.45&bfa_stat=1&flr_price=0&flr_strat=dynamic&advId=&advNm=&pvAgNm=&pvAgId=&advUrl=ford.com&ba=2983&prspt=headerBid&act=headerBid&mowxReqId=&ckfl=&cs=&iurl=&di=&dt=O&dp=0&dsrc=&dbf=1&epc=1057984&epc2=&epc3=&pbidflr=0.45&bfs=&nbr=0&prvAccId=1057984&pcrid=12889399&size=300x600&req_size=300x600&s=1&snm=success&toconsider=1&mnet_ckfl=&rbr=&ruct=0&ae=0&ftr%3C%3E=&og_bid=0&pcon=&adType=BANNER&gtime=4&htime=-1&stime=-1&ltime=1119&brc=0&brt=1711672892&but=1711672892&bidId=124332210445997721711672892743&mpvid=&aqtime=0&in_lurl=&out_lurl=&loss_id=&abs=&apid=&ybnca_bbid=&binfobid=&bdata=&bId=&cmpid=&cat=&attr=&dtc=&prvReqId=&ybnca_erpm=&exp=&ybnca_gbid=&htps=&patint=&patkey=&fpuReq=&prvApiId=&mp_seg%3C%3E=&pcId=&pvNbr=&pvNbrDtls=&pseat=&rtime=&seat=85&ortbseat=1385045&sbdrid=&ybnca_vbid=&wsip=&pvdTmax=0&td=%7B%22ydevice%22%3A%22desktop%22%2C%22ylang%22%3A%22en-US%22%2C%22yregion%22%3A%22US%22%2C%22ysection%22%3A%22main%22%2C%22ysite%22%3A%22fp%22%2C%22ysrc%22%3A%222%22%7D&sec=&chnl=&csent=1&zn=e&dfpadvId=&dfpcmpId=&isEmp=&dfpAdPath=%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_as_mid_right_c&dfpDiv=sda-MON2-iframe&sz=&srcAgCrid=&srcAgLid=&lbid=&isbckfl=&srvcnm=&sspReq=&csip=&sspReg=&mnrf=0&mnrfc=0&invw=-1&strg=&dStat=&dcbdp=0&adfpBd=&dcs=&tref=0&rfc=0&repchn1=%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_as_mid_right_c&iwr=0&aqp=3&acrid=&aqm=&aqb=&aqws=&clopvid=%5B25307%5D&clobdp=2.500000&clocbdp=2.500000&clodp=0&uid_mod_avb%3C%3E=liveIntentId&uid_mod_sent%3C%3E=liveIntentId&def_size=300x250%7C300x600&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Abf1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Afp%3Bver%3Amegastrm%7C%7C2023538075%7C%7C%7C%7Cdrop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%7C%22%7D&k2=%7B%22k%22%3A%22bucket%22%2C%22v%22%3A%22drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%22%7D&k3=%7B%22k%22%3A%22cobrand%22%2C%22v%22%3A%22none%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22mid_right_c%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22fp%22%7D&k39=fp&ydt=desktop&ylang=en-US&yr=US&ysec=main&ys=fp&top=2035.265625&btm=2635.265625&lft=951&rght=1251&lper=1&rme=SFR&ra_sz=&udc=0&oyaf=0&cpr=0.648373721781754&omul=1&currsrc=NA&ocurr=&mview=0&ebuid=&rti=99&requrl=https%3A%2F%2Fwww.yahoo.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1
2024-03-29 00:41:40 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Fri, 29 Mar 2024 00:41:40 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:40 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-29 00:41:40 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	50263	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	1943	OUT	GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; pi=156078:3; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; PugT=1711672898; SPugT=1711672899
2024-03-29 00:41:40 UTC	760	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:40 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 27-Jun-2024 00:41:40 GMT; path=/ Set-Cookie: PugT=1711672900; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:40 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	50265	99.84.208.102	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	836	OUT	GET /pixel/2387/?ct=US&st=&city=0&dma=10&zp=&bw=4&che=729764585&col=31411294,5071708,388507207,581726800,211538221 HTTP/1.1 Host: d.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3Aksj%2ByvaRmHmyAUuIOsoo89ApLpekHFAG
2024-03-29 00:41:40 UTC	780	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, must-revalidate Date: Fri, 29 Mar 2024 00:41:39 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3Aksj%2ByvaRmHmyAUuIOsoo89ApLpekHFAG;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0EAgAAAAALZjKxAAAAAAAAQAtAQfoGAIAAQAHAAAAAAHfTF7__x4AAAAAAE1jXAAAAAAXKCZHAAAAAAyb0S0AAAAAIqxyUAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure X-Cache: Miss from cloudfront Via: 1.1 6c1f5fbbdcc06a5ed4d317a0e3609f72.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C1 X-Amz-Cf-Id: DWdh9nk9vAVkIIe7INhcgiN53oXjo98KvJVKsqISxJ_e8v7ydtOtmw==
2024-03-29 00:41:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	50268	34.193.223.137	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	764	OUT	GET /bct?pid=bd15bf51-eefe-4c0d-b44e-73d8d1d68196&google_gid=CAESENHvjjR7pBUR89uYsB3ujPU&google_cver=1 HTTP/1.1 Host: mid.rkdms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc=10%3A116064; sessionid=h-2a76b4ca64ed4b9dbe8faaecce219970_t-1711672898
2024-03-29 00:41:40 UTC	664	IN	HTTP/1.1 302 FOUND Server: awselb/2.0 Date: Fri, 29 Mar 2024 00:41:40 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close set-cookie: sc=14%3A116064; Domain=rkdms.com; Expires=Sat, 29 Mar 2025 00:41:40 GMT; Secure; Path=/; SameSite=None set-cookie: sessionid=h-2a76b4ca64ed4b9dbe8faaecce219970_t-1711672898; Domain=rkdms.com; Expires=Sat, 29 Mar 2025 00:41:40 GMT; Secure; Path=/; SameSite=None Vary: Accept-Encoding Pragma: no-cache Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Location: https://cm.g.doubleclick.net/pixel?google_nid=m1_dmp&google_hm=2a76b4ca64ed4b9dbe8faaecce219970

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.4	50267	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	1914	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=969751699754991983 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; pi=156078:3; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; PugT=1711672898; SPugT=1711672899
2024-03-29 00:41:40 UTC	582	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_18=22947-969751699754991983; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 27-Jun-2024 00:41:39 GMT; path=/ Set-Cookie: PugT=1711672899; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:39 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.4	50273	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	2134	OUT	GET /verify.js?ctx=20006197&cmp=31411294&sid=5071708&plc=388507207&crt=211538221&advid=3876771&adsrv=1&mon=1&blk=1&dvp_cawf=crtwrp&cm360cw=1&unit=300x600&prr=1&turl=https://www.yahoo.com/&aucmp=21039716546&auevent=ABAjH0gQDp_4c-0JAi6rZSx5hhRK&autt=1&ppid=103&aucrtv=553954458&auorder=1015903071&pltfrm=13&ausite=2328226494&auxch=13&aufilter1=1982032&c1=1982032&audeal=IX3MPADScope3DISP6Kqa8MAC&adid=&app=&dup=&gmnpo=&isdvvid=&supplySource=&tagtype=&aUrlD=0&brid=3&bridua=3&brver=117.0.0.0&brh=1&vavbkt=&lvvn=28&fcifrms=17&winh=600&winw=300&chro=1&noc=4&wouh=984&wouw=1280&htmlmsging=1&refD=2&scah=984&scaw=1280&jsver=5684&uid=1711672899477415&srcurlD=0&ttfrms=148&num=6&dvp_isOnHead=0&flvr=1&ver=5684&jsCallback=__verify_callback_1711672899477415&jsTagObjCallback=__tagObject_callback_1711672899477415&ssl=1&sfe=1&m1=15&dvp_rcp=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=1375353221538.1655&ee_dp_sukv=1375353221538.1655&dvp_tukv=17591451939.44182&ee_dp_tukv=17591451939.44182&ee_dp_dvtpurl=https%3A%2F%2Fcdn.doubleverify.com%2Fdvbm.js&dvp_strhd=0.29999999998835847&dvpx_strhd=0.29999999998835847&eparams=DC4FC%3Dl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETauU2%3F4r92%3A%3Fl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETar9EEADTbpTauTau_ag%60%60376g%607572335_6_6ce_h%60c%60fa6h%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3ETar9EEADTbpTauTau_ag%60%60376g%607572335_6_6ce_h%60c%60fa6h%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3E&referrer=https%3A%2F%2F02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html HTTP/1.1 Host: rtb0.doubleverify.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:40 UTC	250	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:40 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=0 Expires: 03/28/2024 00:41:40 Pragma: no-cache Timing-Allow-Origin: * X-DV-Response: 0
2024-03-29 00:41:40 UTC	458	IN	Data Raw: 31 63 33 0d 0a 0a 0a 74 72 79 7b 5f 5f 74 61 67 4f 62 6a 65 63 74 5f 63 61 6c 6c 62 61 63 6b 5f 31 37 31 31 36 37 32 38 39 39 34 37 37 34 31 35 28 7b 49 6d 70 72 65 73 73 69 6f 6e 49 44 3a 22 61 30 38 38 64 65 62 35 32 39 62 61 34 63 31 38 39 39 64 33 30 31 63 37 38 38 66 36 66 65 64 65 22 2c 20 53 65 72 76 65 72 50 75 62 6c 69 63 44 6e 73 3a 22 72 74 62 63 2d 75 65 31 2e 64 6f 75 62 6c 65 76 65 72 69 66 79 2e 63 6f 6d 22 7d 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 0a 74 72 79 7b 24 64 76 62 73 2e 70 75 62 53 75 62 2e 70 75 62 6c 69 73 68 28 27 42 65 66 6f 72 65 44 65 63 69 73 69 6f 6e 52 65 6e 64 65 72 27 2c 20 22 61 30 38 38 64 65 62 35 32 39 62 61 34 63 31 38 39 39 64 33 30 31 63 37 38 38 66 36 66 65 64 65 22 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 0a 74 Data Ascii: 1c3try{__tagObject_callback_1711672899477415({ImpressionID:"a088deb529ba4c1899d301c788f6fede", ServerPublicDns:"rtbc-ue1.doubleverify.com"});}catch(e){}try{$dvbs.pubSub.publish('BeforeDecisionRender', "a088deb529ba4c1899d301c788f6fede");}catch(e){}t
2024-03-29 00:41:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.4	50266	35.210.53.219	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	780	OUT	GET /sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic&bsw_custom_parameter=9bd3933c-0a52-4830-a023-563ef18ab8c1 HTTP/1.1 Host: pool.admedo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:40 UTC	692	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Fri, 29 Mar 2024 00:41:40 GMT Location: https://pool.admedo.com/ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic&bsw_custom_parameter=9bd3933c-0a52-4830-a023-563ef18ab8c1 Set-Cookie: tuuid=d3e8a721-2432-4c2e-85e7-0e0d2d010a1b; path=/; expires=Sat, 29-Mar-2025 00:41:40 GMT; samesite=none; secure Set-Cookie: c=1711672900; path=/; expires=Sat, 29-Mar-2025 00:41:40 GMT; samesite=none; secure Set-Cookie: tuuid_lu=1711672900; path=/; expires=Sat, 29-Mar-2025 00:41:40 GMT; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.4	50274	69.194.240.13	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	634	OUT	GET /usersync2/rmpssp?sub=yahoo&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:40 UTC	643	IN	HTTP/1.1 302 Found date: Fri, 29 Mar 2024 00:41:40 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005%22%2C%22zdxidn%22%3A%222069.88%22%7D; path=/; expires=Sat, 29 Mar 2025 00:41:40 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.1rx.io/usersync2/rmpssp?sub=yahoo&zcc=1&cb=1711672900465 etag: RX9d21a42c059949e7b7d6902789d2d8da005 connection: close
2024-03-29 00:41:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.4	50280	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	2003	OUT	GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=8b7fe8e3-752d-4da2-8d7e-64baea716a5a&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; pi=156078:3; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; PugT=1711672898; SPugT=1711672899
2024-03-29 00:41:40 UTC	781	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 29 Mar 2024 00:41:39 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 27-Jun-2024 00:41:39 GMT; path=/ Set-Cookie: PugT=1711672899; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:39 GMT; path=/ Location: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=6D366468-71AF-422B-99AB-138A6DAB94F7 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.4	50276	54.81.188.163	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	694	OUT	GET /getuid/15563?gdpr=0&gdpr_consent=&gpp_sid=&gpp=&r=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3D58601%26ovsid%3D HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:40 UTC	406	IN	HTTP/1.1 302 Date: Fri, 29 Mar 2024 00:41:40 GMT Content-Length: 0 Connection: close Server: nginx Set-Cookie: vst=u_99ef042a-5492-47e4-9c9a-171f0fce9075; Domain=.gumgum.com; Expires=Sat, 29 Mar 2025 00:41:40 GMT; Path=/; Secure; SameSite=None Location: https://hb.yahoo.net/cksync.php?cs=1&type=58601&ovsid=u_99ef042a-5492-47e4-9c9a-171f0fce9075 Content-Language: en-US Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.4	50275	44.195.161.142	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	623	OUT	GET /verizonsync?gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:40 UTC	756	IN	HTTP/1.1 302 Date: Fri, 29 Mar 2024 00:41:40 GMT Content-Type: application/json;charset=utf-8 Content-Length: 0 Connection: close Set-Cookie: yieldmo_id=VqUQt33vvQ3VT5KZdpyI%7C1711670400000%7C0; Max-Age=31536000; Expires=Sat, 29 Mar 2025 00:41:40 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Location: https://hb.yahoo.net/cksync.php?cs=1&type=58259&ovsid=VqUQt33vvQ3VT5KZdpyI&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.4	50278	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	1937	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:JcUsekky1RQ0jp5&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; pi=156078:3; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; PugT=1711672898; SPugT=1711672899
2024-03-29 00:41:40 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:40 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 27-Jun-2024 00:41:40 GMT; path=/ Set-Cookie: PugT=1711672900; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:40 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.4	50279	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	1945	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=TjMxskYIXe9LRDfaNGZeQmalMCs&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; pi=156078:3; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; PugT=1711672898; SPugT=1711672899
2024-03-29 00:41:40 UTC	709	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:40 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 27-Jun-2024 00:41:40 GMT; path=/ Set-Cookie: PugT=1711672900; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:40 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.4	50283	150.136.25.38	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	1147	OUT	GET /services?srv=cs&nuid=DD9B07CFC8814B5991D3EF05248CDFB5&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D4433599061245380871%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&uid=ZgYOPsAoJI0AAAi4ADlhawAA%261617 HTTP/1.1 Host: sync.technoratimedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tads_uidp_73=AAFJBk7MDBwAABSliZdkug; tads_uid=DD9B07CFC8814B5991D3EF05248CDFB5; tads_uid_cd=20240329004139+0000; tads_zora=2
2024-03-29 00:41:40 UTC	1202	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Fri, 29 Mar 2024 00:41:40 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Location: https://match.prod.bidr.io/cookie-sync?gdpr=0&userid=4433599061245380871&gdpr=0&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=4 Set-Cookie: tads_uidp_82=ZgYOPsAoJI0AAAi4ADlhawAA&1617; Max-Age=259200; Expires=Mon, 01 Apr 2024 00:41:40 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid=DD9B07CFC8814B5991D3EF05248CDFB5; Max-Age=63072000; Expires=Sun, 29 Mar 2026 00:41:40 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid_cd=20240329004139+0000; Max-Age=63072000; Expires=Sun, 29 Mar 2026 00:41:40 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_zora=2; Max-Age=63072000; Expires=Sun, 29 Mar 2026 00:41:40 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None access-control-allow-origin: https://ads.pubmatic.com/ access-control-allow-credentials: true access-control-allow-methods: POST,GET,HEAD,OPTIONS X-Varnish: 968538183 Age: 0 Via: 1.1 varnish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.4	50285	35.186.193.173	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	870	OUT	GET /int/cm?exc=20&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&callback=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dctn%26refUrl%3D%26vid%3D16728938013546744890180387000V10%26ovsid%3D%3CDSP_USER_ID%3E%26axid_e%3D%26 HTTP/1.1 Host: i.ctnsnet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cid_0bf86f4e7d934cb7b5daae7a5c7d8db5=1
2024-03-29 00:41:40 UTC	875	IN	HTTP/1.1 302 Found P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_0bf86f4e7d934cb7b5daae7a5c7d8db5=null; path=/; domain=.ctnsnet.com; expires=Thu, 01 Jan 1970 00:00:00 GMT; Secure; SameSite=None; Set-Cookie: cid=0bf86f4e7d934cb7b5daae7a5c7d8db5; path=/; domain=.ctnsnet.com; expires=Sat, 29 Mar 2025 00:41:40 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT x-xss-protection: 1; mode=block Status: 302 Location: https://hb.yahoo.net/cksync.php?cs=1&vsid=3546744890180387000V10&type=ctn&refUrl=&vid=16728938013546744890180387000V10&ovsid=0bf86f4e7d934cb7b5daae7a5c7d8db5&axid_e=&y=null&gdpr=0 Content-Type: text/html;charset=UTF-8 Content-Length: 0 Date: Fri, 29 Mar 2024 00:41:40 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.4	50287	142.251.167.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 277 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:40 UTC	277	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 63 68 65 76 72 6f 6c 65 74 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 64 65 62 75 67 63 6f 6e 76 65 72 73 69 6f 6e 64 6f 6d 61 69 6e 31 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 64 65 62 75 67 63 6f 6e 76 65 72 73 69 6f 6e 64 6f 6d 61 69 6e 32 2e 63 6f 6d 22 5d 2c 22 73 6f 75 72 63 65 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 32 38 36 38 37 37 37 37 38 34 32 32 33 38 30 30 31 35 22 2c 22 73 6f 75 72 63 65 5f 65 76 65 6e 74 5f 69 64 22 3a 22 31 32 33 36 36 37 37 37 33 30 36 39 38 36 38 33 30 39 35 30 22 2c 22 73 6f 75 72 63 65 5f 73 69 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 79 61 68 6f 6f 2e 63 6f 6d 22 7d 2c 22 74 79 Data Ascii: [{"body":{"attribution_destination":["https://chevrolet.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"source_debug_key":"286877778422380015","source_event_id":"12366777306986830950","source_site":"https://yahoo.com"},"ty
2024-03-29 00:41:40 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 29 Mar 2024 00:41:40 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.4	50286	142.251.167.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 245 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:40 UTC	245	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 62 75 79 66 6f 72 64 6e 6f 77 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 66 6f 72 64 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 66 6f 72 64 70 72 6f 2e 63 6f 6d 22 5d 2c 22 73 6f 75 72 63 65 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 38 34 36 31 39 38 37 34 37 31 37 34 37 33 38 31 36 36 30 22 2c 22 73 6f 75 72 63 65 5f 65 76 65 6e 74 5f 69 64 22 3a 22 38 34 38 31 34 31 39 39 31 30 36 38 34 37 36 39 38 37 38 22 2c 22 73 6f 75 72 63 65 5f 73 69 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 79 61 68 6f 6f 2e 63 6f 6d 22 7d 2c 22 74 79 70 65 22 3a 22 73 6f 75 72 63 65 2d 73 75 63 63 65 73 73 22 7d 5d Data Ascii: [{"body":{"attribution_destination":["https://buyfordnow.com","https://ford.com","https://fordpro.com"],"source_debug_key":"8461987471747381660","source_event_id":"8481419910684769878","source_site":"https://yahoo.com"},"type":"source-success"}]
2024-03-29 00:41:40 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 29 Mar 2024 00:41:40 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.4	50288	44.209.20.160	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	656	OUT	GET /fUD7hqXV/v2?_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:40 UTC	373	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:40 GMT Content-Length: 0 Connection: close Location: https://hb.yahoo.net/cksync.php?cs=1&type=58280&ovsid=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b Set-Cookie: stx_user_id=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b; Max-Age=2592000; Expires=Sun, 28 Apr 2024 00:41:40 GMT; Path=/; Domain=sharethrough.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.4	50289	69.90.254.78	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	695	OUT	GET /tum?umid=6 HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:40 UTC	27	IN	HTTP/1.1 204 No Content
2024-03-29 00:41:41 UTC	636	OUT	GET /tum?umid=8&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:41 UTC	27	IN	HTTP/1.1 204 No Content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.4	50284	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	1963	OUT	GET /cksync.php?cs=8&type=spa&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHBJ3BJ0&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25235%2C25036%2C25278%2C25237%2C25159%2C25038%2C25118%2C25239%2C25117%2C25318%2C25317%2C25270%2C25072%2C25031%2C25030%2C25198%2C25274%2C25276%2C25071%2C25202%2C25003%2C25127%2C25006%2C25204%2C25126%2C25007%2C25208%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25243%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25250%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
2024-03-29 00:41:41 UTC	442	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 56 Content-Type: image/gif p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:41 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:41 GMT Connection: close
2024-03-29 00:41:41 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:41 UTC	13	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.4	50291	216.200.232.249	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	872	OUT	GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:40 UTC	709	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 29 Mar 2024 00:41:40 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1549 cea2cde master ord ord-pixel-x49 config_version:"2427" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: uuid=ce6f6606-0e44-4300-9f76-592e7ae20814; domain=.mathtag.com; path=/; expires=Sat, 26-Apr-2025 00:41:40 GMT; SameSite=None; Secure location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:ce6f6606-0e44-4300-9f76-592e7ae20814&gdpr=0&gdpr_consent= Expires: Fri, 29 Mar 2024 00:41:39 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.4	50292	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	2191	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=1b407dde-ed65-11ee-9900-64996dd289d9 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; pi=156078:3; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; PugT=1711672899
2024-03-29 00:41:40 UTC	650	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:39 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 27-Jun-2024 00:41:39 GMT; path=/ Set-Cookie: PugT=1711672899; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:39 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.4	50296	54.156.236.4	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	888	OUT	GET /cookie-sync?gdpr=0&userid=4433599061245380871&gdpr=0&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=4 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAFJBk7MDBwAABSliZdkug; bitoIsSecure=ok
2024-03-29 00:41:41 UTC	454	IN	HTTP/1.1 303 See Other Date: Fri, 29 Mar 2024 00:41:41 GMT location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAFJBk7MDBwAABSliZdkug&gdpr=0 Server: gunicorn set-cookie: bito=AAFJBk7MDBwAABSliZdkug; Domain=bidr.io; expires=Sun, 27 Apr 2025 20:41:41 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.4	50293	44.222.46.243	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	893	OUT	GET /pbmtc.gif?puid=6D366468-71AF-422B-99AB-138A6DAB94F7 HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=0b2e56bd-231c-4ec2-ba2a-78dde1fe3a07; ss=WyPvdDzgshiwWSK1x6NOShALlVh98PDi4yG7ErXAOjUDLOlyzjC2dPuU%2B828lk5tJ%2BTFQvaMmdMz6sryo0xxZQ%3D%3D
2024-03-29 00:41:41 UTC	454	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:41 GMT Content-Type: image/gif Content-Length: 42 Connection: close Server: Kestrel Set-Cookie: UID=0b2e56bd-231c-4ec2-ba2a-78dde1fe3a07; expires=Sat, 29 Mar 2025 00:41:41 GMT; path=/; secure; samesite=none Set-Cookie: ss=zHohQvAI2Pjc%2BCP%2F2HoWKtzpIhMd9FeKqmXu4%2BrZ%2BEltay%2FAO%2FMhbwApv%2BNMaoJeHtI2piyZU7W7dSbfahrk0w%3D%3D; expires=Sat, 29 Mar 2025 00:41:41 GMT; path=/; secure; samesite=none
2024-03-29 00:41:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.4	50298	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	609	OUT	GET /sadbundle/473513299895995753/styles.css HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:41 UTC	830	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/css Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 2159 Date: Fri, 29 Mar 2024 00:41:41 GMT Expires: Sat, 29 Mar 2025 00:41:41 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:41 UTC	422	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0d 0a 0d 0a 0d 0a 62 6f 64 79 7b 0d 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 0d 0a 09 62 6f 72 64 65 72 3a 30 3b 0d 0a 09 6f 75 74 6c 69 6e 65 3a 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0d 0a 09 6d 61 72 67 69 6e 3a 30 3b 0d 0a 7d 0d 0a 0d 0a 69 6d 67 20 7b 0d 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 09 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 09 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 7d 0d 0a 0d 0a 23 6d 61 69 6e 5f 63 6f 6e 74 65 6e 74 2c 20 23 6d 61 69 6e 5f 63 6f 6e 74 65 6e 74 20 69 6d 67 20 Data Ascii: @charset "UTF-8";body{vertical-align:baseline;border:0;outline:0;padding:0;margin:0;}img { box-sizing: border-box; -moz-box-sizing: border-box; -webkit-box-sizing: border-box;}#main_content, #main_content img
2024-03-29 00:41:41 UTC	1252	IN	Data Raw: 30 3b 0d 0a 7d 0d 0a 0d 0a 23 6c 6f 63 6b 6f 75 74 20 7b 0d 0a 09 6f 70 61 63 69 74 79 3a 31 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 23 63 74 61 2d 6f 76 65 72 20 7b 0d 0a 09 6f 70 61 63 69 74 79 3a 30 3b 0d 0a 7d 0d 0a 0d 0a 23 6d 61 69 6e 5f 63 6f 6e 74 65 6e 74 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0d 0a 20 20 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 31 66 32 66 32 3b 0d 0a 20 20 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 09 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 09 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 7d Data Ascii: 0;}#lockout {opacity:1;}#cta-over {opacity:0;}#main_content {display:none; background-color:#f1f2f2; overflow: hidden; box-sizing: border-box; -moz-box-sizing: border-box; -webkit-box-sizing: border-box;}
2024-03-29 00:41:41 UTC	485	IN	Data Raw: 0a 7d 0d 0a 0d 0a 23 64 69 73 63 5f 70 61 6e 65 6c 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 30 30 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 09 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 09 77 69 64 74 68 3a 20 33 30 30 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 36 30 30 70 78 3b 0d 0a 2f 2a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 2a 2f 0d 0a 7d 0d 0a 0d 0a 23 63 6c 6f 73 65 5f 63 6c 69 63 6b 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 77 69 64 74 68 3a 20 33 38 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0d 0a 09 72 69 67 68 74 3a 20 36 70 78 3b 0d 0a 09 74 6f 70 3a 20 36 70 78 3b 0d 0a 09 6f 70 61 63 69 74 79 3a 30 Data Ascii: }#disc_panel{position: absolute;z-index: 100;display: none;opacity: 0;width: 300px;height: 600px;/cursor: pointer;/}#close_click {position: absolute;width: 38px;height: 18px;right: 6px;top: 6px;opacity:0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.4	50299	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	594	OUT	GET /sadbundle/473513299895995753/script.js HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:41 UTC	846	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: application/x-javascript Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 3153 Date: Fri, 29 Mar 2024 00:41:41 GMT Expires: Sat, 29 Mar 2025 00:41:41 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:41 UTC	406	IN	Data Raw: 76 61 72 20 69 73 45 6e 64 46 72 61 6d 65 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 6c 6f 6f 70 69 6e 67 20 3d 20 30 3b 0d 0a 76 61 72 20 74 6c 20 3d 20 6e 65 77 20 54 69 6d 65 6c 69 6e 65 4c 69 74 65 28 29 3b 0d 0a 76 61 72 20 64 63 31 20 3d 20 74 72 75 65 3b 0d 0a 76 61 72 20 64 63 32 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 64 63 33 20 3d 20 66 61 6c 73 65 3b 0d 0a 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 49 6d 61 67 65 73 28 29 7b 0d 0a 09 09 76 61 72 20 61 73 73 65 74 73 4c 6f 61 64 65 64 20 3d 20 30 3b 0d 0a 09 09 61 64 49 6d 61 67 65 73 20 3d 20 5b 0d 0a 09 09 09 09 22 69 6d 61 67 65 73 2f 62 67 31 2e 6a 70 67 22 2c 0d 0a 09 09 09 09 22 69 6d 61 67 65 73 2f 62 67 32 2e 6a 70 67 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: var isEndFrame = false;var looping = 0;var tl = new TimelineLite();var dc1 = true;var dc2 = false;var dc3 = false;function loadImages(){var assetsLoaded = 0;adImages = ["images/bg1.jpg","images/bg2.jpg",
2024-03-29 00:41:41 UTC	1252	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 6d 61 67 65 73 2f 68 65 61 64 6c 69 6e 65 33 2e 70 6e 67 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 6d 61 67 65 73 2f 68 65 61 64 6c 69 6e 65 34 2e 70 6e 67 22 2c 0d 0a 09 09 09 09 22 69 6d 61 67 65 73 2f 6c 6f 63 6b 6f 75 74 2e 70 6e 67 22 2c 0d 0a 09 09 5d 3b 0d 0a 09 09 76 61 72 20 61 73 73 65 74 73 20 3d 20 5b 5d 3b 0d 0a 09 09 66 6f 72 28 76 61 72 20 69 3d 30 3b 20 69 3c 61 64 49 6d 61 67 65 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 7b 0d 0a 09 09 09 09 61 73 73 65 74 73 5b 69 5d 20 3d 20 6e 65 77 20 49 6d 61 67 65 28 29 3b 0d 0a 09 09 09 09 61 73 73 65 74 73 5b 69 5d 2e 73 72 63 20 3d 20 61 64 49 6d 61 67 65 73 5b 69 5d 3b 0d 0a 09 09 09 09 61 73 73 65 74 73 5b 69 5d 2e 6f 6e 6c Data Ascii: "images/headline3.png", "images/headline4.png","images/lockout.png",];var assets = [];for(var i=0; i<adImages.length; i++){assets[i] = new Image();assets[i].src = adImages[i];assets[i].onl
2024-03-29 00:41:41 UTC	1252	IN	Data Raw: 23 68 65 61 64 6c 69 6e 65 31 27 2c 20 30 2e 32 35 2c 20 7b 61 75 74 6f 41 6c 70 68 61 3a 20 31 2c 20 65 61 73 65 3a 51 75 69 6e 74 2e 65 61 73 65 49 6e 7d 2c 20 22 66 31 2b 3d 30 2e 32 35 22 29 0d 0a 0d 0a 20 20 20 20 20 2e 61 64 64 28 27 66 32 27 2c 27 2b 3d 34 27 29 0d 0a 20 20 20 20 20 2e 74 6f 28 27 23 66 72 61 6d 65 32 27 2c 20 30 2e 35 2c 20 7b 61 75 74 6f 41 6c 70 68 61 3a 20 31 2c 20 65 61 73 65 3a 51 75 69 6e 74 2e 65 61 73 65 49 6e 7d 2c 20 22 66 32 2d 3d 30 2e 32 35 22 29 0d 0a 20 20 20 20 20 2e 74 6f 28 27 23 68 65 61 64 6c 69 6e 65 32 27 2c 20 30 2e 35 2c 20 7b 61 75 74 6f 41 6c 70 68 61 3a 20 31 2c 20 65 61 73 65 3a 51 75 69 6e 74 2e 65 61 73 65 49 6e 7d 2c 20 22 66 32 2b 3d 30 2e 35 22 29 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 2e 61 64 64 Data Ascii: #headline1', 0.25, {autoAlpha: 1, ease:Quint.easeIn}, "f1+=0.25") .add('f2','+=4') .to('#frame2', 0.5, {autoAlpha: 1, ease:Quint.easeIn}, "f2-=0.25") .to('#headline2', 0.5, {autoAlpha: 1, ease:Quint.easeIn}, "f2+=0.5") .add
2024-03-29 00:41:41 UTC	243	IN	Data Raw: 61 78 2e 74 6f 28 27 23 63 74 61 2d 6f 76 65 72 27 2c 20 2e 35 2c 20 7b 6f 70 61 63 69 74 79 3a 30 2c 20 64 65 6c 61 79 3a 30 2c 20 65 61 73 65 3a 50 6f 77 65 72 33 2e 65 61 73 65 49 6e 4f 75 74 7d 29 3b 0d 0a 0d 0a 7d 0d 0a 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 72 65 70 6c 61 79 41 6e 69 6d 61 74 69 6f 6e 28 29 7b 0d 0a 09 6c 6f 6f 70 69 6e 67 2b 2b 0d 0a 0d 0a 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 6c 6f 6f 70 69 6e 67 29 3b 0d 0a 09 69 66 28 6c 6f 6f 70 69 6e 67 20 3c 3d 20 31 29 0d 0a 09 7b 0d 0a 09 09 74 6c 2e 72 65 73 74 61 72 74 28 29 3b 0d 0a 09 7d 0d 0a 0d 0a 7d 0d 0a 0d 0a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 27 2c 20 6c 6f 61 64 49 6d 61 67 65 73 29 3b 0d 0a Data Ascii: ax.to('#cta-over', .5, {opacity:0, delay:0, ease:Power3.easeInOut});}function replayAnimation(){looping++console.log(looping);if(looping <= 1){tl.restart();}}window.addEventListener('load', loadImages);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.4	50295	35.214.238.211	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:40 UTC	840	OUT	GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token}&gdpr=0&gdpr_consent= HTTP/1.1 Host: csync.loopme.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:41 UTC	403	IN	HTTP/1.1 307 Temporary Redirect set-cookie: viewer_token=07bafd13-57bb-41ec-bc78-c530ed33586a; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Sat, 29-Jun-2024 00:41:41 GMT; SameSite=None location: https://simage2.pubmatic.com/AdServer/Pug?vcode&gdpr_consent=null&piggybackCookie={viewer_token}&gdpr=0 content-length: 0 date: Fri, 29 Mar 2024 00:41:41 GMT server: _ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.4	50307	104.17.25.14	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:41 UTC	552	OUT	GET /ajax/libs/gsap/1.19.0/TweenMax.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://s0.2mdn.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:41 UTC	959	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:41 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e71-1b411" Last-Modified: Mon, 04 May 2020 16:10:25 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 668550 Expires: Wed, 19 Mar 2025 00:41:41 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q3Wr3cbi2mA2nIi2Yh2kalIOBRHkS04l4paURSDlDgfX7%2BcYIgn8etwSWUpGMRGUArcuPNt3TBGiP7qbP3BY4L1kShDEB3jIg5c5zVtoPPk%2BwPhYz7qpKW9F4C%2BbWnfpYGGn0f33"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 86bbd0d08d866fef-IAD alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:41 UTC	410	IN	Data Raw: 37 62 66 32 0d 0a 2f 2a 21 0a 20 2a 20 56 45 52 53 49 4f 4e 3a 20 31 2e 31 39 2e 30 0a 20 2a 20 44 41 54 45 3a 20 32 30 31 36 2d 30 37 2d 31 34 0a 20 2a 20 55 50 44 41 54 45 53 20 41 4e 44 20 44 4f 43 53 20 41 54 3a 20 68 74 74 70 3a 2f 2f 67 72 65 65 6e 73 6f 63 6b 2e 63 6f 6d 0a 20 2a 20 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 61 6c 6c 20 6f 66 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 3a 20 54 77 65 65 6e 4c 69 74 65 2c 20 54 77 65 65 6e 4d 61 78 2c 20 54 69 6d 65 6c 69 6e 65 4c 69 74 65 2c 20 54 69 6d 65 6c 69 6e 65 4d 61 78 2c 20 45 61 73 65 50 61 63 6b 2c 20 43 53 53 50 6c 75 67 69 6e 2c 20 52 6f 75 6e 64 50 72 6f 70 73 50 6c 75 67 69 6e 2c 20 42 65 7a 69 65 72 50 6c 75 67 69 6e 2c 20 41 74 74 72 50 6c 75 67 69 6e 2c 20 44 69 72 65 63 74 69 6f 6e 61 Data Ascii: 7bf2/! VERSION: 1.19.0 * DATE: 2016-07-14 * UPDATES AND DOCS AT: http://greensock.com * * Includes all of the following: TweenLite, TweenMax, TimelineLite, TimelineMax, EasePack, CSSPlugin, RoundPropsPlugin, BezierPlugin, AttrPlugin, Directiona
2024-03-29 00:41:41 UTC	1369	IN	Data Raw: 72 64 2d 6c 69 63 65 6e 73 65 20 6f 72 20 66 6f 72 0a 20 2a 20 43 6c 75 62 20 47 72 65 65 6e 53 6f 63 6b 20 6d 65 6d 62 65 72 73 2c 20 74 68 65 20 73 6f 66 74 77 61 72 65 20 61 67 72 65 65 6d 65 6e 74 20 74 68 61 74 20 77 61 73 20 69 73 73 75 65 64 20 77 69 74 68 20 79 6f 75 72 20 6d 65 6d 62 65 72 73 68 69 70 2e 0a 20 2a 20 0a 20 2a 20 40 61 75 74 68 6f 72 3a 20 4a 61 63 6b 20 44 6f 79 6c 65 2c 20 6a 61 63 6b 40 67 72 65 65 6e 73 6f 63 6b 2e 63 6f 6d 0a 20 2a 2a 2f 0a 76 61 72 20 5f 67 73 53 63 6f 70 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 74 68 69 73 7c 7c Data Ascii: rd-license or for * Club GreenSock members, the software agreement that was issued with your membership. * * @author: Jack Doyle, jack@greensock.com **/var _gsScope="undefined"!=typeof module&&module.exports&&"undefined"!=typeof global?global:this\|\|
2024-03-29 00:41:41 UTC	1369	IN	Data Raw: 65 64 69 61 74 65 52 65 6e 64 65 72 7c 7c 61 2e 69 6d 6d 65 64 69 61 74 65 52 65 6e 64 65 72 3b 62 26 26 74 68 69 73 2e 5f 73 74 61 72 74 54 69 6d 65 3c 74 68 69 73 2e 5f 74 69 6d 65 6c 69 6e 65 2e 5f 74 69 6d 65 26 26 28 74 68 69 73 2e 5f 73 74 61 72 74 54 69 6d 65 3d 74 68 69 73 2e 5f 74 69 6d 65 6c 69 6e 65 2e 5f 74 69 6d 65 2c 74 68 69 73 2e 5f 75 6e 63 61 63 68 65 28 21 31 29 2c 74 68 69 73 2e 5f 67 63 3f 74 68 69 73 2e 5f 65 6e 61 62 6c 65 64 28 21 30 2c 21 31 29 3a 74 68 69 73 2e 5f 74 69 6d 65 6c 69 6e 65 2e 69 6e 73 65 72 74 28 74 68 69 73 2c 74 68 69 73 2e 5f 73 74 61 72 74 54 69 6d 65 2d 74 68 69 73 2e 5f 64 65 6c 61 79 29 29 3b 66 6f 72 28 64 20 69 6e 20 61 29 74 68 69 73 2e 76 61 72 73 5b 64 5d 3d 61 5b 64 5d 3b 69 66 28 74 68 69 73 2e 5f 69 Data Ascii: ediateRender\|\|a.immediateRender;b&&this._startTime<this._timeline._time&&(this._startTime=this._timeline._time,this._uncache(!1),this._gc?this._enabled(!0,!1):this._timeline.insert(this,this._startTime-this._delay));for(d in a)this.vars[d]=a[d];if(this._i
2024-03-29 00:41:41 UTC	1369	IN	Data Raw: 67 26 26 22 69 73 50 61 75 73 65 22 21 3d 3d 74 68 69 73 2e 64 61 74 61 29 26 26 73 21 3d 3d 61 26 26 28 63 3d 21 30 2c 73 3e 67 26 26 28 65 3d 22 6f 6e 52 65 76 65 72 73 65 43 6f 6d 70 6c 65 74 65 22 29 29 2c 74 68 69 73 2e 5f 72 61 77 50 72 65 76 54 69 6d 65 3d 6d 3d 21 62 7c 7c 61 7c 7c 73 3d 3d 3d 61 3f 61 3a 67 29 29 3a 31 65 2d 37 3e 61 3f 28 74 68 69 73 2e 5f 74 6f 74 61 6c 54 69 6d 65 3d 74 68 69 73 2e 5f 74 69 6d 65 3d 74 68 69 73 2e 5f 63 79 63 6c 65 3d 30 2c 74 68 69 73 2e 72 61 74 69 6f 3d 74 68 69 73 2e 5f 65 61 73 65 2e 5f 63 61 6c 63 45 6e 64 3f 74 68 69 73 2e 5f 65 61 73 65 2e 67 65 74 52 61 74 69 6f 28 30 29 3a 30 2c 28 30 21 3d 3d 70 7c 7c 30 3d 3d 3d 72 26 26 73 3e 30 29 26 26 28 65 3d 22 6f 6e 52 65 76 65 72 73 65 43 6f 6d 70 6c 65 74 Data Ascii: g&&"isPause"!==this.data)&&s!==a&&(c=!0,s>g&&(e="onReverseComplete")),this._rawPrevTime=m=!b\|\|a\|\|s===a?a:g)):1e-7>a?(this._totalTime=this._time=this._cycle=0,this.ratio=this._ease._calcEnd?this._ease.getRatio(0):0,(0!==p\|\|0===r&&s>0)&&(e="onReverseComplet
2024-03-29 00:41:41 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 72 61 77 50 72 65 76 54 69 6d 65 3d 73 2c 74 68 69 73 2e 5f 63 79 63 6c 65 3d 71 2c 68 2e 6c 61 7a 79 54 77 65 65 6e 73 2e 70 75 73 68 28 74 68 69 73 29 2c 76 6f 69 64 28 74 68 69 73 2e 5f 6c 61 7a 79 3d 5b 61 2c 62 5d 29 3b 74 68 69 73 2e 5f 74 69 6d 65 26 26 21 64 3f 74 68 69 73 2e 72 61 74 69 6f 3d 74 68 69 73 2e 5f 65 61 73 65 2e 67 65 74 52 61 74 69 6f 28 74 68 69 73 2e 5f 74 69 6d 65 2f 72 29 3a 64 26 26 74 68 69 73 2e 5f 65 61 73 65 2e 5f 63 61 6c 63 45 6e 64 26 26 28 74 68 69 73 2e 72 61 74 69 6f 3d 74 68 69 73 2e 5f 65 61 73 65 2e 67 65 74 52 61 74 69 6f 28 30 3d 3d 3d 74 68 69 73 2e 5f 74 69 6d 65 3f 30 3a 31 29 29 7d 66 6f 72 28 74 68 69 73 2e 5f 6c 61 7a 79 21 3d 3d 21 31 26 26 28 74 68 69 73 2e 5f 6c 61 7a 79 3d 21 31 29 2c Data Ascii: this._rawPrevTime=s,this._cycle=q,h.lazyTweens.push(this),void(this._lazy=[a,b]);this._time&&!d?this.ratio=this._ease.getRatio(this._time/r):d&&this._ease._calcEnd&&(this.ratio=this._ease.getRatio(0===this._time?0:1))}for(this._lazy!==!1&&(this._lazy=!1),
2024-03-29 00:41:41 UTC	1369	IN	Data Raw: 74 61 67 67 65 72 54 6f 3d 66 2e 61 6c 6c 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 67 2c 68 2c 6b 2c 6d 2c 6e 29 7b 68 3d 68 7c 7c 30 3b 76 61 72 20 6f 2c 70 2c 71 2c 72 2c 73 3d 30 2c 74 3d 5b 5d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 67 2e 6f 6e 43 6f 6d 70 6c 65 74 65 26 26 67 2e 6f 6e 43 6f 6d 70 6c 65 74 65 2e 61 70 70 6c 79 28 67 2e 6f 6e 43 6f 6d 70 6c 65 74 65 53 63 6f 70 65 7c 7c 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 6b 2e 61 70 70 6c 79 28 6e 7c 7c 67 2e 63 61 6c 6c 62 61 63 6b 53 63 6f 70 65 7c 7c 74 68 69 73 2c 6d 7c 7c 6c 29 7d 2c 76 3d 67 2e 63 79 63 6c 65 2c 77 3d 67 2e 73 74 61 72 74 41 74 26 26 67 2e 73 74 61 72 74 41 74 2e 63 79 63 6c 65 3b 66 6f 72 28 6a 28 61 29 7c 7c 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f Data Ascii: taggerTo=f.allTo=function(a,b,g,h,k,m,n){h=h\|\|0;var o,p,q,r,s=0,t=[],u=function(){g.onComplete&&g.onComplete.apply(g.onCompleteScope\|\|this,arguments),k.apply(n\|\|g.callbackScope\|\|this,m\|\|l)},v=g.cycle,w=g.startAt&&g.startAt.cycle;for(j(a)\|\|("string"==typeo
2024-03-29 00:41:41 UTC	1369	IN	Data Raw: 41 6c 6c 54 77 65 65 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 6d 28 61 2e 5f 72 6f 6f 74 54 69 6d 65 6c 69 6e 65 2c 62 29 2e 63 6f 6e 63 61 74 28 6d 28 61 2e 5f 72 6f 6f 74 46 72 61 6d 65 73 54 69 6d 65 6c 69 6e 65 2c 62 29 29 7d 3b 66 2e 6b 69 6c 6c 41 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 2c 65 29 7b 6e 75 6c 6c 3d 3d 63 26 26 28 63 3d 21 30 29 2c 6e 75 6c 6c 3d 3d 64 26 26 28 64 3d 21 30 29 3b 76 61 72 20 66 2c 67 2c 68 2c 69 3d 6e 28 30 21 3d 65 29 2c 6a 3d 69 2e 6c 65 6e 67 74 68 2c 6b 3d 63 26 26 64 26 26 65 3b 66 6f 72 28 68 3d 30 3b 6a 3e 68 3b 68 2b 2b 29 67 3d 69 5b 68 5d 2c 28 6b 7c 7c 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 7c 7c 28 66 3d 67 2e 74 61 72 67 65 74 3d 3d 3d 67 2e 76 61 72 73 2e 6f 6e 43 6f Data Ascii: AllTweens=function(b){return m(a._rootTimeline,b).concat(m(a._rootFramesTimeline,b))};f.killAll=function(a,c,d,e){null==c&&(c=!0),null==d&&(d=!0);var f,g,h,i=n(0!=e),j=i.length,k=c&&d&&e;for(h=0;j>h;h++)g=i[h],(k\|\|g instanceof b\|\|(f=g.target===g.vars.onCo
2024-03-29 00:41:41 UTC	1369	IN	Data Raw: 28 29 2a 28 74 68 69 73 2e 5f 79 6f 79 6f 26 26 30 21 3d 3d 28 31 26 74 68 69 73 2e 5f 63 79 63 6c 65 29 3f 31 2d 61 3a 61 29 2b 74 68 69 73 2e 5f 63 79 63 6c 65 2a 28 74 68 69 73 2e 5f 64 75 72 61 74 69 6f 6e 2b 74 68 69 73 2e 5f 72 65 70 65 61 74 44 65 6c 61 79 29 2c 62 29 3a 74 68 69 73 2e 5f 74 69 6d 65 2f 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 28 29 7d 2c 6b 2e 74 6f 74 61 6c 50 72 6f 67 72 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 74 6f 74 61 6c 54 69 6d 65 28 74 68 69 73 2e 74 6f 74 61 6c 44 75 72 61 74 69 6f 6e 28 29 2a 61 2c 62 29 3a 74 68 69 73 2e 5f 74 6f 74 61 6c 54 69 6d 65 2f 74 68 69 73 2e 74 6f 74 61 6c 44 75 72 61 74 69 6f 6e 28 29 7d 2c 6b Data Ascii: ()(this._yoyo&&0!==(1&this._cycle)?1-a:a)+this._cycle(this._duration+this._repeatDelay),b):this._time/this.duration()},k.totalProgress=function(a,b){return arguments.length?this.totalTime(this.totalDuration()*a,b):this._totalTime/this.totalDuration()},k
2024-03-29 00:41:41 UTC	1369	IN	Data Raw: 20 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 62 2e 63 61 6c 6c 28 74 68 69 73 2c 61 29 2c 74 68 69 73 2e 5f 6c 61 62 65 6c 73 3d 7b 7d 2c 74 68 69 73 2e 61 75 74 6f 52 65 6d 6f 76 65 43 68 69 6c 64 72 65 6e 3d 74 68 69 73 2e 76 61 72 73 2e 61 75 74 6f 52 65 6d 6f 76 65 43 68 69 6c 64 72 65 6e 3d 3d 3d 21 30 2c 74 68 69 73 2e 73 6d 6f 6f 74 68 43 68 69 6c 64 54 69 6d 69 6e 67 3d 74 68 69 73 2e 76 61 72 73 2e 73 6d 6f 6f 74 68 43 68 69 6c 64 54 69 6d 69 6e 67 3d 3d 3d 21 30 2c 74 68 69 73 2e 5f 73 6f 72 74 43 68 69 6c 64 72 65 6e 3d 21 30 2c 74 68 69 73 2e 5f 6f 6e 55 70 64 61 74 65 3d 74 68 69 73 2e 76 61 72 73 2e 6f 6e 55 70 64 61 74 65 3b 76 61 72 20 63 2c 64 2c 65 3d 74 68 69 73 2e 76 61 72 73 3b 66 6f 72 28 64 20 69 6e 20 65 29 63 3d 65 5b 64 5d 2c 69 Data Ascii: d=function(a){b.call(this,a),this._labels={},this.autoRemoveChildren=this.vars.autoRemoveChildren===!0,this.smoothChildTiming=this.vars.smoothChildTiming===!0,this._sortChildren=!0,this._onUpdate=this.vars.onUpdate;var c,d,e=this.vars;for(d in e)c=e[d],i
2024-03-29 00:41:41 UTC	1369	IN	Data Raw: 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 61 3d 63 2e 73 65 6c 65 63 74 6f 72 28 61 29 7c 7c 61 29 2c 61 3d 61 7c 7c 5b 5d 2c 68 28 61 29 26 26 28 61 3d 70 28 61 29 29 2c 66 3d 66 7c 7c 30 2c 30 3e 66 26 26 28 61 3d 70 28 61 29 2c 61 2e 72 65 76 65 72 73 65 28 29 2c 66 2a 3d 2d 31 29 2c 6f 3d 30 3b 6f 3c 61 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 6c 3d 6d 28 65 29 2c 6c 2e 73 74 61 72 74 41 74 26 26 28 6c 2e 73 74 61 72 74 41 74 3d 6d 28 6c 2e 73 74 61 72 74 41 74 29 2c 6c 2e 73 74 61 72 74 41 74 2e 63 79 63 6c 65 26 26 6e 28 6c 2e 73 74 61 72 74 41 74 2c 61 2c 6f 29 29 2c 72 26 26 28 6e 28 6c 2c 61 2c 6f 29 2c 6e 75 6c 6c 21 3d 6c 2e 64 75 72 61 74 69 6f 6e 26 26 28 62 3d 6c 2e 64 75 72 61 74 69 6f 6e 2c 64 65 6c 65 74 65 20 6c 2e 64 75 72 61 Data Ascii: tring"==typeof a&&(a=c.selector(a)\|\|a),a=a\|\|[],h(a)&&(a=p(a)),f=f\|\|0,0>f&&(a=p(a),a.reverse(),f*=-1),o=0;o<a.length;o++)l=m(e),l.startAt&&(l.startAt=m(l.startAt),l.startAt.cycle&&n(l.startAt,a,o)),r&&(n(l,a,o),null!=l.duration&&(b=l.duration,delete l.dura

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.4	50297	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:41 UTC	659	OUT	GET /sadbundle/473513299895995753/images/bg1.jpg HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:41 UTC	822	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 43669 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Wed, 27 Mar 2024 23:28:40 GMT Expires: Thu, 27 Mar 2025 23:28:40 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/jpeg Age: 90781 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:41 UTC	430	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 1f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF
2024-03-29 00:41:41 UTC	1252	IN	Data Raw: 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 44 39 31 46 41 41 39 43 46 39 43 31 31 45 45 38 31 33 37 46 46 32 37 37 39 37 42 42 46 39 31 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 44 39 31 46 41 41 38 43 46 39 43 31 31 45 45 38 31 33 37 46 46 32 37 37 39 37 42 42 46 39 31 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 30 32 34 20 4d 61 63 69 6e 74 6f 73 68 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 Data Ascii: sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:7D91FAA9CF9C11EE8137FF27797BBF91" xmpMM:InstanceID="xmp.iid:7D91FAA8CF9C11EE8137FF27797BBF91" xmp:CreatorTool="Adobe Photoshop 2024 Macintosh"> <xmpMM:DerivedFrom stRef
2024-03-29 00:41:41 UTC	1252	IN	Data Raw: 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 76 69 65 77 00 00 00 00 00 13 a4 fe 00 14 5f 2e 00 10 cf 14 00 03 ed cc 00 04 13 0b 00 03 5c 9e 00 00 00 01 58 59 5a 20 00 00 00 00 00 4c 09 56 00 50 00 00 00 57 1f e7 6d 65 61 73 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 8f 00 00 00 Data Ascii: - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference Viewing Condition in IEC61966-2.1view_.\XYZ LVPWmeas
2024-03-29 00:41:41 UTC	1252	IN	Data Raw: 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f 93 4f dd 50 27 50 71 50 bb 51 06 51 Data Ascii: 11J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIOOP'PqPQQ
2024-03-29 00:41:41 UTC	1252	IN	Data Raw: 00 11 08 02 58 01 2c 03 01 11 00 02 11 01 03 11 01 ff c4 00 f0 00 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 10 00 01 03 03 02 04 05 03 03 01 08 03 00 00 00 00 01 00 11 02 12 03 04 10 21 20 31 13 05 30 41 22 32 14 40 33 15 50 42 23 34 60 70 80 90 24 25 35 06 a0 16 36 11 00 01 02 02 07 06 01 0a 05 03 02 07 01 00 00 00 01 00 02 11 21 10 31 41 51 12 32 03 20 61 71 81 91 22 a1 30 b1 c1 d1 42 52 72 13 33 04 40 50 f0 e1 23 62 82 92 14 34 70 f1 a2 c2 e2 53 83 24 12 00 01 03 03 05 00 00 00 00 00 00 00 00 00 00 00 21 70 a0 11 00 10 60 80 31 41 51 61 13 01 00 02 02 01 03 02 06 02 03 01 01 01 01 00 00 01 00 11 21 31 41 10 51 61 71 81 20 f0 91 a1 b1 c1 30 d1 40 e1 f1 Data Ascii: X,! 10A"2@3PB#4`p$%56!1AQ2 aq"0BRr3@P#b4pS$!p`1AQa!1AQaq 0@
2024-03-29 00:41:41 UTC	1252	IN	Data Raw: f1 be f1 8a ce 55 64 2c ca ea 72 84 21 15 1a ae 85 a0 6a 99 e6 cc 07 4e 6b 8c b5 1e 9e 9f 57 af ab ec 68 c6 bc 72 7b 86 c6 2b cf 5f 95 79 a5 e9 8e f5 a4 9a 6b 3a f4 c7 26 36 d7 6b 99 cb 18 e9 d4 f3 b9 e8 92 8d 65 d6 ba b7 a4 72 e3 3d 76 22 13 2c de 8f 3e b1 e9 3a ab f4 1f 5d 0a 02 48 97 8d 3d f3 62 0c 57 f1 ae 79 e9 88 de ef 9c 37 37 d3 b0 df 59 f2 72 d8 f3 71 5c 6f a9 be a4 c6 5c b5 c9 e8 b9 2f b1 c7 b5 73 e5 dd e8 e0 5b e4 f0 bd d1 8f 1d 3a eb af d0 3d b6 49 08 92 2d e3 93 de 8d a9 1f 9e fa 38 fc 9f 93 ab 37 6d d5 66 7b 76 74 59 e3 65 81 b5 bc 8d 7a 7d 79 6b ac f2 f2 af 77 8f 9e f3 75 ef e7 d7 c8 e9 c7 e9 38 dc fb 78 fa f8 76 f3 91 ef 39 e3 53 cd e9 cb f6 fe fb e1 ef 12 79 fb c7 44 76 67 7b f3 df b9 2e d4 93 f2 ef 57 9f c1 f1 77 cf 4e 86 ba 25 e6 63 a2 Data Ascii: Ud,r!jNkWhr{+_yk:&6ker=v",>:]H=bWy77Yrq\o\/s[:=I-87mf{vtYez}ykwu8xv9SyDvg{.WwN%c
2024-03-29 00:41:41 UTC	1252	IN	Data Raw: 44 f2 6d f3 d3 e5 f7 3c 4b 39 33 bd 93 d3 8e 73 35 e3 ad 20 ab 4e b8 e2 ae 55 f4 d3 d6 5e 44 84 9a 94 f5 31 bf 9e d4 ab 2a 5b b3 94 f5 e3 f6 bc 6b c6 36 24 93 64 93 15 e3 38 6b 04 f8 bd 38 65 e7 3a 6c ef 97 13 8a ce 91 c7 25 49 f4 d9 be 25 9e 6d bb 26 6a c6 16 11 f4 b9 bf 3f a9 15 bc 4d 99 9e b4 bf b6 62 f8 c6 c0 66 6c 81 e3 ae 16 66 b8 33 f9 85 d5 56 b1 d1 67 bf 1e 35 71 9d 10 d7 96 ac f5 e4 f3 8e 0b 41 00 d0 ae a8 f4 f3 7c cd cc 53 a2 59 48 af 52 5f db 30 f0 97 61 08 e8 4a 3e 72 85 93 16 7f 31 d6 a8 d6 35 b3 bb 37 8e b9 ac 44 ae 89 6b d9 18 27 2d 55 80 00 1d b9 b5 67 35 64 6f 2c d9 27 a7 2f ed 18 40 88 32 28 c8 f9 cb 51 29 9d 9f 9f db 91 32 ed 5a 47 b9 97 81 a4 58 c7 2f ad 1e 71 cd 53 60 25 00 0e 88 da cc 8c ec 53 5b a6 36 75 cd 7e 89 97 6a 76 47 61 a1 Data Ascii: Dm<K93s5 NU^D1*[k6$d8k8e:l%I%m&j?Mbflf3Vg5qA\|SYHR_0aJ>r157Dk'-Ug5do,'/@2(Q)2ZGX/qS`%S[6u~jvGa
2024-03-29 00:41:41 UTC	1252	IN	Data Raw: ea c5 31 29 8a 6e 01 2d 02 21 90 44 a0 a4 42 73 a3 af 21 ba 26 22 35 38 5c f4 7d 20 99 4c 34 9a a0 1d c2 08 ec 8c b4 0a a5 16 4e 9e ad 1b 47 e0 25 f4 74 34 05 50 e8 82 df b4 c7 6d 88 65 e5 bb 0d 3c e7 26 4e 4a 8e 91 40 22 75 a5 d3 0d 0a f2 f2 4e c8 e8 35 11 dd 80 1b 22 b6 d2 5b 48 14 4c 88 7d 09 d1 83 42 09 bd 57 46 8f ba 0a 52 40 a2 ce 18 27 75 e9 4c 49 1b 69 10 75 f2 d3 64 db a7 d0 e8 48 32 4c 8d 2c b6 54 6f b3 b3 a8 9d b9 2b 84 48 53 a8 47 4d d7 20 bc d6 ea 93 24 46 fa 15 56 c0 20 cd e7 a7 92 1a 03 a6 ef 4e c1 7b 94 e1 49 ab 41 ca 23 72 77 e6 b6 5c 96 cc 54 08 45 45 3f af 5f 34 24 58 e9 1e 72 04 21 a1 75 e5 cd 6d a1 1a 3e b1 a8 2f 28 0d a4 fa 6e 0e ac 54 b7 52 d4 f2 f3 dd f9 23 a8 44 92 4e 80 ad 8a 75 12 11 e7 11 b2 2c 13 ae 6a 2c ec 84 98 03 25 12 89 Data Ascii: 1)n-!DBs!&"58\} L4NG%t4Pme<&NJ@"uN5"[HL}BWFR@'uLIiudH2L,To+HSGM $FV N{IA#rw\TEE?_4$Xr!um>/(nTR#DNu,j,%
2024-03-29 00:41:41 UTC	1252	IN	Data Raw: 79 86 03 cc c9 d4 b4 89 02 58 13 21 64 5a eb 63 6c d8 12 ab 3f 52 8d db 61 46 e4 66 b2 7e dc 7d ba 79 f5 63 2b 2a d8 60 d4 db 8c 15 00 28 5a f5 5d 80 ea 49 9b 1f fa 77 57 bb 9e 35 91 91 dc f2 6e a7 08 39 40 07 a0 ac 5c 0b b7 d7 72 c2 18 b7 1c 52 79 15 24 05 c8 c7 06 52 a6 ef dd ed bf d6 2f 91 32 8c ae 14 c9 95 8e 79 3f 6e 3e dd 3c ee 46 94 20 10 2a 54 b4 ef ce 4a 26 e2 17 26 15 48 a9 f7 1b 56 6d 5f ce c8 be 76 54 48 a1 64 05 4a 89 32 96 1f 6a df 3b bc d8 c5 07 32 ed fb 96 c0 5c 89 d8 91 bd e2 4c f0 3d 02 a9 13 80 df 3f ca 30 29 a2 bd 29 d5 92 49 ca fb 71 e5 a7 ee bd 0a 80 41 5f 93 c9 00 eb 90 11 42 62 28 95 01 52 11 09 c0 46 f4 56 3e 26 46 4a c6 c5 b3 62 3d db bb 97 24 ab 1c e3 03 4c c2 96 e2 d8 81 b9 4d db f1 39 17 6c 46 0d 57 6f 9b f7 3f 21 b2 79 15 44 Data Ascii: yX!dZcl?RaFf~}yc+`(Z]IwW5n9@\rRy$R/2y?n><F TJ&&HVm_vTHdJ2j;2\L=?0))IqA_Bb(RFV>&FJb=$LM9lFWo?!yD
2024-03-29 00:41:41 UTC	1252	IN	Data Raw: d5 12 ca 3f c7 a3 e9 5c 5e 64 14 11 e7 6e e5 12 b3 da 8e 44 b2 0d b9 df 9c 0c 14 20 64 6c 53 1b d9 3d b6 e5 b5 72 61 12 9d 3f 0d 9b 94 4a 57 21 10 d5 23 ee b6 5a 77 02 3c b0 2f 0b 19 b1 ff 00 b1 62 28 f7 de dc 54 7b 9e 04 94 6f da 92 74 eb 24 fa 38 c6 82 52 6e d3 1b 5f 2e f1 f5 63 3c af e7 00 72 25 72 74 93 e0 80 e6 d8 88 12 16 8c 18 bd a6 6b d1 ea 5a 8e 3d f0 78 23 7a ec 54 7b 8e 7c 57 e6 73 98 f7 4c a4 7b 86 5a 39 99 45 7c 8c 84 c9 93 26 4f af 5a e2 eb c9 1b 89 f8 99 32 65 0c 7b d3 10 b1 4a e8 5f 9a 86 1c d7 6f c7 b2 30 e5 8b 6d 4b 12 4a e6 15 d3 19 f6 c8 85 2e de 11 ed f7 94 b1 72 22 8c 26 35 74 ea a4 fa b2 a5 50 ba 72 5d 2b a8 63 64 15 f0 72 8a 1d bb 21 47 b5 5e 2b f0 f7 17 e1 ca fc 44 57 e3 2c af c7 58 43 0b 1d 7c 4b 2b e3 40 2b 77 2e db 81 8d c2 8d Data Ascii: ?\^dnD dlS=ra?JW!#Zw</b(T{ot$8Rn_.c<r%rtkZ=x#zT{\|WsL{Z9E\|&OZ2e{J_o0mKJ.r"&5tPr]+cdr!G^+DW,XC\|K+@+w.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.4	50300	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:41 UTC	665	OUT	GET /sadbundle/473513299895995753/images/headline1.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:41 UTC	820	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 3429 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Wed, 27 Mar 2024 23:40:31 GMT Expires: Thu, 27 Mar 2025 23:40:31 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/png Age: 90070 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:41 UTC	432	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 04 b0 04 03 00 00 00 d5 8f 29 3a 00 00 00 30 50 4c 54 45 00 00 00 fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe 63 de 4d 40 00 00 00 0f 74 52 4e 53 00 bb 77 ee 11 44 dd 99 cc 22 66 88 33 55 aa a3 13 b9 95 00 00 0c d5 49 44 41 54 78 da ec c1 81 00 00 00 00 80 a0 fd a9 17 a9 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 f6 cd 2c b4 99 2a 0c c3 6f db 74 49 da b4 51 51 71 81 c4 b8 2b 98 22 82 b8 e0 44 c4 05 45 8d 4a 50 50 30 a2 20 88 92 78 a7 a2 e4 17 f4 42 44 13 f5 4e 2f 1a Data Ascii: PNGIHDRX):0PLTEcM@tRNSwD"f3UIDATx`,*otIQQq+"DEJPP0 xBDN/
2024-03-29 00:41:41 UTC	1252	IN	Data Raw: 7d 49 f1 d7 a1 43 28 b2 8f 2c 52 9f b9 43 a6 31 88 50 46 88 27 07 d5 3a aa b2 42 25 0a b6 00 5c 43 e9 4d 06 1e e5 36 fa b3 ca dc b0 21 4c b3 bf 2c 3e a5 0e 45 d6 30 80 79 e7 57 00 11 36 06 d5 3a aa b2 26 c8 27 b2 ef 52 5c 47 71 5e f6 f9 17 64 0c 1d 16 d9 3e 28 a8 46 75 d8 10 e6 d9 4c 43 41 26 25 42 56 3d 99 bc c0 51 1f c8 2c ef 65 61 70 98 52 c3 fa 83 03 6a 1d 5d 59 1b bc 1c 08 e5 99 c0 34 bd 2a f0 31 7f 47 87 15 c6 46 d3 13 4c f0 37 68 48 68 96 e4 49 dd 44 96 01 4c f1 7d 2e 0f 29 0b f8 4f 65 a5 98 00 f0 35 63 98 e7 96 ec 16 9a f2 23 64 65 54 b2 7e ed 27 0b 25 7d ec 2f b9 3b 1e b2 36 59 d6 d1 cf c9 cf 37 ac ba 05 a7 81 a3 2c 4b 7f 44 40 91 21 36 c7 43 56 9c dd e8 97 18 fb f3 94 22 ac c3 07 eb 78 9b 17 57 81 57 65 29 aa ea 10 c2 a7 e5 9f 3f 03 82 e8 23 6c Data Ascii: }IC(,RC1PF':B%\CM6!L,>E0yW6:&'R\Gq^d>(FuLCA&%BV=Q,eapRj]Y4*1GFL7hHhIDL}.)Oe5c#deT~'%}/;6Y7,KD@!6CV"xWWe)?#l
2024-03-29 00:41:41 UTC	1252	IN	Data Raw: ed f4 fc 8d 4e b2 f5 f9 5d fb cb 9a 65 2b 13 8d c7 4d 2d 13 55 c8 e1 5e f2 3d 6e 8e 4a d6 82 43 81 57 c5 12 35 7f 43 d6 75 dd ff 8c 39 0a 5a 08 ae 3a 04 65 69 fc b2 36 f4 23 f4 cd dc e9 5d 75 b8 dc df 68 58 34 b7 bf ac b0 3c 83 0d 26 64 ad 60 54 ab 72 ec 48 b9 18 11 2f 50 f0 03 fe 89 2c bd e0 74 2a 80 50 71 9f f5 ac c1 b2 52 2c 98 89 5e e0 db 39 b7 1a 68 34 d5 4f 96 5a a2 b9 54 8e 86 ba 96 89 2a 22 c3 18 9d 2c 7c 76 1c c5 a2 e6 3f 92 85 85 77 f2 f7 7c 04 c8 77 74 fd 2b a5 f9 27 cf c5 60 59 25 d6 74 2f d7 f2 87 74 42 e3 94 6a b0 d1 e9 9f fa ca 0a 9d c6 67 cb 42 96 ac 15 8c ea 95 7c e3 51 74 64 59 2c 16 8b c5 62 b1 58 2c 23 66 09 87 03 99 8e aa 99 4c 56 ac 2c 60 40 3a aa 7f 21 d3 40 81 77 4a 06 40 9e 35 b5 b2 55 e9 be 50 70 e2 eb f2 11 26 bd 84 1b ca 38 04 Data Ascii: N]e+M-U^=nJCW5Cu9Z:ei6#]uhX4<&d`TrH/P,tPqR,^9h4OZT",\|v?w\|wt+'`Y%t/tBjgB\|QtdY,bX,#fLV,`@:!@wJ@5UPp&8
2024-03-29 00:41:41 UTC	493	IN	Data Raw: e5 75 a6 b3 d5 c5 78 d7 f5 ed be 4b 34 31 fb 39 12 56 ac c3 a6 64 9b 6e 62 23 42 2e b6 13 68 fa 0d c2 aa 53 9c 83 b0 ce 9e f2 66 d9 56 de cf 74 86 f3 52 ef 7d 5e f7 d1 cc c7 c3 6a ae cb 3d 7c 56 96 f1 69 ee 0e eb a7 b0 e9 88 b0 62 8a 73 18 56 6a 6e 17 51 79 cc 74 86 a6 d4 bb ca 0f 7d 34 27 1f a3 61 a5 f7 d2 ae 98 e7 75 5c 96 8b 3e ac cb 65 3a 24 cf 13 7a 0e da 9f d8 33 b9 ca 87 75 f2 77 e4 22 6f 5f d3 4b fe 4c fc 79 ab c6 55 e2 57 d1 8a d8 1c cf c7 cf ff 79 9b e5 c7 e9 bc b9 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f ec c1 81 00 00 00 00 00 90 ff 6b 23 a8 aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa Data Ascii: uxK419Vdnb#B.hSfVtR}^j=\|VibsVjnQyt}4'au\>e:$z3uw"o_KLyUWy?k#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.4	50310	35.186.193.173	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:41 UTC	859	OUT	GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1 Host: ipac.ctnsnet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cid=0bf86f4e7d934cb7b5daae7a5c7d8db5
2024-03-29 00:41:41 UTC	475	IN	HTTP/1.1 200 OK P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid=0bf86f4e7d934cb7b5daae7a5c7d8db5; path=/; domain=.ctnsnet.com; expires=Sat, 29 Mar 2025 00:41:41 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT Content-Type: image/gif Content-Length: 43 Date: Fri, 29 Mar 2024 00:41:41 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.4	50306	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:41 UTC	2402	OUT	GET /visit.js?gdpr=&gdpr_consent=&flvr=1&ttmms=51&ttfrms=148&brid=3&brver=117.0.0.0&bridua=3&bds=1&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETauU2%3F4r92%3A%3Fl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETar9EEADTbpTauTau_ag%60%60376g%607572335_6_6ce_h%60c%60fa6h%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3ETar9EEADTbpTauTau_ag%60%60376g%607572335_6_6ce_h%60c%60fa6h%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3E&srcurlD=0&aUrlD=0&ssl=https:&dfs=2100&ddur=1530&uid=1711672899477415&jsCallback=dvCallback_1711672899477116&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&htmlmsging=1&chro=1&hist=1&winh=600&winw=300&wouh=984&wouw=1280&scah=984&scaw=1280&jsver=5684&tgjsver=5684&lvvn=28&m1=15&refD=2&referrer=https%3A%2F%2F02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&sfe=1&fcifrms=17&brh=1&dvp_epl=344&noc=4&nav_pltfrm=Win32&ctx=20006197&cmp=31411294&sid=5071708&plc=388507207&crt=211538221&adsrv=1&advid=3876771&unit=300x600&turl=https://www.yahoo.com/&c1=1982032&bsimpid=a088deb529ba4c1899d301c788f6fede&prr=1&errorURL=https://tps.doubleverify.com/visit.jpg&ppid=103&audeal=IX3MPADScope3DISP6Kqa8MAC&auevent=ABAjH0gQDp_4c-0JAi6rZSx5hhRK&aucmp=21039716546&aucrtv=553954458&auorder=1015903071&ausite=2328226494&auxch=13&pltfrm=13&aufilter1=1982032&autt=1&mib=0&mon=1&blk=1&dvp_cawf=crtwrp&cm360cw=1&dvp_rcp=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=1375353221538.1655&ee_dp_sukv=1375353221538.1655&dvp_tukv=17591451939.44182&ee_dp_tukv=17591451939.44182&ee_dp_dvtpurl=https%3A%2F%2Fcdn.doubleverify.com%2Fdvbm.js&dvp_strhd=0.29999999998835847&dvpx_strhd=0.29999999998835847&dvp_tuid=1434562293200&jurtd=1377703399 HTTP/1.1 Host: tps.doubleverify.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:41 UTC	232	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:41 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=0 Expires: 03/28/2024 00:41:41 Pragma: no-cache Timing-Allow-Origin: *
2024-03-29 00:41:41 UTC	1020	IN	Data Raw: 34 34 61 0d 0a 74 72 79 7b 76 61 72 20 64 76 5f 77 69 6e 20 3d 20 77 69 6e 64 6f 77 2e 5f 64 76 5f 77 69 6e 20 7c 7c 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 5f 64 76 5f 77 69 6e 3b 20 64 76 5f 77 69 6e 5b 27 64 76 43 61 6c 6c 62 61 63 6b 5f 31 37 31 31 36 37 32 38 39 39 34 37 37 31 31 36 27 5d 28 24 64 76 2c 77 69 6e 64 6f 77 2c 27 66 36 34 30 31 65 37 66 64 34 30 30 34 39 35 36 62 65 35 33 33 63 65 38 61 34 39 33 64 33 66 61 27 2c 27 74 70 73 63 2d 75 65 31 2e 64 6f 75 62 6c 65 76 65 72 69 66 79 2e 63 6f 6d 27 2c 7b 22 63 65 22 3a 7b 22 64 64 74 22 3a 31 2c 22 64 74 22 3a 31 7d 7d 29 3b 7d 63 61 74 63 68 28 65 29 7b 74 72 79 7b 76 61 72 20 69 6d 61 67 65 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 Data Ascii: 44atry{var dv_win = window._dv_win \|\| window.parent._dv_win; dv_win['dvCallback_1711672899477116']($dv,window,'f6401e7fd4004956be533ce8a493d3fa','tpsc-ue1.doubleverify.com',{"ce":{"ddt":1,"dt":1}});}catch(e){try{var image=window.document.createElement('
2024-03-29 00:41:41 UTC	90	IN	Data Raw: 49 6d 70 72 65 73 73 69 6f 6e 53 65 72 76 65 64 27 2c 20 24 75 69 64 29 3b 24 64 76 2e 70 75 62 53 75 62 2e 70 75 62 6c 69 73 68 28 27 49 6d 70 72 65 73 73 69 6f 6e 53 65 72 76 65 64 27 2c 20 24 66 72 6d 49 64 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: ImpressionServed', $uid);$dv.pubSub.publish('ImpressionServed', $frmId);}catch(e){}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.4	50305	35.210.53.219	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:41 UTC	873	OUT	GET /ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic&bsw_custom_parameter=9bd3933c-0a52-4830-a023-563ef18ab8c1 HTTP/1.1 Host: pool.admedo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=d3e8a721-2432-4c2e-85e7-0e0d2d010a1b; c=1711672900; tuuid_lu=1711672900
2024-03-29 00:41:41 UTC	625	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Fri, 29 Mar 2024 00:41:41 GMT Location: //x.bidswitch.net/sync?dsp_id=23&expires=14&user_id=d3e8a721-2432-4c2e-85e7-0e0d2d010a1b&user_group=1&ssp=pubmatic&bsw_param=9bd3933c-0a52-4830-a023-563ef18ab8c1 Set-Cookie: tuuid=d3e8a721-2432-4c2e-85e7-0e0d2d010a1b; path=/; expires=Sat, 29-Mar-2025 00:41:41 GMT; samesite=none; secure Set-Cookie: tuuid_lu=1711672901; path=/; expires=Sat, 29-Mar-2025 00:41:41 GMT; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.4	50315	74.119.119.73	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:41 UTC	644	OUT	GET /user-sync/redirect?profile=73&gdprapplies=0&gdpr=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: ssp-sync.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:41 UTC	537	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 29 Mar 2024 00:41:40 GMT server: Kestrel cache-control: no-store,max-age=0 location: https://dis.criteo.com/dis/usersync.aspx?r=12&p=73&dis=0&url=https%3a%2f%2fssp-sync.criteo.com%2fuser-sync%2fredirect%3fprofile%3d73%26gdprapplies%3d0%26gdpr%3d%26gpp%3dDBAA%26gpp_sid%3d-1%26uid%3d%40%40CRITEO_USERID%40%40%26dised%3dtrue&gdpr=&gdpr_consent=&gpp=DBAA&gpp_sid=-1 cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.4	50328	35.244.159.8	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:41 UTC	716	OUT	GET /w/1.0/sd?id=540245193&val=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=acaeb6da-c35c-4846-acd5-3bb6b6a37bb8\|1711672894
2024-03-29 00:41:41 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 29 Mar 2024 00:41:41 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.4	50316	185.184.8.90	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:41 UTC	699	OUT	GET /cm-notify?pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=YdtgSj0svp2Z2ieaFv7X_1711672899702; ts=1711672899
2024-03-29 00:41:41 UTC	454	IN	HTTP/1.1 302 Found date: Fri, 29 Mar 2024 00:41:41 GMT vary: Accept-Encoding location: https://hb.yahoo.net/cksync.php?cs=1&type=57926&ovsid=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Fri, 29 Mar 2024 00:41:41 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.4	50312	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:41 UTC	2720	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:ce6f6606-0e44-4300-9f76-592e7ae20814&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; pi=156078:3; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; PugT=1711672899
2024-03-29 00:41:41 UTC	604	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:40 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 27-Jun-2024 00:41:40 GMT; path=/ Set-Cookie: PugT=1711672900; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:40 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.4	50331	44.195.161.142	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:41 UTC	684	OUT	GET /verizonsync?gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VqUQt33vvQ3VT5KZdpyI%7C1711670400000%7C0
2024-03-29 00:41:41 UTC	756	IN	HTTP/1.1 302 Date: Fri, 29 Mar 2024 00:41:41 GMT Content-Type: application/json;charset=utf-8 Content-Length: 0 Connection: close Set-Cookie: yieldmo_id=VqUQt33vvQ3VT5KZdpyI%7C1711670400000%7C0; Max-Age=31536000; Expires=Sat, 29 Mar 2025 00:41:41 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Location: https://hb.yahoo.net/cksync.php?cs=1&type=58259&ovsid=VqUQt33vvQ3VT5KZdpyI&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.4	50337	74.119.119.150	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:41 UTC	824	OUT	GET /dis/usersync.aspx?r=12&p=73&dis=0&url=https%3a%2f%2fssp-sync.criteo.com%2fuser-sync%2fredirect%3fprofile%3d73%26gdprapplies%3d0%26gdpr%3d%26gpp%3dDBAA%26gpp_sid%3d-1%26uid%3d%40%40CRITEO_USERID%40%40%26dised%3dtrue&gdpr=&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:41 UTC	745	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 29 Mar 2024 00:41:41 GMT server: Kestrel cache-control: no-cache expires: Fri, 29 Mar 2024 00:00:00 GMT location: https://ssp-sync.criteo.com/user-sync/redirect?profile=73&gdprapplies=0&gdpr=&gpp=DBAA&gpp_sid=-1&uid=656f8b2c-4714-48d4-8d5f-32bdff906809&dised=true&gdpr=&gdpr_consent=&gpp=DBAA pragma: no-cache set-cookie: uid=656f8b2c-4714-48d4-8d5f-32bdff906809; expires=Wed, 23 Apr 2025 00:41:40 GMT; domain=.criteo.com; path=/; secure; samesite=none x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 1430694 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.4	50313	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:41 UTC	1311	OUT	GET /cksync.html?cs=1&vsid=3546744890180387000V10&type=pub&refUrl=&vid=16728938013546744890180387000V10&axid_e=&ovsid=6D366468-71AF-422B-99AB-138A6DAB94F7 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
2024-03-29 00:41:41 UTC	694	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1;Expires=Mon, 13 May 2024 00:41:41 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:41 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:41 GMT Connection: close
2024-03-29 00:41:41 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-03-29 00:41:41 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.4	50320	35.186.193.173	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:41 UTC	868	OUT	GET /int/cm?exc=20&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&callback=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3546744890180387000V10%26type%3Dctn%26refUrl%3D%26vid%3D16729006893546744890180387000V10%26ovsid%3D%3CDSP_USER_ID%3E%26axid_e%3D%26 HTTP/1.1 Host: i.ctnsnet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cid=0bf86f4e7d934cb7b5daae7a5c7d8db5
2024-03-29 00:41:41 UTC	728	IN	HTTP/1.1 302 Found P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid=0bf86f4e7d934cb7b5daae7a5c7d8db5; path=/; domain=.ctnsnet.com; expires=Sat, 29 Mar 2025 00:41:41 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT x-xss-protection: 1; mode=block Status: 302 Location: https://hb.yahoo.net/cksync.php?cs=1&vsid=3546744890180387000V10&type=ctn&refUrl=&vid=16729006893546744890180387000V10&ovsid=0bf86f4e7d934cb7b5daae7a5c7d8db5&axid_e=&y=null&gdpr=0 Content-Type: text/html;charset=UTF-8 Content-Length: 0 Date: Fri, 29 Mar 2024 00:41:41 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.4	50333	44.209.20.160	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:41 UTC	714	OUT	GET /fUD7hqXV/v2?_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b
2024-03-29 00:41:41 UTC	373	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:41 GMT Content-Length: 0 Connection: close Location: https://hb.yahoo.net/cksync.php?cs=1&type=58280&ovsid=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b Set-Cookie: stx_user_id=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b; Max-Age=2592000; Expires=Sun, 28 Apr 2024 00:41:41 GMT; Path=/; Domain=sharethrough.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.4	50344	207.65.37.181	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:41 UTC	2554	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=93248749&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; PugT=1711672899
2024-03-29 00:41:41 UTC	1104	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=0:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1712880000%3A256_259_263_262_260_201_261_258%7C1711756800%3A255_248%7C1712707200%3A257%7C1712275200%3A265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1714262400%3A224%7C1712534400%3A63%7C1712880000%3A233_166_264_13_104_99_5_71_21_7_249_243_8_96_48_238_220_234_56_266_176_46_214_240_250_231_54_3_55_165_178_22%7C1712275200%3A2_38_223_15%7C1712966400%3A35%7C1716854400%3A69; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Fri, 29 Mar 2024 00:41:41 GMT Transfer-Encoding: chunked Connection: close
2024-03-29 00:41:41 UTC	2277	IN	Data Raw: 38 64 39 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 73 79 6e 63 68 72 6f 73 63 72 69 70 74 2e 64 65 6c 69 76 65 72 79 65 6e 67 69 6e 65 2e 61 64 73 77 69 7a 7a 2e 63 6f 6d 2f 73 79 6e 63 4d 65 3f 70 61 72 74 6e 65 72 44 6f 6d 61 69 6e 3d 6d 72 74 6e 73 76 72 2e 63 6f 6d 26 69 64 54 79 70 65 3d 63 6f 6f 6b 69 65 26 70 61 72 74 6e 65 72 55 73 65 72 49 64 3d 36 44 33 36 36 34 36 38 2d 37 31 41 46 2d 34 32 32 42 2d 39 39 41 42 2d 31 33 38 41 36 44 41 42 39 34 46 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e Data Ascii: 8d9PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.4	50323	69.194.240.13	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:41 UTC	754	OUT	GET /usersync2/rmpssp?sub=yahoo&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005%22%2C%22zdxidn%22%3A%222069.88%22%7D
2024-03-29 00:41:41 UTC	645	IN	HTTP/1.1 302 Found date: Fri, 29 Mar 2024 00:41:41 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005%22%2C%22zdxidn%22%3A%222069.88%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Sat, 29 Mar 2025 00:41:41 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=8791123296 etag: RX9d21a42c059949e7b7d6902789d2d8da005 connection: close
2024-03-29 00:41:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.4	50334	34.225.72.47	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:41 UTC	659	OUT	GET /insync?vxii_pid=10067&vxii_pdid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:42 UTC	570	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:41 GMT Content-Type: text/html; charset=utf-8 Content-Length: 211 Connection: close Location: https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=6D366468-71AF-422B-99AB-138A6DAB94F7&vxii_pid=12&vxii_pid1=10067&vxii_rcid=8fb05dfd-93b3-4073-8d4f-73399245f1bc P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjhmYjA1ZGZkLTkzYjMtNDA3My04ZDRmLTczMzk5MjQ1ZjFiYyIsImwiOjE3MTE2NzI5MDE5NzEsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Fri, 29 Mar 2024 00:41:41 GMT; Max-Age=17280000; Secure; SameSite=None
2024-03-29 00:41:42 UTC	211	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 76 78 69 69 5f 70 64 69 64 3d 36 44 33 36 36 34 36 38 2d 37 31 41 46 2d 34 32 32 42 2d 39 39 41 42 2d 31 33 38 41 36 44 41 42 39 34 46 37 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 3d 31 32 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 31 3d 31 30 30 36 37 26 61 6d 70 3b 76 78 69 69 5f 72 63 69 64 3d 38 66 62 30 35 64 66 64 2d 39 33 62 33 2d 34 30 37 33 2d 38 64 34 66 2d 37 33 33 39 39 32 34 35 66 31 62 63 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=6D366468-71AF-422B-99AB-138A6DAB94F7&vxii_pid=12&vxii_pid1=10067&vxii_rcid=8fb05dfd-93b3-4073-8d4f-73399245f1bc">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.4	50351	34.36.216.150	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:41 UTC	624	OUT	GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:42 UTC	438	IN	HTTP/1.1 302 Found set-cookie: ssi=aea3ca37-727a-41ef-b550-ee203ed2401c#1711672902005; Domain=.sitescout.com; Expires=Sat, 29-Mar-2025 00:41:42 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= Content-Length: 0 date: Fri, 29 Mar 2024 00:41:41 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.4	50329	54.236.94.254	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:41 UTC	615	OUT	GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:42 UTC	128	IN	HTTP/1.1 204 No Content Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.4	50326	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	1126	OUT	GET /cksync.php?cs=1&type=58601&ovsid=u_99ef042a-5492-47e4-9c9a-171f0fce9075 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
2024-03-29 00:41:42 UTC	681	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1;Expires=Mon, 13 May 2024 00:41:42 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:42 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:42 GMT Connection: close
2024-03-29 00:41:42 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:42 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.4	50336	52.202.181.167	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	655	OUT	GET /api/v1/dsync/Martin?exid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:42 UTC	456	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=10eddb72-cbbb-04d3-58e6-c6dac08ddb68; Path=/; Domain=kargo.com; Expires=Sat, 29 Mar 2025 00:41:42 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-03-29 00:41:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.4	50340	34.36.216.150	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	648	OUT	GET /dmp/pixelSync?nid=48&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:42 UTC	454	IN	HTTP/1.1 302 Found set-cookie: ssi=316c09dc-77f5-496c-8783-9ae88f47c0a1#1711672902110; Domain=.sitescout.com; Expires=Sat, 29-Mar-2025 00:41:42 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=48&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 Content-Length: 0 date: Fri, 29 Mar 2024 00:41:41 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.4	50327	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	1149	OUT	GET /cksync.php?cs=1&type=58259&ovsid=VqUQt33vvQ3VT5KZdpyI&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
2024-03-29 00:41:42 UTC	663	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ylm=VqUQt33vvQ3VT5KZdpyI~~1;Expires=Wed, 25 Sep 2024 00:41:42 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:42 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:42 GMT Connection: close
2024-03-29 00:41:42 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:42 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.4	50341	52.54.190.52	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	648	OUT	GET /sync?pid=187&uid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.bfmio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:42 UTC	420	IN	HTTP/1.1 204 Date: Fri, 29 Mar 2024 00:41:41 GMT Set-Cookie: __187_cid=6D366468-71AF-422B-99AB-138A6DAB94F7; Domain=.bfmio.com; Max-Age=31536000; Expires=Fri, 28-Mar-2025 20:41:42 GMT-0400; Path=/; SameSite=None; Secure Set-Cookie: __io_cid=4c983ced30b817c6da83619720b51f4507e92d03; Domain=.bfmio.com; Max-Age=31536000; Expires=Fri, 28-Mar-2025 20:41:42 GMT-0400; Path=/; SameSite=None; Secure Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.4	50317	69.194.240.13	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	736	OUT	GET /usersync2/rmpssp?sub=yahoo&zcc=1&cb=1711672900465 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005%22%2C%22zdxidn%22%3A%222069.88%22%7D
2024-03-29 00:41:42 UTC	644	IN	HTTP/1.1 302 Found date: Fri, 29 Mar 2024 00:41:43 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005%22%2C%22zdxidn%22%3A%222069.88%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Sat, 29 Mar 2025 00:41:43 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=865853444 etag: RX9d21a42c059949e7b7d6902789d2d8da005 connection: close
2024-03-29 00:41:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.4	50332	54.81.188.163	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	746	OUT	GET /getuid/15563?gdpr=0&gdpr_consent=&gpp_sid=&gpp=&r=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3D58601%26ovsid%3D HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_99ef042a-5492-47e4-9c9a-171f0fce9075
2024-03-29 00:41:42 UTC	260	IN	HTTP/1.1 302 Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Length: 0 Connection: close Server: nginx Location: https://hb.yahoo.net/cksync.php?cs=1&type=58601&ovsid=u_99ef042a-5492-47e4-9c9a-171f0fce9075 Content-Language: en-US Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.4	50365	70.42.32.191	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	692	OUT	GET /usersync/index/?us_privacy=1YNN&gdpr=&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=P1GEqyyk_OouTnS49Tqs
2024-03-29 00:41:42 UTC	632	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 145 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=17&external_user_id=P1GEqyyk_OouTnS49Tqs&puid=&us_privacy=1YNN P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=P1GEqyyk_OouTnS49Tqs; Path=/; Domain=zemanta.com; Expires=Sat, 29 Mar 2025 00:41:42 GMT; Max-Age=31536000; Secure; SameSite=None Date: Fri, 29 Mar 2024 00:41:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-03-29 00:41:42 UTC	145	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 37 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 50 31 47 45 71 79 79 6b 5f 4f 6f 75 54 6e 53 34 39 54 71 73 26 61 6d 70 3b 70 75 69 64 3d 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://dsum-sec.casalemedia.com/crum?cm_dsp_id=17&external_user_id=P1GEqyyk_OouTnS49Tqs&puid=&us_privacy=1YNN">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.4	50342	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	2686	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAFJBk7MDBwAABSliZdkug&gdpr=0 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; pi=156078:3; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; PugT=1711672899
2024-03-29 00:41:42 UTC	587	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:40 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 27-Jun-2024 00:41:40 GMT; path=/ Set-Cookie: PugT=1711672900; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:40 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:42 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.4	50321	185.184.8.90	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	704	OUT	GET /cm-notify?pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&tc=1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=YdtgSj0svp2Z2ieaFv7X_1711672899702; ts=1711672899
2024-03-29 00:41:42 UTC	459	IN	HTTP/1.1 302 Found date: Fri, 29 Mar 2024 00:41:42 GMT vary: Accept-Encoding location: https://hb.yahoo.net/cksync.php?cs=1&type=57926&ovsid=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Fri, 29 Mar 2024 00:41:42 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.4	50335	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	1124	OUT	GET /cksync.php?cs=1&type=58280&ovsid=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
2024-03-29 00:41:42 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1;Expires=Wed, 25 Sep 2024 00:41:42 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:42 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:42 GMT Connection: close
2024-03-29 00:41:42 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:42 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.4	50324	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	1213	OUT	GET /cksync.php?cs=1&vsid=3546744890180387000V10&type=ctn&refUrl=&vid=16728938013546744890180387000V10&ovsid=0bf86f4e7d934cb7b5daae7a5c7d8db5&axid_e=&y=null&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
2024-03-29 00:41:42 UTC	675	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1;Expires=Wed, 25 Sep 2024 00:41:42 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:42 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:42 GMT Connection: close
2024-03-29 00:41:42 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:42 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.4	50367	54.156.138.144	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	1326	OUT	GET /sync?nid=68&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-4e3331b2-4608-5def-4b44-37da34665e42.whFqKzgCw18m%2FSCYS5yWxVR2rG1ZAITd2%2Fm9ZGidAuE; sa-user-id=s%3A0-4e3331b2-4608-5def-4b44-37da34665e42.whFqKzgCw18m%2FSCYS5yWxVR2rG1ZAITd2%2Fm9ZGidAuE; sa-user-id-v2=s%3ATjMxskYIXe9LRDfaNGZeQmalMCs.jz60r%2BxCkCaevdt8UZTBS0VL4AlTE8Txkni1XZXv9Vo; sa-user-id-v2=s%3ATjMxskYIXe9LRDfaNGZeQmalMCs.jz60r%2BxCkCaevdt8UZTBS0VL4AlTE8Txkni1XZXv9Vo; sa-user-id-v3=s%3AAQAKIPreYZwXJZmBcmhsw0h0Dk4f9Z2guQWvxvtGD5yd9LWdEHwYBCDDnJiwBjABOgT87-jmQgQ7U_2w.IIbeenDSVjT6Vb4BH6csouzFrhVyxaj4gifv7y6Hp0M; sa-user-id-v3=s%3AAQAKIPreYZwXJZmBcmhsw0h0Dk4f9Z2guQWvxvtGD5yd9LWdEHwYBCDDnJiwBjABOgT87-jmQgQ7U_2w.IIbeenDSVjT6Vb4BH6csouzFrhVyxaj4gifv7y6Hp0M
2024-03-29 00:41:42 UTC	246	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Fri, 29 Mar 2024 00:41:42 GMT Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=123&external_user_id=TjMxskYIXe9LRDfaNGZeQmalMCs Content-Length: 122 Connection: Close
2024-03-29 00:41:42 UTC	122	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 32 33 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 54 6a 4d 78 73 6b 59 49 58 65 39 4c 52 44 66 61 4e 47 5a 65 51 6d 61 6c 4d 43 73 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=123&external_user_id=TjMxskYIXe9LRDfaNGZeQmalMCs">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.4	50366	54.236.94.254	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	631	OUT	GET /CookieIndex?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:42 UTC	128	IN	HTTP/1.1 204 No Content Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.4	50346	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	2643	OUT	GET /AdServer/Pug?vcode&gdpr_consent=null&piggybackCookie={viewer_token}&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; PugT=1711672899
2024-03-29 00:41:42 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:41 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.4	50347	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	659	OUT	GET /sadbundle/473513299895995753/images/bg2.jpg HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:42 UTC	822	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 57191 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Wed, 27 Mar 2024 23:48:44 GMT Expires: Thu, 27 Mar 2025 23:48:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/jpeg Age: 89578 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:42 UTC	430	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3d 00 00 ff e1 03 8e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky=http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 35 38 30 31 31 37 34 30 37 32 30 36 38 31 31 41 36 31 33 39 36 37 39 37 45 45 34 44 38 44 36 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 38 34 30 41 45 39 41 43 46 39 44 31 31 45 45 38 31 33 37 46 46 32 37 37 39 37 42 42 46 39 31 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 38 34 30 41 45 39 39 43 46 39 44 31 31 45 45 38 31 33 37 46 46 32 37 37 39 37 42 42 46 39 31 22 20 78 6d 70 3a 43 72 Data Ascii: sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0580117407206811A61396797EE4D8D6" xmpMM:DocumentID="xmp.did:1840AE9ACF9D11EE8137FF27797BBF91" xmpMM:InstanceID="xmp.iid:1840AE99CF9D11EE8137FF27797BBF91" xmp:Cr
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: 38 02 70 04 e0 09 c0 13 80 27 00 60 09 c0 13 80 30 04 e0 26 46 28 30 13 80 30 06 02 30 06 00 c0 18 03 00 60 0c 04 e0 0c 01 18 03 01 07 02 09 38 8a 27 01 3c 87 b7 3c 04 13 9e 00 c0 18 02 70 04 e0 09 f1 c0 18 20 9c 14 4e 00 9c 01 39 e0 09 c0 4c e0 0c 01 38 02 70 06 00 9c 01 80 27 01 21 bc 71 6a 89 07 01 38 03 00 60 0c 01 80 30 06 00 c0 4e 08 30 06 00 c0 2b 61 2b 0a cf 3c 45 07 96 02 6c 30 40 f0 03 f6 62 05 9c f0 13 38 a0 9c 01 38 82 27 00 1c b0 06 ac 04 6a 38 06 91 8a 01 ec 38 08 9c f1 04 ce 02 27 00 4e 00 d5 80 9c bd d8 a0 93 88 09 18 09 9c 04 49 c5 13 38 02 60 9c 03 ae 63 15 13 80 30 06 00 c0 18 02 30 04 60 27 15 06 00 c0 11 80 87 e0 31 25 61 49 e2 7d f8 ca 88 24 80 38 9c 87 db 80 9b 0c d8 c7 da 63 ed 38 04 fc 58 09 3c 70 10 09 c0 1a b0 06 ac 04 b1 cb 01 Data Ascii: 8p'`0&F(000`8'<<p N9L8p'!qj8`0N0+a+<El0@b88'j88'NI8`c00`'1%aI}$8c8X<p
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: 9f ab 58 a8 e7 9b 66 54 70 10 09 e7 c7 2e 18 4c a1 f5 6d 7a f1 2d a7 4f 18 1f 3e 98 8f f1 7b 78 67 13 e5 c4 ac ab bf 18 f7 bc e2 30 04 60 82 30 52 da 3c 9f 1c 66 e5 b7 57 3e d0 45 8d 1c a0 c6 39 ba 1e d6 23 6d 48 e3 a8 bb 7d e1 47 fc dc 05 5a cf 96 06 71 c3 fb d8 05 b5 81 6c b9 0c 05 d8 a2 01 cd bd ff 00 b8 62 08 63 80 ad 8e 47 01 65 a0 74 c9 8c fc 71 42 54 35 56 73 82 1b 2f b0 62 03 4b 86 24 66 54 fe ef bf 00 35 a6 21 84 61 50 ab 6a ab 02 78 62 54 35 f5 d8 6c 45 45 24 ba 82 a1 44 cc e7 cb 12 6e 85 88 5e bb 76 61 36 4a 08 e2 41 f9 81 88 fb 72 fe 91 8c dd bb 11 a6 64 42 d4 5a d5 72 40 e0 89 96 e1 e5 05 89 23 3f 76 39 5f 7d 78 d1 a8 82 8d c5 35 d3 a2 55 5d c8 22 60 e5 24 4b 41 89 1a 47 3c 67 39 ce 44 1d cd 9a 87 55 db 4f cc e0 19 85 e2 dc 01 22 73 33 fc 31 Data Ascii: XfTp.Lmz-O>{xg0`0R<fW>E9#mH}GZqlbcGetqBT5Vs/bK$fT5!aPjxbT5lEE$Dn^va6JArdBZr@#?v9_}x5U]"`$KAG<g9DUO"s31
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: 34 bb 29 62 33 21 80 f0 d3 ed c5 eb 3a 6b 27 57 b1 21 2e 29 5e b1 3a 2e 3c 00 7d 24 1a cf 9d 61 87 21 31 ec 9c 73 8e 75 5a 23 a9 b2 d5 d2 d1 6f d5 ea 8e bf e2 d7 1f 26 9f 97 ab ab 3d 3a be 3a b2 c2 9e ce 49 9e af 70 c5 54 4b 10 a3 c4 e5 8f b6 f1 93 59 3f 22 16 f6 9f 28 fb 4f ee 18 95 5a 24 57 63 1f 33 c0 f0 4c be f3 9e 14 92 b0 4d a2 27 45 1c 0f 3b 0f 33 1e 24 f3 cf 12 d8 c9 6e 9c d6 5c ac 6a 6d 22 4e 50 38 f3 c5 bb 44 b7 57 3a ca 59 ec 8f 95 b8 69 23 1c 9d 99 b4 b3 56 8d 04 8d 31 f6 12 31 90 29 87 ac 1c bc ad 97 c4 e2 84 dc ea 67 f2 82 4c 0e 1f 1c 49 20 eb 65 07 8b 01 c3 29 d3 fc 27 14 47 98 b3 00 79 8c c8 e5 f7 60 02 ae c8 c4 ac aa 93 2d c8 71 e3 30 33 8c bc 71 99 95 a2 c4 d8 3b 57 a9 ae 5a c0 50 46 a9 65 05 84 89 89 e2 01 39 03 90 c7 0b b7 e2 b9 45 5a Data Ascii: 4)b3!:k'W!.)^:.<}$a!1suZ#o&=::IpTKY?"(OZ$Wc3LM'E;3$n\jm"NP8DW:Yi#V11)gLI e)'Gy`-q03q;WZPFe9EZ
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: be 45 76 6a 16 50 c4 a3 58 57 ca 09 12 a2 54 40 d4 35 78 78 46 63 1a b2 32 84 95 3a fa 29 50 57 29 63 ab 45 6c 84 29 46 10 ad ab 4f 9c 49 85 e7 a8 65 19 4d ea ae a4 c6 4a a8 b6 14 a1 50 03 0f 96 c3 a0 07 1f 88 90 78 82 0f 1e 47 e2 15 ac 86 ae ed b9 70 2e 6b 2d 35 65 5b d1 10 fa 80 03 49 30 7d d0 84 c0 e1 96 48 9f 01 9c 5c e9 49 1a 23 5b 4a 99 13 a6 66 4b 0c a2 01 ce 7d be 38 4c c5 4a 24 d8 c8 74 04 77 ac 68 86 60 d5 96 2d e5 0a c3 e5 51 a8 34 7f 5e 52 2e 82 8a e8 7b 1b 72 11 95 d9 4d 84 d9 5d 63 26 91 0d 00 8d 32 16 60 e9 fb 30 ea 59 6a bf 7f 5d d1 d1 b3 a4 43 53 52 da e4 af 94 31 40 ed 3a 9a a0 c7 4d 8c a6 60 f9 94 f0 18 9d 55 3a 73 66 5b 81 da 28 44 2a 41 01 99 e5 dc cd 72 80 af 98 2a a6 86 8f 61 93 c2 31 89 ba 6b ae 31 f6 5a 2c db 1a 05 a4 ee ef d3 62 Data Ascii: EvjPXWT@5xxFc2:)PW)cEl)FOIeMJPxGp.k-5e[I0}H\I#[JfK}8LJ$twh`-Q4^R.{rM]c&2`0Yj]CSR1@:M`U:sf[(DAra1k1Z,b
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: 60 3a 75 05 63 53 40 3a 54 15 5d 40 15 1e 50 3c 60 72 39 63 3d 45 15 ef ef ae bb f5 d3 53 d7 4b 2e aa 38 ab f4 d9 98 79 b3 92 59 8f 1d 46 38 67 96 33 64 dd 11 9e ab 30 54 66 b1 92 e3 5e 8a a9 27 a8 25 64 1d 44 fc a7 25 10 cb 0b f0 ce 60 de aa f8 94 4b 3d a9 56 dd 57 5b 6e 1e 54 69 00 30 70 59 10 23 4f 9f 20 10 93 3a 7f 0f b6 46 e4 44 ea 52 a6 66 4a d3 a1 63 2b ee 03 a9 0a f2 49 57 ad 58 59 d4 e2 b9 32 fe 10 0a fc 62 75 57 3e 00 b6 b6 0a 94 69 4a f5 a3 da 74 12 fa a9 28 97 96 b5 c0 d5 9d 68 18 15 41 c3 c0 e2 5d b9 31 c3 eb 9e 9d 85 b1 12 a2 ca 77 5a 89 77 af 78 fd 62 94 95 3a 83 b2 82 4e a2 16 54 49 58 19 4c c7 fb 38 9b e2 73 86 b4 4e dd fe ae f1 72 33 30 a8 e5 72 d6 15 24 8f 30 cd 86 82 c4 81 3f 2a f1 9e 11 ab af c6 31 ec 4a 51 65 fd cc cd 3b 35 db 2b 6d Data Ascii: `:ucS@:T]@P<`r9c=ESK.8yYF8g3d0Tf^'%dD%`K=VW[nTi0pY#O :FDRfJc+IWXY2buW>iJt(hA]1wZwxb:NTIXL8sNr30r$0?*1JQe;5+m
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: 44 b1 62 ba 4c e7 c0 98 e1 6b 4a ca 4b 57 6d de 6c f6 7d db 69 b8 de 21 bf 68 ad 5b dc 95 b6 41 c6 97 60 42 86 d2 2b d7 a8 69 cf 21 20 34 8c 48 ba 2b 8c 76 2c 30 ee 37 77 6f 8f 54 9c dc c2 83 d3 ad 56 45 7a 8b 3a e8 01 61 d4 be 43 e0 31 26 4a 50 d4 fe 75 9a 6b b6 bf ac 55 4d 0a 19 62 45 90 c3 43 e9 55 08 13 39 23 2d 3c a7 19 9b a6 62 32 93 42 ad 82 ad af 52 d6 67 a5 ab ad 4c 6b aa aa 9a db 40 60 ea 33 93 d3 ea 67 13 e4 c8 00 a0 ef aa 89 4c d5 da 4d ed 45 1b 70 cd 7d 86 ad 3b 66 ac 07 ba e0 8a d2 cf 3e 6d 5a c8 9f c5 1c 26 31 99 ca b8 f6 28 fa 2b ac 21 2b 04 6a 2e fb 76 3a 0e a2 ca 8a e5 d8 4a b0 d0 06 5a 98 ea 6c 97 33 33 cd a6 ab 04 ee 56 3e ca ca 69 b6 9a ea bf e6 53 a7 4e 8b d9 90 bb 1d 47 e6 cc 4e b8 51 c8 46 16 df 33 2b 45 bd cb 75 59 6b a8 a6 b5 ad Data Ascii: DbLkJKWml}i!h[A`B+i! 4H+v,07woTVEz:aC1&JPukUMbECU9#-<b2BRgLk@`3gLMEp};f>mZ&1(+!+j.v:JZl33V>iSNGNQF3+EuYk
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: a1 4e 78 45 d3 48 8f e1 68 ab 73 62 b5 9d 4b 18 f5 de aa ec 0d 59 47 2a aa ba 02 95 26 50 aa ac 95 73 3e 33 04 b6 66 fa 66 44 19 2e 6d 9a 1d c2 f4 fa af 63 d1 5b b1 57 45 31 99 59 d7 58 d0 58 2c b4 b0 0d 2a 79 ae 66 da c6 79 c6 31 c3 93 51 39 86 df 4e f6 dd ca 8d bd 35 6e 09 64 db a2 75 14 6a 45 53 0a c0 3e 92 59 eb 32 01 f9 80 9d 26 2d f7 74 e9 3e ff 00 14 a5 54 dd 65 84 bb 32 ad 6e c1 51 d0 37 4d 56 11 d1 57 cc 06 a2 42 66 43 79 a4 c1 1a 86 31 17 ea 51 0d be b1 36 f0 15 28 a6 da cd 42 fa 48 a8 dc 8d e5 b8 b4 93 ad 57 a8 78 1c d7 48 23 4a ae 96 bd f8 ed f8 76 f6 ad 15 2f 47 58 d8 5a 4a 6d d6 d3 d5 58 93 ae eb 2b 04 85 0c 9a 6b 54 ac 19 ca 57 81 82 34 ea bc f8 25 2b a1 77 1b ad b5 fb b4 64 a5 c1 dc dd 52 a5 17 80 cb 32 a2 d8 b2 17 cc ce 00 95 50 74 b4 96 Data Ascii: NxEHhsbKYG&Ps>3ffD.mc[WE1YXX,yfy1Q9N5ndujES>Y2&-t>Te2nQ7MVWBfCy1Q6(BHWxH#Jv/GXZJmX+kTW4%+wdR2Pt
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: a3 35 9f 4a bb 6b 6b b2 a0 2d be a4 ba a6 12 25 0b 05 a9 41 7c b4 02 b9 68 59 39 00 73 ce 75 d3 1e dc 73 ab 50 2f 3b 8a 13 5d a8 b4 d5 d5 06 d2 de 74 4d 4e 1e b2 e4 16 d1 3a 7e 56 3c 38 86 cc e1 37 d6 71 ec 22 15 ee 6b 7a ed 7a 3a 36 d7 0e 54 db d2 73 6b 15 36 25 84 17 0a c3 4b 7c ec 08 03 49 39 70 c6 27 72 ba 63 11 c1 62 16 ed 45 6d 71 56 2f 46 d9 10 0d e9 66 53 95 57 ea 2c 23 cc 74 ea d4 34 01 9e a1 04 0f 36 2d dc ad 33 cf ea 4c 16 a6 ab 71 65 53 49 da 86 db a0 55 0e 02 ea 27 41 52 d7 69 ad 59 d8 97 d6 cc 4a 18 39 15 ca f5 5b a5 71 8f 02 62 71 8f e5 56 e6 a5 5a cd 2a f4 3d 4f 60 7b 1b 4d 89 40 b4 84 5b 29 45 b2 b4 b0 14 0c 03 26 82 74 e9 61 e5 e1 27 72 38 e7 4c d6 20 b6 9d a0 ee 29 f5 1c 51 a9 af 70 f7 b1 47 b9 d1 fa 6f ab e6 d1 56 80 15 9c 49 6e 23 e7 Data Ascii: 5Jkk-%A\|hY9susP/;]tMN:~V<87q"kzz:6Tsk6%K\|I9p'rcbEmqV/FfSW,#t46-3LqeSIU'ARiYJ9[qbqVZ*=O`{M@[)E&ta'r8L )QpGoVIn#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.4	50330	185.184.8.90	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	678	OUT	GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=YdtgSj0svp2Z2ieaFv7X_1711672899702; ts=1711672899
2024-03-29 00:41:42 UTC	482	IN	HTTP/1.1 302 Found date: Fri, 29 Mar 2024 00:41:42 GMT vary: Accept-Encoding location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&pi=pubmatic&gdpr=0&gdpr_consent= cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Fri, 29 Mar 2024 00:41:42 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.4	50361	35.211.178.172	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	908	OUT	GET /sync?dsp_id=23&expires=14&user_id=d3e8a721-2432-4c2e-85e7-0e0d2d010a1b&user_group=1&ssp=pubmatic&bsw_param=9bd3933c-0a52-4830-a023-563ef18ab8c1 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1711672899; tuuid_lu=1711672899; tuuid=ca57c23d-569f-46f3-a577-3e6f6bd561b5
2024-03-29 00:41:42 UTC	614	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=ca57c23d-569f-46f3-a577-3e6f6bd561b5&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.4	50353	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	797	OUT	GET /rum?cm_dsp_id=39&external_user_id=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&expiration=1714264899&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:42 UTC	988	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0d739d63916-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:42 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:42 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7xScSYYayWzp3Z2xMqiFCfcErBW%2BZBRRX9UH6iI%2FeABu%2BlWmAM%2Bq55nJuVE%2Bdey8BbyTcB42lxaPEJnqoVnlKuw8jFB6La7A8vPrLGx8Tqrs5mqf8hMidQYO96EnehpvJEgNpEdBWUTMWw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.4	50356	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	780	OUT	GET /crum?cm_dsp_id=130&external_user_id=AAFJBk7MDBwAABSliZdkug&expiration=1712882499&us_privacy=1YNN HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:42 UTC	988	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0d78e53060a-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:42 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:42 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X6wu%2BcOYh4OB20CCf%2FBaLjJ1PPYJZS%2Bci4wMZZE4d508H51V9a5N6VtxuioeMR2vgmGwo3Bv%2B%2BYjae5jkhZsVe8SDk2b6cWQVyLWPzjCmrI2LgbAG5myTZv4oLH2euApU0EefeySs0nc3w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.4	50357	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	760	OUT	GET /crum?cm_dsp_id=196&external_user_id=4433599061245380871&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:42 UTC	980	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0d7eed80a7f-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:42 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:42 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YEuRld2f86FEloTJnkbFLkZsYvpXsYdldE6gXnFZl8zMPs0KBkBKmMAAU08dW3ivELJUdqGItazYElLzc9BdtC25mHH4ywuns18O%2BHwvhDmZPZQd6x8WnccuJacVveLWwzyOY94YvGVAdw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.4	50362	44.195.186.221	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	1034	OUT	GET /sync/casale/ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb
2024-03-29 00:41:42 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; Expires=Sat, 29 Mar 2025 06:41:42 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-29 00:41:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.4	50348	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	665	OUT	GET /sadbundle/473513299895995753/images/headline2.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:42 UTC	820	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 2959 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Wed, 27 Mar 2024 23:45:42 GMT Expires: Thu, 27 Mar 2025 23:45:42 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/png Age: 89760 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:42 UTC	432	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 04 b0 04 03 00 00 00 d5 8f 29 3a 00 00 00 30 50 4c 54 45 00 00 00 fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe 63 de 4d 40 00 00 00 0f 74 52 4e 53 00 bb 77 44 ee 66 11 cc 99 22 dd 33 88 aa 55 88 d0 9d d5 00 00 0a ff 49 44 41 54 78 da ec c1 81 00 00 00 00 80 a0 fd a9 17 a9 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 76 ce 2d 74 86 28 8e e3 5f 8b 65 fd dd e3 c5 a5 41 ae a5 c8 fd 16 22 4a 68 29 b9 cb ba c5 8b 7b 29 45 8b f2 6a 27 29 de f0 40 94 5a 8a bc 28 b7 bc 50 48 22 Data Ascii: PNGIHDRX):0PLTEcM@tRNSwDf"3UIDATx`v-t(_eA"Jh){)Ej')@Z(PH"
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: 87 e1 31 80 82 57 a1 2a 5e 78 82 23 89 43 be 87 a0 49 58 56 23 7e 45 56 aa 47 8f 1e 03 f8 ca 7b 74 7f 4c d6 80 22 4c 1a b1 78 75 6c 8e 05 75 32 7f ec e1 90 0f 8d 2a f0 80 2e 22 89 43 7e 80 e0 45 3d 59 a6 04 73 a0 be 2c a7 0c 93 71 9c 0a 34 a4 39 10 68 c1 92 8b 54 96 07 8c 2a 52 2c 20 9a 38 7c 50 81 20 f7 f1 af c8 aa b9 56 5f e3 0c f9 02 dc 06 2c 96 d7 a6 e5 7c 63 54 d1 32 aa d7 77 38 5c cc e3 00 92 7c f3 37 64 35 f0 2d 4c b2 45 78 ec e7 01 e0 81 9c 5b 12 fc 68 54 d1 c4 7b 8c 26 0e d5 7c d5 94 6f 95 ac 31 1d 2a ed 5d 00 94 00 68 7c 3e 7d b0 1f 3c f8 2a d9 87 2f 95 2c f1 d8 6d 69 96 00 52 dd f3 5b 7b ab 71 3c 4f 4f 1f 08 51 3b 9f ee e2 0a 59 09 ef 0f f0 34 cb 2d c7 a1 60 e1 8b f0 2c 45 b1 81 25 a3 8a c5 9e c3 68 e2 b0 b9 fc 41 b6 e2 75 b2 3a 85 7f 08 c8 4a Data Ascii: 1W^x#CIXV#~EVG{tL"Lxulu2."C~E=Ys,q49hTR, 8\|P V_,\|cT2w8\\|7d5-LEx[hT{&\|o1]h\|>}<*/,miR[{q<OOQ;Y4-`,E%hAu:J
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: b2 9a 20 0e 24 f3 ac 5c e8 9f 65 25 63 c8 6a c1 4f 7a 09 dd a4 25 cb 19 1d 7c ab 27 ab 11 5f e9 5b d4 75 64 f1 0d da 20 0e 24 58 7c 28 ef 74 76 33 64 35 e7 07 35 5a fe 8a 82 b7 f8 31 59 0d 2c 66 fc b3 b3 0e 9b db 0c 9b 88 13 88 03 fe 4f ff 2c d7 19 b2 5a b3 a4 6e c1 7f 82 46 1b fa 31 59 c8 a9 d4 56 19 f5 b8 d4 66 60 1f ec 40 1c f0 0d 35 e3 4b 43 16 d2 74 55 b2 e1 77 64 ed e1 14 a0 85 78 a8 c3 de a5 ee d2 53 eb 10 07 7c 43 4d 7b 74 33 65 e5 e4 4c f6 42 df 7c 09 87 4e f5 a6 90 b5 88 2a 55 8a dd 9d 4a ba 1f 4f b0 ec 67 89 74 04 15 4d 6f 72 fa 8c 40 58 b5 e9 66 a4 ce c7 a3 85 6f a6 a3 79 86 ac c5 bc fe 25 90 8d 50 e8 b4 56 d6 97 54 e9 6a 7a 4c 08 cc 1e 6e 32 5d c9 04 23 a8 8d f3 24 4b c7 03 61 d5 7d ed ba c6 e4 a3 51 cd e5 21 d4 ca 5a cb f1 7e 68 4a 60 86 4e Data Ascii: $\e%cjOz%\|'_[ud $X\|(tv3d55Z1Y,fO,ZnF1YVf`@5KCtUwdxS\|CM{t3eLB\|N*UJOgtMor@Xfoy%PVTjzLn2]#$Ka}Q!Z~hJ`N
2024-03-29 00:41:42 UTC	23	IN	Data Raw: 00 1e 01 4f b8 06 8d 59 c6 ef 4a 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: OYJIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.4	50325	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	1963	OUT	GET /cksync.php?cs=8&type=spa&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/checksync.php?vsSync=1&cs=9&cv=31&https=1&cid=8YHBJ3BJ0&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25235%2C25036%2C25278%2C25237%2C25159%2C25038%2C25118%2C25239%2C25117%2C25318%2C25317%2C25270%2C25072%2C25031%2C25030%2C25198%2C25274%2C25276%2C25071%2C25202%2C25003%2C25127%2C25006%2C25204%2C25126%2C25007%2C25208%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25243%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25250%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
2024-03-29 00:41:42 UTC	442	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 56 Content-Type: image/gif p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:42 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:42 GMT Connection: close
2024-03-29 00:41:42 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:42 UTC	13	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.4	50358	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	774	OUT	GET /crum?cm_dsp_id=109&external_user_id=0bf86f4e7d934cb7b5daae7a5c7d8db5&expiration=1714264899 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:42 UTC	988	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0d82e13388c-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:42 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:42 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DknnBeu3zWgE6%2FtU0PBck%2FFVlxYsxTYpjAT552VQveVpZTKBzd%2Ftkp54EyHoP3Rf%2BhF7ROFeBvnCCwauYw8HzUUQRoxRQBXVzuP2mIq9PMN8o5ZxHSGS%2FrekcwfTKY8yZYI52J2jC6X0hA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.4	50371	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	659	OUT	GET /sadbundle/473513299895995753/images/bg3.jpg HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:42 UTC	822	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 48771 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Wed, 27 Mar 2024 23:48:44 GMT Expires: Thu, 27 Mar 2025 23:48:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/jpeg Age: 89578 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:42 UTC	430	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3d 00 00 ff e1 03 8e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky=http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 35 38 30 31 31 37 34 30 37 32 30 36 38 31 31 41 36 31 33 39 36 37 39 37 45 45 34 44 38 44 36 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 38 34 30 41 45 39 45 43 46 39 44 31 31 45 45 38 31 33 37 46 46 32 37 37 39 37 42 42 46 39 31 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 38 34 30 41 45 39 44 43 46 39 44 31 31 45 45 38 31 33 37 46 46 32 37 37 39 37 42 42 46 39 31 22 20 78 6d 70 3a 43 72 Data Ascii: sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0580117407206811A61396797EE4D8D6" xmpMM:DocumentID="xmp.did:1840AE9ECF9D11EE8137FF27797BBF91" xmpMM:InstanceID="xmp.iid:1840AE9DCF9D11EE8137FF27797BBF91" xmp:Cr
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: ea 26 c6 5e eb 24 01 a9 0b 69 74 66 87 51 40 32 20 e4 39 73 91 8c 6d bd d6 73 4c 2f df 58 0b 74 25 90 cc bf 4b dc 63 4d 6c a0 f0 0d 4f 0e 38 ce 9b e6 66 96 39 ef a9 75 da 82 51 a4 25 c5 6c e9 32 09 15 13 5c 84 f8 0c 76 9c 53 07 d9 9b b6 81 2f 6d a1 ba 89 e0 3a 88 15 80 78 78 79 e1 b6 d9 1d 1b 1e 92 30 6b a7 49 90 88 3f 37 4b 64 c0 c6 9e aa 49 a9 f8 e3 bf 6b b9 ac b2 ed e5 fd 7c 65 cf 79 6c e0 5d de e5 2e a1 0e 82 9a 3d 3a cc 31 33 1a 85 24 a8 19 73 f8 e3 bd f9 99 bf 0b 3e 8f 5f 1f 53 13 b7 d2 7d af a6 8d 23 a8 0b 60 00 28 20 79 93 c3 99 fd c2 69 dd 9a ed c3 d3 c7 8f a8 db 4c c3 bb 16 bb 15 16 cb 08 63 2b 02 3a b3 8e 53 f3 c7 6f 73 aa fc 3c 65 9e 9c 45 21 05 b7 65 d4 75 92 2a 01 90 a7 97 21 1c a7 cc e3 12 c9 c2 56 ac c8 dd 6b e0 87 28 0a 03 42 b3 91 19 8a Data Ascii: &^$itfQ@2 9smsL/Xt%KcMlO8f9uQ%l2\vS/m:xxy0kI?7KdIk\|eyl].=:13$s>_S}#`( yiLc+:Sos<eE!eu*!Vk(B
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: fb f0 db 7b eb 94 9a e1 6d a3 70 93 aa 02 52 80 71 89 9a f8 0f 2c 48 ab 2d 3f f3 22 14 b3 10 0e 40 9a 0a 50 70 9e 18 dc bc 41 ba 41 db ab b6 92 18 c2 8d 52 47 09 12 78 72 33 e3 96 3a 6b 31 ae 6b 39 e3 86 9b 26 da 5b 4d 4c 80 37 d2 07 19 3e 31 33 e5 8f 5f 6f 79 35 e3 5c 77 d6 db c9 6e 90 66 38 50 fe 38 ed 2b 9e 00 a6 28 52 98 21 4a 60 a5 29 82 01 4c 02 94 c0 29 4c 00 29 80 52 98 05 29 80 05 71 42 95 c0 02 b8 05 2b 80 05 70 0a 57 00 0a e0 01 5c 10 34 e0 34 5a 72 36 76 d4 dd 7b 9b 7b a5 91 59 88 05 ee 25 c9 8e b0 cb 1a 2e a9 10 63 29 e5 8f c9 cf f1 cf a3 ec 17 6b b2 5b 96 c5 fb a1 06 d8 8b 8a 96 d5 88 2d 04 02 ca b9 f1 59 d2 0d 38 63 b4 d2 dc 5b 7c 78 fa d3 2d 5d bd 6c a0 08 ef 02 e1 55 0a 68 42 2b 01 70 ca 6a 62 d0 d2 4a 8a f2 cb 0e ee ba d9 21 ab 36 e2 fd Data Ascii: {mpRq,H-?"@PpAARGxr3:k1k9&[ML7>13_oy5\wnf8P8+(R!J`)L)L)R)qB+pW\44Zr6v{{Y%.c)k[-Y8c[\|x-]lUhB+pjbJ!6
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: c7 67 32 94 c0 29 4c 02 94 c0 29 4c 00 29 8a 85 29 80 52 98 05 29 80 52 98 05 29 80 52 98 05 29 8a 01 4c 02 95 c0 29 5c 10 0a e0 14 ae 00 69 c0 51 b4 b6 a9 ba 4b 6e c6 fd a6 b8 96 4b 48 93 a8 15 07 44 4f 4b 3d 64 67 15 cf 4f e3 f5 de 6b 38 be d6 1a b6 66 ed bd c5 cf 4a d9 b6 1a e1 65 1a 5b 52 6b 60 44 2e 92 e6 57 94 e5 33 c3 17 6d f1 38 18 6b ba fb 36 de ad b0 e2 f3 00 9a 37 6d aa d3 5e cf 41 05 a3 46 a2 c0 31 86 02 ac 25 46 38 4d af 57 0e 5e 2e 3e 93 0e 4e f0 07 05 89 46 84 f5 2f dc 52 80 80 ce aa c0 0d 40 80 cc e6 10 1e 33 e5 da 67 18 9e 30 cb 43 d9 7b d7 ae 5f 0e 00 7b 6a 2e 89 02 84 07 bc cc 59 57 27 e1 14 22 2b 13 8c 75 4e 11 70 d7 79 5d ac 29 46 25 6e 3a a5 84 76 0d a9 8b 2b 16 3a 99 47 ab 2a e5 d4 7f 0e 47 ea c3 b5 fe 58 f3 b3 37 ea fc bc 7d 32 b3 Data Ascii: g2)L)L))R)R)R)L)\iQKnKHDOK=dgOk8fJe[Rk`D.W3m8k67m^AF1%F8MW^.>NF/R@3g0C{_{j.YW'"+uNpy])F%n:v+:G*GX7}2
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: 2e 6b 50 4f e5 d2 00 ce 83 f1 e3 c7 19 e4 3b 5d 9e f5 b7 b5 e9 86 2e f5 76 22 0a aa 88 45 5f 09 03 23 5a 1c 7d 2f 97 db 3a bc 9d c9 c5 d0 29 8f 43 99 4d bc 02 94 c5 0a 53 00 a5 30 08 53 00 a5 30 42 94 c0 29 4c 50 a5 30 0a 53 00 a5 30 0a 53 00 a5 30 0a 53 15 0a 53 00 34 60 31 6e 0e f6 d3 0d cd c7 01 9d db d7 7b 4c 03 ab ac 86 75 99 93 a5 e5 8e 50 7c 46 3f 13 d7 a6 31 27 f4 7d cc 2b 5d 76 36 f0 e0 07 b8 09 36 af 5d d2 01 46 22 44 41 8e 64 78 c8 c5 98 b7 fa 18 0b 96 56 f3 04 f4 dd ac da 45 b8 cb 6d 85 a6 f4 d8 97 b8 43 95 6e ad 27 42 b4 34 ae 92 47 4c 62 6a 98 67 de a6 de dd e0 f6 55 4d 96 2a 10 20 1d 0b 42 0b d2 0b 01 51 19 b1 cc 40 18 b0 b1 a7 b4 5c ba 76 9b bb 27 6f 37 b7 0b 6d 4e e2 04 5b 82 61 98 9a 21 d4 a2 a7 4d 48 3c 27 19 de 7e e9 67 8f 1e 3e 31 ae Data Ascii: .kPO;].v"E_#Z}/:)CMS0S0B)LP0S0S0SS4`1n{LuP\|F?1'}+]v66]F"DAdxVEmCn'B4GLbjgUM* BQ@\v'o7mN[a!MH<'~g>1
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: d1 8b 94 c3 53 59 de fa b6 d5 10 c2 ab 20 36 e0 16 02 49 e2 38 48 cf c8 e1 98 3a b6 76 e6 d6 dc ca 88 a6 a6 02 40 31 27 ea e3 e1 e3 8e 57 6c d5 91 4e ea d9 5a 5b e8 68 0c f3 48 53 91 26 66 38 f9 c6 37 ad 66 c6 75 6b 88 c1 f4 86 60 57 49 24 cc 82 4c 13 f4 f0 c7 4c b3 87 b2 f6 fb ad dd b1 d2 8e b0 16 a6 a8 64 47 41 35 a4 54 7c a9 41 f4 be 5b 6c c7 97 bb 31 5d 53 6f 1e 97 22 1b 78 05 36 f0 0a 6d e0 10 db c0 29 b7 8a 14 db c1 08 6d e0 14 db c0 29 b7 80 43 6f 14 29 b7 80 53 6f 04 29 b7 80 43 6f 14 29 4c 02 e8 c0 71 bb 8d e7 bc 6e a3 db 16 fd 15 3e a5 c6 6e b2 f6 e1 48 4d 50 d1 d3 45 1f 4c 52 9d 38 fc 2e 97 cf 3f d9 f7 57 76 e3 66 d3 9b b7 d5 46 d9 ed b1 b2 8a ce d6 cb 4b 02 85 a1 ad cb 40 91 f9 b2 1c 31 df 5d a7 54 e0 ca de eb bc db bd eb 9a 2c fa 97 b4 d8 57 Data Ascii: SY 6I8H:v@1'WlNZ[hHS&f87fuk`WI$LLdGA5T\|A[l1]So"x6m)m)Co)So)Co)Lqn>nHMPELR8.?WvfFK@1]T,W
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: bb c6 ec 19 6d 4e 2e 4e a0 3e a7 9e a6 68 0c 59 64 56 7c be 86 bc 39 72 1d 2e ef b7 dc dc b1 61 dc da bd 72 ed d7 66 ba a7 4a 87 71 30 2e 74 c9 61 27 a9 41 a1 ce 29 35 b2 22 d7 f6 fa ba e9 4d c1 77 2a a2 6d a1 61 56 25 cc 29 32 00 13 9f 90 cb 13 dd f8 2e 15 2f b6 af da 65 f5 8a 2b 32 f4 ea 25 50 31 24 f5 34 11 a6 04 92 63 88 a9 18 be f4 bc 8e 97 5b f4 eb b5 db fa 76 82 3a bc 93 65 94 92 4d 7f 33 10 33 01 79 11 9f 3c 62 5c d5 c7 06 2b 9d b7 68 7d 44 be 74 02 55 cd cf a9 86 bd 2c 41 d3 e0 a7 2d 33 f3 c6 fa ef 93 36 39 ad b5 d5 7a 52 0a b9 6d 45 60 4c c6 98 88 e1 58 8c 75 9b 30 e8 ed 9a d3 a3 5d b7 a9 52 d8 7a f0 69 34 91 99 9a cc f0 e7 96 33 68 4b fb a4 5b e1 2e 29 66 56 d4 ca 74 83 33 c2 60 41 c5 90 69 b1 75 ae a7 50 40 b7 08 79 00 29 2a 09 58 98 aa b7 de Data Ascii: mN.N>hYdV\|9r.arfJq0.ta'A)5"MwmaV%)2./e+2%P1$4c[v:eM33y<b\+h}DtU,A-369zRmE`LXu0]Rzi43hK[.)fVt3`AiuP@y)X
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: 75 d1 c1 d1 b7 99 d0 fe b6 9d 5f 57 1d 53 31 1c a9 a3 28 af 86 3c f9 98 75 27 76 b7 b3 bb 6a e6 e0 14 b5 79 ae 14 f4 11 05 bb 88 2c aa 2a b6 9b 76 ed 5b eb 65 d4 c5 8e a2 65 88 39 9f ce 6b b5 ce 2c e3 eb c3 1e 3e ef ad f4 f0 e7 76 b2 bb 74 bb aa c3 5d b7 74 14 17 f5 69 97 4d 25 82 b8 8d 2c 15 c5 55 a6 a0 1a 30 8c 5d 2d bc c6 de e5 ea de 16 77 0d 75 af 2d cb 45 75 80 a5 3f 96 56 d9 f4 d4 85 2a c1 42 b7 a7 98 5d 2c 28 71 9d 37 e1 8b ea 2a b4 37 21 2d de 16 cf a6 58 0b 77 a8 2c 86 6f a5 8b 31 36 c0 3a 0f 4b 10 3c 66 06 3a 5d e1 6a cb 76 f7 2b b7 5b b6 dd 8b b8 90 0c b4 d4 90 2a 7f 2e 85 85 cf 51 1c e3 13 aa 67 09 87 4f 64 ec a5 b7 d7 dc db b5 e9 82 14 05 0e 15 10 a9 0a 5c b3 68 67 bb a0 57 ab fc ca 19 7c dd cd 6e fc 39 df 1e 3f bf 1b 19 b7 42 c8 27 4d f1 b8 Data Ascii: u_WS1(<u'vjy,v[ee9k,>vt]tiM%,U0]-wu-Eu?VB],(q77!-Xw,o16:K<f:]jv+[.QgOd\hgW\|n9?B'M
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: 84 16 99 ab d1 48 93 2b f4 cc 49 25 d6 9e 23 12 d0 fb 4d e3 dc b1 75 25 99 88 d4 b6 eb d5 59 50 d9 1f cd 38 63 03 27 71 43 68 8c 8a dc 12 0a b8 75 04 9a 00 6a 62 45 14 d4 78 e3 a6 95 9b 18 10 31 b8 51 8e 9e 33 c2 91 f8 0c 75 c8 88 03 32 81 f5 12 04 67 c7 8e 2e 51 6d c6 36 c0 5c 94 48 26 33 8a 44 e5 84 4c 2d b1 66 f5 d0 a5 58 90 08 15 8a 31 8a 00 78 61 9c 26 17 e9 dd 59 12 ca 0b a1 04 dc 81 2b a0 7f 85 8f d4 c4 f0 e0 20 e7 86 62 58 6b 9d cf 72 77 16 6e a1 2b fa 63 36 41 ea 28 01 10 b2 41 98 88 ae 2c a9 87 b9 bb b7 d9 6f 3d b5 b3 de fa 44 6f 2f 30 1f a3 b2 49 6d 37 4b ab 25 a7 b9 25 43 20 62 88 0b 47 91 6c 77 fd b7 5f 8b 13 3d 5f 07 b3 f6 cf 75 da ef 7b 76 d9 0a 5b da 6e 59 48 b7 b5 07 48 75 b6 74 96 b4 1a 0b 8a 4b 46 5c 79 9f 6f 67 b9 2c 93 95 79 fb 9a d9 Data Ascii: H+I%#Mu%YP8c'qChujbEx1Q3u2g.Qm6\H&3DL-fX1xa&Y+ bXkrwn+c6A(A,o=Do/0Im7K%%C bGlw_=_u{v[nYHHutKF\yog,y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.4	50355	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	737	OUT	GET /crum?cm_dsp_id=57&external_user_id=969751699754991983 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:42 UTC	986	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0d88a62207e-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:42 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:42 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Bq%2Fn1H2xG9ulvqqmsQZKx6rO1d8qhp8nABT9mqOc7KOl1Vmx%2BQRVQYsOOwVdcjTXRVO1fCWksXSNxbMZO53mN3ABEMXXtYSq%2B8jWNljR7ehmiRPYkA7HsxpW005FkcsJ2Jvj728CVi%2FkQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.4	50354	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	780	OUT	GET /crum?cm_dsp_id=45&external_user_id=CAESEFC4he6gaSdOGOH6DAUt81g&google_cver=1&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:42 UTC	982	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0d8ac2f8848-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:42 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:42 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OskmPrBiVfoVhvkg6QK2VwwDX7sUgwEZJwomt9kcvokHAxyIN0n9HjwQrcJqNaGsQrnkv0zHjLXojHv9TI4Q8vicQpjtHGRVD1U%2FWRyMTeKcY8jE7InZqYNL2CZD1dMRsLZ9Ol%2BMXQBmqQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.4	50372	207.65.37.181	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	2621	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=48012113&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; PugT=1711672900
2024-03-29 00:41:42 UTC	1055	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156078:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Length: 897 Connection: close
2024-03-29 00:41:42 UTC	897	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 73 79 6e 63 68 72 6f 73 63 72 69 70 74 2e 64 65 6c 69 76 65 72 79 65 6e 67 69 6e 65 2e 61 64 73 77 69 7a 7a 2e 63 6f 6d 2f 73 79 6e 63 4d 65 3f 70 61 72 74 6e 65 72 44 6f 6d 61 69 6e 3d 6d 72 74 6e 73 76 72 2e 63 6f 6d 26 69 64 54 79 70 65 3d 63 6f 6f 6b 69 65 26 70 61 72 74 6e 65 72 55 73 65 72 49 64 3d 36 44 33 36 36 34 36 38 2d 37 31 41 46 2d 34 32 32 42 2d 39 39 41 42 2d 31 33 38 41 36 44 41 42 39 34 46 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e 2e 63 6f 6d 2f Data Ascii: PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.4	50370	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	743	OUT	GET /crum?cm_dsp_id=191&external_user_id=08726e86-cf36-54f6-8d6ab380 HTTP/1.1 Host: dsum.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:42 UTC	968	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0d99a81390a-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:42 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:42 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=43K94Z73WMFYofEVmj47OyCTASOKJumhxcIlHlg3OHXTh7hHyfWpqTaGpFjjUryklCVyV5JAB2nbinpNTyy09l0RoCLdgWsJTAJM1N10wQ3AG8%2BPUFxLwEueqK392YvhYROFHUKr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.4	50377	74.119.119.150	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	924	OUT	GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=656f8b2c-4714-48d4-8d5f-32bdff906809
2024-03-29 00:41:42 UTC	532	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 29 Mar 2024 00:41:42 GMT server: Kestrel cache-control: no-cache expires: Fri, 29 Mar 2024 00:00:00 GMT location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 1838198 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.4	50396	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	2941	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=ca57c23d-569f-46f3-a577-3e6f6bd561b5&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; PugT=1711672900; chkChromeAb67Sec=3; pi=0:4; DPSync3=1712880000%3A256_259_263_262_260_201_261_258%7C1711756800%3A255_248%7C1712707200%3A257%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712534400%3A63%7C1712880000%3A233_166_264_13_104_99_5_71_21_7_249_243_8_96_48_238_220_234_56_266_176_46_214_240_250_231_54_3_55_165_178_22%7C1712275200%3A2_38_223_15%7C1712966400%3A35%7C1716854400%3A69; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug
2024-03-29 00:41:42 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 27-Jun-2024 00:41:42 GMT; path=/ Set-Cookie: PugT=1711672902; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:42 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:42 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.4	50373	35.211.178.172	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	740	OUT	GET /ul_cb/sync?ssp=liveintent&user_id=07571c18-3f04-4602-a656-288806fb242c HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1711672899; tuuid_lu=1711672899; tuuid=ca57c23d-569f-46f3-a577-3e6f6bd561b5
2024-03-29 00:41:42 UTC	662	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //pm.w55c.net/ping_match.gif?st=bidswitch&rurl=%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D79%26user_id%3D_wfivefivec_%26expires%3D30%26ssp%3Dliveintent%26bsw_param%3Dca57c23d-569f-46f3-a577-3e6f6bd561b5 Set-Cookie: tuuid=ca57c23d-569f-46f3-a577-3e6f6bd561b5; path=/; expires=Sat, 29-Mar-2025 00:41:42 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1711672902; path=/; expires=Sat, 29-Mar-2025 00:41:42 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.4	50386	34.36.216.150	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	698	OUT	GET /dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=aea3ca37-727a-41ef-b550-ee203ed2401c#1711672902005
2024-03-29 00:41:42 UTC	840	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=aea3ca37-727a-41ef-b550-ee203ed2401c#1711672902005; Domain=.sitescout.com; Expires=Sat, 29-Mar-2025 00:41:42 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcxMTY3MjkwMjc2Nn0; Domain=.sitescout.com; Expires=Sun, 28-Apr-2024 00:41:42 GMT; Path=/; Secure; SameSite=None location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Fri, 29 Mar 2024 00:41:41 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.4	50378	74.119.119.73	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	775	OUT	GET /user-sync/redirect?profile=73&gdprapplies=0&gdpr=&gpp=DBAA&gpp_sid=-1&uid=656f8b2c-4714-48d4-8d5f-32bdff906809&dised=true&gdpr=&gdpr_consent=&gpp=DBAA HTTP/1.1 Host: ssp-sync.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=656f8b2c-4714-48d4-8d5f-32bdff906809
2024-03-29 00:41:42 UTC	672	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 29 Mar 2024 00:41:41 GMT server: Kestrel cache-control: no-store,max-age=0 location: https://x.bidswitch.net/sync?ssp=criteo&custom_data=QvBDl19kJTJGckVvTHZaWVA3cjR5aUxhTGd5YVFKJTJCRUY3QzdERExOOWxNZnF1a3ZWaFhQWHk5NUZGYWdyUVNod3J5YmtSciUyQjZPNEJvUFJUcEhudXdOb2kzSkU2SVRqQ211amI3SFNPb3dCUm1ZekZkRzl6dE1ZeVh3N1ViMGxTUnhQYnBHakdSVUYydUVsb3djWkNYNlpIY3E4Tm9DT1A0YkswMTBJU25XVmxtMyUyQjAzMkY5JTJCS0lVQUZxdk5aajFPT2syVWdq&gdpr=&gdpr_consent=&us_privacy=&cr_user_id=k-_3LhZ7-eRGn6I81sgKP8Ckgx5iZKVs0K2f5C1Q cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.4	50388	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	814	OUT	GET /rum?cm_dsp_id=65&external_user_id=AAAG7NSuQMmnfwMHSnLCAAAAAAA&expiration=1711759302&gpp_sid=-1&gpp=DBAA&is_secure=true&us_privacy=1YNN HTTP/1.1 Host: dsum.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:42 UTC	972	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0da1f18176e-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:42 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:42 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4cncAYYlKnS6S4zuOxT%2BdCn9X%2B6WZmC6N4AXgnCUEeBAR04iPbxBbStjx5S8wPG18Psmj3AU7SNkkPtUPZHg7gtu9KpkvW6zRzBdxwihRETU6%2BNQLaVsDIgNC3gGHk8t6QYVCdnB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.4	50349	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	665	OUT	GET /sadbundle/473513299895995753/images/headline3.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:42 UTC	820	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 2310 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Wed, 27 Mar 2024 23:45:44 GMT Expires: Thu, 27 Mar 2025 23:45:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/png Age: 89758 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:42 UTC	432	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 04 b0 04 03 00 00 00 d5 8f 29 3a 00 00 00 30 50 4c 54 45 00 00 00 fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe 63 de 4d 40 00 00 00 0f 74 52 4e 53 00 44 77 bb ee 11 33 cc 88 dd 99 66 55 aa 22 06 2e 4f 76 00 00 08 76 49 44 41 54 78 da ec c1 81 00 00 00 00 80 a0 fd a9 17 a9 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 66 af 7e 72 69 87 02 00 8c 9f e7 25 65 f2 fe 5c 1b f0 de db 80 37 13 26 06 12 89 81 58 80 81 3b b0 00 3b b0 14 03 13 89 01 13 33 0b 30 23 36 70 1b 1b f0 e7 a2 08 3e 7a a5 1a 91 9b 72 b4 82 7c bf 41 9b b4 4d 7b ce d7 9c 56 92 24 49 92 24 49 92 24 Data Ascii: PNGIHDRX):0PLTEcM@tRNSDw3fU".OvvIDATxf~ri%e\7&X;;30#6p>zr\|AM{V$I$I$
2024-03-29 00:41:42 UTC	1252	IN	Data Raw: 31 d1 24 90 86 38 a3 e4 b2 a6 63 55 83 d2 75 ed b1 76 81 ff c5 f1 2c 44 5a 86 19 20 ad 8e 75 f9 ef c1 df c6 62 65 ad 56 6b 78 12 b8 8a 8c d5 7f c4 0b c0 51 b8 f7 0d b8 08 71 7e 02 6b c0 66 75 ac 6e 28 34 15 ab 5b fc 71 b2 c8 58 fd 47 fc a3 b8 dd 00 70 1e e2 0c 00 db c0 5e 64 ac f9 55 98 d8 0a 85 9d 71 a6 d6 d3 ea 58 e5 95 cf 9f b0 0c 3c 89 b5 73 c7 ae d9 f3 ce 14 44 61 fc 7a b9 fb f7 ba 59 0d 91 48 28 50 5a 42 24 12 89 b7 a8 88 bb d1 88 ca 46 34 2a db 50 91 55 10 25 e1 03 a0 50 af 84 4a b3 12 1f 60 2b f5 2a 48 74 de 2e eb fd d8 79 e6 8e 27 73 4f ae eb 8e 04 c5 3c 0d bb 39 77 ce cc 6f cf 3d e7 cc cc 7f 17 9a 2f 25 7a af 85 85 75 be 75 6d d6 fe 3f 28 86 2f d0 79 04 c1 3a 9e a1 7a 6d 49 a0 74 33 fb a4 ae 14 da 04 eb a4 7d 4d 84 04 68 a9 3d 74 4b b0 68 0a fe Data Ascii: 1$8cUuv,DZ ubeVkxQq~kfun(4[qXGp^dUqX<sDazYH(PZB$F4PU%PJ`+Ht.y'sO<9wo=/%zuum?(/y:zmIt3}Mh=tKh
2024-03-29 00:41:42 UTC	626	IN	Data Raw: 31 6b 0a 0b f3 94 43 3b d1 a5 e9 23 bd d5 15 b0 94 a5 86 f5 ee a7 e9 32 04 c8 15 b1 b0 ba 34 51 de eb 60 a1 38 84 1f c0 23 11 f4 38 f4 b3 a6 b0 d2 21 ab 83 3e 2c 5e 54 01 4b 59 6a 58 87 7f 9a b6 c5 ea 73 19 96 f2 5e 0f 0b 4f e7 c1 7f 6d c4 42 3a 45 89 6e 04 0b ed 35 cf 36 f5 35 c4 a8 0a 96 6f a9 3d 7c ea ab 20 3c ac 60 f9 de eb 61 21 eb 84 1d c0 33 51 91 fa a0 21 2c 5e 46 c9 3d 75 15 86 f1 2b 60 f9 96 da c3 55 9a 16 37 61 79 5f c1 f2 bd d7 c3 42 15 0b 3f 80 5f e0 4d 36 9a be f7 cd 60 f1 9a 53 76 78 97 ac ef dc e9 da cb 61 05 2c 5a 6a 0f 39 ae 98 b9 91 46 68 5d 48 ca b0 94 f7 7a 58 cb 04 8b fc 17 e2 05 fa a5 6d ee 53 fa 68 9f ba 69 57 6a 68 d9 be 26 b3 bb bf f6 1e 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 f5 83 3d 38 Data Ascii: 1kC;#24Q`8#8!>,^TKYjXs^OmB:En565o=\| <`a!3Q!,^F=u+`U7ay_B?_M6`Svxa,Zj9Fh]HzXmShiWjh&=8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.4	50381	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	2728	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=XMiDsS54DbysaEerRQ4GZg HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; chkChromeAb67Sec=2; DPSync3=1712880000%3A259_201_263_262_261_260%7C1711756800%3A248%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712275200%3A38_2_15_223%7C1712534400%3A63%7C1712880000%3A46_3_220_13_104_165_8_214_240_266_234_250_56_96_5_233_166_231_71_54_21_7_178_55; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; PugT=1711672900
2024-03-29 00:41:42 UTC	621	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:41 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:41 GMT; path=/ Set-Cookie: PugT=1711672901; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:41 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:42 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.4	50387	34.36.216.150	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	722	OUT	GET /dmp/pixelSync?cookieQ=1&nid=48&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=316c09dc-77f5-496c-8783-9ae88f47c0a1#1711672902110
2024-03-29 00:41:42 UTC	1179	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=316c09dc-77f5-496c-8783-9ae88f47c0a1#1711672902110; Domain=.sitescout.com; Expires=Sat, 29-Mar-2025 00:41:42 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyIyNCI6MTcxMTY3MjkwMjcyMSwiMzkiOjE3MTE2NzI5MDI3MjEsIjciOjE3MTE2NzI5MDI3MjF9; Domain=.sitescout.com; Expires=Sun, 28-Apr-2024 00:41:42 GMT; Path=/; Secure; SameSite=None location: https://sync.crwdcntrl.net/qmap?c=1389&tp=STSC&tpid=316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553%26partner_url%3Dhttps%253A%252F%252Fr.casalemedia.com%252Frum%253Fcm_dsp_id%253D64%2526external_user_id%253D316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553%2526gdpr%253D0%2526gdpr_consent%253D Content-Length: 0 date: Fri, 29 Mar 2024 00:41:42 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.4	50364	185.184.8.90	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	738	OUT	GET /cm-notify?pi=index&gpdr=&gdpr_consent=&us_privacy=1YNN&user_id=ZgYOPsAoJI0AAAi4ADlhawAA%261617 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=YdtgSj0svp2Z2ieaFv7X_1711672899702; ts=1711672899
2024-03-29 00:41:42 UTC	496	IN	HTTP/1.1 302 Found date: Fri, 29 Mar 2024 00:41:42 GMT vary: Accept-Encoding location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=133&external_user_id=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&pi=index&gpdr=&gdpr_consent=&us_privacy=1YNN&user_id=ZgYOPsAoJI0AAAi4ADlhawAA%261617 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Fri, 29 Mar 2024 00:41:42 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.4	50350	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	665	OUT	GET /sadbundle/473513299895995753/images/headline4.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:43 UTC	820	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 5750 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 28 Mar 2024 15:51:40 GMT Expires: Fri, 28 Mar 2025 15:51:40 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/png Age: 31803 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:43 UTC	432	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 04 b0 08 03 00 00 00 10 7f c4 3b 00 00 00 ae 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 2d 8a f4 2a 00 00 00 39 74 52 4e 53 00 05 b2 e7 3b c0 13 67 09 c9 ee 86 93 ea fd 8d cf 99 0d f9 72 5e 19 6d 43 3e d5 48 Data Ascii: PNGIHDRX;PLTE-*9tRNS;gr^mC>H
2024-03-29 00:41:43 UTC	1252	IN	Data Raw: 55 55 55 55 55 55 55 55 55 55 85 3d 38 10 00 00 00 00 00 f2 7f 6d 04 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 61 0f 0e 04 00 00 00 00 80 fc 5f 1b 41 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 d8 83 03 01 00 00 00 00 20 ff d7 46 50 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 15 f6 e0 40 00 00 00 00 00 c8 ff b5 11 54 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 Data Ascii: UUUUUUUUUU=8mUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa_AUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU FPUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU@TUUUUUUUUUUUUUUUU
2024-03-29 00:41:43 UTC	1252	IN	Data Raw: 9f d2 f8 41 79 63 4c 0f f3 36 f5 41 4b 3a cf 85 02 ca 4e 72 95 73 9b b8 2c ab 3a a4 4d d8 d0 a5 b4 65 48 8e ec 6b 81 12 9b ab ac 85 4c c8 91 a6 61 63 4e 3d b4 70 9e 5b 42 28 0b dd eb 30 88 f6 c0 c5 71 c7 f4 a0 0e 93 8c d4 3b 23 80 32 9e d7 c2 f3 50 41 3e bc e1 94 3d 2b 2b 6d ce 4c 17 56 87 21 3e 45 a5 0b 7a d4 09 38 37 dd 84 7a 64 29 79 99 fa 90 80 aa 09 a1 44 fa 3c 2a 31 af 38 98 eb 77 d1 d3 d6 2a 3f 42 af ec a1 39 cd 30 63 df e0 7c ca 4a 5d 78 4b af c1 96 90 91 22 5d 86 14 01 6c 86 b8 e8 40 41 c2 a3 e0 4b cb 98 d1 34 9a 70 47 73 41 01 ad 60 87 83 9c 91 3e 8f 35 94 41 94 c6 cf 28 49 3f 91 01 de 94 6b ba 18 bd 1f 89 f9 20 fa 61 fd 77 0e 32 65 a5 05 c5 1a 74 9a 3d 43 16 e8 40 b6 e9 51 28 a0 0f c3 84 3e 31 a7 ae 6a 41 0e 07 7d dd a3 f6 1e bc d8 d2 3c 4b e9 Data Ascii: AycL6AK:Nrs,:MeHkLacN=p[B(0q;#2PA>=++mLV!>Ez87zd)yD<18w?B90c\|J]xK"]l@AK4pGsA`>5A(I?k aw2et=C@Q(>1jA}<K
2024-03-29 00:41:43 UTC	1252	IN	Data Raw: 98 d0 04 4d 68 4d 71 89 96 76 1f 5a 69 1c 2e c6 12 b1 89 99 77 0f 25 46 c5 fe 98 ae 1a ff 64 92 25 05 5f 37 d9 6c ea 31 1f 7e a4 97 3d d3 28 35 f2 ca 6f 0e f2 12 7d e2 2a 6e 8e 99 f1 55 f7 28 d3 84 9c 06 9a cd 0d 73 f1 0b 05 d1 be 16 ac 70 1e df 68 9c 9f ea 8d eb 01 ea 87 d3 52 12 ba 32 d2 f6 fc 5d 0f a1 94 ea 1d 7e 22 7b f2 4c 6a b4 65 f2 a4 d2 95 96 f2 91 32 5d f8 10 5c c3 a3 6e fa bd c7 3b ba b6 01 7a dd 82 06 4b 7a a2 1f 69 f3 bc 6b 1a 3d c1 16 c3 9c 7e 42 8f fa a7 ab 54 ed b0 c8 3b a9 da eb fd e4 ce 7b c8 48 89 2e 8a e1 21 c5 52 96 49 3c 09 e8 da 2e a2 47 25 1b de f1 8a 3f db 2b da c1 a3 60 45 55 2e 4e dd d8 ca 3e 60 bc c4 86 7a 94 e4 b1 d7 eb 76 43 58 1b bb 38 66 c3 fb 7e 57 e8 63 42 af 58 fe 7d b0 db 1e f6 d9 33 23 d3 42 f9 d3 48 ca e5 80 79 f7 40 Data Ascii: MhMqvZi.w%Fd%_7l1~=(5o}*nU(sphR2]~"{Lje2]\n;zKzik=~BT;{H.!RI<.G%?+`EU.N>`zvCX8f~WcBX}3#BHy@
2024-03-29 00:41:43 UTC	1252	IN	Data Raw: 33 c5 c1 83 11 1b 41 97 2d b8 cf e6 1d 28 b3 23 94 aa 42 9a 22 bd cf f8 b3 88 0e 94 08 00 6e 8d a6 ba 7a 2d 95 e9 94 65 aa b4 93 91 ea 00 64 46 87 45 5c 73 8f 63 91 d4 61 d1 7b 11 7a 10 f3 7a e1 6d b8 36 f8 18 40 5f 79 4d 95 4b 52 7e 6e 07 74 d6 dc 2c e3 08 1a 29 4b 72 00 11 b1 b3 a2 1e 70 e3 0b 43 85 53 45 c6 70 a0 ad e9 92 c3 75 5e 85 0e bb 40 8d 35 ee 5c cc 6d 8b 5d a1 48 41 3f e3 0f 82 11 ee e3 0e 00 6d 4c 95 a6 ea 06 af 48 36 38 74 65 04 6b d1 29 8f 90 d4 c0 ce 42 38 73 40 48 0b 33 d2 af cb 6b e7 4f e1 84 53 79 1e 41 69 93 ad 22 63 1e 88 b0 c2 75 d7 57 19 57 4e b5 83 bd 11 d6 14 dc 58 b5 23 66 41 49 3c 47 bc 0f 6b e6 00 cb 84 95 1e 41 6c 04 a3 2b 65 5c 0d cc b1 07 20 14 e3 8a 26 e2 00 68 23 79 aa d4 50 e1 c7 09 e1 d4 bb 83 17 5b b3 71 a2 4e 61 2a f8 Data Ascii: 3A-(#B"nz-edFE\sca{zzm6@_yMKR~nt,)KrpCSEpu^@5\m]HA?mLH68tek)B8s@H3kOSyAi"cuWWNX#fAI<GkAl+e\ &h#yP[qNa*
2024-03-29 00:41:43 UTC	310	IN	Data Raw: 63 8c 31 c6 18 63 8c 31 c6 18 63 8c b1 3f ec c1 81 00 00 00 00 00 90 ff 6b 23 a8 aa aa aa aa aa aa aa aa aa aa aa aa aa aa b0 07 07 02 00 00 00 00 40 fe af 8d a0 aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa b0 07 07 02 00 00 00 00 40 fe af 8d a0 aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa 2a ec c1 81 00 00 00 00 00 90 ff 6b 23 a8 aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa 4a 7b 70 48 00 00 00 00 20 e8 ff 6b 6f 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: c1c1c?k#@@*k#J{pH ko

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.4	50380	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	1286	OUT	GET /cksync.php?cs=1&vsid=3546744890180387000V10&type=dtm&refUrl=&vid=16728938013546744890180387000V10&ovsid=AAABzNBJmlEeqwMiMonlAAAAAAA&axid_e=&expiration=1711759301&nuid={{AXID}}&gpp_sid=-1&gpp=DBAA&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
2024-03-29 00:41:43 UTC	670	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-dtm=AAABzNBJmlEeqwMiMonlAAAAAAA~~1;Expires=Wed, 25 Sep 2024 00:41:43 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:43 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:43 GMT Connection: close
2024-03-29 00:41:43 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:43 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.4	50379	23.222.200.28	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	757	OUT	GET /cksync?cs=3&type=yhb&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dmn2%26ovsid%3D%3Cvsid1%3E%26axid_e%3D HTTP/1.1 Host: cs.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744950180300000V10
2024-03-29 00:41:43 UTC	447	IN	HTTP/1.1 302 Moved Temporarily Server: Apache Content-Length: 154 Content-Type: text/html Location: https://hb.yahoo.net/cksync.php?cs=1&type=mn2&ovsid=3546744950180300000V10&axid_e= p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:43 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:43 GMT Connection: close
2024-03-29 00:41:43 UTC	154	IN	Data Raw: 3c 48 54 4d 4c 3e 0d 0a 3c 48 45 41 44 3e 0d 0a 3c 54 49 54 4c 45 3e 45 72 72 6f 72 20 50 61 67 65 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 0d 0a 41 6e 20 65 72 72 6f 72 20 28 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 29 20 68 61 73 20 6f 63 63 75 72 72 65 64 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 68 69 73 20 72 65 71 75 65 73 74 2e 0d 0a 3c 2f 42 4f 44 59 3e 0d 0a 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><TITLE>Error Page</TITLE></HEAD><BODY>An error (302 Moved Temporarily) has occurred in response to this request.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.4	50394	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	1189	OUT	GET /cksync.php?cs=1&type=57926&ovsid=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
2024-03-29 00:41:43 UTC	686	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1;Expires=Mon, 13 May 2024 00:41:43 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:43 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:43 GMT Connection: close
2024-03-29 00:41:43 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:43 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.4	50385	34.225.72.47	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	824	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=6D366468-71AF-422B-99AB-138A6DAB94F7&vxii_pid=12&vxii_pid1=10067&vxii_rcid=8fb05dfd-93b3-4073-8d4f-73399245f1bc HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6IjhmYjA1ZGZkLTkzYjMtNDA3My04ZDRmLTczMzk5MjQ1ZjFiYyIsImwiOjE3MTE2NzI5MDE5NzEsInQiOjF9
2024-03-29 00:41:42 UTC	353	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjhmYjA1ZGZkLTkzYjMtNDA3My04ZDRmLTczMzk5MjQ1ZjFiYyIsImwiOjE3MTE2NzI5MDI5MzksInQiOjF9; Path=/; Domain=thrtle.com; Expires=Tue, 15 Oct 2024 00:41:42 GMT; Secure; SameSite=None
2024-03-29 00:41:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.4	50393	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	2897	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; PugT=1711672901
2024-03-29 00:41:43 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:41 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.4	50401	74.119.119.150	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	824	OUT	GET /dis/usersync.aspx?r=12&p=73&dis=0&url=https%3a%2f%2fssp-sync.criteo.com%2fuser-sync%2fredirect%3fprofile%3d73%26gdprapplies%3d0%26gdpr%3d%26gpp%3dDBAA%26gpp_sid%3d-1%26uid%3d%40%40CRITEO_USERID%40%40%26dised%3dtrue&gdpr=&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:43 UTC	744	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 29 Mar 2024 00:41:42 GMT server: Kestrel cache-control: no-cache expires: Fri, 29 Mar 2024 00:00:00 GMT location: https://ssp-sync.criteo.com/user-sync/redirect?profile=73&gdprapplies=0&gdpr=&gpp=DBAA&gpp_sid=-1&uid=08dfbe43-cb0c-4918-bda8-5b9f2b385f1d&dised=true&gdpr=&gdpr_consent=&gpp=DBAA pragma: no-cache set-cookie: uid=08dfbe43-cb0c-4918-bda8-5b9f2b385f1d; expires=Wed, 23 Apr 2025 00:41:42 GMT; domain=.criteo.com; path=/; secure; samesite=none x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 999617 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.4	50405	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	774	OUT	GET /crum?cm_dsp_id=46&external_user_id=5423405387794830934&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:43 UTC	984	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0dbad19083c-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:42 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:42 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7WdZbvIWhFhMoBRfzR0r5n9LpSlSaqq9%2FY5DiZiqovxcVthJAAlrByRdwYueuEVYF53FIHuKuiz%2FFIalRRHHxg3G3dtxWEM7C5ntYQx1nitXAZtEsaFQz7v7b1k%2FWWLvmNZwqER0Wsb3EQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.4	50399	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	776	OUT	GET /crum?cm_dsp_id=8&external_user_id=0b2e56bd-231c-4ec2-ba2a-78dde1fe3a07&expiration=1743208899 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:43 UTC	986	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0dbf92507f5-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:43 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:43 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M3ccsrjWZDRxVOn%2FSaO1onQ8j7J16RL%2BJccV3CDrqAmmM9aXHHdg66alr5Kveczz7cF4pxcihJjUt3wQz9Ak0P%2F%2FJNCkr19GStkHfy2dSIo4YEAAol1G49G8KQ8v66KdtsCdUrzLw36VOw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.4	50407	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	746	OUT	GET /rum?cm_dsp_id=123&external_user_id=TjMxskYIXe9LRDfaNGZeQmalMCs HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:43 UTC	996	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0dbaf0b38a4-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:43 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:43 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q3BgOWZvXOrXGaPj4V39UjoRFvJoombWVkPF5A%2BIq6o8o%2FQFzvSL4sYrPETsMXZzxL8Fkxu2YHLzgHWTmAlckpt%2FQo%2F7R3HzLBrMInqw8mumvNPaXWd%2BW%2BjJ9Jm8gKsXHrTF%2FB%2F6t6h%2Fug%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.4	50406	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	777	OUT	GET /crum?cm_dsp_id=18&expiration=1727570499&external_user_id=1186a2d5-5631-4997-9cd5-d010d9cb78b1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:43 UTC	986	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0dc0d383ae8-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:43 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:43 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1zAijaSexaNqvBJkgBowgnKiQPEmtz6uLvtGVjFwBzkiY%2FSDA5w3MV4tKR4YzNoEu5f9NyiszXpZPSXpaFGNd07acFTBqN0vHs%2Fj2Le1yla3OIh2cqnD%2FYg525HD6AKpAoAQO%2BoI2CXgow%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.4	50402	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:42 UTC	761	OUT	GET /crum?cm_dsp_id=17&external_user_id=P1GEqyyk_OouTnS49Tqs&puid=&us_privacy=1YNN HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:43 UTC	992	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0dc39223886-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:43 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:43 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fzuD50%2FHf8JA%2Blzcq%2FBbF45p0RGCD3AJz6%2BP8Ns7xPsAKBu%2FohJlYSrXJflDQKhlrr4BG8Bqylaib7mEkndvAA%2BlovQM2%2FUMr05BT5NIfOyrnLX0SUhmCq6HjQDrK5on9Aqd0xzITtOl9g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.4	50400	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	1213	OUT	GET /cksync.php?cs=1&vsid=3546744890180387000V10&type=ctn&refUrl=&vid=16729006893546744890180387000V10&ovsid=0bf86f4e7d934cb7b5daae7a5c7d8db5&axid_e=&y=null&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
2024-03-29 00:41:43 UTC	675	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1;Expires=Wed, 25 Sep 2024 00:41:43 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:43 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:43 GMT Connection: close
2024-03-29 00:41:43 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:43 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.4	50411	104.18.25.173	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	857	OUT	GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:43 UTC	935	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 1439 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=arnoeUNZaiMMAmemDnPOPhbQSJSPaQPZdq4oWgs1aY; path=/; domain=.tribalfusion.com; expires=Thu, 27-Jun-2024 00:41:43 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=arnoeUNZaiMMAmemDnPOPhbQSJSPaQPZdq4oWgs1aY; path=/; domain=.tribalfusion.com; expires=Thu, 27-Jun-2024 00:41:43 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86bbd0dcdf908233-IAD alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:43 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-03-29 00:41:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.4	50409	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	736	OUT	GET /rum?cm_dsp_id=4&external_user_id=3118679036834831413 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:43 UTC	992	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0dce94b3b83-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:43 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:43 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hZu438E%2BszyoPI1ChKENDz2LxNmguM0I%2FxZEZ8NcMISKgpHexYh1ht1Q0fLFOPkLRWakl7Db%2Fa022TuFAcfUvJ3Johk9WJKCQ1SQyXV%2BQhbMToyF33tYK94J%2F%2FtmAsoitspwko8bsHiy%2BA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.4	50404	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	661	OUT	GET /sadbundle/473513299895995753/images/model.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:43 UTC	820	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 2826 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Wed, 27 Mar 2024 23:28:41 GMT Expires: Thu, 27 Mar 2025 23:28:41 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/png Age: 90782 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:43 UTC	432	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 04 b0 04 03 00 00 00 d5 8f 29 3a 00 00 00 30 50 4c 54 45 00 00 00 fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe 63 de 4d 40 00 00 00 0f 74 52 4e 53 00 44 77 bb ee 11 cc 33 88 99 66 dd 55 22 aa ed cd 1a e7 00 00 0a 7a 49 44 41 54 78 da ec c1 81 00 00 00 00 80 a0 fd a9 17 a9 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 66 0f 0e 04 00 00 00 00 80 fc 5f 1b 41 55 55 55 55 55 55 55 55 55 55 55 55 55 55 85 3d 38 10 00 00 00 00 00 f2 7f 6d 04 55 55 55 55 55 55 55 85 dd fa 77 6d 22 8c e3 38 fe 55 b9 36 6a ab 5e 71 af bf 36 a9 51 41 a9 53 05 91 8e 17 4a 17 2b 68 40 44 Data Ascii: PNGIHDRX):0PLTEcM@tRNSDw3fU"zIDATxf_AUUUUUUUUUUUUUU=8mUUUUUUUwm"8U6j^q6QASJ+h@D
2024-03-29 00:41:43 UTC	1252	IN	Data Raw: ee bb 0b 0b 06 89 f3 b0 1a 40 bf ec ff 1f 35 87 71 84 95 ae 9a fa 39 85 cc a6 73 94 c2 a2 58 0d e0 b7 54 35 28 af 72 18 16 8b ce c3 9a 04 10 63 16 f8 24 b5 7c 40 dd 36 d9 81 3a 6b fa 28 1a 0b 4f 96 cd 4b 55 4d 50 6d 97 61 a5 ab ae c3 92 08 fd 6c 4d e0 98 d4 d2 c1 d0 a3 7c 9d 6a bd 1f a5 1b 37 ab 49 68 c2 6a d3 65 58 b4 9d 87 d5 41 bf c9 02 90 48 1d d3 00 5f c3 d3 40 da d2 1e b9 7b 26 d2 fa 23 b0 f5 6a a6 0b 5c 15 a3 0b 99 54 1d 24 77 2b 26 97 b8 0c 6b e4 3c ac f7 e8 c1 00 32 a9 a5 01 fc 12 09 d6 81 35 b1 5d 7a 47 64 89 a2 7e 64 d7 1b e6 6d b9 03 c5 33 a5 73 2e 9d 93 e0 29 c0 63 07 61 65 61 18 ce 2c 00 03 37 61 0d 4f 58 c7 45 6e 02 df f4 38 6c 4a 2d 13 c5 94 5b b6 eb 14 30 b4 1d 66 cf 40 0c 5b 22 12 44 f9 aa 17 bc 90 aa b8 98 c5 41 0c 5c 76 10 56 5f ef 63 Data Ascii: @5q9sXT5(rc$\|@6:k(OKUMPmalM\|j7IhjeXAH_@{&#j\T$w+&k<25]zGd~dm3s.)caea,7aOXEn8lJ-[0f@["DA\vV_c
2024-03-29 00:41:43 UTC	1142	IN	Data Raw: 52 5c 35 94 ef 1c 58 ef 51 fd 69 b9 0c 69 6f 66 07 1f 82 55 26 53 b5 31 b1 a9 b5 4b f4 77 0d 9d 1c f6 dc 48 fe 8e 3a f0 5e e0 55 5a 18 16 1f 0e a0 59 29 aa 3b 80 91 0d 2b 49 c1 32 13 96 de 1b 86 61 25 54 33 5a 38 1f 99 1b fc a7 8c 2a 23 31 b0 5e a6 a5 cf 1a 86 95 a0 bc 17 82 85 ad 5b bf 8c 9c 8b 49 60 c8 f8 38 cf be 62 99 03 4b 9f 3a 64 c1 fa ac 06 3b fb c9 da 26 ee ff cb 9b e8 fb 2a 39 38 16 c9 6f a6 ba da 90 bb e1 35 30 51 f1 43 b0 b8 d8 7d a7 44 17 d7 66 ac 0e a5 26 27 62 72 9e e5 59 9e 36 d9 b0 f4 79 56 85 b1 29 58 a9 24 03 33 bd 48 d1 85 56 07 23 6f 73 0f ab 93 ab 0a 2c ec 25 8d 69 7b 58 33 32 85 69 11 58 bc 80 bb 37 30 e4 82 c6 42 0f 07 46 3f 64 a0 60 d9 c8 81 95 7b 52 0a 58 68 4a bf e1 7d 11 6f a6 3e b5 44 b8 62 b7 c5 f9 eb e4 f6 58 81 85 5d 92 69 Data Ascii: R\5XQiiofU&S1KwH:^UZY);+I2a%T3Z8#1^[I`8bK:d;&98o50QC}Df&'brY6yV)X$3HV#os,%i{X32iX70BF?d`{RXhJ}o>DbX]i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.4	50390	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	1228	OUT	GET /cksync.php?cs=1&type=58601&ovsid=u_99ef042a-5492-47e4-9c9a-171f0fce9075 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1
2024-03-29 00:41:43 UTC	681	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1;Expires=Mon, 13 May 2024 00:41:43 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:43 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:43 GMT Connection: close
2024-03-29 00:41:43 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:43 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.4	50410	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	663	OUT	GET /sadbundle/473513299895995753/images/lockout.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:43 UTC	820	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 3078 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 28 Mar 2024 17:54:36 GMT Expires: Fri, 28 Mar 2025 17:54:36 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/png Age: 24427 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:43 UTC	432	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 04 b0 08 03 00 00 00 10 7f c4 3b 00 00 00 9c 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 38 39 38 9b 9c 9b 69 6a 69 cd cd cd f3 f3 f3 44 45 44 5d 5d 5d e6 e6 e6 82 83 82 b4 b4 b4 a8 a8 a8 50 51 50 8f 8f 8f 76 76 76 da da da c1 c1 c1 89 04 1f 2a 00 00 00 23 74 52 4e 53 00 a0 f0 44 50 80 90 40 60 77 70 20 c0 31 bb b0 10 d0 57 a9 ca 06 99 de e5 2a f7 b5 38 65 16 88 68 d7 85 c7 b7 3b 7f 00 00 0a f6 49 44 41 Data Ascii: PNGIHDRX;PLTE898ijiDED]]]PQPvvv#tRNSDP@`wp 1W8eh;IDA
2024-03-29 00:41:43 UTC	1252	IN	Data Raw: 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 61 0f 0e 04 00 00 00 00 80 fc 5f 1b 41 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 d8 83 03 01 00 00 00 00 20 ff d7 46 50 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 15 f6 e0 40 00 00 00 00 00 c8 ff b5 11 54 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 Data Ascii: UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa_AUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU FPUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU@TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU
2024-03-29 00:41:43 UTC	1252	IN	Data Raw: 46 d7 ba 0e 2b 36 07 d8 6c 45 63 f1 fe 47 7d 27 ac f3 b1 78 e7 aa 78 4b bd 78 7f 55 da 43 4c 58 7f 97 a9 68 fd 75 58 fb 7a 0b 68 d4 99 78 7a e9 be 6d 84 25 5b 93 5c f6 58 9d db df bd 3f 6d 76 f8 10 56 a6 f4 2a 8d b0 46 e4 3f bb 76 b3 d2 30 10 05 60 74 88 06 b5 21 90 aa 83 55 4b 28 e4 fd df 51 ef 4c ea 18 a5 d0 6d e1 9c d5 fc dc ec be d5 90 7e d9 d8 5f 0a eb b4 6c 3d d4 66 c2 77 44 87 bc 0d 2b 8d 87 72 b3 fb 79 49 ed aa b2 cc eb e4 47 b7 1a 5e da b6 10 d6 cd 9b df ae 0b 2b ef ff 87 15 a3 55 04 d4 c2 0a f3 eb 12 3e a7 bf ed b6 87 89 66 18 bb 65 43 58 b7 6f 7a ee 7f 89 1f 0e ca c1 b0 76 17 eb 92 4a 6e 73 ed 3e 3f f6 e1 3e 55 c7 d8 8c a9 c8 4f fd f9 db 63 5d 56 bb f1 3c d9 4c 69 3e 6d 0e 52 78 8f d5 5d 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: F+6lEcG}'xxKxUCLXhuXzhxzm%[\X?mvV*F?v0`t!UK(QLm~_l=fwD+ryIG^+U>feCXozvJns>?>UOc]V<Li>mRx]
2024-03-29 00:41:43 UTC	142	IN	Data Raw: 9f 7b 58 fa 1a 56 9d ad 93 23 2c 9d c3 ca 84 85 4f c3 2a 6b ce 84 85 cb c3 ca 43 08 84 85 ab c3 8a 5e 78 14 e2 f3 b0 ca 29 ac e7 8e 48 58 f8 30 ac af c7 0d 2d ac ae 8f c5 4d d3 6b 58 dd 14 de 85 c5 71 03 de 86 65 2f 07 a4 2d ac 92 dd ea ca f2 1a d6 d2 f9 bb b0 38 20 c5 db d0 ce 9f 74 9a 94 f4 7f 7c d2 c1 3f c2 02 44 58 f8 1d 22 6f dd 00 00 00 00 00 00 c0 3d fc 01 6c 52 aa de 9b 70 cf 0f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: {XV#,O*kC^x)HX0-MkXqe/-8 t\|?DX"o=lRpIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.4	50398	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	1149	OUT	GET /cksync.php?cs=1&type=58259&ovsid=VqUQt33vvQ3VT5KZdpyI&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1
2024-03-29 00:41:43 UTC	663	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ylm=VqUQt33vvQ3VT5KZdpyI~~1;Expires=Wed, 25 Sep 2024 00:41:43 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:43 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:43 GMT Connection: close
2024-03-29 00:41:43 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:43 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.4	50418	35.236.220.17	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	873	OUT	GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=45E09433ABCF443988615F414991A294
2024-03-29 00:41:43 UTC	723	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:45E09433ABCF443988615F414991A294&gdpr=0&gdpr_consent= Expires: Thu, 28 Mar 2024 00:41:43 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-03-29 00:41:43 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.4	50415	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	2972	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7649593021643562585 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; PugT=1711672902
2024-03-29 00:41:43 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.4	50413	69.194.240.13	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	856	OUT	GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005%22%2C%22zdxidn%22%3A%222069.88%22%2C%22nxtrdr%22%3Afalse%7D
2024-03-29 00:41:43 UTC	642	IN	HTTP/1.1 302 Found date: Fri, 29 Mar 2024 00:41:40 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005%22%2C%22zdxidn%22%3A%221508%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Sat, 29 Mar 2025 00:41:40 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=6015039744 etag: RX9d21a42c059949e7b7d6902789d2d8da005 connection: close
2024-03-29 00:41:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.4	50423	34.111.113.62	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	789	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1711672894631; TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069; TapAd_3WAY_SYNCS=1!2136
2024-03-29 00:41:43 UTC	1101	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:43 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711672894631;Expires=Tue, 28 May 2024 00:41:43 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069;Expires=Tue, 28 May 2024 00:41:43 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!2136;Expires=Tue, 28 May 2024 00:41:43 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:43 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.4	50420	35.244.154.8	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	656	OUT	GET /712188.gif?partner_uid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:43 UTC	735	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CPy7KxIwCiwIARCFpQoaJDZEMzY2NDY4LTcxQUYtNDIyQi05OUFCLTEzOEE2REFCOTRGNxAAGg0Ix5yYsAYSBQjoBxAAQgBKAA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=7VmlZz6wFj6WrGlm6W6SylVkAuYPzdxJJZMauvwerxE=; Path=/; Domain=rlcdn.com; Expires=Sat, 29 Mar 2025 00:41:43 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Tue, 28 May 2024 00:41:43 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.4	50412	82.145.213.8	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	709	OUT	GET /pub/sync?pubid=pub8730968190912 HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:43 UTC	809	IN	HTTP/1.1 302 Found Server: Tengine Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Type: text/html; charset=utf-8 Content-Length: 166 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU3090482eba0842c0a6adc621a2f48ab4 Pragma: no-cache Set-Cookie: UID=OPU3090482eba0842c0a6adc621a2f48ab4; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2024-03-29 00:41:43 UTC	166	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4f 44 6b 6d 64 47 77 39 4e 44 4d 79 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 4f 50 55 33 30 39 30 34 38 32 65 62 61 30 38 34 32 63 30 61 36 61 64 63 36 32 31 61 32 66 34 38 61 62 34 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU3090482eba0842c0a6adc621a2f48ab4">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.4	50436	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	755	OUT	GET /crum?cm_dsp_id=41&external_user_id=1b407dde-ed65-11ee-9900-64996dd289d9 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:43 UTC	992	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0deeb750a81-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:43 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:43 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FX0eLuuOUsAeEi%2Fot5240t0g7KrQWs%2BXaMwHU4FWLLL8S2qJvzWsEtDaqJj%2FEUOASXHUH6hqLndMlcYsB3ZypLz3n3QLH9S9iYcoPTfHNYsC14N3%2BYvO9o8lOjJsklcw%2BsVkRtzT%2Fq2NiA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.4	50425	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	2919	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; PugT=1711672902
2024-03-29 00:41:43 UTC	676	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_188=3189-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553&KRTB&23418-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 27-Jun-2024 00:41:43 GMT; path=/ Set-Cookie: PugT=1711672903; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:43 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.4	50421	18.238.55.58	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	718	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:43 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 4416a31c9d77f8f8b877d81f840c88c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: INOTpOQU4YEZPev1Egyt60kp_GWglptakxUsoFkY_hoYu1k0pyuOqQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.4	50416	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	664	OUT	GET /sadbundle/473513299895995753/images/cta_over.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:43 UTC	820	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 1642 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Wed, 27 Mar 2024 23:40:31 GMT Expires: Thu, 27 Mar 2025 23:40:31 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/png Age: 90072 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:43 UTC	432	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 04 b0 08 03 00 00 00 10 7f c4 3b 00 00 00 36 50 4c 54 45 00 00 00 e6 e6 e6 38 39 38 8f 8f 8f 63 64 63 ba bb ba db db db 42 43 42 58 59 58 d0 d0 d0 79 79 79 a4 a5 a4 9a 9a 9a 4d 4e 4d 84 84 84 6e 6f 6e c5 c5 c5 af b0 af 88 b9 b2 88 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 05 e2 49 44 41 54 78 da ec c1 81 00 00 00 00 80 a0 fd a9 17 a9 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 f6 e0 40 00 00 00 00 00 c8 ff b5 11 54 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 Data Ascii: PNGIHDRX;6PLTE898cdcBCBXYXyyyMNMnontRNS@fIDATx`@TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU
2024-03-29 00:41:43 UTC	1210	IN	Data Raw: 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 15 f6 e0 40 00 00 00 00 00 c8 ff b5 11 54 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 85 3d 38 10 00 00 00 00 00 f2 7f 6d 04 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 61 0f 0e 04 00 00 00 00 80 fc 5f 1b 41 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 Data Ascii: UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU@TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU=8mUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa_AUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.4	50432	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	2825	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=3836530392682421061&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; PugT=1711672900; chkChromeAb67Sec=3; pi=0:4; DPSync3=1712880000%3A256_259_263_262_260_201_261_258%7C1711756800%3A255_248%7C1712707200%3A257%7C1712275200%3A265; SyncRTB3=1714262400%3A224%7C1712534400%3A63%7C1712880000%3A233_166_264_13_104_99_5_71_21_7_249_243_8_96_48_238_220_234_56_266_176_46_214_240_250_231_54_3_55_165_178_22%7C1712275200%3A2_38_223_15%7C1712966400%3A35%7C1716854400%3A69; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug
2024-03-29 00:41:43 UTC	644	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_22=14911-3836530392682421061&KRTB&23150-3836530392682421061&KRTB&23527-3836530392682421061; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:42 GMT; path=/ Set-Cookie: PugT=1711672902; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:42 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:43 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.4	50431	74.119.119.73	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	775	OUT	GET /user-sync/redirect?profile=73&gdprapplies=0&gdpr=&gpp=DBAA&gpp_sid=-1&uid=08dfbe43-cb0c-4918-bda8-5b9f2b385f1d&dised=true&gdpr=&gdpr_consent=&gpp=DBAA HTTP/1.1 Host: ssp-sync.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=08dfbe43-cb0c-4918-bda8-5b9f2b385f1d
2024-03-29 00:41:43 UTC	670	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 29 Mar 2024 00:41:42 GMT server: Kestrel cache-control: no-store,max-age=0 location: https://x.bidswitch.net/sync?ssp=criteo&custom_data=gbp70V9NUXF0OUZvQk9QTkhjNGRpNFZSUWJVbGVockNINkhIRmZwd25zbVFEblRlSElnJTJCVzhZbUY1JTJGOW9oQmU0U1VvWWhkcFVvT2NRa0RaY2V5MlVCRyUyQllQNCUyRmV3RXFENGZLRXpnOFRUa0NpeGJpN3BTMWxKdWtLTDVONHZYYk1Ld0pZZWdmTGw3TnNvWTVuRVo4QjNoNEcxOWZqbUh1dlczaFNGeVNSMEFkZEdkUVhCQlZ0c2M4dUhGUWszSEJNSU94MQ&gdpr=&gdpr_consent=&us_privacy=&cr_user_id=k-dxvO9AvpZmDKomHOA1EJPqcyucc7gat3t7SeBw cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.4	50437	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	746	OUT	GET /rum?cm_dsp_id=123&external_user_id=TjMxskYIXe9LRDfaNGZeQmalMCs HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:43 UTC	988	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0decbc05935-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:43 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:43 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cLtPu4DAAmen3v%2F0E8jIRPdC%2FEReyHLvMk8y3Ia4RQN%2FQ%2BjLWAJY%2BGtgPezXAjVKxaMX2xplFMC37Anl1kxg1cLf9gAEMfb5I6AAOkIDTciVVF2PlgSUBtoCCHM9yjNzZmhjjwFMwOBYDg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.4	50427	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	704	OUT	GET /event.png?impid=f6401e7fd4004956be533ce8a493d3fa&akipv6=&dup=&eoid=1000 HTTP/1.1 Host: tpsc-ue1.doubleverify.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:43 UTC	157	IN	HTTP/1.1 204 No Content Date: Fri, 29 Mar 2024 00:41:43 GMT Connection: close Expires: 2024-03-28T00:41:43 Pragma: no-cache Cache-Control: max-age=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.4	50368	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	666	OUT	GET /sadbundle/473513299895995753/images/disc_panel.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/473513299895995753/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:43 UTC	820	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 5026 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Wed, 27 Mar 2024 23:32:33 GMT Expires: Thu, 27 Mar 2025 23:32:33 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/png Age: 90550 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:43 UTC	432	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 04 b0 04 03 00 00 00 d5 8f 29 3a 00 00 00 30 50 4c 54 45 00 00 00 c0 c0 c0 f0 f0 f0 e0 e0 e0 d0 d0 d0 b0 b0 b0 49 49 49 9f 9f 9f 13 13 13 6c 6c 6c 25 25 25 8f 8f 8f 37 37 37 5b 5b 5b 7d 7d 7d ff ff ff 1a fd 04 f0 00 00 00 0f 74 52 4e 53 e6 f8 fd fc fa f7 ed f5 e8 f0 e9 f3 eb ee f2 08 a9 31 f0 00 00 13 12 49 44 41 54 78 da ec 9c c9 6f 23 45 14 87 7f 49 9c b6 e3 35 ac 62 09 2a c7 01 11 40 c2 66 60 04 88 c5 21 ec 12 60 13 84 c4 72 88 11 48 5c 40 46 80 14 24 10 31 61 39 20 a4 18 72 00 4e 31 88 e5 46 0c ff 80 1b 84 38 92 20 b8 c7 12 07 04 97 a4 bc 25 ce d6 bc 57 ee 26 76 6c 3c 84 19 07 08 f5 c9 33 53 55 dd ef 55 d7 37 72 a7 ba e7 69 a0 d1 68 34 1a 8d 46 a3 d1 68 34 1a 8d 46 a3 d1 68 34 1a 8d 46 Data Ascii: PNGIHDRX):0PLTEIIIlll%%%777[[[}}}tRNS1IDATxo#EI5b*@f`!`rH\@F$1a9 rN1F8 %W&vl<3SUU7rih4Fh4Fh4F
2024-03-29 00:41:43 UTC	1252	IN	Data Raw: 64 bd dd 2c 0b 6f d4 1d 59 43 d5 3d 68 ba 6c 1d be 83 b7 e2 c8 72 8d 8f 41 d3 45 96 00 12 8e ac e5 e7 0a 29 68 fe 7c 07 3f 9d c1 a4 23 ab 90 5a 4e 42 f3 e7 cf 86 8b 79 bf 74 64 8d c1 a5 ef f0 ed 6f 1d 78 63 d5 78 eb f0 7a 45 d4 b8 7b 16 10 d8 c3 90 be c3 b7 bf cf 52 1b 2b f5 3e cb 33 25 53 dc b5 80 be 2d 78 2e 85 46 a3 d1 68 34 1a 8d 46 a3 d1 68 34 1a 8d 46 a3 d1 68 34 1a 8d 46 a3 d1 9c 02 5d ce fc 97 31 32 b1 b7 d0 81 37 ad 1c 88 be f5 be 75 34 78 16 87 23 34 8c d3 c2 58 41 3b 81 14 fe 1a 02 3d 20 70 ef 2d f7 02 5f 5b 8f a1 95 c2 dd 19 47 d6 a9 a7 77 6f f4 40 16 4d 7c 1a 49 05 7a 81 5b 66 e0 a5 22 89 cc 81 c9 32 f8 eb b2 5c 15 34 f0 98 c7 5a 96 f7 e1 9b 46 30 58 47 21 7f 70 b2 43 c8 9a b7 32 ce 5a 8e b5 ac a1 54 ec 7b ae ea 9a 9f 38 0d 59 69 91 fa 5f c8 Data Ascii: d,oYC=hlrAE)h\|?#ZNBytdoxcxzE{R+>3%S-x.Fh4Fh4Fh4F]127u4x#4XA;= p-_[Gwo@M\|Iz[f"2\4ZF0XG!pC2ZT{8Yi_
2024-03-29 00:41:43 UTC	1252	IN	Data Raw: 88 b3 77 69 6a 77 43 56 ba 0a 67 eb 10 0e 4a f7 0e 6f 1d 4c da 69 d4 b0 6a 6f 1d 6c 59 03 e3 38 81 c9 0c a5 5c 1d 85 6f 87 ae 47 00 14 d3 4b 59 ea ad 83 2d 2b 7d 32 62 cb 2a 8c 46 6c 59 7c 3c a7 64 15 ee 8c f3 ca fd d6 1d 51 de 94 d6 11 2d f2 d6 8c 56 13 28 89 2b e1 aa e6 d3 f2 76 69 94 1e 4c 38 b2 9c b6 c4 da 68 49 6d 4a cd 3f 64 f9 2a 53 71 78 ac 2c d8 f8 16 d2 97 9d db 90 35 5f 67 59 25 da 94 fa 2a 0f 49 bf f5 70 34 f5 f1 e5 f1 ac c1 5b 61 67 53 aa 64 05 d5 a6 f4 ce a8 89 f9 3d 78 23 74 3d 02 a0 98 5e ca 52 ef b3 6c 59 43 91 77 6d 59 83 e5 1f 6c 59 ea 21 45 c9 72 97 97 95 05 7e f0 50 8f 3b cf 9b 40 44 7d 91 17 2a 26 bc 89 d8 50 f4 22 89 05 39 ef c8 72 da b2 e9 71 c7 91 85 d9 5b 04 90 c8 81 58 8e 61 28 7e 41 43 96 6b 0b ce e3 ce ec cd 12 4f 58 e7 c3 9f Data Ascii: wijwCVgJoLijolY8\oGKY-+}2bFlY\|<dQ-V(+viL8hImJ?dSqx,5_gY%Ip4[agSd=x#t=^RlYCwmYlY!Er~P;@D}&P"9rq[Xa(~ACkOX
2024-03-29 00:41:43 UTC	1252	IN	Data Raw: 0b be 24 64 8c 34 ac 08 58 77 03 2c 73 3d f8 6b 0d cf ea 3b 6b 8a 45 9a 34 0e 60 f5 b7 f9 ce 62 8d 2c 2c f7 0f 9d fd ce d2 b6 ef b2 d0 a9 6e 7c c1 a3 67 a4 0e 1d 4a 42 c6 58 5e f3 b0 12 1b 78 95 3b 74 d8 5b fb ec 0f 1d 7e bb 1e 4a dc 8f 95 b1 87 15 0e 1d be f0 9c 13 75 0b de ed 61 c5 8f 38 74 08 1a c7 c0 a1 c4 f1 58 cd df 16 37 f5 8e 80 c5 63 60 b1 86 c1 62 94 75 b6 e8 32 89 c9 db 6d 41 69 64 5a 16 1a 44 94 1c 61 a1 67 3c 8e 86 de b8 1f ec 70 50 5a 12 32 c6 d3 2b 1e 96 fb 5f 44 dc 41 e9 8b 3d 43 a5 15 93 a7 39 28 f5 ae 87 d4 c7 2b 06 6b cb 19 3b 28 dd c9 73 2e 01 59 f0 3d 0f ab be 9d 83 d2 a0 71 24 42 c9 8a c9 35 c0 5a 35 75 fa 87 f6 c9 0d 5c e5 31 b0 58 c3 60 31 ca 3a 2f 8e 6e 9d 70 d9 c9 db 6d 41 69 f4 ab 2c 34 88 28 39 c2 42 cf c0 33 bf e5 4e 77 8e b9 Data Ascii: $d4Xw,s=k;kE4`b,,n\|gJBX^x;t[~Jua8tX7c`bu2mAidZDag<pPZ2+_DA=C9(+k;(s.Y=q$B5Z5u\1X`1:/npmAi,4(9B3Nw
2024-03-29 00:41:43 UTC	838	IN	Data Raw: a1 8e f8 83 52 60 ed 93 4c 48 a6 83 08 a6 08 b0 4c c6 f8 22 31 90 4c 25 c2 60 99 3a 1c 8f f5 c7 63 92 eb 14 42 06 b6 89 d4 57 5f 33 a4 d7 db 2b 63 18 23 22 c0 ef 21 c0 a2 a1 89 c1 72 4a 08 b3 98 67 89 ec 92 5e 27 f9 c3 42 a1 60 23 d6 8e 03 f5 dc ec 90 b2 56 0d 6f 70 a3 fd 23 9c ee 58 a3 0e 27 66 d8 e9 0e 1d 44 fc e9 0e 46 ce d6 fb 13 ae 07 9d 1b 00 16 11 06 8b d3 1d 55 de a8 52 95 e8 14 42 06 b6 89 f4 31 49 e9 ab ec e2 74 c7 02 fc 1e 02 2c 1a 9a 18 2c a7 84 30 8b 79 96 e8 76 69 bd 4e d4 0b d5 56 cc 70 9f b6 19 75 54 5b 95 77 f5 e0 7f c7 de 4e cc d8 98 c8 18 0b 06 3b 63 fe 5d b9 16 89 3d 57 ed c4 8c 4a f5 f2 a9 85 a7 d4 41 d1 29 24 cf 22 f1 bf aa 57 9d ca 18 74 0a c9 b1 48 ec 2d 0f a4 83 4e 22 85 8c 51 54 51 45 15 55 d4 ff 5b 97 52 b7 c4 8a fa 77 6b fe 0b Data Ascii: R`LHL"1L%`:cBW_3+c#"!rJg^'B`#Vop#X'fDFURB1It,,0yviNVpuT[wN;c]=WJA)$"WtH-N"QTQEU[Rwk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.4	50408	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	1641	OUT	GET /cksync.html?cs=1&vsid=3546744890180387000V10&type=pub&refUrl=&vid=16728938013546744890180387000V10&axid_e=&ovsid=6D366468-71AF-422B-99AB-138A6DAB94F7 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-dtm=AAABzNBJmlEeqwMiMonlAAAAAAA~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1
2024-03-29 00:41:43 UTC	694	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1;Expires=Mon, 13 May 2024 00:41:43 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:43 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:43 GMT Connection: close
2024-03-29 00:41:43 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-03-29 00:41:43 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.4	50428	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	3017	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:45E09433ABCF443988615F414991A294&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; PugT=1711672902
2024-03-29 00:41:43 UTC	318	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:43 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.4	50422	44.219.90.173	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	659	OUT	GET /map/c=14701/tp=MTAI/tpid=6D366468-71AF-422B-99AB-138A6DAB94F7/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:43 UTC	458	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.8.225 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://bcp.crwdcntrl.net/map/ct=y/c=14701/tp=MTAI/tpid=6D366468-71AF-422B-99AB-138A6DAB94F7/gdpr=0/gdpr_consent= Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.4	50424	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	2927	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; PugT=1711672902
2024-03-29 00:41:43 UTC	773	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_632=23041-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23047-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23234-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23361-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:43 GMT; path=/ Set-Cookie: PugT=1711672903; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:43 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.4	50426	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	2976	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAB5ELz2agAJAN9eVxrAAAAAAA&expiration=1711759302&nuid=6D366468-71AF-422B-99AB-138A6DAB94F7&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; PugT=1711672902
2024-03-29 00:41:43 UTC	708	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:42 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22713-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22715-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&23519-AAAB5ELz2agAJAN9eVxrAAAAAAA; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 27-Jun-2024 00:41:42 GMT; path=/ Set-Cookie: PugT=1711672902; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:42 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.4	50442	34.232.211.121	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	1024	OUT	GET /qmap?c=1389&tp=STSC&tpid=316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553%26partner_url%3Dhttps%253A%252F%252Fr.casalemedia.com%252Frum%253Fcm_dsp_id%253D64%2526external_user_id%253D316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:43 UTC	815	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.54.22 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://sync.crwdcntrl.net/qmap?c=1389&tp=STSC&tpid=316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553%26partner_url%3Dhttps%253A%252F%252Fr.casalemedia.com%252Frum%253Fcm_dsp_id%253D64%2526external_user_id%253D316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553%2526gdpr%253D0%2526gdpr_consent%253D&ct=y Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.4	50440	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	848	OUT	GET /crum?cm_dsp_id=133&external_user_id=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&pi=index&gpdr=&gdpr_consent=&us_privacy=1YNN&user_id=ZgYOPsAoJI0AAAi4ADlhawAA%261617 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:43 UTC	982	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0dfede70798-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:43 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:43 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=73GkNBLqcwTRWypp8Nh1G2acqsLY2YfzPnBL3%2FRiP8X7Hd4o88IPfztv8ki5Imz19fe3JGYbH6HWmdtUzFoap47j6DdGlMt1f6ScBn9W5O6Xp1fnExBnzuue1VIBJVLv5cccMXbz%2Bco2Tw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.4	50435	52.54.57.187	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	817	OUT	GET /ping_match.gif?st=bidswitch&rurl=%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D79%26user_id%3D_wfivefivec_%26expires%3D30%26ssp%3Dliveintent%26bsw_param%3Dca57c23d-569f-46f3-a577-3e6f6bd561b5 HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=JcUsekky1RQ0jp5; matchpubmatic=5
2024-03-29 00:41:43 UTC	764	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Fri, 29 Mar 2024 00:41:43 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://x.bidswitch.net/sync?dsp_id=79&user_id=JcUsekky1RQ0jp5&expires=30&ssp=liveintent&bsw_param=ca57c23d-569f-46f3-a577-3e6f6bd561b5 Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-0f57f68aff6e2ea95@us-east-1e@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=JcUsekky1RQ0jp5; Domain=.w55c.net; Expires=Tue, 29 Apr 2025 00:41:43 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchbidswitch=5; Domain=.w55c.net; Expires=Sun, 28 Apr 2024 00:41:43 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.4	50434	107.22.223.168	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	735	OUT	GET /s/53233?bidder_id=183658&bidder_uuid=2329556626294787983&us_privacy=1YNN HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=Cg8KBQgMENEXCgYI0gEQxxc; lidid=07571c18-3f04-4602-a656-288806fb242c
2024-03-29 00:41:43 UTC	594	IN	HTTP/1.1 303 See Other Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Length: 0 Connection: close Location: https://sync.mathtag.com/sync/img?mt_exid=36&07571c18-3f04-4602-a656-288806fb242c&us_privacy=1YNN Set-Cookie: _li_ss=ChYKBQgMENEXCgYI0gEQxxcKBQgGEMcX; Max-Age=2592000; Expires=Sun, 28 Apr 2024 00:41:43 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=07571c18-3f04-4602-a656-288806fb242c; Max-Age=63072000; Expires=Sun, 29 Mar 2026 00:41:43 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.4	50430	35.211.178.172	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	1046	OUT	GET /sync?ssp=criteo&custom_data=QvBDl19kJTJGckVvTHZaWVA3cjR5aUxhTGd5YVFKJTJCRUY3QzdERExOOWxNZnF1a3ZWaFhQWHk5NUZGYWdyUVNod3J5YmtSciUyQjZPNEJvUFJUcEhudXdOb2kzSkU2SVRqQ211amI3SFNPb3dCUm1ZekZkRzl6dE1ZeVh3N1ViMGxTUnhQYnBHakdSVUYydUVsb3djWkNYNlpIY3E4Tm9DT1A0YkswMTBJU25XVmxtMyUyQjAzMkY5JTJCS0lVQUZxdk5aajFPT2syVWdq&gdpr=&gdpr_consent=&us_privacy=&cr_user_id=k-_3LhZ7-eRGn6I81sgKP8Ckgx5iZKVs0K2f5C1Q HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1711672899; tuuid=ca57c23d-569f-46f3-a577-3e6f6bd561b5; tuuid_lu=1711672902
2024-03-29 00:41:43 UTC	781	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //pixel.tapad.com/idsync/ex/receive?partner_id=3205&partner_device_id=ca57c23d-569f-46f3-a577-3e6f6bd561b5&partner_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D437%26ssp%3Dcriteo%26user_id%3D Set-Cookie: custom_data=QvBDl19kJTJGckVvTHZaWVA3cjR5aUxhTGd5YVFKJTJCRUY3QzdERExOOWxNZnF1a3ZWaFhQWHk5NUZGYWdyUVNod3J5YmtSciUyQjZPNEJvUFJUcEhudXdOb2kzSkU2SVRqQ211amI3SFNPb3dCUm1ZekZkRzl6dE1ZeVh3N1ViMGxTUnhQYnBHakdSVUYydUVsb3djWkNYNlpIY3E4Tm9DT1A0YkswMTBJU25XVmxtMyUyQjAzMkY5JTJCS0lVQUZxdk5aajFPT2syVWdq; path=/; expires=Fri, 29-Mar-2024 00:46:43 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.4	50444	207.65.37.182	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	2779	OUT	GET /AdServer/SPug?partnerID=156078&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; PugT=1711672902
2024-03-29 00:41:43 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:43 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1711672903; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:43 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.4	50429	69.194.240.13	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	784	OUT	GET /usersync/turn/2998597795311294745?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005%22%2C%22zdxidn%22%3A%222069.88%22%2C%22nxtrdr%22%3Afalse%7D
2024-03-29 00:41:43 UTC	733	IN	HTTP/1.1 302 Found date: Fri, 29 Mar 2024 00:41:44 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Sat, 29 Mar 2025 00:41:44 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005?redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3D56551%26ovsid%3DRX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005 connection: close
2024-03-29 00:41:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.4	50438	38.98.69.175	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	604	OUT	GET /sn.ashx?&gdpr=0&gdpr_consent= HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:43 UTC	720	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R33646_1131CD426_A4CB9467&r=https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" Set-Cookie: mxpim=R33646_1131CD426_A4CB9467.1.000000000000000066060E47; domain=mxptint.net; expires=Sun, 29-Mar-2026 00:41:43 GMT; path=/; secure; SameSite=None Date: Fri, 29 Mar 2024 00:41:42 GMT Connection: close Content-Length: 302 Strict-Transport-Security: max-age=-394677703; includeSubDomains
2024-03-29 00:41:43 UTC	302	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 6a 63 30 4e 43 5a 30 62 44 30 78 4e 54 63 32 4f 44 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 52 33 33 36 34 36 5f 31 31 33 31 43 44 34 32 36 5f 41 34 43 42 39 34 36 37 26 61 6d 70 3b 72 3d 68 74 74 70 73 3a 2f 2f 70 6d 70 2e 6d 78 70 74 69 6e 74 2e 6e 65 74 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R33646_1131CD426_A4CB9467&r=https://pmp.mxptint.net

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.4	50417	195.5.165.20	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	708	OUT	GET /cookiesync?gdpr=0&gdpr_consent= HTTP/1.1 Host: core.iprom.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:43 UTC	236	IN	HTTP/1.1 200 OK Vary: Accept-Encoding X-adserver-worker: ragnarok-9446aa31c255@version_1.6.7 Connection: close X-server-arch: v2 Content-Type: image/gif Content-Length: 43 X-core-time: 0ms Date: Fri, 29 Mar 2024 00:41:43 GMT
2024-03-29 00:41:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.4	50439	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	1330	OUT	GET /cksync.php?cs=1&type=57926&ovsid=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&tc=1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1
2024-03-29 00:41:44 UTC	686	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1;Expires=Mon, 13 May 2024 00:41:43 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:43 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:43 GMT Connection: close
2024-03-29 00:41:44 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:44 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.4	50441	69.194.240.13	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	784	OUT	GET /usersync/turn/2752936218472274298?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005%22%2C%22zdxidn%22%3A%222069.88%22%2C%22nxtrdr%22%3Afalse%7D
2024-03-29 00:41:43 UTC	733	IN	HTTP/1.1 302 Found date: Fri, 29 Mar 2024 00:41:43 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Sat, 29 Mar 2025 00:41:43 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005?redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3D56551%26ovsid%3DRX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005 connection: close
2024-03-29 00:41:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.4	50419	23.88.86.2	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	814	OUT	GET /sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0NDQmdGw9MjAxNjA=&piggybackCookie=$UID HTTP/1.1 Host: matching.truffle.bid Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:43 UTC	150	IN	HTTP/1.1 204 No Content Server: nginx/1.23.1 Date: Fri, 29 Mar 2024 00:41:43 GMT Connection: close Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.4	50451	18.238.55.58	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	718	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:43 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 46b3f244fe2a22dff3a717bf9da34d86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: _okeebA1Jgh6jM0NK1OYhtWYj4Oeb1oMJXykJP0FnKr9TRJDBMwqbw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.4	50455	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	760	OUT	GET /crum?cm_dsp_id=111&external_user_id=568962836176703241&expiration=1712882503 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:44 UTC	988	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0e1cb9b37ff-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:43 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:43 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Abe3p8OaWwUaByOUfcdrtcc0C1y68ZS%2F9XNH8KEgNYJeO0LAwIt%2BjI3et53chYBJ7sYQM0kQGNi%2BwJLZ2wLjCip%2B1DioSRd84ROFcDQU6OeCxJ2mj2gVEJAzmYCOCSEPv%2F0WMnTAvf2zOg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.4	50443	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	1174	OUT	GET /cksync.php?cs=1&type=58280&ovsid=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1
2024-03-29 00:41:44 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1;Expires=Wed, 25 Sep 2024 00:41:44 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:44 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:44 GMT Connection: close
2024-03-29 00:41:44 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:44 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.4	50446	104.18.24.173	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	919	OUT	GET /z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=arnoeUNZaiMMAmemDnPOPhbQSJSPaQPZdq4oWgs1aY
2024-03-29 00:41:44 UTC	815	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:44 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=anntXLoZdUQdR2Hp9uswmMmF8bZdypqKZd2j5DNtWSfWygyCGeBLTqsmQFUHPW0jlAZdg6Zc72MtuEhXV7C2a7XTfJHGZcooyZd; path=/; domain=.tribalfusion.com; expires=Thu, 27-Jun-2024 00:41:44 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=anntXLoZdUQdR2Hp9uswmMmF8bZdypqKZd2j5DNtWSfWygyCGeBLTqsmQFUHPW0jlAZdg6Zc72MtuEhXV7C2a7XTfJHGZcooyZd; path=/; domain=.tribalfusion.com; expires=Thu, 27-Jun-2024 00:41:44 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86bbd0e1de1d20d1-IAD alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.4	50449	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	2888	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=568962836176703241 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; PugT=1711672902
2024-03-29 00:41:44 UTC	643	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-568962836176703241&KRTB&23263-568962836176703241&KRTB&23481-568962836176703241; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:43 GMT; path=/ Set-Cookie: PugT=1711672903; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:43 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.4	50448	35.236.220.17	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	873	OUT	GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=45E09433ABCF443988615F414991A294
2024-03-29 00:41:44 UTC	723	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 29 Mar 2024 00:41:44 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:45E09433ABCF443988615F414991A294&gdpr=0&gdpr_consent= Expires: Thu, 28 Mar 2024 00:41:44 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-03-29 00:41:44 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.4	50452	34.111.113.62	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	789	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1711672894631; TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069; TapAd_3WAY_SYNCS=1!2136
2024-03-29 00:41:44 UTC	1101	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:44 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711672894631;Expires=Tue, 28 May 2024 00:41:44 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069;Expires=Tue, 28 May 2024 00:41:44 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!2136;Expires=Tue, 28 May 2024 00:41:44 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:44 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.4	50454	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	3120	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU3090482eba0842c0a6adc621a2f48ab4 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; SPugT=1711672899; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; KRTBCOOKIE_188=3189-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553&KRTB&23418-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553; PugT=1711672903
2024-03-29 00:41:44 UTC	695	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1323=23480-OPU3090482eba0842c0a6adc621a2f48ab4&KRTB&23485-OPU3090482eba0842c0a6adc621a2f48ab4&KRTB&23575-OPU3090482eba0842c0a6adc621a2f48ab4; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 12-Apr-2024 00:41:43 GMT; path=/ Set-Cookie: PugT=1711672903; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:43 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.4	50456	44.219.90.173	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	659	OUT	GET /map/c=14701/tp=MTAI/tpid=6D366468-71AF-422B-99AB-138A6DAB94F7/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:44 UTC	459	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:44 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.61.187 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://bcp.crwdcntrl.net/map/ct=y/c=14701/tp=MTAI/tpid=6D366468-71AF-422B-99AB-138A6DAB94F7/gdpr=0/gdpr_consent= Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.4	50445	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	1518	OUT	GET /cksync.php?cs=1&vsid=3546744890180387000V10&type=dtm&refUrl=&vid=16729006893546744890180387000V10&ovsid=AAAMjXTITz3kSQNVDnwtAAAAAAA&axid_e=&expiration=1711759302&nuid={{AXID}}&gpp_sid=-1&gpp=DBAA&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1
2024-03-29 00:41:44 UTC	670	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1;Expires=Wed, 25 Sep 2024 00:41:44 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:44 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:44 GMT Connection: close
2024-03-29 00:41:44 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:44 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.4	50457	172.253.63.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	3116	OUT	GET /pcs/view?xai=AKAOjsvdEyCMha1EgGA-oMXI6iXVqeXerKqHh7L9CM-EmzMPYg0dkA1rWyWqq2iv6U8M0NS4tnJqkTtwGQgLau33oqv6S8TWrB9ClDKSBilRHnU5Zy8_EcPM4pfcJaiepsjKHAHGm7LDSRIc8qPvyDzeVhpkiTc0F8tzVgLM8rIGYzLRA66kzf1pg-uUIaYh-1h9xp58TdN91a0_zVp85LBIr4si2UXATVceecfzkIc68hV9KqeV7E2XfxFS-s5oexYAbTrv96dsaZfCHOmx3-ktmCBBVscoRg6rkliRgA0_IeBZxnM0vjhEZM1I_n5n1qxjVsBfsIsw9VwQz8jFnBGfSXcFyfxcyZ_LciSm8r2mlpnRPX2F-97iSz88jeWZEwsrz8X_7KnRpIeTVma_LntjyL5BkNPtsj4TKQHdc1jdzVtshMVfbBb3iuM7PhWmXID2tGY6f8tW_05uzXLvTRHQE2CPWw0uvNkFOmHjJD-2VBtNFElxoAxPkUDqQ-OQyZm_oEmM1LGnzadaQatNLa9ZMZa9yoghIWzRTxpYRppbQ4SPTqeTnoJp4K0NvgdrubU0J-77m3q3KaYodp-Zv80l_nm3uSYqQh4-q2y1n6AUtOr4mgbhntncZ3zst3_5JfA0t9CaWHp6CVA82DuluX3O_sR3Y61oWb2JHE-oYznpdp8ryLcpIiOBAW8Nh8Y6l9MpivlPtjqUv_AtLrwzLxQxQesZpjQvgHtTe7RpblnjsK0se4-Iqw0GlFsZtqvnDYcjIWMNKT3DDK9I92CSwWovdzkGdjh1xG07U_eQCa4p1UvLvB8Tbul0nUxTeINoFzjDOkj43L9cFrIwTSrp59maV1b-N15CZjjKf4Jo3r3yNyLXCSZppTQk6c8ODQLWzOuLUSFO_YFnQbIyoMukooYgqaHh3hL14Qxz2e5YJjkj5BjjCZurCYkCjJZcqCSXx7Czmot6FmUpWh8Kv5KYm3guv2RWYs0utIeXehlipnm7sz1KMSxG1Wb6_zpBRz7sacRREXVq2a-dxptS_-HZND91EyzRU6559yS4hht49WXjCc0DnzIWDPgAgtl88LMLT2JGpG-gndyc9-nLn6D1L5BI3clmJxdKdhooZcnKwyGAOAIYRf413G5yD8oNk40pTR1ps_N2FIDs-HFBqGkWmeA1svEhZlmnqktS3G7S9QrBBAO_I5Q9Us9f1-qZAhKqQYSQhwjVK_zeIrn242W1M7dgi79mu0pXK2QYfoxaDryBu-2oLTlzRR-kwsQ0D1dwyzqdsCk9IsbW9yfsILT7V72DyS-QFkmWLs1S9t1dOMKct-B8Pk3G_akstjtGiT-mPrfNxhpcR4PZKmbycyuVOUgFSlsU7VVRHNlqCl-hNfWvjuhk6ZuLu1_uj7YOXZO1faFOWzjyplrXb_MxT4RwLeZywEr5Tv6KbSyNJJlNAXHOzxins3fGKYPmh16KvKM144O-UV89YSyHBWUGCwQnG_1R&sai=AMfl-YQYjcAqWSD84XojUqontl4RSIrVprfYKa8wLO0wTNMQpyWmIm-MVZC-QWjcQyODnARkujd6HcAaLHzR7VZu3UY0WY0Uu65vBrqAInlduL0JchP77FIa1iCnhX_2SqpUKd6hzrucbeqjWVvGGDEkslaRWX_0x_3pNHugusTLznDcj_stOHUG0CxVfJxniUdCH3C4IoK4I69_biWOtBOrOcMVbw4&sig=Cg0ArKJSzAER363Y5OLJEAE&uach_m=%5BUACH%5D&pr=13:ZgYOPAAAAAA82sLIIxTNCSKTH3jb2L6duZ5lxw&cry=1&crd=aHR0cHM6Ly9jaGV2cm9sZXQuY29tLGh0dHBzOi8vYWdrbi5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5619&vt=11&dtpt=4114&dett=3&cstd=1495&cisv=r20240327.93139&vwbs=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: event-source=trigger Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlaJk6bHByEIRBO0irO6IoozSM4-tSRZhT2IlYufwWUI_XHABPzon6zqXxim80; APC=AfxxVi7JxYIYbMX27B2vewpU13WV8PTDneLxWQzURDLa0C2HmfqVBQ; ar_debug=1
2024-03-29 00:41:44 UTC	1625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x64983baeaf07a1970000000000000000","13":"0x384eacc73c10d9330000000000000000","14":"0x3d9166c0cde1a3670000000000000000","15":"0xcd75166f47f11e5a0000000000000000"},"debug_key":"16929464106125469118","debug_reporting":true,"destination":["https://chevrolet.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["9842510","10171443","10227236","10447536","10282874","10572791","10253637","10208144","10209116","10531420"],"21":[],"8":["3924042"]},"priority":"0","source_event_id":"4458345884892563439"} X-Content-Type-Options: nosniff Date: Fri, 29 Mar 2024 00:41:44 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 28-Apr-2024 00:41:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Fri, 29 Mar 2024 00:41:44 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.4	50453	35.211.178.172	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	1044	OUT	GET /sync?ssp=criteo&custom_data=gbp70V9NUXF0OUZvQk9QTkhjNGRpNFZSUWJVbGVockNINkhIRmZwd25zbVFEblRlSElnJTJCVzhZbUY1JTJGOW9oQmU0U1VvWWhkcFVvT2NRa0RaY2V5MlVCRyUyQllQNCUyRmV3RXFENGZLRXpnOFRUa0NpeGJpN3BTMWxKdWtLTDVONHZYYk1Ld0pZZWdmTGw3TnNvWTVuRVo4QjNoNEcxOWZqbUh1dlczaFNGeVNSMEFkZEdkUVhCQlZ0c2M4dUhGUWszSEJNSU94MQ&gdpr=&gdpr_consent=&us_privacy=&cr_user_id=k-dxvO9AvpZmDKomHOA1EJPqcyucc7gat3t7SeBw HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1711672899; tuuid=ca57c23d-569f-46f3-a577-3e6f6bd561b5; tuuid_lu=1711672902
2024-03-29 00:41:44 UTC	779	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 29 Mar 2024 00:41:44 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //pixel.tapad.com/idsync/ex/receive?partner_id=3205&partner_device_id=ca57c23d-569f-46f3-a577-3e6f6bd561b5&partner_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D437%26ssp%3Dcriteo%26user_id%3D Set-Cookie: custom_data=gbp70V9NUXF0OUZvQk9QTkhjNGRpNFZSUWJVbGVockNINkhIRmZwd25zbVFEblRlSElnJTJCVzhZbUY1JTJGOW9oQmU0U1VvWWhkcFVvT2NRa0RaY2V5MlVCRyUyQllQNCUyRmV3RXFENGZLRXpnOFRUa0NpeGJpN3BTMWxKdWtLTDVONHZYYk1Ld0pZZWdmTGw3TnNvWTVuRVo4QjNoNEcxOWZqbUh1dlczaFNGeVNSMEFkZEdkUVhCQlZ0c2M4dUhGUWszSEJNSU94MQ; path=/; expires=Fri, 29-Mar-2024 00:46:44 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.4	50461	35.244.154.8	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	656	OUT	GET /712188.gif?partner_uid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:44 UTC	502	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://pippio.com/api/sync?pid=5324&_=2 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: pxrc=CMicmLAGEgUI6EcQAA==; Path=/; Domain=rlcdn.com; Expires=Tue, 28 May 2024 00:41:44 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 29 Mar 2024 00:41:44 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.4	50462	44.219.90.173	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	685	OUT	GET /map/ct=y/c=14701/tp=MTAI/tpid=6D366468-71AF-422B-99AB-138A6DAB94F7/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2024-03-29 00:41:44 UTC	692	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:44 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.1.77 Set-Cookie: _cc_dc=0;Path=/;Domain=crwdcntrl.net;Expires=Tue, 24-Dec-2024 00:12:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=d8cab0c14b874ae9dd7e20695ff4df37;Path=/;Domain=crwdcntrl.net;Expires=Tue, 24-Dec-2024 00:12:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Thu, 01-Jan-1970 02:01:00 GMT;Max-Age=0;SameSite=None;Secure Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-03-29 00:41:44 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.4	50463	35.244.154.8	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:43 UTC	759	OUT	GET /1000.gif?memo=CPy7KxIwCiwIARCFpQoaJDZEMzY2NDY4LTcxQUYtNDIyQi05OUFCLTEzOEE2REFCOTRGNxAAGg0Ix5yYsAYSBQjoBxAAQgBKAA HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=7VmlZz6wFj6WrGlm6W6SylVkAuYPzdxJJZMauvwerxE=; pxrc=CAA=
2024-03-29 00:41:44 UTC	751	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://pippio.com/api/sync?pid=5324&it=1&iv=01d67172b6321a9be5434649807640c5554914ec12b1a200d4f3a71075748432791426b5417dce21&_=2 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=tduhgd6Dif+WrGlm6W6SylVkAuYPzdxJJZMauvwerxE=; Path=/; Domain=rlcdn.com; Expires=Sat, 29 Mar 2025 00:41:44 GMT; Secure; SameSite=None Set-Cookie: pxrc=CMicmLAGEgUI6AcQABIFCOhHEAA=; Path=/; Domain=rlcdn.com; Expires=Tue, 28 May 2024 00:41:44 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 29 Mar 2024 00:41:44 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.4	50464	34.232.211.121	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	1050	OUT	GET /qmap?c=1389&tp=STSC&tpid=316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553%26partner_url%3Dhttps%253A%252F%252Fr.casalemedia.com%252Frum%253Fcm_dsp_id%253D64%2526external_user_id%253D316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553%2526gdpr%253D0%2526gdpr_consent%253D&ct=y HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2024-03-29 00:41:44 UTC	562	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:44 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.7.224 Location: https://pixel.tapad.com/idsync/ex/push?partner_id=2499&partner_device_id=316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553&partner_url=https%3A%2F%2Fr.casalemedia.com%2Frum%3Fcm_dsp_id%3D64%26external_user_id%3D316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553%26gdpr%3D0%26gdpr_consent%3D Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.4	50465	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	3555	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R33646_1131CD426_A4CB9467&r=https://pmp.mxptint.net/sn.ashx?ak=1 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; KRTBCOOKIE_188=3189-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553&KRTB&23418-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553; KRTBCOOKIE_22=14911-3836530392682421061&KRTB&23150-3836530392682421061&KRTB&23527-3836530392682421061; KRTBCOOKIE_632=23041-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23047-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23234-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23361-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY; KRTBCOOKIE_32=11175-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22713-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22715-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&23519-AAAB5ELz2agAJAN9eVxrAAAAAAA; PugT=1711672902; SPugT=1711672903
2024-03-29 00:41:44 UTC	657	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 29 Mar 2024 00:41:43 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_52=22772-R33646_1131CD426_A4CB9467&KRTB&23092-R33646_1131CD426_A4CB9467; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:43 GMT; path=/ Set-Cookie: PugT=1711672903; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:43 GMT; path=/ Location: https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.4	50460	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	807	OUT	POST /bsevent.gif?impid=a088deb529ba4c1899d301c788f6fede&flavor=1&gdpr=&gdpr_consent=&tgdur=1530&tuveims=150&tuveems=954&eoid=1&ttfurm=3909 HTTP/1.1 Host: rtbc-ue1.doubleverify.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:44 UTC	340	IN	HTTP/1.1 204 No Content Date: Fri, 29 Mar 2024 00:41:44 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com Access-Control-Allow-Credentials: true Expires: 2024-03-28T00:41:44 Pragma: no-cache Cache-Control: max-age=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.4	50458	35.211.178.172	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	781	OUT	GET /sync?dsp_id=79&user_id=JcUsekky1RQ0jp5&expires=30&ssp=liveintent&bsw_param=ca57c23d-569f-46f3-a577-3e6f6bd561b5 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1711672899; tuuid=ca57c23d-569f-46f3-a577-3e6f6bd561b5; tuuid_lu=1711672902
2024-03-29 00:41:44 UTC	514	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 29 Mar 2024 00:41:44 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //i.liadm.com/s/52164?bidder_id=5298&licd=&bidder_uuid=ca57c23d-569f-46f3-a577-3e6f6bd561b5 Set-Cookie: licd=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.4	50459	216.200.232.249	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	707	OUT	GET /sync/img?mt_exid=36&07571c18-3f04-4602-a656-288806fb242c&us_privacy=1YNN HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=ce6f6606-0e44-4300-9f76-592e7ae20814
2024-03-29 00:41:44 UTC	369	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:44 GMT Content-Type: image/gif Content-Length: 43 Connection: close Access-Control-Allow-Origin: * Server: MT3 1549 cea2cde master ord ord-pixel-x5 config_version:"2427" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Expires: Fri, 29 Mar 2024 00:41:43 GMT
2024-03-29 00:41:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.4	50447	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	1348	OUT	GET /cksync.php?cs=1&type=mn2&ovsid=3546744950180300000V10&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1
2024-03-29 00:41:44 UTC	665	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-mn2=3546744950180300000V10~~1;Expires=Wed, 25 Sep 2024 00:41:44 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:44 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:44 GMT Connection: close
2024-03-29 00:41:44 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:44 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.4	50467	34.111.113.62	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	856	OUT	GET /idsync/ex/receive?partner_id=3205&partner_device_id=ca57c23d-569f-46f3-a577-3e6f6bd561b5&partner_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D437%26ssp%3Dcriteo%26user_id%3D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1711672894631; TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069; TapAd_3WAY_SYNCS=1!2136
2024-03-29 00:41:44 UTC	1401	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:44 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711672894631;Expires=Tue, 28 May 2024 00:41:44 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069;Expires=Tue, 28 May 2024 00:41:44 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!2136;Expires=Tue, 28 May 2024 00:41:44 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://secure.adnxs.com/getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3D55bb0499-3b94-4610-88d6-811dcbabb069%252Chttps%25253A%25252F%25252Fx.bidswitch.net%25252Fsync%25253Fdsp_id%25253D437%252526ssp%25253Dcriteo%252526user_id%25253D%252C Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.4	50466	69.194.240.13	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	759	OUT	GET /csync/RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005?redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3D56551%26ovsid%3DRX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:44 UTC	577	IN	HTTP/1.1 302 Found date: Fri, 29 Mar 2024 00:41:45 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005%22%7D; path=/; expires=Sat, 29 Mar 2025 00:41:45 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://hb.yahoo.net/cksync.php?cs=1&type=56551&ovsid=RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005 etag: RX9d21a42c059949e7b7d6902789d2d8da005 connection: close
2024-03-29 00:41:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.4	50470	107.22.223.168	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	749	OUT	GET /s/52164?bidder_id=5298&licd=&bidder_uuid=ca57c23d-569f-46f3-a577-3e6f6bd561b5 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=ChYKBQgMENEXCgYI0gEQxxcKBQgGEMcX; lidid=07571c18-3f04-4602-a656-288806fb242c
2024-03-29 00:41:44 UTC	610	IN	HTTP/1.1 303 See Other Date: Fri, 29 Mar 2024 00:41:44 GMT Content-Length: 0 Connection: close Location: https://i6.liadm.com/s/52164?bidder_id=5298&licd=&bidder_uuid=ca57c23d-569f-46f3-a577-3e6f6bd561b5 Set-Cookie: _li_ss=CiEKBQgMENEXCgYI0gEQxxcKBQgGEMcXCgkI_____wcQ0Rc; Max-Age=2592000; Expires=Sun, 28 Apr 2024 00:41:44 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=07571c18-3f04-4602-a656-288806fb242c; Max-Age=63072000; Expires=Sun, 29 Mar 2026 00:41:44 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.4	50469	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	3905	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:45E09433ABCF443988615F414991A294&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; KRTBCOOKIE_188=3189-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553&KRTB&23418-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553; KRTBCOOKIE_22=14911-3836530392682421061&KRTB&23150-3836530392682421061&KRTB&23527-3836530392682421061; KRTBCOOKIE_632=23041-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23047-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23234-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23361-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY; KRTBCOOKIE_32=11175-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22713-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22715-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&23519-AAAB5ELz2agAJAN9eVxrAAAAAAA; SPugT=1711672903; KRTBCOOKIE_391=22924-568962836176703241&KRTB&23263-568962836176703241&KRTB&23481-568962836176703241; PugT=1711672903; KRTBCOOKIE_1323=23480-OPU3090482eba0842c0a6adc621a2f48ab4&KRTB&23485-OPU3090482eba0842c0a6adc621a2f48ab4&KRTB&23575-OPU3090482eba0842c0a6adc621a2f48ab4
2024-03-29 00:41:44 UTC	318	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:43 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:44 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.4	50472	35.190.90.30	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	532	OUT	GET /t/v2/sync?tagid=V2_2739&src.visitorId=CAESELOW-bAw-t_N6FeT1fJfGXo&google_cver=1 HTTP/1.1 Host: odr.mookie1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id=10599221728013791818; mdata=1\|10599221728013791818\|1711672898035; ov=77e82fce471901823e343a703f27757b
2024-03-29 00:41:44 UTC	884	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:44 GMT Server: Apache P3P: CP="NON DSP COR NID CURa PSAa PSDa OUR STP UNI COM NAV STA LOC OTC",policyref="/w3c/p3p.xml" X-Application-Context: application Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: id=10599221728013791818; Domain=.mookie1.com; Expires=Mon, 28-Apr-2025 00:41:44 GMT; Path=/; SameSite=None; Secure Set-Cookie: mdata=1\|10599221728013791818\|1711672898035; Domain=.mookie1.com; Expires=Mon, 28-Apr-2025 00:41:44 GMT; Path=/; SameSite=None; Secure Set-Cookie: ov=77e82fce471901823e343a703f27757b; Domain=.mookie1.com; Expires=Mon, 28-Apr-2025 00:41:44 GMT; Path=/; SameSite=None; Secure Content-Type: image/gif;charset=UTF-8 Content-Length: 43 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.4	50471	44.219.90.173	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	685	OUT	GET /map/ct=y/c=14701/tp=MTAI/tpid=6D366468-71AF-422B-99AB-138A6DAB94F7/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2024-03-29 00:41:44 UTC	313	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:44 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.6.77 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-03-29 00:41:44 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.4	50468	69.20.43.192	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	502	OUT	GET /cs?partnerId=59&partnerUserId=CAESEJTzVPhxsNbxAo83M2QShqc&google_cver=1 HTTP/1.1 Host: cs.lkqd.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lkqdid=MbDvmo68Jr4; lkqdidts=1711672898; sr59=1\|CAESEJTzVPhxsNbxAo83M2QShqc\|1711672899
2024-03-29 00:41:44 UTC	523	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:44 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: sr59=1\|CAESEJTzVPhxsNbxAo83M2QShqc\|1711672904; Max-Age=31536000; Domain=.lkqd.net; Secure; SameSite=None Access-Control-Max-Age: 0 Cache-Control: max-age=0 Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: Content-Type Access-Control-Expose-Headers: Content-Type, Content-Disposition Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: *
2024-03-29 00:41:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.4	50487	69.194.240.13	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	759	OUT	GET /csync/RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005?redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3D56551%26ovsid%3DRX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:44 UTC	577	IN	HTTP/1.1 302 Found date: Fri, 29 Mar 2024 00:41:45 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005%22%7D; path=/; expires=Sat, 29 Mar 2025 00:41:45 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://hb.yahoo.net/cksync.php?cs=1&type=56551&ovsid=RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005 etag: RX9d21a42c059949e7b7d6902789d2d8da005 connection: close
2024-03-29 00:41:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.4	50478	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	480	OUT	GET /rum?cm_dsp_id=88&external_user_id=ZgYOPgAB7vmzSgAj&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:44 UTC	986	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:44 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0e6cddc2d26-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:44 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:44 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WzTSpkZgoaET6t3rKJNdf4tA2bzljO6d8bOeM7jsEpmTORQrS4nEINr4cYSMYyTQqlP79NqVKjM19I7eUP59Oc6o5fUd%2FScAV6J%2FEwhDJnV2VoVOhWLWRs%2FxCge9m3A1hiTlPFgkMAS%2FBA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.4	50485	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	1765	OUT	POST /p?s=2023538075&t=1711672903969&_I=&_AO=0&_NOL=0&etag=performance&etrg=backgroundPost&outcm=performance&usergenf=0&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&test=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=2vl5n89j0c3hk&pd=unknown&pt=home&A_utm=%7B%22GAM_TOP_RIGHT_BRSTIME%22%3A4794%2C%22GAM_TOP_RIGHT_FTIME%22%3A9643%2C%22GAM_TOP_RIGHT_RTIME%22%3A20532%7D HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:45 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:44 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.4	50495	68.67.178.10	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	1045	OUT	GET /getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3D55bb0499-3b94-4610-88d6-811dcbabb069%252Chttps%25253A%25252F%25252Fx.bidswitch.net%25252Fsync%25253Fdsp_id%25253D437%252526ssp%25253Dcriteo%252526user_id%25253D%252C HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=JdhWkazzA7-l-SJBnb9vWXLWZRZHRTHbCkah-EW3O2ECAhxSYsqS4OFO_2Ig6DeQZPtzrEcTco9BU0aHgalK869BAW6WsG83Dwoyx1UwJrs.; uuid2=5423405387794830934
2024-03-29 00:41:44 UTC	1611	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 29 Mar 2024 00:41:44 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://pixel.tapad.com/idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=5423405387794830934&pt=55bb0499-3b94-4610-88d6-811dcbabb069%2Chttps%253A%252F%252Fx.bidswitch.net%252Fsync%253Fdsp_id%253D437%2526ssp%253Dcriteo%2526user_id%253D%2C AN-X-Request-Uuid: 25bd040f-7fd9-45fa-8095-d55dd85704e2 Set-Cookie: XANDR_PANID=JdhWkazzA7-l-SJBnb9vWXLWZRZHRTHbCkah-EW3O2ECAhxSYsqS4OFO_2Ig6DeQZPtzrEcTco9BU0aHgalK869BAW6WsG83Dwoyx1UwJrs.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 27-Jun-2024 00:41:44 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 17-Mar-2034 00:41:44 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=5423405387794830934; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 27-Jun-2024 00:41:44 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.43; 102.165.48.43; 634.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.4	50480	34.111.113.62	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	955	OUT	GET /idsync/ex/push?partner_id=2499&partner_device_id=316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553&partner_url=https%3A%2F%2Fr.casalemedia.com%2Frum%3Fcm_dsp_id%3D64%26external_user_id%3D316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1711672894631; TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069; TapAd_3WAY_SYNCS=1!2136
2024-03-29 00:41:44 UTC	1221	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:44 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711672894631;Expires=Tue, 28 May 2024 00:41:44 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069;Expires=Tue, 28 May 2024 00:41:44 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!2136;Expires=Tue, 28 May 2024 00:41:44 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://r.casalemedia.com/rum?cm_dsp_id=64&external_user_id=316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553&gdpr=0&gdpr_consent= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.4	50489	107.178.254.65	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	591	OUT	GET /api/sync?pid=5324&_=2 HTTP/1.1 Host: pippio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:44 UTC	795	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: did=NBisE02It2jNb3EM; Path=/; Domain=pippio.com; Expires=Sat, 29 Mar 2025 00:41:44 GMT; Secure; SameSite=None Set-Cookie: didts=1711672904; Path=/; Domain=pippio.com; Expires=Sat, 29 Mar 2025 00:41:44 GMT; Secure; SameSite=None Set-Cookie: nnls=; Path=/; Domain=pippio.com; Expires=Tue, 28 May 2024 00:41:44 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=pippio.com; Expires=Tue, 28 May 2024 00:41:44 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 29 Mar 2024 00:41:44 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.4	50488	107.178.254.65	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	680	OUT	GET /api/sync?pid=5324&it=1&iv=01d67172b6321a9be5434649807640c5554914ec12b1a200d4f3a71075748432791426b5417dce21&_=2 HTTP/1.1 Host: pippio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:45 UTC	959	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://px.ads.linkedin.com/db_sync?pid=10339&puuid=01d67172b6321a9be5434649807640c5554914ec12b1a200d4f3a71075748432791426b5417dce21&rand=03273941 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: did=3g4X3oFoVbkcoWmc; Path=/; Domain=pippio.com; Expires=Sat, 29 Mar 2025 00:41:45 GMT; Secure; SameSite=None Set-Cookie: didts=1711672905; Path=/; Domain=pippio.com; Expires=Sat, 29 Mar 2025 00:41:45 GMT; Secure; SameSite=None Set-Cookie: nnls=; Path=/; Domain=pippio.com; Expires=Tue, 28 May 2024 00:41:45 GMT; Secure; SameSite=None Set-Cookie: pxrc=CMmcmLAGEgYIgr0rEAA=; Path=/; Domain=pippio.com; Expires=Tue, 28 May 2024 00:41:45 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.4	50503	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:44 UTC	361	OUT	GET /simgad/6285427163810943659 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:45 UTC	822	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 68094 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 28 Mar 2024 19:27:43 GMT Expires: Fri, 28 Mar 2025 19:27:43 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 13 Jun 2023 20:56:49 GMT Content-Type: image/jpeg Age: 18842 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:45 UTC	430	IN	Data Raw: ff d8 ff e1 15 6f 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 93 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 35 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 33 3a 30 36 3a 31 33 20 31 31 3a 32 31 3a 33 33 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 01 2c a0 03 00 04 00 00 00 01 00 00 02 58 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: oExifMM*bj(1!r2i''Adobe Photoshop 24.5 (Macintosh)2023:06:13 11:21:33,X"
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 a0 00 50 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 05 ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 Data Ascii: P"?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: f4 f7 50 6a 18 8f 37 fa ad 61 dc 5b ee 2e 70 f7 3e 98 f6 7a 2c 77 b3 d4 fc c7 ff 00 84 5d 6f 55 e8 b7 57 d1 5f 7e 53 40 f4 eb 6b db 59 01 c6 36 4f ad ed dd b5 ab 13 a6 3e 96 0a f7 b2 22 aa dc c9 e0 d6 5a 27 64 fb 7d b9 0e b7 d4 fe 5a 82 53 23 5e df 8b 62 10 07 eb ff 00 35 bf 85 5e 37 d5 ba 99 5b b7 df 93 90 41 2e 63 75 71 8f a2 d7 bb db ed fe ba eb ba 06 50 e9 b6 b3 36 ff 00 d2 5f 65 4e 65 b5 02 00 6e e7 0b 1b 16 0d db bd ad 6a e6 3e d9 92 e2 2b a6 5f 53 c8 68 2d 68 30 78 67 d3 ff 00 06 df f0 9b 7f 31 37 52 cc 7e 28 03 7c de f0 0e e0 36 7f 20 3b 68 f8 26 e0 12 94 b4 f9 8e e5 7f 30 63 18 88 de 83 68 bd a7 59 ff 00 18 58 d8 94 be 8c 5a 1d 66 71 11 b4 b8 7a 75 cf e7 5c f6 1d fb ff 00 e0 19 ef ff 00 89 5e 4a fc 81 8c c3 43 db b4 35 ee f4 cb a4 6a fd 5e cf 54 Data Ascii: Pj7a[.p>z,w]oUW_~S@kY6O>"Z'd}ZS#^b5^7[A.cuqP6_eNenj>+_Sh-h0xg17R~(\|6 ;h&0chYXZfqzu\^JC5j^T
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 44 9a 1e 4b a0 40 ab 75 30 a8 73 08 35 d3 6d 0e 69 da 7d 2b db 63 4b 8f f2 49 5a 15 e1 f4 ea 69 b2 fb 04 be f6 b8 b5 85 a5 ad 1b 77 d4 f7 06 b7 db ea 7a ac f7 ff 00 e0 4b 16 9c cb 69 66 d7 56 2e ed b8 c0 23 f7 9b f4 1c ba 2a 7a 07 53 cc c1 c2 c8 7b ea c5 c1 75 27 d0 71 71 7b c8 b0 db 94 e7 d9 4b 3f 3b d5 7f a4 ef e6 fd 1f d0 ff 00 c6 28 0c 27 19 6b a5 f6 3b b6 06 48 18 8d 2e bb 8d 9f ff d4 e9 e8 70 fb 3d 3a ff 00 82 af fe a1 aa 37 d4 c7 d7 e9 ba ba ed aa 67 63 db 20 1f ec fd 15 93 4f 5e e9 22 8a 9b fb 4b 19 a4 56 c0 47 ad 5c 82 1a d1 fb c9 ff 00 6e f4 ce dd 57 1b fe de af ff 00 24 a2 30 9d fc a7 ec 66 b1 dd d3 6e 2e 33 f1 46 23 f1 ab b3 1c 6a 29 78 f5 18 0f f2 7d 5d cb 3f 33 a2 d3 e9 be ac 7c 7b 58 c8 f6 d6 db 05 95 4f f2 b0 b3 5b 75 2d 6f fc 5a 88 eb dd Data Ascii: DK@u0s5mi}+cKIZiwzKifV.#*zS{u'qq{K?;('k;H.p=:7gc O^"KVG\nW$0fn.3F#j)x}]?3\|{XO[u-oZ
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 5c a1 5d 75 55 79 bc a2 4b 4e ef ab 5d 72 8c 7b 72 6d c4 73 6a c7 60 7d de e6 17 30 18 fe 72 90 ff 00 59 af 63 5f 5d 97 55 e9 fa b4 53 6d 57 5d fa 2b 6b 59 8a 51 20 76 36 b5 ff d6 f3 bc 3c fc bc 1b 1d 66 2d 86 a7 3d bb 1c 40 06 5b b9 b6 8d 1e 1c df 6d b5 55 6b 3f d1 db 5d 76 31 11 dd 63 a9 bb 09 f8 0e c8 73 b1 5f cd 26 08 fa 46 ef 67 b7 75 7b ac 77 e9 3d 3f e7 3f c2 2a 69 2d ae 11 bd 30 b7 87 5b ea a3 d3 8c 97 fe 8b d1 f4 e6 0e df b3 b6 ca 71 43 64 7f 80 ab 22 e6 33 fe 31 12 bf ac 7d 6e a6 53 5b 32 de 19 8c 41 a4 43 4e d0 2b fb 2f a6 37 37 f9 97 63 fe 8e ca 3f 99 b7 fc 23 15 0a 69 bb 22 e6 51 43 1d 6d d6 38 36 ba d8 0b 9c e7 1f a2 c6 31 be e7 39 74 1f f8 de 7d 74 ff 00 ca bb 3f cf ab ff 00 4a a6 4b da 8f cd c2 3c d3 ab 96 de b9 d5 1b 90 cc 9f 58 3e ea d9 Data Ascii: \]uUyKN]r{rmsj`}0rYc_]USmW]+kYQ v6<f-=@[mUk?]v1cs_&Fgu{w=??*i-0[qCd"31}nS[2ACN+/77c?#i"QCm8619t}t?JK<X>
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: fa 4f d9 bf a6 63 d9 95 f6 3c 0b fa 5f a3 88 72 7e d9 8b 69 04 34 d1 5d bb ad d4 b9 9b b6 6d 0d 73 7d 9f 98 f5 49 11 00 76 94 be d5 5f 82 92 49 25 2a 1f ff d9 ff ed 1e 30 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 cd cf fa 7d a8 c7 be 09 05 70 76 ae af 05 c3 4e 38 42 49 4d 04 3a 00 00 00 00 00 f9 00 00 00 10 00 00 00 01 00 00 00 00 00 0b 70 72 69 6e 74 4f 75 74 70 75 74 00 00 00 05 00 00 00 00 50 73 74 53 62 6f 6f 6c 01 00 00 00 00 49 6e 74 65 65 6e 75 6d 00 00 00 00 49 6e 74 65 00 00 00 00 43 6c 72 6d 00 00 00 0f 70 72 69 6e 74 53 69 78 74 65 65 6e 42 69 74 62 6f 6f 6c 00 00 00 00 0b 70 72 69 6e 74 65 72 4e 61 6d 65 54 45 58 54 00 00 00 Data Ascii: Oc<_r~i4]ms}Iv_I%*0Photoshop 3.08BIMZ%G8BIM%}pvN8BIM:printOutputPstSboolInteenumInteClrmprintSixteenBitboolprinterNameTEXT
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 38 42 49 4d 04 00 00 00 00 00 00 02 00 08 38 42 49 4d 04 02 00 00 00 00 00 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 42 49 4d 04 30 00 00 00 00 00 11 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 00 38 42 49 4d 04 2d 00 00 00 00 00 06 00 01 00 00 00 0f 38 42 49 4d 04 08 00 00 00 00 00 15 00 00 00 01 00 00 02 40 00 00 02 40 00 00 00 01 00 00 02 42 00 00 38 42 49 4d 04 44 00 00 00 00 00 19 00 00 00 02 00 00 02 40 00 00 02 40 00 00 00 01 00 00 02 42 00 00 4a ff ff 00 38 42 49 4d 04 1e 00 00 Data Ascii: 8BIM8BIM"8BIM08BIM-8BIM@@B8BIMD@@BJ8BIM
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 01 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 a0 00 50 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 05 ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 Data Ascii: AdobedP"?3
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 79 ab 1b a8 b5 c5 af c6 0e d1 fe 16 e2 9b 0f e9 1b fb d5 ef 7d 8c 4a 03 42 7f 95 23 29 d4 0f ec f5 3b 72 a1 91 fd 1e ff 00 f8 ab 3f ea 1c a6 41 06 1c 08 23 b1 d0 a1 df fd 1e ef f8 ab 3f ea 1c 9c 37 63 7f ff d1 ca fa ff 00 d5 f2 33 6a e9 3b 9c d2 cc 7a 5e 06 cd 06 e7 36 ae 75 77 fa 25 ce e7 f4 f7 50 6a 18 8f 37 fa ad 61 dc 5b ee 2e 70 f7 3e 98 f6 7a 2c 77 b3 d4 fc c7 ff 00 84 5d 6f 55 e8 b7 57 d1 5f 7e 53 40 f4 eb 6b db 59 01 c6 36 4f ad ed dd b5 ab 13 a6 3e 96 0a f7 b2 22 aa dc c9 e0 d6 5a 27 64 fb 7d b9 0e b7 d4 fe 5a 82 53 23 5e df 8b 62 10 07 eb ff 00 35 bf 85 5e 37 d5 ba 99 5b b7 df 93 90 41 2e 63 75 71 8f a2 d7 bb db ed fe ba eb ba 06 50 e9 b6 b3 36 ff 00 d2 5f 65 4e 65 b5 02 00 6e e7 0b 1b 16 0d db bd ad 6a e6 3e d9 92 e2 2b a6 5f 53 c8 68 2d 68 30 Data Ascii: y}JB#);r?A#?7c3j;z^6uw%Pj7a[.p>z,w]oUW_~S@kY6O>"Z'd}ZS#^b5^7[A.cuqP6_eNenj>+_Sh-h0
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: f8 b2 d6 07 1f a4 f2 5e ef 29 ff 00 7a 96 1a 80 7b ac 90 a2 41 67 95 69 a4 0d bf 4c 34 31 9e 47 f3 9d fd 95 5f 13 1d cf 26 df b3 b7 26 8a a1 b6 31 d6 0a c4 bc 38 55 ef df 5b fd ae 6e ff 00 6f fd 71 2c 8a ee b6 d7 59 00 b7 86 fb 87 01 09 ac c8 6b b7 31 ae 6b a0 8d cd 3d 88 87 77 fd d4 cc 82 44 9a 1e 4b a0 40 ab 75 30 a8 73 08 35 d3 6d 0e 69 da 7d 2b db 63 4b 8f f2 49 5a 15 e1 f4 ea 69 b2 fb 04 be f6 b8 b5 85 a5 ad 1b 77 d4 f7 06 b7 db ea 7a ac f7 ff 00 e0 4b 16 9c cb 69 66 d7 56 2e ed b8 c0 23 f7 9b f4 1c ba 2a 7a 07 53 cc c1 c2 c8 7b ea c5 c1 75 27 d0 71 71 7b c8 b0 db 94 e7 d9 4b 3f 3b d5 7f a4 ef e6 fd 1f d0 ff 00 c6 28 0c 27 19 6b a5 f6 3b b6 06 48 18 8d 2e bb 8d 9f ff d4 e9 e8 70 fb 3d 3a ff 00 82 af fe a1 aa 37 d4 c7 d7 e9 ba ba ed aa 67 63 db 20 1f Data Ascii: ^)z{AgiL41G_&&18U[noq,Yk1k=wDK@u0s5mi}+cKIZiwzKifV.#*zS{u'qq{K?;('k;H.p=:7gc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.4	50494	34.111.113.62	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	856	OUT	GET /idsync/ex/receive?partner_id=3205&partner_device_id=ca57c23d-569f-46f3-a577-3e6f6bd561b5&partner_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D437%26ssp%3Dcriteo%26user_id%3D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1711672894631; TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069; TapAd_3WAY_SYNCS=1!2136
2024-03-29 00:41:45 UTC	1401	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:45 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711672894631;Expires=Tue, 28 May 2024 00:41:45 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069;Expires=Tue, 28 May 2024 00:41:45 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!2136;Expires=Tue, 28 May 2024 00:41:45 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://secure.adnxs.com/getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3D55bb0499-3b94-4610-88d6-811dcbabb069%252Chttps%25253A%25252F%25252Fx.bidswitch.net%25252Fsync%25253Fdsp_id%25253D437%252526ssp%25253Dcriteo%252526user_id%25253D%252C Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.4	50496	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	491	OUT	GET /rum?cm_dsp_id=81&gdpr=0&external_user_id=fACR1npTldFnUsSFfwaM1HNUkdJnUpSCeVLXvzrJ HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:45 UTC	986	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0e8dedb8844-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:45 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:45 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JlLS9TgFW4JPO1NM7rvrr%2FBJAUktBBV7QKplNyHXao2acp6DI%2F0vXzwrJ%2BAHbn2GERmJT7ovNMFYvRHD1arzfJAFZYm6GUzTKyu%2FY6h3oW1LmpkZ8eWH7GWHz90HjnC0VJxp38UriWkpQA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.4	50501	35.169.97.227	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	1222	OUT	GET /sync/casale/ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB?gdpr_consent=&us_privacy=1YNN&gdpr=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:45 UTC	550	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.4	50490	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 278 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:45 UTC	278	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 63 68 65 76 72 6f 6c 65 74 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 64 65 62 75 67 63 6f 6e 76 65 72 73 69 6f 6e 64 6f 6d 61 69 6e 31 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 64 65 62 75 67 63 6f 6e 76 65 72 73 69 6f 6e 64 6f 6d 61 69 6e 32 2e 63 6f 6d 22 5d 2c 22 73 6f 75 72 63 65 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 36 39 32 39 34 36 34 31 30 36 31 32 35 34 36 39 31 31 38 22 2c 22 73 6f 75 72 63 65 5f 65 76 65 6e 74 5f 69 64 22 3a 22 34 34 35 38 33 34 35 38 38 34 38 39 32 35 36 33 34 33 39 22 2c 22 73 6f 75 72 63 65 5f 73 69 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 79 61 68 6f 6f 2e 63 6f 6d 22 7d 2c 22 74 Data Ascii: [{"body":{"attribution_destination":["https://chevrolet.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"source_debug_key":"16929464106125469118","source_event_id":"4458345884892563439","source_site":"https://yahoo.com"},"t
2024-03-29 00:41:45 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 29 Mar 2024 00:41:45 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.4	50479	38.98.69.175	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	655	OUT	GET /sn.ashx?ak=1 HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R33646_1131CD426_A4CB9467.1.000000000000000066060E47
2024-03-29 00:41:45 UTC	242	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: image/gif Expires: -1 Date: Fri, 29 Mar 2024 00:41:44 GMT Connection: close Content-Length: 43 Strict-Transport-Security: max-age=-394677705; includeSubDomains
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.4	50530	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	384	OUT	GET /sadbundle/473513299895995753/images/headline1.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:45 UTC	820	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 3429 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 28 Mar 2024 19:33:07 GMT Expires: Fri, 28 Mar 2025 19:33:07 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/png Age: 18518 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:45 UTC	432	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 04 b0 04 03 00 00 00 d5 8f 29 3a 00 00 00 30 50 4c 54 45 00 00 00 fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe 63 de 4d 40 00 00 00 0f 74 52 4e 53 00 bb 77 ee 11 44 dd 99 cc 22 66 88 33 55 aa a3 13 b9 95 00 00 0c d5 49 44 41 54 78 da ec c1 81 00 00 00 00 80 a0 fd a9 17 a9 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 f6 cd 2c b4 99 2a 0c c3 6f db 74 49 da b4 51 51 71 81 c4 b8 2b 98 22 82 b8 e0 44 c4 05 45 8d 4a 50 50 30 a2 20 88 92 78 a7 a2 e4 17 f4 42 44 13 f5 4e 2f 1a Data Ascii: PNGIHDRX):0PLTEcM@tRNSwD"f3UIDATx`,*otIQQq+"DEJPP0 xBDN/
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 7d 49 f1 d7 a1 43 28 b2 8f 2c 52 9f b9 43 a6 31 88 50 46 88 27 07 d5 3a aa b2 42 25 0a b6 00 5c 43 e9 4d 06 1e e5 36 fa b3 ca dc b0 21 4c b3 bf 2c 3e a5 0e 45 d6 30 80 79 e7 57 00 11 36 06 d5 3a aa b2 26 c8 27 b2 ef 52 5c 47 71 5e f6 f9 17 64 0c 1d 16 d9 3e 28 a8 46 75 d8 10 e6 d9 4c 43 41 26 25 42 56 3d 99 bc c0 51 1f c8 2c ef 65 61 70 98 52 c3 fa 83 03 6a 1d 5d 59 1b bc 1c 08 e5 99 c0 34 bd 2a f0 31 7f 47 87 15 c6 46 d3 13 4c f0 37 68 48 68 96 e4 49 dd 44 96 01 4c f1 7d 2e 0f 29 0b f8 4f 65 a5 98 00 f0 35 63 98 e7 96 ec 16 9a f2 23 64 65 54 b2 7e ed 27 0b 25 7d ec 2f b9 3b 1e b2 36 59 d6 d1 cf c9 cf 37 ac ba 05 a7 81 a3 2c 4b 7f 44 40 91 21 36 c7 43 56 9c dd e8 97 18 fb f3 94 22 ac c3 07 eb 78 9b 17 57 81 57 65 29 aa ea 10 c2 a7 e5 9f 3f 03 82 e8 23 6c Data Ascii: }IC(,RC1PF':B%\CM6!L,>E0yW6:&'R\Gq^d>(FuLCA&%BV=Q,eapRj]Y4*1GFL7hHhIDL}.)Oe5c#deT~'%}/;6Y7,KD@!6CV"xWWe)?#l
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: ed f4 fc 8d 4e b2 f5 f9 5d fb cb 9a 65 2b 13 8d c7 4d 2d 13 55 c8 e1 5e f2 3d 6e 8e 4a d6 82 43 81 57 c5 12 35 7f 43 d6 75 dd ff 8c 39 0a 5a 08 ae 3a 04 65 69 fc b2 36 f4 23 f4 cd dc e9 5d 75 b8 dc df 68 58 34 b7 bf ac b0 3c 83 0d 26 64 ad 60 54 ab 72 ec 48 b9 18 11 2f 50 f0 03 fe 89 2c bd e0 74 2a 80 50 71 9f f5 ac c1 b2 52 2c 98 89 5e e0 db 39 b7 1a 68 34 d5 4f 96 5a a2 b9 54 8e 86 ba 96 89 2a 22 c3 18 9d 2c 7c 76 1c c5 a2 e6 3f 92 85 85 77 f2 f7 7c 04 c8 77 74 fd 2b a5 f9 27 cf c5 60 59 25 d6 74 2f d7 f2 87 74 42 e3 94 6a b0 d1 e9 9f fa ca 0a 9d c6 67 cb 42 96 ac 15 8c ea 95 7c e3 51 74 64 59 2c 16 8b c5 62 b1 58 2c 23 66 09 87 03 99 8e aa 99 4c 56 ac 2c 60 40 3a aa 7f 21 d3 40 81 77 4a 06 40 9e 35 b5 b2 55 e9 be 50 70 e2 eb f2 11 26 bd 84 1b ca 38 04 Data Ascii: N]e+M-U^=nJCW5Cu9Z:ei6#]uhX4<&d`TrH/P,tPqR,^9h4OZT",\|v?w\|wt+'`Y%t/tBjgB\|QtdY,bX,#fLV,`@:!@wJ@5UPp&8
2024-03-29 00:41:45 UTC	493	IN	Data Raw: e5 75 a6 b3 d5 c5 78 d7 f5 ed be 4b 34 31 fb 39 12 56 ac c3 a6 64 9b 6e 62 23 42 2e b6 13 68 fa 0d c2 aa 53 9c 83 b0 ce 9e f2 66 d9 56 de cf 74 86 f3 52 ef 7d 5e f7 d1 cc c7 c3 6a ae cb 3d 7c 56 96 f1 69 ee 0e eb a7 b0 e9 88 b0 62 8a 73 18 56 6a 6e 17 51 79 cc 74 86 a6 d4 bb ca 0f 7d 34 27 1f a3 61 a5 f7 d2 ae 98 e7 75 5c 96 8b 3e ac cb 65 3a 24 cf 13 7a 0e da 9f d8 33 b9 ca 87 75 f2 77 e4 22 6f 5f d3 4b fe 4c fc 79 ab c6 55 e2 57 d1 8a d8 1c cf c7 cf ff 79 9b e5 c7 e9 bc b9 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f ec c1 81 00 00 00 00 00 90 ff 6b 23 a8 aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa Data Ascii: uxK419Vdnb#B.hSfVtR}^j=\|VibsVjnQyt}4'au\>e:$z3uw"o_KLyUWy?k#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.4	50475	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	1317	OUT	GET /cksync.php?gpp=DBAA&gpp_sid=-1&cs=1&vsid=3546744890180387000V10&type=idx&refUrl=&vid=16728938013546744890180387000V10&axid_e=&ovsid=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-dtm=AAABzNBJmlEeqwMiMonlAAAAAAA~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1
2024-03-29 00:41:45 UTC	675	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1;Expires=Mon, 13 May 2024 00:41:45 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:45 GMT Connection: close
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:45 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.4	50491	3.228.195.183	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	780	OUT	GET /ct/0_0_0_101960/us/0/1/0/0/0/0/300/600/242/971/0/pixel.gif?v=2_1&ttid=2&d=02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com&r=0.18004592448304146 HTTP/1.1 Host: l.evidon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:45 UTC	231	IN	HTTP/1.1 204 No Content Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 10 Connection: close X-Powered-By: Express ETag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI" Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.4	50518	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	378	OUT	GET /sadbundle/473513299895995753/images/bg1.jpg HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:45 UTC	822	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 43669 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 28 Mar 2024 19:49:56 GMT Expires: Fri, 28 Mar 2025 19:49:56 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/jpeg Age: 17509 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:45 UTC	430	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 1f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 44 39 31 46 41 41 39 43 46 39 43 31 31 45 45 38 31 33 37 46 46 32 37 37 39 37 42 42 46 39 31 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 44 39 31 46 41 41 38 43 46 39 43 31 31 45 45 38 31 33 37 46 46 32 37 37 39 37 42 42 46 39 31 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 30 32 34 20 4d 61 63 69 6e 74 6f 73 68 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 Data Ascii: sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:7D91FAA9CF9C11EE8137FF27797BBF91" xmpMM:InstanceID="xmp.iid:7D91FAA8CF9C11EE8137FF27797BBF91" xmp:CreatorTool="Adobe Photoshop 2024 Macintosh"> <xmpMM:DerivedFrom stRef
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 76 69 65 77 00 00 00 00 00 13 a4 fe 00 14 5f 2e 00 10 cf 14 00 03 ed cc 00 04 13 0b 00 03 5c 9e 00 00 00 01 58 59 5a 20 00 00 00 00 00 4c 09 56 00 50 00 00 00 57 1f e7 6d 65 61 73 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 8f 00 00 00 Data Ascii: - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference Viewing Condition in IEC61966-2.1view_.\XYZ LVPWmeas
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f 93 4f dd 50 27 50 71 50 bb 51 06 51 Data Ascii: 11J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIOOP'PqPQQ
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 00 11 08 02 58 01 2c 03 01 11 00 02 11 01 03 11 01 ff c4 00 f0 00 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 10 00 01 03 03 02 04 05 03 03 01 08 03 00 00 00 00 01 00 11 02 12 03 04 10 21 20 31 13 05 30 41 22 32 14 40 33 15 50 42 23 34 60 70 80 90 24 25 35 06 a0 16 36 11 00 01 02 02 07 06 01 0a 05 03 02 07 01 00 00 00 01 00 02 11 21 10 31 41 51 12 32 03 20 61 71 81 91 22 a1 30 b1 c1 d1 42 52 72 13 33 04 40 50 f0 e1 23 62 82 92 14 34 70 f1 a2 c2 e2 53 83 24 12 00 01 03 03 05 00 00 00 00 00 00 00 00 00 00 00 21 70 a0 11 00 10 60 80 31 41 51 61 13 01 00 02 02 01 03 02 06 02 03 01 01 01 01 00 00 01 00 11 21 31 41 10 51 61 71 81 20 f0 91 a1 b1 c1 30 d1 40 e1 f1 Data Ascii: X,! 10A"2@3PB#4`p$%56!1AQ2 aq"0BRr3@P#b4pS$!p`1AQa!1AQaq 0@
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: f1 be f1 8a ce 55 64 2c ca ea 72 84 21 15 1a ae 85 a0 6a 99 e6 cc 07 4e 6b 8c b5 1e 9e 9f 57 af ab ec 68 c6 bc 72 7b 86 c6 2b cf 5f 95 79 a5 e9 8e f5 a4 9a 6b 3a f4 c7 26 36 d7 6b 99 cb 18 e9 d4 f3 b9 e8 92 8d 65 d6 ba b7 a4 72 e3 3d 76 22 13 2c de 8f 3e b1 e9 3a ab f4 1f 5d 0a 02 48 97 8d 3d f3 62 0c 57 f1 ae 79 e9 88 de ef 9c 37 37 d3 b0 df 59 f2 72 d8 f3 71 5c 6f a9 be a4 c6 5c b5 c9 e8 b9 2f b1 c7 b5 73 e5 dd e8 e0 5b e4 f0 bd d1 8f 1d 3a eb af d0 3d b6 49 08 92 2d e3 93 de 8d a9 1f 9e fa 38 fc 9f 93 ab 37 6d d5 66 7b 76 74 59 e3 65 81 b5 bc 8d 7a 7d 79 6b ac f2 f2 af 77 8f 9e f3 75 ef e7 d7 c8 e9 c7 e9 38 dc fb 78 fa f8 76 f3 91 ef 39 e3 53 cd e9 cb f6 fe fb e1 ef 12 79 fb c7 44 76 67 7b f3 df b9 2e d4 93 f2 ef 57 9f c1 f1 77 cf 4e 86 ba 25 e6 63 a2 Data Ascii: Ud,r!jNkWhr{+_yk:&6ker=v",>:]H=bWy77Yrq\o\/s[:=I-87mf{vtYez}ykwu8xv9SyDvg{.WwN%c
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 44 f2 6d f3 d3 e5 f7 3c 4b 39 33 bd 93 d3 8e 73 35 e3 ad 20 ab 4e b8 e2 ae 55 f4 d3 d6 5e 44 84 9a 94 f5 31 bf 9e d4 ab 2a 5b b3 94 f5 e3 f6 bc 6b c6 36 24 93 64 93 15 e3 38 6b 04 f8 bd 38 65 e7 3a 6c ef 97 13 8a ce 91 c7 25 49 f4 d9 be 25 9e 6d bb 26 6a c6 16 11 f4 b9 bf 3f a9 15 bc 4d 99 9e b4 bf b6 62 f8 c6 c0 66 6c 81 e3 ae 16 66 b8 33 f9 85 d5 56 b1 d1 67 bf 1e 35 71 9d 10 d7 96 ac f5 e4 f3 8e 0b 41 00 d0 ae a8 f4 f3 7c cd cc 53 a2 59 48 af 52 5f db 30 f0 97 61 08 e8 4a 3e 72 85 93 16 7f 31 d6 a8 d6 35 b3 bb 37 8e b9 ac 44 ae 89 6b d9 18 27 2d 55 80 00 1d b9 b5 67 35 64 6f 2c d9 27 a7 2f ed 18 40 88 32 28 c8 f9 cb 51 29 9d 9f 9f db 91 32 ed 5a 47 b9 97 81 a4 58 c7 2f ad 1e 71 cd 53 60 25 00 0e 88 da cc 8c ec 53 5b a6 36 75 cd 7e 89 97 6a 76 47 61 a1 Data Ascii: Dm<K93s5 NU^D1*[k6$d8k8e:l%I%m&j?Mbflf3Vg5qA\|SYHR_0aJ>r157Dk'-Ug5do,'/@2(Q)2ZGX/qS`%S[6u~jvGa
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: ea c5 31 29 8a 6e 01 2d 02 21 90 44 a0 a4 42 73 a3 af 21 ba 26 22 35 38 5c f4 7d 20 99 4c 34 9a a0 1d c2 08 ec 8c b4 0a a5 16 4e 9e ad 1b 47 e0 25 f4 74 34 05 50 e8 82 df b4 c7 6d 88 65 e5 bb 0d 3c e7 26 4e 4a 8e 91 40 22 75 a5 d3 0d 0a f2 f2 4e c8 e8 35 11 dd 80 1b 22 b6 d2 5b 48 14 4c 88 7d 09 d1 83 42 09 bd 57 46 8f ba 0a 52 40 a2 ce 18 27 75 e9 4c 49 1b 69 10 75 f2 d3 64 db a7 d0 e8 48 32 4c 8d 2c b6 54 6f b3 b3 a8 9d b9 2b 84 48 53 a8 47 4d d7 20 bc d6 ea 93 24 46 fa 15 56 c0 20 cd e7 a7 92 1a 03 a6 ef 4e c1 7b 94 e1 49 ab 41 ca 23 72 77 e6 b6 5c 96 cc 54 08 45 45 3f af 5f 34 24 58 e9 1e 72 04 21 a1 75 e5 cd 6d a1 1a 3e b1 a8 2f 28 0d a4 fa 6e 0e ac 54 b7 52 d4 f2 f3 dd f9 23 a8 44 92 4e 80 ad 8a 75 12 11 e7 11 b2 2c 13 ae 6a 2c ec 84 98 03 25 12 89 Data Ascii: 1)n-!DBs!&"58\} L4NG%t4Pme<&NJ@"uN5"[HL}BWFR@'uLIiudH2L,To+HSGM $FV N{IA#rw\TEE?_4$Xr!um>/(nTR#DNu,j,%
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 79 86 03 cc c9 d4 b4 89 02 58 13 21 64 5a eb 63 6c d8 12 ab 3f 52 8d db 61 46 e4 66 b2 7e dc 7d ba 79 f5 63 2b 2a d8 60 d4 db 8c 15 00 28 5a f5 5d 80 ea 49 9b 1f fa 77 57 bb 9e 35 91 91 dc f2 6e a7 08 39 40 07 a0 ac 5c 0b b7 d7 72 c2 18 b7 1c 52 79 15 24 05 c8 c7 06 52 a6 ef dd ed bf d6 2f 91 32 8c ae 14 c9 95 8e 79 3f 6e 3e dd 3c ee 46 94 20 10 2a 54 b4 ef ce 4a 26 e2 17 26 15 48 a9 f7 1b 56 6d 5f ce c8 be 76 54 48 a1 64 05 4a 89 32 96 1f 6a df 3b bc d8 c5 07 32 ed fb 96 c0 5c 89 d8 91 bd e2 4c f0 3d 02 a9 13 80 df 3f ca 30 29 a2 bd 29 d5 92 49 ca fb 71 e5 a7 ee bd 0a 80 41 5f 93 c9 00 eb 90 11 42 62 28 95 01 52 11 09 c0 46 f4 56 3e 26 46 4a c6 c5 b3 62 3d db bb 97 24 ab 1c e3 03 4c c2 96 e2 d8 81 b9 4d db f1 39 17 6c 46 0d 57 6f 9b f7 3f 21 b2 79 15 44 Data Ascii: yX!dZcl?RaFf~}yc+`(Z]IwW5n9@\rRy$R/2y?n><F TJ&&HVm_vTHdJ2j;2\L=?0))IqA_Bb(RFV>&FJb=$LM9lFWo?!yD
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: d5 12 ca 3f c7 a3 e9 5c 5e 64 14 11 e7 6e e5 12 b3 da 8e 44 b2 0d b9 df 9c 0c 14 20 64 6c 53 1b d9 3d b6 e5 b5 72 61 12 9d 3f 0d 9b 94 4a 57 21 10 d5 23 ee b6 5a 77 02 3c b0 2f 0b 19 b1 ff 00 b1 62 28 f7 de dc 54 7b 9e 04 94 6f da 92 74 eb 24 fa 38 c6 82 52 6e d3 1b 5f 2e f1 f5 63 3c af e7 00 72 25 72 74 93 e0 80 e6 d8 88 12 16 8c 18 bd a6 6b d1 ea 5a 8e 3d f0 78 23 7a ec 54 7b 8e 7c 57 e6 73 98 f7 4c a4 7b 86 5a 39 99 45 7c 8c 84 c9 93 26 4f af 5a e2 eb c9 1b 89 f8 99 32 65 0c 7b d3 10 b1 4a e8 5f 9a 86 1c d7 6f c7 b2 30 e5 8b 6d 4b 12 4a e6 15 d3 19 f6 c8 85 2e de 11 ed f7 94 b1 72 22 8c 26 35 74 ea a4 fa b2 a5 50 ba 72 5d 2b a8 63 64 15 f0 72 8a 1d bb 21 47 b5 5e 2b f0 f7 17 e1 ca fc 44 57 e3 2c af c7 58 43 0b 1d 7c 4b 2b e3 40 2b 77 2e db 81 8d c2 8d Data Ascii: ?\^dnD dlS=ra?JW!#Zw</b(T{ot$8Rn_.c<r%rtkZ=x#zT{\|WsL{Z9E\|&OZ2e{J_o0mKJ.r"&5tPr]+cdr!G^+DW,XC\|K+@+w.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.4	50492	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	1461	OUT	GET /cksync.php?cs=1&type=56551&ovsid=RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1
2024-03-29 00:41:45 UTC	686	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-url=RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005~~1;Expires=Wed, 25 Sep 2024 00:41:45 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:45 GMT Connection: close
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:45 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.4	50517	172.64.151.101	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	526	OUT	GET /usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=DBAA&gpp_sid=-1&google_gid=CAESEBlRho78gpmMlRUqfBGx8XY&google_cver=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:45 UTC	990	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0e99dfb9c64-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:45 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:45 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kG8T8ACe53szZA3C5wLqWf49WEe3UR2jZlWurW%2BNfN7AhalFeNN8vLpdXGT3vcipEpSd0%2FJd5GvTuualVzLVYQ0B5yBFUtpI74%2FL9ePvPVdbHO%2FCzO5oCtG0kI6lH68Y0%2Fj%2FPFku96t3kg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.4	50511	142.251.167.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	2561	OUT	GET /pcs/view?xai=AKAOjstwHX522iG5wGpEq0zJeFYulisc6XLfScQneT6JvStPRRy8Hi6oAqCmaZB6WJZskmfQZUS0I8EiLrurHkf5KtVWKV2dntl1JfqL386zfPmjnH13y_pfC74zAZf9mmwn7OgVkgITSHaZYMPuXoHqjLer3ZBBeOflyL2OUlUlOsGCr3XVtlrepYyHnnJm1FtX7u8K6ZKNTFslo6vwVnm9Ok41SjHuqLDLZG4eYk36fN0XdG8RbNpHw2bzl7PZsK8VUOIsnWYOoxnMMoVZUdJMrJdAsOo6y76sTPw_9wVjtRqVpzdMDFVwL2ev-gWHp5z6H9R4O9uDqtSJ-gZ70t5aETMiNJbYava4xo27pQsfqCwc5c_0ziZ_sG55QgJdDdgs28FtnTiU2w-d1-iS2Lz_mR449XgxHoeTDQ5OiBnwifzFgG9CU8ALOX6J02VVGT1L25O6JCjHz0QL6ep3Mea5W9kYVZmGk8kQASyfpE9-ghN_zkDF1ngl9p1K1jb0DVidkV7AWcG2hY3-0QQrk-5SU_NltUpXyRZs3tYyb2E05lw5v-RekFrGsg1ynRCsTk80UZgzVmhJQvbcrxXxfJilBzUe-EmPO5YFF_KJpTnfRcnpYMHZf4zNbensPpPDgTfTzlKxiauRSeOXmqsA4H7TkSJzm1RKtki0gji2KVijqcQ3_JrA6gL53MJUE6fWZ2nNf0_o1-ANVaL8BR31UFbsCZ7XKDbqvykcG9Aia2imrnmKOUUx4eBIG24gMiQq1hObADTbyoEHEdJu-HImVRLeaZKxtY2F3TGHYVsmSHN5aR1Gc9MI12R6AjDIefz2fUj1RrFDWIQahpUNrcxPhBtEwNcwqKsLHET0JO8j-CvScQm9jBk595gK8zpTxhtF7sM6MGxSXbeuLo0U7fOnV84ea0n8d0efDur-KB6vTXA_qoHEc6mvOfw-8AHNUq9AerXzRqxEaO97lDhihAvp_qUtwk7iBFzLZhJ18wH9qpMQsGZiD_r5nh-DmqeuqfaFTeyVShUxainzrn1uMC1Y47me2Z2IFHp1Sm116sKaE8UVUql9zvMGIfUP_R-Zs95Wc9Z2HTVufCLqJJws5MXNPIBCvBxK-dDnI5FKdbSGL0GZ4CWWauHJSxhvp2h4shFjYjJt5jQSD5XyeO61va9HaWBuLTMPBgKZtSQ_IsvNY7g8ZDyvLexQmSXhVgtjaM9i4fsCi1KSIwfrgypqToqi4iXhwWQAx5xzgLCScnBMADiP5dO1afnJWRgm6QigHIPw1k_oqPDMKtM130z56-QZm7Ze5iUY2s6Y7P90vHeruW5nKkHRQ7rcIMlkQ91kPFPv67cIlWRckuefnwIfrcQWBquDnXooZSBmxyjkA0vsiHXJW6ihtjcsw_nlWoKqbQhDyynDiJifdFdN3nEF9a8RZsUQwUkA5gUCVf3bSvcxg4A2CHva0EY6kwMQSocGBzv32Ho0uFla0xgxbaQfD3BfncGqp3b-1QK3Q3QZ_MUz2625O6_oDXIDJTD4UJyFKwGoGg&sai=AMfl-YREyLylDBG7IUUKnudbj-kfqF28S-HTe-R2DGlymntOwHDVVf302UtMKk-f92bHAAa0IDuMeSTj52eOgepRGESO9E37BYZ-iYHz8iFjcWBjHowuWuTXoNnNAkou1WAH-WxtiszqTLn1Hyg5P4sEt_UiMSbTV3m0UmUupqBi-lzwgH4CsRSq3XqR6azAbRz4qPsSXiAFratKAQIbQuluIOVVmw&sig=Cg0ArKJSzGL_hwGFS5VzEAE&uach_m=%5BUACH%5D&pr=13:ZgYOPAAAAAB2m_3QsatYZTYYSiy_qBI09Znk9w&cry=1&crd=aHR0cHM6Ly9mb3JkYmx1ZWFkdmFudGFnZS5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=3&cbvp=1&cstd=0&cisv=r20240327.96706&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlaJk6bHByEIRBO0irO6IoozSM4-tSRZhT2IlYufwWUI_XHABPzon6zqXxim80; ar_debug=1
2024-03-29 00:41:45 UTC	895	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 29 Mar 2024 00:41:45 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.4	50497	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	471	OUT	GET /crum?cm_dsp_id=17&external_user_id=P1GEqyyk_OouTnS49Tqs&puid= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:45 UTC	984	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0e9f84738ac-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:45 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:45 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HRhDGchPEy3OpCUVuK1EIUY9Ux9M%2BNcC23xYaHhEcAcKX1GcncJVl5fqSA1IcM4i5Ff6kL1JVdtqo4GOJkosNSgVE%2Fag6I0p8Qzl817Efq%2F3ylpb0Ic78pKoW4isEp0ApprUfpX0rGWqIg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.4	50520	99.84.208.48	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	599	OUT	GET /pixel/2387/?ct=US&st=&city=0&dma=10&zp=&bw=4&che=729764585&col=31411294,5071708,388507207,581726800,211538221 HTTP/1.1 Host: d.agkn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3Aksj%2ByvaRmHmyAUuIOsoo89ApLpekHFAG; u=C\|0EAgAAAAALZjKxAAAAAAAAQAtAQfoGAIAAQAHAAAAAAHfTF7__x4AAAAAAE1jXAAAAAAXKCZHAAAAAAyb0S0AAAAAIqxyUAA
2024-03-29 00:41:45 UTC	780	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, must-revalidate Date: Fri, 29 Mar 2024 00:41:44 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3Aksj%2ByvaRmHmyAUuIOsoo89ApLpekHFAG;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0EAgAAAAALZjKyQAAAAABAQAtAQfoGAQAAQAHAAAAAAHfTF7__x4AAAAAAE1jXAAAAAAXKCZHAAAAAAyb0S0AAAAAIqxyUAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure X-Cache: Miss from cloudfront Via: 1.1 f8558580f66929e19ed69bba2e85da74.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C1 X-Amz-Cf-Id: KzZJV0RhiYVvdMD9uvrxqqfSA0jACX6TS2UsFYtnn7kY1dlNcgeksA==
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.4	50510	142.251.167.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	2798	OUT	GET /pcs/view?xai=AKAOjstwHX522iG5wGpEq0zJeFYulisc6XLfScQneT6JvStPRRy8Hi6oAqCmaZB6WJZskmfQZUS0I8EiLrurHkf5KtVWKV2dntl1JfqL386zfPmjnH13y_pfC74zAZf9mmwn7OgVkgITSHaZYMPuXoHqjLer3ZBBeOflyL2OUlUlOsGCr3XVtlrepYyHnnJm1FtX7u8K6ZKNTFslo6vwVnm9Ok41SjHuqLDLZG4eYk36fN0XdG8RbNpHw2bzl7PZsK8VUOIsnWYOoxnMMoVZUdJMrJdAsOo6y76sTPw_9wVjtRqVpzdMDFVwL2ev-gWHp5z6H9R4O9uDqtSJ-gZ70t5aETMiNJbYava4xo27pQsfqCwc5c_0ziZ_sG55QgJdDdgs28FtnTiU2w-d1-iS2Lz_mR449XgxHoeTDQ5OiBnwifzFgG9CU8ALOX6J02VVGT1L25O6JCjHz0QL6ep3Mea5W9kYVZmGk8kQASyfpE9-ghN_zkDF1ngl9p1K1jb0DVidkV7AWcG2hY3-0QQrk-5SU_NltUpXyRZs3tYyb2E05lw5v-RekFrGsg1ynRCsTk80UZgzVmhJQvbcrxXxfJilBzUe-EmPO5YFF_KJpTnfRcnpYMHZf4zNbensPpPDgTfTzlKxiauRSeOXmqsA4H7TkSJzm1RKtki0gji2KVijqcQ3_JrA6gL53MJUE6fWZ2nNf0_o1-ANVaL8BR31UFbsCZ7XKDbqvykcG9Aia2imrnmKOUUx4eBIG24gMiQq1hObADTbyoEHEdJu-HImVRLeaZKxtY2F3TGHYVsmSHN5aR1Gc9MI12R6AjDIefz2fUj1RrFDWIQahpUNrcxPhBtEwNcwqKsLHET0JO8j-CvScQm9jBk595gK8zpTxhtF7sM6MGxSXbeuLo0U7fOnV84ea0n8d0efDur-KB6vTXA_qoHEc6mvOfw-8AHNUq9AerXzRqxEaO97lDhihAvp_qUtwk7iBFzLZhJ18wH9qpMQsGZiD_r5nh-DmqeuqfaFTeyVShUxainzrn1uMC1Y47me2Z2IFHp1Sm116sKaE8UVUql9zvMGIfUP_R-Zs95Wc9Z2HTVufCLqJJws5MXNPIBCvBxK-dDnI5FKdbSGL0GZ4CWWauHJSxhvp2h4shFjYjJt5jQSD5XyeO61va9HaWBuLTMPBgKZtSQ_IsvNY7g8ZDyvLexQmSXhVgtjaM9i4fsCi1KSIwfrgypqToqi4iXhwWQAx5xzgLCScnBMADiP5dO1afnJWRgm6QigHIPw1k_oqPDMKtM130z56-QZm7Ze5iUY2s6Y7P90vHeruW5nKkHRQ7rcIMlkQ91kPFPv67cIlWRckuefnwIfrcQWBquDnXooZSBmxyjkA0vsiHXJW6ihtjcsw_nlWoKqbQhDyynDiJifdFdN3nEF9a8RZsUQwUkA5gUCVf3bSvcxg4A2CHva0EY6kwMQSocGBzv32Ho0uFla0xgxbaQfD3BfncGqp3b-1QK3Q3QZ_MUz2625O6_oDXIDJTD4UJyFKwGoGg&sai=AMfl-YREyLylDBG7IUUKnudbj-kfqF28S-HTe-R2DGlymntOwHDVVf302UtMKk-f92bHAAa0IDuMeSTj52eOgepRGESO9E37BYZ-iYHz8iFjcWBjHowuWuTXoNnNAkou1WAH-WxtiszqTLn1Hyg5P4sEt_UiMSbTV3m0UmUupqBi-lzwgH4CsRSq3XqR6azAbRz4qPsSXiAFratKAQIbQuluIOVVmw&sig=Cg0ArKJSzGL_hwGFS5VzEAE&uach_m=%5BUACH%5D&pr=13:ZgYOPAAAAAB2m_3QsatYZTYYSiy_qBI09Znk9w&cry=1&crd=aHR0cHM6Ly9mb3JkYmx1ZWFkdmFudGFnZS5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1177&vt=11&dtpt=1174&dett=2&cstd=0&cisv=r20240327.96706&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlaJk6bHByEIRBO0irO6IoozSM4-tSRZhT2IlYufwWUI_XHABPzon6zqXxim80; ar_debug=1
2024-03-29 00:41:45 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 29 Mar 2024 00:41:45 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.4	50506	69.194.240.13	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	860	OUT	GET /usersync/turn/2752936218472274298?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005%22%2C%22nxtrdr%22%3Afalse%7D
2024-03-29 00:41:45 UTC	313	IN	HTTP/1.1 302 Found date: Fri, 29 Mar 2024 00:41:46 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache location: https://sync.targeting.unrulymedia.com/csync/RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005 connection: close
2024-03-29 00:41:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.4	50514	172.64.149.180	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	428	OUT	GET /ht/htw-pixel.gif?ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: js-sec.indexww.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:45 UTC	483	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close Last-Modified: Tue, 24 Jan 2017 19:36:04 GMT ETag: "da1f1d-2b-546dc3a097100" Cache-Control: public, max-age=14400 Expires: Fri, 29 Mar 2024 04:41:45 GMT Edge-Control: cache-maxage=1h P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" CF-Cache-Status: HIT Age: 781 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86bbd0ea3eed81bb-IAD
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.4	50516	52.20.162.91	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	595	OUT	GET /event?d_src=1233&d_event=imp&d_adv=3971573&d_site=3093372&d_creative=193540874&d_adgroup=578358183&d_placement=383884886&d_campaign=31236918&d_cb=3631931756 HTTP/1.1 Host: ford.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=18302510874207377964223395608090049346; ford=18302510874207377964223395608090049346
2024-03-29 00:41:45 UTC	892	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: BuP/462eQYM= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v057-0eed33ff5.edge-va6.demdex.com 12 ms set-cookie: demdex=18302510874207377964223395608090049346; Max-Age=15552000; Expires=Wed, 25 Sep 2024 00:41:45 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: ford=18302510874207377964223395608090049346; Max-Age=15552000; Expires=Wed, 25 Sep 2024 00:41:45 GMT; Path=/; Domain=.ford.demdex.net; Secure; SameSite=None
2024-03-29 00:41:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.4	50538	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	3657	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=3836530392682421061&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; KRTBCOOKIE_188=3189-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553&KRTB&23418-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553; KRTBCOOKIE_22=14911-3836530392682421061&KRTB&23150-3836530392682421061&KRTB&23527-3836530392682421061; KRTBCOOKIE_632=23041-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23047-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23234-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23361-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY; KRTBCOOKIE_32=11175-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22713-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22715-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&23519-AAAB5ELz2agAJAN9eVxrAAAAAAA; SPugT=1711672903; KRTBCOOKIE_391=22924-568962836176703241&KRTB&23263-568962836176703241&KRTB&23481-568962836176703241; PugT=1711672903; KRTBCOOKIE_1323=23480-OPU3090482eba0842c0a6adc621a2f48ab4&KRTB&23485-OPU3090482eba0842c0a6adc621a2f48ab4&KRTB&23575-OPU3090482eba0842c0a6adc621a2f48ab4; KRTBCOOKIE_52=22772-R33646_1131CD426_A4CB9467&KRTB&23092-R33646_1131CD426_A4CB9467
2024-03-29 00:41:45 UTC	644	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:44 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_22=14911-3836530392682421061&KRTB&23150-3836530392682421061&KRTB&23527-3836530392682421061; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:44 GMT; path=/ Set-Cookie: PugT=1711672904; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:44 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:45 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.4	50504	23.43.243.147	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	6011	OUT	GET /log?logid=kfk&evtid=adplog&itype=YHB&tElp=8183&adt=desktop&cid=8YHBJ3BJ0&ct=WASHINGTON&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=yahoo.com&servname=ssp-serving-yin-6cdd6846-77zvf&svr=285_20_20_ssp&sc=DC&version=4&vh=907&vw=1280&vsid=&vid=00001711672890119017221018037423&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=%5B%7B%22source%22%3A%22liveintent.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22vN_RikZwhoZWxTMpfJBcDcT8RWafL19T6LauHA%22%2C%22atype%22%3A3%7D%5D%7D%2C%7B%22source%22%3A%22rubiconproject.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22LMPI0LLB-19-JSO6%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22liveintent.indexexchange.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%22ZQjYrf.1D0shOWRRRk909QAA%261008%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%2C%7B%22source%22%3A%22pubmatic.com%22%2C%22uids%22%3A%5B%7B%22id%22%3A%228DDE491A-31A6-4A5B-9E11-D4969B43F97B%22%2C%22atype%22%3A3%2C%22ext%22%3A%7B%22provider%22%3A%22liveintent.com%22%7D%7D%5D%7D%5D&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3821649&pubdpa=2&pvid=25307&exid=10025&req_mtype%3C%3E=2%23%230&res_mtype=&pv_adtype=&adtypes=2%7C0&pbasrc=0&mang=0&dpa=2&crid=827382134&g=0&nms=2&ptype=43&supcrid=us_yhp_main_dt_top_right&r_fp%3C%3E=3900443&adj1=0&dpsh_src=1&adj0=0&pst=0&adj2=0&incentive_expense=0&incentive_type=0&discount=0&bdp=1.240000&cpm=1.24&ogbdp=1.240000&cbdp=1.240000&dfpBd=1.24&aogbdp=&true_bdp=1.24&advId=&advNm=&pvAgNm=&pvAgId=&advUrl=chevrolet.com&ba=4022&prspt=headerBid&act=headerBid&mowxReqId=&ckfl=&cs=&iurl=&di=&dt=O&dp=0&dsrc=&dbf=0&epc=1057986&epc2=&epc3=&pbidflr=0.50&bfs=&nbr=0&prvAccId=1057986&pcrid=15328874&size=300x600&req_size=300x600&s=1&snm=success&toconsider=1&mnet_ckfl=&rbr=&ruct=0&ae=0&ftr%3C%3E=&og_bid=0&pcon=&adType=BANNER&gtime=4&htime=-1&stime=-1&ltime=1122&brc=0&brt=1711672892&but=1711672892&bidId=146020580947701411711672892745&mpvid=&aqtime=0&in_lurl=&out_lurl=&loss_id=&abs=&apid=&ybnca_bbid=&binfobid=&bdata=&bId=&cmpid=&cat=&attr=&dtc=&prvReqId=&ybnca_erpm=&exp=&ybnca_gbid=&htps=&patint=&patkey=&fpuReq=&prvApiId=&mp_seg%3C%3E=&pcId=&pvNbr=&pvNbrDtls=&pseat=&rtime=&seat=85&ortbseat=1982032&sbdrid=&ybnca_vbid=&wsip=&pvdTmax=0&td=%7B%7D&dfpadvId=&dfpcmpId=&isEmp=&dfpAdPath=&dfpDiv=sda-LREC-iframe&sz=&srcAgCrid=&srcAgLid=&lbid=&isbckfl=&srvcnm=&sspReq=&csip=&sspReg=&top=572&btm=1172&lft=951&rght=1243&sec=&chnl=&csent=1&zn=e&acid=176264509238088091711672891609&astat=dp&auMxTm=1400&actltime=1409&acwtime=1409&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=2&agid%3C%3E=&asagid=&asbkt=&sr=0&rti=1144&evttyp=1&spost=0.00&sposl=0.00&rme=SFR&ra_sz=&mview=0&apstrat=3&pvid=25052&exid=0&req_mtype%3C%3E=0%23%231%23%232&res_mtype=&pv_adtype=&adtypes=0%7C1%7C2&pbasrc=0&mang=0&dpa=&crid=206512146&g=0&nms=2&ptype=43&supcrid=us_yhp_main_dt_top_center&r_fp%3C%3E=3900443&adj1=0&dpsh_src=1&adj0=0&pst=0&adj2=0&incentive_expense=0&incentive_type=0&discount=0&bdp=2.210000&cpm=2.21&ogbdp=2.210000&cbdp=2.210000&dfpBd=2.21&aogbdp=&true_bdp=2.21&advId=&advNm=&pvAgNm=&pvAgId=11611&advUrl=denturerescue.com&ba=4272&prspt=headerBid&act=headerBid&mowxReqId=&ckfl=&cs=&iurl=&di=&dt=O&dp=0&dsrc=-2&dbf=1&epc=206512146&epc2=&epc3=&pbidflr=0.00&bfs=&nbr=0&prvAccId=206512146&pcrid=695100154993717199&size=970x250&req_size=728x90%7C970x250&s=1&snm=success&toconsider=1&mnet_ckfl=&rbr=&ruct=0&ae=0&ftr%3C%3E=&og_bid=0&pcon=&adType=BANNER&gtime=6&htime=-1&stime=-1&ltime=869&brc=0&brt=1711672892&but=1711672892&bidId=215705401661407401711672892495&mpvid=25052&aqtime=0&in_lurl=&out_lurl=&loss_id=&abs=&apid=&ybnca_bbid=&binfobid=&bdata=&bId=&cmpid=&cat=&attr=&dtc=&prvReqId=&ybnca_erpm=&exp=&ybnca_gbid=&htps=&patint=&patkey=&fpuReq=&prvApiId=&mp_seg%3C%3E=&pcId=&pvNbr=&pvNbrDtls=&pseat=&rtime=&seat=&ortbseat=Index%20Exchange&sbdrid=&ybnca_vbid=&wsip=&pvdTmax=0&td=%7B%7D&dfpadvId=&dfpcmpId=&isEmp=&dfpAdPath=&dfpDiv=sda-MAST-iframe&sz=&srcAgCrid=&srcAgLid=&lbid=&isbckfl=&srvcnm=&sspReq=&csip=&sspReg=&top=84&btm=354&lft=-8.5&rght=1271.5&sec=&chnl=&csent=1&zn=e&acid=244154801216068341711672891614&astat=dp&auMxTm=1400&actltime=1410&acwtime=1410&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=2&agid%3C%3E=&asagid=&asbkt=&sr=0&rti=1140&evttyp=1&spost=0.00&sposl=0.00&rme=SFR&ra_sz=&mview=0&apstrat=3&requrl=https%3A%2F%2Fwww.yahoo.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1
2024-03-29 00:41:45 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Fri, 29 Mar 2024 00:41:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:45 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-29 00:41:45 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.4	50498	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	1209	OUT	GET /cksync.php?cs=1&type=58160&ovsid=LUBXUGUO-1P-87GV&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-dtm=AAABzNBJmlEeqwMiMonlAAAAAAA~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1
2024-03-29 00:41:45 UTC	659	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-mag=LUBXUGUO-1P-87GV~~1;Expires=Sat, 29 Mar 2025 00:41:45 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:45 GMT Connection: close
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:45 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.4	50527	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	384	OUT	GET /sadbundle/473513299895995753/images/headline2.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:45 UTC	820	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 2959 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 28 Mar 2024 19:22:32 GMT Expires: Fri, 28 Mar 2025 19:22:32 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/png Age: 19153 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:45 UTC	432	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 04 b0 04 03 00 00 00 d5 8f 29 3a 00 00 00 30 50 4c 54 45 00 00 00 fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe 63 de 4d 40 00 00 00 0f 74 52 4e 53 00 bb 77 44 ee 66 11 cc 99 22 dd 33 88 aa 55 88 d0 9d d5 00 00 0a ff 49 44 41 54 78 da ec c1 81 00 00 00 00 80 a0 fd a9 17 a9 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 76 ce 2d 74 86 28 8e e3 5f 8b 65 fd dd e3 c5 a5 41 ae a5 c8 fd 16 22 4a 68 29 b9 cb ba c5 8b 7b 29 45 8b f2 6a 27 29 de f0 40 94 5a 8a bc 28 b7 bc 50 48 22 Data Ascii: PNGIHDRX):0PLTEcM@tRNSwDf"3UIDATx`v-t(_eA"Jh){)Ej')@Z(PH"
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 87 e1 31 80 82 57 a1 2a 5e 78 82 23 89 43 be 87 a0 49 58 56 23 7e 45 56 aa 47 8f 1e 03 f8 ca 7b 74 7f 4c d6 80 22 4c 1a b1 78 75 6c 8e 05 75 32 7f ec e1 90 0f 8d 2a f0 80 2e 22 89 43 7e 80 e0 45 3d 59 a6 04 73 a0 be 2c a7 0c 93 71 9c 0a 34 a4 39 10 68 c1 92 8b 54 96 07 8c 2a 52 2c 20 9a 38 7c 50 81 20 f7 f1 af c8 aa b9 56 5f e3 0c f9 02 dc 06 2c 96 d7 a6 e5 7c 63 54 d1 32 aa d7 77 38 5c cc e3 00 92 7c f3 37 64 35 f0 2d 4c b2 45 78 ec e7 01 e0 81 9c 5b 12 fc 68 54 d1 c4 7b 8c 26 0e d5 7c d5 94 6f 95 ac 31 1d 2a ed 5d 00 94 00 68 7c 3e 7d b0 1f 3c f8 2a d9 87 2f 95 2c f1 d8 6d 69 96 00 52 dd f3 5b 7b ab 71 3c 4f 4f 1f 08 51 3b 9f ee e2 0a 59 09 ef 0f f0 34 cb 2d c7 a1 60 e1 8b f0 2c 45 b1 81 25 a3 8a c5 9e c3 68 e2 b0 b9 fc 41 b6 e2 75 b2 3a 85 7f 08 c8 4a Data Ascii: 1W^x#CIXV#~EVG{tL"Lxulu2."C~E=Ys,q49hTR, 8\|P V_,\|cT2w8\\|7d5-LEx[hT{&\|o1]h\|>}<*/,miR[{q<OOQ;Y4-`,E%hAu:J
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: b2 9a 20 0e 24 f3 ac 5c e8 9f 65 25 63 c8 6a c1 4f 7a 09 dd a4 25 cb 19 1d 7c ab 27 ab 11 5f e9 5b d4 75 64 f1 0d da 20 0e 24 58 7c 28 ef 74 76 33 64 35 e7 07 35 5a fe 8a 82 b7 f8 31 59 0d 2c 66 fc b3 b3 0e 9b db 0c 9b 88 13 88 03 fe 4f ff 2c d7 19 b2 5a b3 a4 6e c1 7f 82 46 1b fa 31 59 c8 a9 d4 56 19 f5 b8 d4 66 60 1f ec 40 1c f0 0d 35 e3 4b 43 16 d2 74 55 b2 e1 77 64 ed e1 14 a0 85 78 a8 c3 de a5 ee d2 53 eb 10 07 7c 43 4d 7b 74 33 65 e5 e4 4c f6 42 df 7c 09 87 4e f5 a6 90 b5 88 2a 55 8a dd 9d 4a ba 1f 4f b0 ec 67 89 74 04 15 4d 6f 72 fa 8c 40 58 b5 e9 66 a4 ce c7 a3 85 6f a6 a3 79 86 ac c5 bc fe 25 90 8d 50 e8 b4 56 d6 97 54 e9 6a 7a 4c 08 cc 1e 6e 32 5d c9 04 23 a8 8d f3 24 4b c7 03 61 d5 7d ed ba c6 e4 a3 51 cd e5 21 d4 ca 5a cb f1 7e 68 4a 60 86 4e Data Ascii: $\e%cjOz%\|'_[ud $X\|(tv3d55Z1Y,fO,ZnF1YVf`@5KCtUwdxS\|CM{t3eLB\|N*UJOgtMor@Xfoy%PVTjzLn2]#$Ka}Q!Z~hJ`N
2024-03-29 00:41:45 UTC	23	IN	Data Raw: 00 1e 01 4f b8 06 8d 59 c6 ef 4a 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: OYJIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.4	50474	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	1301	OUT	GET /cksync.php?cs=1&vsid=3546744890180387000V10&type=son&refUrl=&vid=16728938013546744890180387000V10&ovsid=d8bfd039-9f04-449c-875f-e04a2484e308&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-dtm=AAABzNBJmlEeqwMiMonlAAAAAAA~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1
2024-03-29 00:41:45 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1;Expires=Wed, 25 Sep 2024 00:41:45 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:45 GMT Connection: close
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:45 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.4	50534	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	3655	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; KRTBCOOKIE_188=3189-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553&KRTB&23418-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553; KRTBCOOKIE_22=14911-3836530392682421061&KRTB&23150-3836530392682421061&KRTB&23527-3836530392682421061; KRTBCOOKIE_632=23041-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23047-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23234-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23361-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY; KRTBCOOKIE_32=11175-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22713-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22715-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&23519-AAAB5ELz2agAJAN9eVxrAAAAAAA; SPugT=1711672903; KRTBCOOKIE_391=22924-568962836176703241&KRTB&23263-568962836176703241&KRTB&23481-568962836176703241; PugT=1711672903; KRTBCOOKIE_1323=23480-OPU3090482eba0842c0a6adc621a2f48ab4&KRTB&23485-OPU3090482eba0842c0a6adc621a2f48ab4&KRTB&23575-OPU3090482eba0842c0a6adc621a2f48ab4; KRTBCOOKIE_52=22772-R33646_1131CD426_A4CB9467&KRTB&23092-R33646_1131CD426_A4CB9467
2024-03-29 00:41:45 UTC	676	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:44 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_188=3189-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553&KRTB&23418-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 27-Jun-2024 00:41:44 GMT; path=/ Set-Cookie: PugT=1711672904; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:44 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.4	50526	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	523	OUT	GET /rum?cm_dsp_id=39&external_user_id=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&expiration=1714264899&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:45 UTC	984	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0eb381229b6-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:45 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:45 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OE8%2BGc65VghHXvsgg5UeA9%2BsOcNDrpi%2BOAdDREGajmpB9OmO1B30tDqklFtGRZjBLpNkjBywKEhnErx4lZJYLDFH3X0cXyVxhLMOINySZfkNNXuYTAVwTiEslkMFwblGus4SrcuYJl0UtQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.4	50524	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	506	OUT	GET /crum?cm_dsp_id=130&external_user_id=AAFJBk7MDBwAABSliZdkug&expiration=1712882499&us_privacy=1YNN HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:45 UTC	984	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0eb99c73908-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:45 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:45 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3GwB1uxGGNyd4ckbZ51rmu3lVgqhzpzIJ3T85d5OdaPORQsZ5RWHxOViys2eNZuvm3np9%2BSzOO4V9xKjZse0GrZjQVvv4jNa%2BPWx5n5VLODy6XWVIhM9Hl9qTTfUsB7TlQJLAE%2F8xphy7w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.4	50476	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	1213	OUT	GET /cksync.php?cs=1&type=mn&ovsid=3546744950180300000V10&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-dtm=AAABzNBJmlEeqwMiMonlAAAAAAA~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1
2024-03-29 00:41:45 UTC	664	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-mn=3546744950180300000V10~~1;Expires=Wed, 25 Sep 2024 00:41:45 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:45 GMT Connection: close
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:45 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.4	50499	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	1288	OUT	GET /cksync.html?cs=1&vsid=3546744890180387000V10&type=tlt&refUrl=&vid=16728938013546744890180387000V10&ovsid=1910044241478282443237&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1
2024-03-29 00:41:45 UTC	680	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-tlt=1910044241478282443237~~1;Expires=Mon, 13 May 2024 00:41:45 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:45 GMT Connection: close
2024-03-29 00:41:45 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-03-29 00:41:45 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.4	50525	35.169.97.227	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	1166	OUT	GET /sync/casale/ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:45 UTC	550	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.4	50535	52.202.181.167	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	471	OUT	GET /api/v1/dsync/Martin?exid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=10eddb72-cbbb-04d3-58e6-c6dac08ddb68
2024-03-29 00:41:45 UTC	456	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=10eddb72-cbbb-04d3-58e6-c6dac08ddb68; Path=/; Domain=kargo.com; Expires=Sat, 29 Mar 2025 00:41:45 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.4	50477	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	1211	OUT	GET /cksync.php?cs=1&type=apx&ovsid=5423405387794830934&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1
2024-03-29 00:41:45 UTC	662	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-apx=5423405387794830934~~1;Expires=Wed, 26 Jun 2024 00:41:45 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:45 GMT Connection: close
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:45 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.4	50521	52.203.99.111	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	709	OUT	GET /s/52164?bidder_id=5298&licd=&bidder_uuid=ca57c23d-569f-46f3-a577-3e6f6bd561b5 HTTP/1.1 Host: i6.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=07571c18-3f04-4602-a656-288806fb242c
2024-03-29 00:41:45 UTC	226	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.4	50513	172.64.149.180	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	427	OUT	GET /ht/htw-pixel.gif?ZgYOPsAoJI0AAAi4ADlhawAA%261617=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: js-sec.indexww.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:45 UTC	483	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close Last-Modified: Tue, 24 Jan 2017 19:36:04 GMT ETag: "da1f1d-2b-546dc3a097100" Cache-Control: public, max-age=14400 Expires: Fri, 29 Mar 2024 04:41:45 GMT Edge-Control: cache-maxage=1h P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" CF-Cache-Status: HIT Age: 781 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86bbd0ebcc7e07d3-IAD
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.4	50542	172.64.151.101	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	469	OUT	GET /crum?cm_dsp_id=191&external_user_id=08726e86-cf36-54f6-8d6ab380 HTTP/1.1 Host: dsum.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:45 UTC	970	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0eca8153b6c-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:45 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:45 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ApR2UrYcsha4FA2PBbZW0afg2a7BkFD20Z3yHdwtyYFX%2BNRFJ1WmPuRTKwYOwYj9%2F2WsmVsvNP2gQoOMyDWDQICrw37JrxaTKDJwJEjiq7qZnw42KA5S23uc2MAH5u4O4scIuxtz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.4	50529	35.244.159.8	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	480	OUT	GET /w/1.0/sd?id=540245193&val=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=acaeb6da-c35c-4846-acd5-3bb6b6a37bb8\|1711672894
2024-03-29 00:41:45 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.4	50548	142.251.167.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	2756	OUT	GET /pcs/view?xai=AKAOjsvdEyCMha1EgGA-oMXI6iXVqeXerKqHh7L9CM-EmzMPYg0dkA1rWyWqq2iv6U8M0NS4tnJqkTtwGQgLau33oqv6S8TWrB9ClDKSBilRHnU5Zy8_EcPM4pfcJaiepsjKHAHGm7LDSRIc8qPvyDzeVhpkiTc0F8tzVgLM8rIGYzLRA66kzf1pg-uUIaYh-1h9xp58TdN91a0_zVp85LBIr4si2UXATVceecfzkIc68hV9KqeV7E2XfxFS-s5oexYAbTrv96dsaZfCHOmx3-ktmCBBVscoRg6rkliRgA0_IeBZxnM0vjhEZM1I_n5n1qxjVsBfsIsw9VwQz8jFnBGfSXcFyfxcyZ_LciSm8r2mlpnRPX2F-97iSz88jeWZEwsrz8X_7KnRpIeTVma_LntjyL5BkNPtsj4TKQHdc1jdzVtshMVfbBb3iuM7PhWmXID2tGY6f8tW_05uzXLvTRHQE2CPWw0uvNkFOmHjJD-2VBtNFElxoAxPkUDqQ-OQyZm_oEmM1LGnzadaQatNLa9ZMZa9yoghIWzRTxpYRppbQ4SPTqeTnoJp4K0NvgdrubU0J-77m3q3KaYodp-Zv80l_nm3uSYqQh4-q2y1n6AUtOr4mgbhntncZ3zst3_5JfA0t9CaWHp6CVA82DuluX3O_sR3Y61oWb2JHE-oYznpdp8ryLcpIiOBAW8Nh8Y6l9MpivlPtjqUv_AtLrwzLxQxQesZpjQvgHtTe7RpblnjsK0se4-Iqw0GlFsZtqvnDYcjIWMNKT3DDK9I92CSwWovdzkGdjh1xG07U_eQCa4p1UvLvB8Tbul0nUxTeINoFzjDOkj43L9cFrIwTSrp59maV1b-N15CZjjKf4Jo3r3yNyLXCSZppTQk6c8ODQLWzOuLUSFO_YFnQbIyoMukooYgqaHh3hL14Qxz2e5YJjkj5BjjCZurCYkCjJZcqCSXx7Czmot6FmUpWh8Kv5KYm3guv2RWYs0utIeXehlipnm7sz1KMSxG1Wb6_zpBRz7sacRREXVq2a-dxptS_-HZND91EyzRU6559yS4hht49WXjCc0DnzIWDPgAgtl88LMLT2JGpG-gndyc9-nLn6D1L5BI3clmJxdKdhooZcnKwyGAOAIYRf413G5yD8oNk40pTR1ps_N2FIDs-HFBqGkWmeA1svEhZlmnqktS3G7S9QrBBAO_I5Q9Us9f1-qZAhKqQYSQhwjVK_zeIrn242W1M7dgi79mu0pXK2QYfoxaDryBu-2oLTlzRR-kwsQ0D1dwyzqdsCk9IsbW9yfsILT7V72DyS-QFkmWLs1S9t1dOMKct-B8Pk3G_akstjtGiT-mPrfNxhpcR4PZKmbycyuVOUgFSlsU7VVRHNlqCl-hNfWvjuhk6ZuLu1_uj7YOXZO1faFOWzjyplrXb_MxT4RwLeZywEr5Tv6KbSyNJJlNAXHOzxins3fGKYPmh16KvKM144O-UV89YSyHBWUGCwQnG_1R&sai=AMfl-YQYjcAqWSD84XojUqontl4RSIrVprfYKa8wLO0wTNMQpyWmIm-MVZC-QWjcQyODnARkujd6HcAaLHzR7VZu3UY0WY0Uu65vBrqAInlduL0JchP77FIa1iCnhX_2SqpUKd6hzrucbeqjWVvGGDEkslaRWX_0x_3pNHugusTLznDcj_stOHUG0CxVfJxniUdCH3C4IoK4I69_biWOtBOrOcMVbw4&sig=Cg0ArKJSzAER363Y5OLJEAE&uach_m=%5BUACH%5D&pr=13:ZgYOPAAAAAA82sLIIxTNCSKTH3jb2L6duZ5lxw&cry=1&crd=aHR0cHM6Ly9jaGV2cm9sZXQuY29tLGh0dHBzOi8vYWdrbi5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1505&cbvp=1&cstd=1495&cisv=r20240327.93139&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlaJk6bHByEIRBO0irO6IoozSM4-tSRZhT2IlYufwWUI_XHABPzon6zqXxim80; ar_debug=1
2024-03-29 00:41:45 UTC	895	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 29 Mar 2024 00:41:45 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.4	50537	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	3663	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; KRTBCOOKIE_188=3189-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553&KRTB&23418-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553; KRTBCOOKIE_22=14911-3836530392682421061&KRTB&23150-3836530392682421061&KRTB&23527-3836530392682421061; KRTBCOOKIE_632=23041-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23047-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23234-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23361-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY; KRTBCOOKIE_32=11175-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22713-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22715-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&23519-AAAB5ELz2agAJAN9eVxrAAAAAAA; SPugT=1711672903; KRTBCOOKIE_391=22924-568962836176703241&KRTB&23263-568962836176703241&KRTB&23481-568962836176703241; PugT=1711672903; KRTBCOOKIE_1323=23480-OPU3090482eba0842c0a6adc621a2f48ab4&KRTB&23485-OPU3090482eba0842c0a6adc621a2f48ab4&KRTB&23575-OPU3090482eba0842c0a6adc621a2f48ab4; KRTBCOOKIE_52=22772-R33646_1131CD426_A4CB9467&KRTB&23092-R33646_1131CD426_A4CB9467
2024-03-29 00:41:45 UTC	773	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_632=23041-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23047-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23234-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23361-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:45 GMT; path=/ Set-Cookie: PugT=1711672905; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:45 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.4	50507	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	378	OUT	GET /sadbundle/473513299895995753/images/bg2.jpg HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:45 UTC	822	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 57191 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 28 Mar 2024 19:38:26 GMT Expires: Fri, 28 Mar 2025 19:38:26 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/jpeg Age: 18199 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:45 UTC	430	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3d 00 00 ff e1 03 8e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky=http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 35 38 30 31 31 37 34 30 37 32 30 36 38 31 31 41 36 31 33 39 36 37 39 37 45 45 34 44 38 44 36 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 38 34 30 41 45 39 41 43 46 39 44 31 31 45 45 38 31 33 37 46 46 32 37 37 39 37 42 42 46 39 31 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 38 34 30 41 45 39 39 43 46 39 44 31 31 45 45 38 31 33 37 46 46 32 37 37 39 37 42 42 46 39 31 22 20 78 6d 70 3a 43 72 Data Ascii: sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0580117407206811A61396797EE4D8D6" xmpMM:DocumentID="xmp.did:1840AE9ACF9D11EE8137FF27797BBF91" xmpMM:InstanceID="xmp.iid:1840AE99CF9D11EE8137FF27797BBF91" xmp:Cr
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 38 02 70 04 e0 09 c0 13 80 27 00 60 09 c0 13 80 30 04 e0 26 46 28 30 13 80 30 06 02 30 06 00 c0 18 03 00 60 0c 04 e0 0c 01 18 03 01 07 02 09 38 8a 27 01 3c 87 b7 3c 04 13 9e 00 c0 18 02 70 04 e0 09 f1 c0 18 20 9c 14 4e 00 9c 01 39 e0 09 c0 4c e0 0c 01 38 02 70 06 00 9c 01 80 27 01 21 bc 71 6a 89 07 01 38 03 00 60 0c 01 80 30 06 00 c0 4e 08 30 06 00 c0 2b 61 2b 0a cf 3c 45 07 96 02 6c 30 40 f0 03 f6 62 05 9c f0 13 38 a0 9c 01 38 82 27 00 1c b0 06 ac 04 6a 38 06 91 8a 01 ec 38 08 9c f1 04 ce 02 27 00 4e 00 d5 80 9c bd d8 a0 93 88 09 18 09 9c 04 49 c5 13 38 02 60 9c 03 ae 63 15 13 80 30 06 00 c0 18 02 30 04 60 27 15 06 00 c0 11 80 87 e0 31 25 61 49 e2 7d f8 ca 88 24 80 38 9c 87 db 80 9b 0c d8 c7 da 63 ed 38 04 fc 58 09 3c 70 10 09 c0 1a b0 06 ac 04 b1 cb 01 Data Ascii: 8p'`0&F(000`8'<<p N9L8p'!qj8`0N0+a+<El0@b88'j88'NI8`c00`'1%aI}$8c8X<p
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 9f ab 58 a8 e7 9b 66 54 70 10 09 e7 c7 2e 18 4c a1 f5 6d 7a f1 2d a7 4f 18 1f 3e 98 8f f1 7b 78 67 13 e5 c4 ac ab bf 18 f7 bc e2 30 04 60 82 30 52 da 3c 9f 1c 66 e5 b7 57 3e d0 45 8d 1c a0 c6 39 ba 1e d6 23 6d 48 e3 a8 bb 7d e1 47 fc dc 05 5a cf 96 06 71 c3 fb d8 05 b5 81 6c b9 0c 05 d8 a2 01 cd bd ff 00 b8 62 08 63 80 ad 8e 47 01 65 a0 74 c9 8c fc 71 42 54 35 56 73 82 1b 2f b0 62 03 4b 86 24 66 54 fe ef bf 00 35 a6 21 84 61 50 ab 6a ab 02 78 62 54 35 f5 d8 6c 45 45 24 ba 82 a1 44 cc e7 cb 12 6e 85 88 5e bb 76 61 36 4a 08 e2 41 f9 81 88 fb 72 fe 91 8c dd bb 11 a6 64 42 d4 5a d5 72 40 e0 89 96 e1 e5 05 89 23 3f 76 39 5f 7d 78 d1 a8 82 8d c5 35 d3 a2 55 5d c8 22 60 e5 24 4b 41 89 1a 47 3c 67 39 ce 44 1d cd 9a 87 55 db 4f cc e0 19 85 e2 dc 01 22 73 33 fc 31 Data Ascii: XfTp.Lmz-O>{xg0`0R<fW>E9#mH}GZqlbcGetqBT5Vs/bK$fT5!aPjxbT5lEE$Dn^va6JArdBZr@#?v9_}x5U]"`$KAG<g9DUO"s31
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 34 bb 29 62 33 21 80 f0 d3 ed c5 eb 3a 6b 27 57 b1 21 2e 29 5e b1 3a 2e 3c 00 7d 24 1a cf 9d 61 87 21 31 ec 9c 73 8e 75 5a 23 a9 b2 d5 d2 d1 6f d5 ea 8e bf e2 d7 1f 26 9f 97 ab ab 3d 3a be 3a b2 c2 9e ce 49 9e af 70 c5 54 4b 10 a3 c4 e5 8f b6 f1 93 59 3f 22 16 f6 9f 28 fb 4f ee 18 95 5a 24 57 63 1f 33 c0 f0 4c be f3 9e 14 92 b0 4d a2 27 45 1c 0f 3b 0f 33 1e 24 f3 cf 12 d8 c9 6e 9c d6 5c ac 6a 6d 22 4e 50 38 f3 c5 bb 44 b7 57 3a ca 59 ec 8f 95 b8 69 23 1c 9d 99 b4 b3 56 8d 04 8d 31 f6 12 31 90 29 87 ac 1c bc ad 97 c4 e2 84 dc ea 67 f2 82 4c 0e 1f 1c 49 20 eb 65 07 8b 01 c3 29 d3 fc 27 14 47 98 b3 00 79 8c c8 e5 f7 60 02 ae c8 c4 ac aa 93 2d c8 71 e3 30 33 8c bc 71 99 95 a2 c4 d8 3b 57 a9 ae 5a c0 50 46 a9 65 05 84 89 89 e2 01 39 03 90 c7 0b b7 e2 b9 45 5a Data Ascii: 4)b3!:k'W!.)^:.<}$a!1suZ#o&=::IpTKY?"(OZ$Wc3LM'E;3$n\jm"NP8DW:Yi#V11)gLI e)'Gy`-q03q;WZPFe9EZ
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: be 45 76 6a 16 50 c4 a3 58 57 ca 09 12 a2 54 40 d4 35 78 78 46 63 1a b2 32 84 95 3a fa 29 50 57 29 63 ab 45 6c 84 29 46 10 ad ab 4f 9c 49 85 e7 a8 65 19 4d ea ae a4 c6 4a a8 b6 14 a1 50 03 0f 96 c3 a0 07 1f 88 90 78 82 0f 1e 47 e2 15 ac 86 ae ed b9 70 2e 6b 2d 35 65 5b d1 10 fa 80 03 49 30 7d d0 84 c0 e1 96 48 9f 01 9c 5c e9 49 1a 23 5b 4a 99 13 a6 66 4b 0c a2 01 ce 7d be 38 4c c5 4a 24 d8 c8 74 04 77 ac 68 86 60 d5 96 2d e5 0a c3 e5 51 a8 34 7f 5e 52 2e 82 8a e8 7b 1b 72 11 95 d9 4d 84 d9 5d 63 26 91 0d 00 8d 32 16 60 e9 fb 30 ea 59 6a bf 7f 5d d1 d1 b3 a4 43 53 52 da e4 af 94 31 40 ed 3a 9a a0 c7 4d 8c a6 60 f9 94 f0 18 9d 55 3a 73 66 5b 81 da 28 44 2a 41 01 99 e5 dc cd 72 80 af 98 2a a6 86 8f 61 93 c2 31 89 ba 6b ae 31 f6 5a 2c db 1a 05 a4 ee ef d3 62 Data Ascii: EvjPXWT@5xxFc2:)PW)cEl)FOIeMJPxGp.k-5e[I0}H\I#[JfK}8LJ$twh`-Q4^R.{rM]c&2`0Yj]CSR1@:M`U:sf[(DAra1k1Z,b
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 60 3a 75 05 63 53 40 3a 54 15 5d 40 15 1e 50 3c 60 72 39 63 3d 45 15 ef ef ae bb f5 d3 53 d7 4b 2e aa 38 ab f4 d9 98 79 b3 92 59 8f 1d 46 38 67 96 33 64 dd 11 9e ab 30 54 66 b1 92 e3 5e 8a a9 27 a8 25 64 1d 44 fc a7 25 10 cb 0b f0 ce 60 de aa f8 94 4b 3d a9 56 dd 57 5b 6e 1e 54 69 00 30 70 59 10 23 4f 9f 20 10 93 3a 7f 0f b6 46 e4 44 ea 52 a6 66 4a d3 a1 63 2b ee 03 a9 0a f2 49 57 ad 58 59 d4 e2 b9 32 fe 10 0a fc 62 75 57 3e 00 b6 b6 0a 94 69 4a f5 a3 da 74 12 fa a9 28 97 96 b5 c0 d5 9d 68 18 15 41 c3 c0 e2 5d b9 31 c3 eb 9e 9d 85 b1 12 a2 ca 77 5a 89 77 af 78 fd 62 94 95 3a 83 b2 82 4e a2 16 54 49 58 19 4c c7 fb 38 9b e2 73 86 b4 4e dd fe ae f1 72 33 30 a8 e5 72 d6 15 24 8f 30 cd 86 82 c4 81 3f 2a f1 9e 11 ab af c6 31 ec 4a 51 65 fd cc cd 3b 35 db 2b 6d Data Ascii: `:ucS@:T]@P<`r9c=ESK.8yYF8g3d0Tf^'%dD%`K=VW[nTi0pY#O :FDRfJc+IWXY2buW>iJt(hA]1wZwxb:NTIXL8sNr30r$0?*1JQe;5+m
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 44 b1 62 ba 4c e7 c0 98 e1 6b 4a ca 4b 57 6d de 6c f6 7d db 69 b8 de 21 bf 68 ad 5b dc 95 b6 41 c6 97 60 42 86 d2 2b d7 a8 69 cf 21 20 34 8c 48 ba 2b 8c 76 2c 30 ee 37 77 6f 8f 54 9c dc c2 83 d3 ad 56 45 7a 8b 3a e8 01 61 d4 be 43 e0 31 26 4a 50 d4 fe 75 9a 6b b6 bf ac 55 4d 0a 19 62 45 90 c3 43 e9 55 08 13 39 23 2d 3c a7 19 9b a6 62 32 93 42 ad 82 ad af 52 d6 67 a5 ab ad 4c 6b aa aa 9a db 40 60 ea 33 93 d3 ea 67 13 e4 c8 00 a0 ef aa 89 4c d5 da 4d ed 45 1b 70 cd 7d 86 ad 3b 66 ac 07 ba e0 8a d2 cf 3e 6d 5a c8 9f c5 1c 26 31 99 ca b8 f6 28 fa 2b ac 21 2b 04 6a 2e fb 76 3a 0e a2 ca 8a e5 d8 4a b0 d0 06 5a 98 ea 6c 97 33 33 cd a6 ab 04 ee 56 3e ca ca 69 b6 9a ea bf e6 53 a7 4e 8b d9 90 bb 1d 47 e6 cc 4e b8 51 c8 46 16 df 33 2b 45 bd cb 75 59 6b a8 a6 b5 ad Data Ascii: DbLkJKWml}i!h[A`B+i! 4H+v,07woTVEz:aC1&JPukUMbECU9#-<b2BRgLk@`3gLMEp};f>mZ&1(+!+j.v:JZl33V>iSNGNQF3+EuYk
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: a1 4e 78 45 d3 48 8f e1 68 ab 73 62 b5 9d 4b 18 f5 de aa ec 0d 59 47 2a aa ba 02 95 26 50 aa ac 95 73 3e 33 04 b6 66 fa 66 44 19 2e 6d 9a 1d c2 f4 fa af 63 d1 5b b1 57 45 31 99 59 d7 58 d0 58 2c b4 b0 0d 2a 79 ae 66 da c6 79 c6 31 c3 93 51 39 86 df 4e f6 dd ca 8d bd 35 6e 09 64 db a2 75 14 6a 45 53 0a c0 3e 92 59 eb 32 01 f9 80 9d 26 2d f7 74 e9 3e ff 00 14 a5 54 dd 65 84 bb 32 ad 6e c1 51 d0 37 4d 56 11 d1 57 cc 06 a2 42 66 43 79 a4 c1 1a 86 31 17 ea 51 0d be b1 36 f0 15 28 a6 da cd 42 fa 48 a8 dc 8d e5 b8 b4 93 ad 57 a8 78 1c d7 48 23 4a ae 96 bd f8 ed f8 76 f6 ad 15 2f 47 58 d8 5a 4a 6d d6 d3 d5 58 93 ae eb 2b 04 85 0c 9a 6b 54 ac 19 ca 57 81 82 34 ea bc f8 25 2b a1 77 1b ad b5 fb b4 64 a5 c1 dc dd 52 a5 17 80 cb 32 a2 d8 b2 17 cc ce 00 95 50 74 b4 96 Data Ascii: NxEHhsbKYG&Ps>3ffD.mc[WE1YXX,yfy1Q9N5ndujES>Y2&-t>Te2nQ7MVWBfCy1Q6(BHWxH#Jv/GXZJmX+kTW4%+wdR2Pt
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: a3 35 9f 4a bb 6b 6b b2 a0 2d be a4 ba a6 12 25 0b 05 a9 41 7c b4 02 b9 68 59 39 00 73 ce 75 d3 1e dc 73 ab 50 2f 3b 8a 13 5d a8 b4 d5 d5 06 d2 de 74 4d 4e 1e b2 e4 16 d1 3a 7e 56 3c 38 86 cc e1 37 d6 71 ec 22 15 ee 6b 7a ed 7a 3a 36 d7 0e 54 db d2 73 6b 15 36 25 84 17 0a c3 4b 7c ec 08 03 49 39 70 c6 27 72 ba 63 11 c1 62 16 ed 45 6d 71 56 2f 46 d9 10 0d e9 66 53 95 57 ea 2c 23 cc 74 ea d4 34 01 9e a1 04 0f 36 2d dc ad 33 cf ea 4c 16 a6 ab 71 65 53 49 da 86 db a0 55 0e 02 ea 27 41 52 d7 69 ad 59 d8 97 d6 cc 4a 18 39 15 ca f5 5b a5 71 8f 02 62 71 8f e5 56 e6 a5 5a cd 2a f4 3d 4f 60 7b 1b 4d 89 40 b4 84 5b 29 45 b2 b4 b0 14 0c 03 26 82 74 e9 61 e5 e1 27 72 38 e7 4c d6 20 b6 9d a0 ee 29 f5 1c 51 a9 af 70 f7 b1 47 b9 d1 fa 6f ab e6 d1 56 80 15 9c 49 6e 23 e7 Data Ascii: 5Jkk-%A\|hY9susP/;]tMN:~V<87q"kzz:6Tsk6%K\|I9p'rcbEmqV/FfSW,#t46-3LqeSIU'ARiYJ9[qbqVZ*=O`{M@[)E&ta'r8L )QpGoVIn#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.4	50536	34.111.113.62	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	553	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1711672894631; TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069; TapAd_3WAY_SYNCS=1!2136
2024-03-29 00:41:45 UTC	1101	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711672894631;Expires=Tue, 28 May 2024 00:41:45 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069;Expires=Tue, 28 May 2024 00:41:45 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!2136;Expires=Tue, 28 May 2024 00:41:45 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:45 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.4	50528	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	486	OUT	GET /crum?cm_dsp_id=196&external_user_id=4433599061245380871&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:45 UTC	990	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0ec6aa33931-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:45 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:45 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xqZ%2FWKvVaycV2AhPIa8yCHYdSgkfOg8gyICkD%2BQJbzgZjKwtSODEeehPxjus%2FHqrwg3m5GG1dEs%2FgpQJz%2FU7a%2FfAkLnO7A5jDmUN8PxjuX4j0HqGqHWnIQMkSaEpNIIxr805uH869Jitug%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.4	50533	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	2407	OUT	POST /event.png?impid=f6401e7fd4004956be533ce8a493d3fa&flavor=1&gdpr=&gdpr_consent=&ee_dp_omvk=doubleverify.com-omid&ee_dp_isom=1&prndr=0&dvp_rfrcl=2&dvp_gdpr_Error=3&dvp_gdv2_Error=3&te_strt=1&te_init=7&te_sup=0&te_exec=0&ishems=913&napr=GoogleBlockingCallbackError__invocationError%2520goog_wrapCb_QQ4GZoXlJYi0oPMPiamTqAw__%253A%2520e.j%2520is%2520not%2520a%2520functionTypeError%253A%2520e.j%2520is%2520not%2520a%2520function%2520%2520%2520%2520at%2520https%253A%252F%252Fs0.2mdn.net%252F879366%252Fexpress_html_inpage_rendering_lib_200_278.js%253A138%253A245%2520%2520%2520%2520at%2520%253Canonymous%253E%253A1%253A9533%2520%2520%2520%2520at%2520Ja%2520%2520%2520%2520%2520at%2520Ia%2520%2520%2520%2520%2520at%2520Object.m%2520%2520%2520%2520%2520at%2520Na.u.%253Ccomputed%253E%2520%2520%2520%2520%2520at%2520https%253A%252F%252Fcdn.doubleverify.com%252Fdvbm.js%253A2%253A53532%2520%2520%2520%2520at%2520https%253A%252F%252Fcdn.doubleverify.com%252Fdvbm.j&cerrt=16384&jsver=5684&tgjsver=5684&ee_dp_csc=1&ee_dp_cspf=1&ee_dp_asmm=1&vdur=1125&eoid=22&msrjs=5684&sdf=67108868&vit=2&dvp_ime=0&dvp_dcime=0&dvp_dcife=0&dvp_dcde=1&dvp_dcoe=2&dvp_mpdce=script&rmi=8&tltms=1530&tetms=51&msltms=0&vltms=1125&sei=146&vetms=6&tuviims=955&tuviems=2086&engms=1&engisel=1&dvp_dtcov=4&sim=1&ee_dp_rbgms=1&msrcanlm=1048970&msrcannum=4&ee_dp_tmads=4140&ee_dp_gmrd=1&ismms=922&isumms=921&nvr=6&isgmmims=921&isgmv4mims=921&elmtp=3&isbxdms=4124&b0=100&b6=3334&adhgt=600&adwdth=300&norwdth=300&norhgt=600&vsos=8&dvp_vsosnmr=16&lftb=3434&sftb=3434&msrdp=0&naral=1048576&vct=512&vphgt=984&vpwdth=1280&chgt=600&cwdth=300&scrhgt=1024&scrwdth=1280&strp=0&advisonl=false&isiabvms=1922&isuiabvms=1922&engalms=921&dvp_dpr=1&vstsz=1398&ee_dp_cvcmeeid=1&metp=1&meeid=1 HTTP/1.1 Host: tpsc-ue1.doubleverify.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:45 UTC	340	IN	HTTP/1.1 204 No Content Date: Fri, 29 Mar 2024 00:41:45 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com Access-Control-Allow-Credentials: true Expires: 2024-03-28T00:41:45 Pragma: no-cache Cache-Control: max-age=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.4	50560	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	500	OUT	GET /crum?cm_dsp_id=109&external_user_id=0bf86f4e7d934cb7b5daae7a5c7d8db5&expiration=1714264899 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:45 UTC	988	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0ed3da220a0-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:45 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:45 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BZae6j%2BWRmjoY7ihMtuyGNQCIaUc6kHLw8IBnbMlteVn5EO9raBQcZVpNxQNZayuP3C%2Fye6n4cH5cquaih1LmWODjs%2B0PthXWR%2BwFMUWXgHL64h%2BygJEC9m3gQdGbZrs2DH5IG7aNOPHVQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.4	50552	68.67.178.10	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	1045	OUT	GET /getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3D55bb0499-3b94-4610-88d6-811dcbabb069%252Chttps%25253A%25252F%25252Fx.bidswitch.net%25252Fsync%25253Fdsp_id%25253D437%252526ssp%25253Dcriteo%252526user_id%25253D%252C HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=JdhWkazzA7-l-SJBnb9vWXLWZRZHRTHbCkah-EW3O2ECAhxSYsqS4OFO_2Ig6DeQZPtzrEcTco9BU0aHgalK869BAW6WsG83Dwoyx1UwJrs.; uuid2=5423405387794830934
2024-03-29 00:41:45 UTC	1611	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://pixel.tapad.com/idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=5423405387794830934&pt=55bb0499-3b94-4610-88d6-811dcbabb069%2Chttps%253A%252F%252Fx.bidswitch.net%252Fsync%253Fdsp_id%253D437%2526ssp%253Dcriteo%2526user_id%253D%2C AN-X-Request-Uuid: 635541f3-0a41-485e-8320-23304d465c71 Set-Cookie: XANDR_PANID=JdhWkazzA7-l-SJBnb9vWXLWZRZHRTHbCkah-EW3O2ECAhxSYsqS4OFO_2Ig6DeQZPtzrEcTco9BU0aHgalK869BAW6WsG83Dwoyx1UwJrs.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 27-Jun-2024 00:41:45 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 17-Mar-2034 00:41:45 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=5423405387794830934; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 27-Jun-2024 00:41:45 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.43; 102.165.48.43; 634.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.4	50512	142.251.167.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	2779	OUT	GET /pcs/view?xai=AKAOjsvdEyCMha1EgGA-oMXI6iXVqeXerKqHh7L9CM-EmzMPYg0dkA1rWyWqq2iv6U8M0NS4tnJqkTtwGQgLau33oqv6S8TWrB9ClDKSBilRHnU5Zy8_EcPM4pfcJaiepsjKHAHGm7LDSRIc8qPvyDzeVhpkiTc0F8tzVgLM8rIGYzLRA66kzf1pg-uUIaYh-1h9xp58TdN91a0_zVp85LBIr4si2UXATVceecfzkIc68hV9KqeV7E2XfxFS-s5oexYAbTrv96dsaZfCHOmx3-ktmCBBVscoRg6rkliRgA0_IeBZxnM0vjhEZM1I_n5n1qxjVsBfsIsw9VwQz8jFnBGfSXcFyfxcyZ_LciSm8r2mlpnRPX2F-97iSz88jeWZEwsrz8X_7KnRpIeTVma_LntjyL5BkNPtsj4TKQHdc1jdzVtshMVfbBb3iuM7PhWmXID2tGY6f8tW_05uzXLvTRHQE2CPWw0uvNkFOmHjJD-2VBtNFElxoAxPkUDqQ-OQyZm_oEmM1LGnzadaQatNLa9ZMZa9yoghIWzRTxpYRppbQ4SPTqeTnoJp4K0NvgdrubU0J-77m3q3KaYodp-Zv80l_nm3uSYqQh4-q2y1n6AUtOr4mgbhntncZ3zst3_5JfA0t9CaWHp6CVA82DuluX3O_sR3Y61oWb2JHE-oYznpdp8ryLcpIiOBAW8Nh8Y6l9MpivlPtjqUv_AtLrwzLxQxQesZpjQvgHtTe7RpblnjsK0se4-Iqw0GlFsZtqvnDYcjIWMNKT3DDK9I92CSwWovdzkGdjh1xG07U_eQCa4p1UvLvB8Tbul0nUxTeINoFzjDOkj43L9cFrIwTSrp59maV1b-N15CZjjKf4Jo3r3yNyLXCSZppTQk6c8ODQLWzOuLUSFO_YFnQbIyoMukooYgqaHh3hL14Qxz2e5YJjkj5BjjCZurCYkCjJZcqCSXx7Czmot6FmUpWh8Kv5KYm3guv2RWYs0utIeXehlipnm7sz1KMSxG1Wb6_zpBRz7sacRREXVq2a-dxptS_-HZND91EyzRU6559yS4hht49WXjCc0DnzIWDPgAgtl88LMLT2JGpG-gndyc9-nLn6D1L5BI3clmJxdKdhooZcnKwyGAOAIYRf413G5yD8oNk40pTR1ps_N2FIDs-HFBqGkWmeA1svEhZlmnqktS3G7S9QrBBAO_I5Q9Us9f1-qZAhKqQYSQhwjVK_zeIrn242W1M7dgi79mu0pXK2QYfoxaDryBu-2oLTlzRR-kwsQ0D1dwyzqdsCk9IsbW9yfsILT7V72DyS-QFkmWLs1S9t1dOMKct-B8Pk3G_akstjtGiT-mPrfNxhpcR4PZKmbycyuVOUgFSlsU7VVRHNlqCl-hNfWvjuhk6ZuLu1_uj7YOXZO1faFOWzjyplrXb_MxT4RwLeZywEr5Tv6KbSyNJJlNAXHOzxins3fGKYPmh16KvKM144O-UV89YSyHBWUGCwQnG_1R&sai=AMfl-YQYjcAqWSD84XojUqontl4RSIrVprfYKa8wLO0wTNMQpyWmIm-MVZC-QWjcQyODnARkujd6HcAaLHzR7VZu3UY0WY0Uu65vBrqAInlduL0JchP77FIa1iCnhX_2SqpUKd6hzrucbeqjWVvGGDEkslaRWX_0x_3pNHugusTLznDcj_stOHUG0CxVfJxniUdCH3C4IoK4I69_biWOtBOrOcMVbw4&sig=Cg0ArKJSzAER363Y5OLJEAE&uach_m=%5BUACH%5D&pr=13:ZgYOPAAAAAA82sLIIxTNCSKTH3jb2L6duZ5lxw&cry=1&crd=aHR0cHM6Ly9jaGV2cm9sZXQuY29tLGh0dHBzOi8vYWdrbi5jb20&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5619&vt=11&dtpt=4114&dett=3&cstd=1495&cisv=r20240327.93139&vwbs=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlaJk6bHByEIRBO0irO6IoozSM4-tSRZhT2IlYufwWUI_XHABPzon6zqXxim80; ar_debug=1
2024-03-29 00:41:45 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Fri, 29 Mar 2024 00:41:45 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.4	50551	172.64.151.101	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	782	OUT	GET /rum?cm_dsp_id=64&external_user_id=316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: r.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:45 UTC	972	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0ecdb1a20d2-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:45 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:45 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kwQdveGYJ9ztC4J7Iwn9zCz%2BHhgTNFyAdOrkJ3F66NlWVYMH5W%2FzLL90t5pghtiwHs%2BNlMBJ8ExkLtFQ%2BxX%2FLDc7i1m0fJ2cIoULXcZLBlyluSzRdTMjzCLilgNk4YEr4SJI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.4	50547	34.111.113.62	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	896	OUT	GET /idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=5423405387794830934&pt=55bb0499-3b94-4610-88d6-811dcbabb069%2Chttps%253A%252F%252Fx.bidswitch.net%252Fsync%253Fdsp_id%253D437%2526ssp%253Dcriteo%2526user_id%253D%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1711672894631; TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069; TapAd_3WAY_SYNCS=1!2136
2024-03-29 00:41:45 UTC	1156	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:45 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711672894631;Expires=Tue, 28 May 2024 00:41:45 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069;Expires=Tue, 28 May 2024 00:41:45 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!2136-2!2136;Expires=Tue, 28 May 2024 00:41:45 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://x.bidswitch.net/sync?dsp_id=437&ssp=criteo&user_id= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.4	50540	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	463	OUT	GET /crum?cm_dsp_id=57&external_user_id=969751699754991983 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:45 UTC	994	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0ed3eb105c2-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:45 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:45 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AI6at%2Fy1XprZ3L4t7upfQ8%2FQ%2BEUx6yB%2Bu1UZzDre9suIsud19I%2B3%2B%2BM%2BsFfRisSPjF0hIRPEUEnBPBFEI9S3L5edf1EnOHCE7MeN91vUaKwAtYA8rTV1zp1OpC5lbWtlkclzY2e0PBo4aQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.4	50541	172.64.151.101	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	540	OUT	GET /rum?cm_dsp_id=65&external_user_id=AAAG7NSuQMmnfwMHSnLCAAAAAAA&expiration=1711759302&gpp_sid=-1&gpp=DBAA&is_secure=true&us_privacy=1YNN HTTP/1.1 Host: dsum.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:45 UTC	974	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0ed3975387c-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:45 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:45 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kMspgsrkAnuP%2F3NX5PbyPUBXU46pjfPG62W%2FxkgNa%2FyZLO4TmAuN3qkbDRFxLpLCbdPkyEk9Pxm8NzGs5eeD8KE4tI7cL%2BSAuTC499tMkFd5hATkw1SQkd1LVkAvDHyjRhVGUyD9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.4	50546	18.160.10.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	482	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:45 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 16df6ade68382d048f8aad1f7e39da28.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: Ds3A6jowN7tGJAtkGLs4IkWNsmjOfFLbxXagWoOVYfZhlq_OTQk_kA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.4	50550	74.121.140.211	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	463	OUT	GET /sync/img?mt_exid=36&07571c18-3f04-4602-a656-288806fb242c&us_privacy=1YNN HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=ce6f6606-0e44-4300-9f76-592e7ae20814
2024-03-29 00:41:45 UTC	369	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close Access-Control-Allow-Origin: * Server: MT3 1549 cea2cde master iad iad-pixel-x9 config_version:"2427" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Expires: Fri, 29 Mar 2024 00:41:44 GMT
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.4	50544	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	3712	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAB5ELz2agAJAN9eVxrAAAAAAA&expiration=1711759302&nuid=6D366468-71AF-422B-99AB-138A6DAB94F7&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; KRTBCOOKIE_188=3189-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553&KRTB&23418-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553; KRTBCOOKIE_22=14911-3836530392682421061&KRTB&23150-3836530392682421061&KRTB&23527-3836530392682421061; KRTBCOOKIE_632=23041-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23047-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23234-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23361-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY; KRTBCOOKIE_32=11175-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22713-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22715-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&23519-AAAB5ELz2agAJAN9eVxrAAAAAAA; SPugT=1711672903; KRTBCOOKIE_391=22924-568962836176703241&KRTB&23263-568962836176703241&KRTB&23481-568962836176703241; PugT=1711672903; KRTBCOOKIE_1323=23480-OPU3090482eba0842c0a6adc621a2f48ab4&KRTB&23485-OPU3090482eba0842c0a6adc621a2f48ab4&KRTB&23575-OPU3090482eba0842c0a6adc621a2f48ab4; KRTBCOOKIE_52=22772-R33646_1131CD426_A4CB9467&KRTB&23092-R33646_1131CD426_A4CB9467
2024-03-29 00:41:45 UTC	708	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:44 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22713-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22715-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&23519-AAAB5ELz2agAJAN9eVxrAAAAAAA; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 27-Jun-2024 00:41:44 GMT; path=/ Set-Cookie: PugT=1711672904; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:44 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.4	50531	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	378	OUT	GET /sadbundle/473513299895995753/images/bg3.jpg HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:45 UTC	822	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 48771 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 28 Mar 2024 19:28:04 GMT Expires: Fri, 28 Mar 2025 19:28:04 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/jpeg Age: 18821 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:45 UTC	430	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3d 00 00 ff e1 03 8e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky=http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 35 38 30 31 31 37 34 30 37 32 30 36 38 31 31 41 36 31 33 39 36 37 39 37 45 45 34 44 38 44 36 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 38 34 30 41 45 39 45 43 46 39 44 31 31 45 45 38 31 33 37 46 46 32 37 37 39 37 42 42 46 39 31 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 38 34 30 41 45 39 44 43 46 39 44 31 31 45 45 38 31 33 37 46 46 32 37 37 39 37 42 42 46 39 31 22 20 78 6d 70 3a 43 72 Data Ascii: sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0580117407206811A61396797EE4D8D6" xmpMM:DocumentID="xmp.did:1840AE9ECF9D11EE8137FF27797BBF91" xmpMM:InstanceID="xmp.iid:1840AE9DCF9D11EE8137FF27797BBF91" xmp:Cr
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: ea 26 c6 5e eb 24 01 a9 0b 69 74 66 87 51 40 32 20 e4 39 73 91 8c 6d bd d6 73 4c 2f df 58 0b 74 25 90 cc bf 4b dc 63 4d 6c a0 f0 0d 4f 0e 38 ce 9b e6 66 96 39 ef a9 75 da 82 51 a4 25 c5 6c e9 32 09 15 13 5c 84 f8 0c 76 9c 53 07 d9 9b b6 81 2f 6d a1 ba 89 e0 3a 88 15 80 78 78 79 e1 b6 d9 1d 1b 1e 92 30 6b a7 49 90 88 3f 37 4b 64 c0 c6 9e aa 49 a9 f8 e3 bf 6b b9 ac b2 ed e5 fd 7c 65 cf 79 6c e0 5d de e5 2e a1 0e 82 9a 3d 3a cc 31 33 1a 85 24 a8 19 73 f8 e3 bd f9 99 bf 0b 3e 8f 5f 1f 53 13 b7 d2 7d af a6 8d 23 a8 0b 60 00 28 20 79 93 c3 99 fd c2 69 dd 9a ed c3 d3 c7 8f a8 db 4c c3 bb 16 bb 15 16 cb 08 63 2b 02 3a b3 8e 53 f3 c7 6f 73 aa fc 3c 65 9e 9c 45 21 05 b7 65 d4 75 92 2a 01 90 a7 97 21 1c a7 cc e3 12 c9 c2 56 ac c8 dd 6b e0 87 28 0a 03 42 b3 91 19 8a Data Ascii: &^$itfQ@2 9smsL/Xt%KcMlO8f9uQ%l2\vS/m:xxy0kI?7KdIk\|eyl].=:13$s>_S}#`( yiLc+:Sos<eE!eu*!Vk(B
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: fb f0 db 7b eb 94 9a e1 6d a3 70 93 aa 02 52 80 71 89 9a f8 0f 2c 48 ab 2d 3f f3 22 14 b3 10 0e 40 9a 0a 50 70 9e 18 dc bc 41 ba 41 db ab b6 92 18 c2 8d 52 47 09 12 78 72 33 e3 96 3a 6b 31 ae 6b 39 e3 86 9b 26 da 5b 4d 4c 80 37 d2 07 19 3e 31 33 e5 8f 5f 6f 79 35 e3 5c 77 d6 db c9 6e 90 66 38 50 fe 38 ed 2b 9e 00 a6 28 52 98 21 4a 60 a5 29 82 01 4c 02 94 c0 29 4c 00 29 80 52 98 05 29 80 05 71 42 95 c0 02 b8 05 2b 80 05 70 0a 57 00 0a e0 01 5c 10 34 e0 34 5a 72 36 76 d4 dd 7b 9b 7b a5 91 59 88 05 ee 25 c9 8e b0 cb 1a 2e a9 10 63 29 e5 8f c9 cf f1 cf a3 ec 17 6b b2 5b 96 c5 fb a1 06 d8 8b 8a 96 d5 88 2d 04 02 ca b9 f1 59 d2 0d 38 63 b4 d2 dc 5b 7c 78 fa d3 2d 5d bd 6c a0 08 ef 02 e1 55 0a 68 42 2b 01 70 ca 6a 62 d0 d2 4a 8a f2 cb 0e ee ba d9 21 ab 36 e2 fd Data Ascii: {mpRq,H-?"@PpAARGxr3:k1k9&[ML7>13_oy5\wnf8P8+(R!J`)L)L)R)qB+pW\44Zr6v{{Y%.c)k[-Y8c[\|x-]lUhB+pjbJ!6
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: c7 67 32 94 c0 29 4c 02 94 c0 29 4c 00 29 8a 85 29 80 52 98 05 29 80 52 98 05 29 80 52 98 05 29 8a 01 4c 02 95 c0 29 5c 10 0a e0 14 ae 00 69 c0 51 b4 b6 a9 ba 4b 6e c6 fd a6 b8 96 4b 48 93 a8 15 07 44 4f 4b 3d 64 67 15 cf 4f e3 f5 de 6b 38 be d6 1a b6 66 ed bd c5 cf 4a d9 b6 1a e1 65 1a 5b 52 6b 60 44 2e 92 e6 57 94 e5 33 c3 17 6d f1 38 18 6b ba fb 36 de ad b0 e2 f3 00 9a 37 6d aa d3 5e cf 41 05 a3 46 a2 c0 31 86 02 ac 25 46 38 4d af 57 0e 5e 2e 3e 93 0e 4e f0 07 05 89 46 84 f5 2f dc 52 80 80 ce aa c0 0d 40 80 cc e6 10 1e 33 e5 da 67 18 9e 30 cb 43 d9 7b d7 ae 5f 0e 00 7b 6a 2e 89 02 84 07 bc cc 59 57 27 e1 14 22 2b 13 8c 75 4e 11 70 d7 79 5d ac 29 46 25 6e 3a a5 84 76 0d a9 8b 2b 16 3a 99 47 ab 2a e5 d4 7f 0e 47 ea c3 b5 fe 58 f3 b3 37 ea fc bc 7d 32 b3 Data Ascii: g2)L)L))R)R)R)L)\iQKnKHDOK=dgOk8fJe[Rk`D.W3m8k67m^AF1%F8MW^.>NF/R@3g0C{_{j.YW'"+uNpy])F%n:v+:G*GX7}2
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 2e 6b 50 4f e5 d2 00 ce 83 f1 e3 c7 19 e4 3b 5d 9e f5 b7 b5 e9 86 2e f5 76 22 0a aa 88 45 5f 09 03 23 5a 1c 7d 2f 97 db 3a bc 9d c9 c5 d0 29 8f 43 99 4d bc 02 94 c5 0a 53 00 a5 30 08 53 00 a5 30 42 94 c0 29 4c 50 a5 30 0a 53 00 a5 30 0a 53 00 a5 30 0a 53 15 0a 53 00 34 60 31 6e 0e f6 d3 0d cd c7 01 9d db d7 7b 4c 03 ab ac 86 75 99 93 a5 e5 8e 50 7c 46 3f 13 d7 a6 31 27 f4 7d cc 2b 5d 76 36 f0 e0 07 b8 09 36 af 5d d2 01 46 22 44 41 8e 64 78 c8 c5 98 b7 fa 18 0b 96 56 f3 04 f4 dd ac da 45 b8 cb 6d 85 a6 f4 d8 97 b8 43 95 6e ad 27 42 b4 34 ae 92 47 4c 62 6a 98 67 de a6 de dd e0 f6 55 4d 96 2a 10 20 1d 0b 42 0b d2 0b 01 51 19 b1 cc 40 18 b0 b1 a7 b4 5c ba 76 9b bb 27 6f 37 b7 0b 6d 4e e2 04 5b 82 61 98 9a 21 d4 a2 a7 4d 48 3c 27 19 de 7e e9 67 8f 1e 3e 31 ae Data Ascii: .kPO;].v"E_#Z}/:)CMS0S0B)LP0S0S0SS4`1n{LuP\|F?1'}+]v66]F"DAdxVEmCn'B4GLbjgUM* BQ@\v'o7mN[a!MH<'~g>1
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: d1 8b 94 c3 53 59 de fa b6 d5 10 c2 ab 20 36 e0 16 02 49 e2 38 48 cf c8 e1 98 3a b6 76 e6 d6 dc ca 88 a6 a6 02 40 31 27 ea e3 e1 e3 8e 57 6c d5 91 4e ea d9 5a 5b e8 68 0c f3 48 53 91 26 66 38 f9 c6 37 ad 66 c6 75 6b 88 c1 f4 86 60 57 49 24 cc 82 4c 13 f4 f0 c7 4c b3 87 b2 f6 fb ad dd b1 d2 8e b0 16 a6 a8 64 47 41 35 a4 54 7c a9 41 f4 be 5b 6c c7 97 bb 31 5d 53 6f 1e 97 22 1b 78 05 36 f0 0a 6d e0 10 db c0 29 b7 8a 14 db c1 08 6d e0 14 db c0 29 b7 80 43 6f 14 29 b7 80 53 6f 04 29 b7 80 43 6f 14 29 4c 02 e8 c0 71 bb 8d e7 bc 6e a3 db 16 fd 15 3e a5 c6 6e b2 f6 e1 48 4d 50 d1 d3 45 1f 4c 52 9d 38 fc 2e 97 cf 3f d9 f7 57 76 e3 66 d3 9b b7 d5 46 d9 ed b1 b2 8a ce d6 cb 4b 02 85 a1 ad cb 40 91 f9 b2 1c 31 df 5d a7 54 e0 ca de eb bc db bd eb 9a 2c fa 97 b4 d8 57 Data Ascii: SY 6I8H:v@1'WlNZ[hHS&f87fuk`WI$LLdGA5T\|A[l1]So"x6m)m)Co)So)Co)Lqn>nHMPELR8.?WvfFK@1]T,W
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: bb c6 ec 19 6d 4e 2e 4e a0 3e a7 9e a6 68 0c 59 64 56 7c be 86 bc 39 72 1d 2e ef b7 dc dc b1 61 dc da bd 72 ed d7 66 ba a7 4a 87 71 30 2e 74 c9 61 27 a9 41 a1 ce 29 35 b2 22 d7 f6 fa ba e9 4d c1 77 2a a2 6d a1 61 56 25 cc 29 32 00 13 9f 90 cb 13 dd f8 2e 15 2f b6 af da 65 f5 8a 2b 32 f4 ea 25 50 31 24 f5 34 11 a6 04 92 63 88 a9 18 be f4 bc 8e 97 5b f4 eb b5 db fa 76 82 3a bc 93 65 94 92 4d 7f 33 10 33 01 79 11 9f 3c 62 5c d5 c7 06 2b 9d b7 68 7d 44 be 74 02 55 cd cf a9 86 bd 2c 41 d3 e0 a7 2d 33 f3 c6 fa ef 93 36 39 ad b5 d5 7a 52 0a b9 6d 45 60 4c c6 98 88 e1 58 8c 75 9b 30 e8 ed 9a d3 a3 5d b7 a9 52 d8 7a f0 69 34 91 99 9a cc f0 e7 96 33 68 4b fb a4 5b e1 2e 29 66 56 d4 ca 74 83 33 c2 60 41 c5 90 69 b1 75 ae a7 50 40 b7 08 79 00 29 2a 09 58 98 aa b7 de Data Ascii: mN.N>hYdV\|9r.arfJq0.ta'A)5"MwmaV%)2./e+2%P1$4c[v:eM33y<b\+h}DtU,A-369zRmE`LXu0]Rzi43hK[.)fVt3`AiuP@y)X
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 75 d1 c1 d1 b7 99 d0 fe b6 9d 5f 57 1d 53 31 1c a9 a3 28 af 86 3c f9 98 75 27 76 b7 b3 bb 6a e6 e0 14 b5 79 ae 14 f4 11 05 bb 88 2c aa 2a b6 9b 76 ed 5b eb 65 d4 c5 8e a2 65 88 39 9f ce 6b b5 ce 2c e3 eb c3 1e 3e ef ad f4 f0 e7 76 b2 bb 74 bb aa c3 5d b7 74 14 17 f5 69 97 4d 25 82 b8 8d 2c 15 c5 55 a6 a0 1a 30 8c 5d 2d bc c6 de e5 ea de 16 77 0d 75 af 2d cb 45 75 80 a5 3f 96 56 d9 f4 d4 85 2a c1 42 b7 a7 98 5d 2c 28 71 9d 37 e1 8b ea 2a b4 37 21 2d de 16 cf a6 58 0b 77 a8 2c 86 6f a5 8b 31 36 c0 3a 0f 4b 10 3c 66 06 3a 5d e1 6a cb 76 f7 2b b7 5b b6 dd 8b b8 90 0c b4 d4 90 2a 7f 2e 85 85 cf 51 1c e3 13 aa 67 09 87 4f 64 ec a5 b7 d7 dc db b5 e9 82 14 05 0e 15 10 a9 0a 5c b3 68 67 bb a0 57 ab fc ca 19 7c dd cd 6e fc 39 df 1e 3f bf 1b 19 b7 42 c8 27 4d f1 b8 Data Ascii: u_WS1(<u'vjy,v[ee9k,>vt]tiM%,U0]-wu-Eu?VB],(q77!-Xw,o16:K<f:]jv+[.QgOd\hgW\|n9?B'M
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 84 16 99 ab d1 48 93 2b f4 cc 49 25 d6 9e 23 12 d0 fb 4d e3 dc b1 75 25 99 88 d4 b6 eb d5 59 50 d9 1f cd 38 63 03 27 71 43 68 8c 8a dc 12 0a b8 75 04 9a 00 6a 62 45 14 d4 78 e3 a6 95 9b 18 10 31 b8 51 8e 9e 33 c2 91 f8 0c 75 c8 88 03 32 81 f5 12 04 67 c7 8e 2e 51 6d c6 36 c0 5c 94 48 26 33 8a 44 e5 84 4c 2d b1 66 f5 d0 a5 58 90 08 15 8a 31 8a 00 78 61 9c 26 17 e9 dd 59 12 ca 0b a1 04 dc 81 2b a0 7f 85 8f d4 c4 f0 e0 20 e7 86 62 58 6b 9d cf 72 77 16 6e a1 2b fa 63 36 41 ea 28 01 10 b2 41 98 88 ae 2c a9 87 b9 bb b7 d9 6f 3d b5 b3 de fa 44 6f 2f 30 1f a3 b2 49 6d 37 4b ab 25 a7 b9 25 43 20 62 88 0b 47 91 6c 77 fd b7 5f 8b 13 3d 5f 07 b3 f6 cf 75 da ef 7b 76 d9 0a 5b da 6e 59 48 b7 b5 07 48 75 b6 74 96 b4 1a 0b 8a 4b 46 5c 79 9f 6f 67 b9 2c 93 95 79 fb 9a d9 Data Ascii: H+I%#Mu%YP8c'qChujbEx1Q3u2g.Qm6\H&3DL-fX1xa&Y+ bXkrwn+c6A(A,o=Do/0Im7K%%C bGlw_=_u{v[nYHHutKF\yog,y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.4	50543	107.21.29.170	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	588	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=6D366468-71AF-422B-99AB-138A6DAB94F7&vxii_pid=12&vxii_pid1=10067&vxii_rcid=8fb05dfd-93b3-4073-8d4f-73399245f1bc HTTP/1.1 Host: thrtle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6IjhmYjA1ZGZkLTkzYjMtNDA3My04ZDRmLTczMzk5MjQ1ZjFiYyIsImwiOjE3MTE2NzI5MDI5MzksInQiOjF9
2024-03-29 00:41:45 UTC	353	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjhmYjA1ZGZkLTkzYjMtNDA3My04ZDRmLTczMzk5MjQ1ZjFiYyIsImwiOjE3MTE2NzI5MDU4NzQsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Tue, 15 Oct 2024 00:41:45 GMT; Secure; SameSite=None
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.4	50559	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	384	OUT	GET /sadbundle/473513299895995753/images/headline3.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:45 UTC	820	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 2310 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 28 Mar 2024 19:30:56 GMT Expires: Fri, 28 Mar 2025 19:30:56 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/png Age: 18649 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:45 UTC	432	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 04 b0 04 03 00 00 00 d5 8f 29 3a 00 00 00 30 50 4c 54 45 00 00 00 fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe 63 de 4d 40 00 00 00 0f 74 52 4e 53 00 44 77 bb ee 11 33 cc 88 dd 99 66 55 aa 22 06 2e 4f 76 00 00 08 76 49 44 41 54 78 da ec c1 81 00 00 00 00 80 a0 fd a9 17 a9 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 66 af 7e 72 69 87 02 00 8c 9f e7 25 65 f2 fe 5c 1b f0 de db 80 37 13 26 06 12 89 81 58 80 81 3b b0 00 3b b0 14 03 13 89 01 13 33 0b 30 23 36 70 1b 1b f0 e7 a2 08 3e 7a a5 1a 91 9b 72 b4 82 7c bf 41 9b b4 4d 7b ce d7 9c 56 92 24 49 92 24 49 92 24 Data Ascii: PNGIHDRX):0PLTEcM@tRNSDw3fU".OvvIDATxf~ri%e\7&X;;30#6p>zr\|AM{V$I$I$
2024-03-29 00:41:45 UTC	1252	IN	Data Raw: 31 d1 24 90 86 38 a3 e4 b2 a6 63 55 83 d2 75 ed b1 76 81 ff c5 f1 2c 44 5a 86 19 20 ad 8e 75 f9 ef c1 df c6 62 65 ad 56 6b 78 12 b8 8a 8c d5 7f c4 0b c0 51 b8 f7 0d b8 08 71 7e 02 6b c0 66 75 ac 6e 28 34 15 ab 5b fc 71 b2 c8 58 fd 47 fc a3 b8 dd 00 70 1e e2 0c 00 db c0 5e 64 ac f9 55 98 d8 0a 85 9d 71 a6 d6 d3 ea 58 e5 95 cf 9f b0 0c 3c 89 b5 73 c7 ae d9 f3 ce 14 44 61 fc 7a b9 fb f7 ba 59 0d 91 48 28 50 5a 42 24 12 89 b7 a8 88 bb d1 88 ca 46 34 2a db 50 91 55 10 25 e1 03 a0 50 af 84 4a b3 12 1f 60 2b f5 2a 48 74 de 2e eb fd d8 79 e6 8e 27 73 4f ae eb 8e 04 c5 3c 0d bb 39 77 ce cc 6f cf 3d e7 cc cc 7f 17 9a 2f 25 7a af 85 85 75 be 75 6d d6 fe 3f 28 86 2f d0 79 04 c1 3a 9e a1 7a 6d 49 a0 74 33 fb a4 ae 14 da 04 eb a4 7d 4d 84 04 68 a9 3d 74 4b b0 68 0a fe Data Ascii: 1$8cUuv,DZ ubeVkxQq~kfun(4[qXGp^dUqX<sDazYH(PZB$F4PU%PJ`+Ht.y'sO<9wo=/%zuum?(/y:zmIt3}Mh=tKh
2024-03-29 00:41:45 UTC	626	IN	Data Raw: 31 6b 0a 0b f3 94 43 3b d1 a5 e9 23 bd d5 15 b0 94 a5 86 f5 ee a7 e9 32 04 c8 15 b1 b0 ba 34 51 de eb 60 a1 38 84 1f c0 23 11 f4 38 f4 b3 a6 b0 d2 21 ab 83 3e 2c 5e 54 01 4b 59 6a 58 87 7f 9a b6 c5 ea 73 19 96 f2 5e 0f 0b 4f e7 c1 7f 6d c4 42 3a 45 89 6e 04 0b ed 35 cf 36 f5 35 c4 a8 0a 96 6f a9 3d 7c ea ab 20 3c ac 60 f9 de eb 61 21 eb 84 1d c0 33 51 91 fa a0 21 2c 5e 46 c9 3d 75 15 86 f1 2b 60 f9 96 da c3 55 9a 16 37 61 79 5f c1 f2 bd d7 c3 42 15 0b 3f 80 5f e0 4d 36 9a be f7 cd 60 f1 9a 53 76 78 97 ac ef dc e9 da cb 61 05 2c 5a 6a 0f 39 ae 98 b9 91 46 68 5d 48 ca b0 94 f7 7a 58 cb 04 8b fc 17 e2 05 fa a5 6d ee 53 fa 68 9f ba 69 57 6a 68 d9 be 26 b3 bb bf f6 1e 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 f5 83 3d 38 Data Ascii: 1kC;#24Q`8#8!>,^TKYjXs^OmB:En565o=\| <`a!3Q!,^F=u+`U7ay_B?_M6`Svxa,Zj9Fh]HzXmShiWjh&=8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.4	50561	69.194.240.13	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	831	OUT	GET /csync/RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005%22%7D
2024-03-29 00:41:45 UTC	387	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:46 GMT content-length: 43 set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005%22%7D; path=/; expires=Sat, 29 Mar 2025 00:41:46 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" connection: close
2024-03-29 00:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.4	50545	207.65.37.182	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	3746	OUT	GET /AdServer/SPug?partnerID=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; KRTBCOOKIE_188=3189-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553&KRTB&23418-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553; KRTBCOOKIE_22=14911-3836530392682421061&KRTB&23150-3836530392682421061&KRTB&23527-3836530392682421061; KRTBCOOKIE_632=23041-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23047-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23234-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23361-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY; KRTBCOOKIE_32=11175-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22713-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22715-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&23519-AAAB5ELz2agAJAN9eVxrAAAAAAA; SPugT=1711672903; KRTBCOOKIE_391=22924-568962836176703241&KRTB&23263-568962836176703241&KRTB&23481-568962836176703241; PugT=1711672903; KRTBCOOKIE_1323=23480-OPU3090482eba0842c0a6adc621a2f48ab4&KRTB&23485-OPU3090482eba0842c0a6adc621a2f48ab4&KRTB&23575-OPU3090482eba0842c0a6adc621a2f48ab4; KRTBCOOKIE_52=22772-R33646_1131CD426_A4CB9467&KRTB&23092-R33646_1131CD426_A4CB9467
2024-03-29 00:41:45 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:45 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1711672905; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:45 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.4	50553	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	506	OUT	GET /crum?cm_dsp_id=45&external_user_id=CAESEFC4he6gaSdOGOH6DAUt81g&google_cver=1&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:46 UTC	990	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0edec5957c7-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:45 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:45 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mJcoSEpJR2XcaHzfNAL4Z9bKoHCGaXpro%2F7QHmpSJ3LQpRA8Y3et59f8x3MX8iNLGwMGBzWvAQTF0cPkNZSN6o1Z6siFXk1%2FB3YcKfxBUZoeNvm%2FhpgWAJki%2FXP5odO%2BfO%2BvkEBQ4kxN9w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.4	50572	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	472	OUT	GET /rum?cm_dsp_id=123&external_user_id=TjMxskYIXe9LRDfaNGZeQmalMCs HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:46 UTC	980	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0ee7b753961-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:46 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:46 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J3pLHFdv37Heo1aTL%2BZLJ3zZg6Uvf2QeCXgfN7oqJ7p4Z65ZrNo2JDsKK7hzKd4w69KrXu6xDOiGhIGxSSUzm2VT01mXLPW8IpV3OQdb09PPOK3KfCXwX0St8OHKsVnsdWcrgRRKhk9DkQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.4	50539	8.28.7.83	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	3624	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=568962836176703241 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; pi=156078:4; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; KRTBCOOKIE_188=3189-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553&KRTB&23418-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553; KRTBCOOKIE_22=14911-3836530392682421061&KRTB&23150-3836530392682421061&KRTB&23527-3836530392682421061; KRTBCOOKIE_632=23041-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23047-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23234-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23361-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY; KRTBCOOKIE_32=11175-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22713-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22715-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&23519-AAAB5ELz2agAJAN9eVxrAAAAAAA; SPugT=1711672903; KRTBCOOKIE_391=22924-568962836176703241&KRTB&23263-568962836176703241&KRTB&23481-568962836176703241; PugT=1711672903; KRTBCOOKIE_1323=23480-OPU3090482eba0842c0a6adc621a2f48ab4&KRTB&23485-OPU3090482eba0842c0a6adc621a2f48ab4&KRTB&23575-OPU3090482eba0842c0a6adc621a2f48ab4; KRTBCOOKIE_52=22772-R33646_1131CD426_A4CB9467&KRTB&23092-R33646_1131CD426_A4CB9467
2024-03-29 00:41:46 UTC	643	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:45 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-568962836176703241&KRTB&23263-568962836176703241&KRTB&23481-568962836176703241; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:45 GMT; path=/ Set-Cookie: PugT=1711672905; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:45 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:46 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.4	50563	207.65.37.182	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:45 UTC	3738	OUT	GET /AdServer/SPug?partnerID=156078&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; KRTBCOOKIE_188=3189-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553&KRTB&23418-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553; KRTBCOOKIE_22=14911-3836530392682421061&KRTB&23150-3836530392682421061&KRTB&23527-3836530392682421061; KRTBCOOKIE_632=23041-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23047-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23234-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23361-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY; KRTBCOOKIE_32=11175-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22713-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22715-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&23519-AAAB5ELz2agAJAN9eVxrAAAAAAA; SPugT=1711672903; KRTBCOOKIE_391=22924-568962836176703241&KRTB&23263-568962836176703241&KRTB&23481-568962836176703241; PugT=1711672903; KRTBCOOKIE_1323=23480-OPU3090482eba0842c0a6adc621a2f48ab4&KRTB&23485-OPU3090482eba0842c0a6adc621a2f48ab4&KRTB&23575-OPU3090482eba0842c0a6adc621a2f48ab4; KRTBCOOKIE_52=22772-R33646_1131CD426_A4CB9467&KRTB&23092-R33646_1131CD426_A4CB9467
2024-03-29 00:41:46 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Mar 2024 00:41:46 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1711672906; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 28-Apr-2024 00:41:46 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-29 00:41:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.4	50549	52.207.168.130	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	487	OUT	GET /map/ct=y/c=14701/tp=MTAI/tpid=6D366468-71AF-422B-99AB-138A6DAB94F7/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=d8cab0c14b874ae9dd7e20695ff4df37
2024-03-29 00:41:46 UTC	315	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.55.176 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-03-29 00:41:46 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.4	50571	107.178.254.65	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	437	OUT	GET /api/sync?pid=5324&_=2 HTTP/1.1 Host: pippio.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nnls=; did=3g4X3oFoVbkcoWmc; didts=1711672905; pxrc=CMmcmLAGEgYIgr0rEAA=
2024-03-29 00:41:46 UTC	665	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://p.adsymptotic.com/d/px/?_pid=16257&_psign=5a9f251662be469b9732c38b03f11952&_redirect=https%3A%2F%2Fpippio.com%2Fapi%2Fsync%3Fpid%3D710202%26it%3D1%26iv%3D%24%7BUUID%7D&_rand=07420345 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: pxrc=CMmcmLAGEgYI36wrEAESBgiCvSsQAA==; Path=/; Domain=pippio.com; Expires=Tue, 28 May 2024 00:41:46 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.4	50562	207.65.37.181	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	3825	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=20972925&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; KRTBCOOKIE_57=22776-5866711843062603349&KRTB&23339-5866711843062603349; KRTBCOOKIE_279=22890-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23011-9022f636-a349-4fa5-9774-4b667b1cdee3&KRTB&23355-9022f636-a349-4fa5-9774-4b667b1cdee3; KRTBCOOKIE_377=6810-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22918-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&22926-de959f04-5668-4cc4-9c45-9e4a8efcd9a8&KRTB&23031-de959f04-5668-4cc4-9c45-9e4a8efcd9a8; KRTBCOOKIE_80=22987-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23025-CAESECwFCJ1S0AHUyXWwZK-bCuI&KRTB&23386-CAESECwFCJ1S0AHUyXWwZK-bCuI; KRTBCOOKIE_148=19421-uid:45E09433ABCF443988615F414991A294&KRTB&23486-uid:45E09433ABCF443988615F414991A294&KRTB&23489-uid:45E09433ABCF443988615F414991A294&KRTB&23539-uid:45E09433ABCF443988615F414991A294; KRTBCOOKIE_153=1923-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&19420-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&22979-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk&KRTB&23462-LdMS5iuAFuE2gUe1LtUP5CKHEuI2gReyKIGkvFDk; KRTBCOOKIE_18=22947-969751699754991983; KRTBCOOKIE_1278=23329-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23340-8b7fe8e3-752d-4da2-8d7e-64baea716a5a&KRTB&23498-8b7fe8e3-752d-4da2-8d7e-64baea716a5a; KRTBCOOKIE_107=1471-uid:JcUsekky1RQ0jp5&KRTB&23421-uid:JcUsekky1RQ0jp5; KRTBCOOKIE_860=16335-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23334-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23417-TjMxskYIXe9LRDfaNGZeQmalMCs&KRTB&23426-TjMxskYIXe9LRDfaNGZeQmalMCs; KRTBCOOKIE_1003=22761-1b407dde-ed65-11ee-9900-64996dd289d9&KRTB&23275-1b407dde-ed65-11ee-9900-64996dd289d9; KRTBCOOKIE_27=16735-uid:ce6f6606-0e44-4300-9f76-592e7ae20814; chkChromeAb67Sec=3; KRTBCOOKIE_699=22727-AAFJBk7MDBwAABSliZdkug; DPSync3=1711756800%3A248_255%7C1712707200%3A257%7C1712880000%3A261_260_259_263_262_258_256_201%7C1712275200%3A265; SyncRTB3=1712534400%3A63%7C1712880000%3A214_56_233_240_234_54_250_3_220_5_7_178_21_55_46_13_266_104_8_231_165_166_96_71%7C1714262400%3A224%7C1716854400%3A69%7C1712275200%3A38_223_2_15; KRTBCOOKIE_904=23554-XMiDsS54DbysaEerRQ4GZg&KRTB&23557-XMiDsS54DbysaEerRQ4GZg; KRTBCOOKIE_466=16530-ca57c23d-569f-46f3-a577-3e6f6bd561b5; KRTBCOOKIE_188=3189-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553&KRTB&23418-aea3ca37-727a-41ef-b550-ee203ed2401c-66060e46-5553; KRTBCOOKIE_22=14911-3836530392682421061&KRTB&23150-3836530392682421061&KRTB&23527-3836530392682421061; KRTBCOOKIE_632=23041-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23047-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23234-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&KRTB&23361-Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY; KRTBCOOKIE_32=11175-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22713-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&22715-AAAB5ELz2agAJAN9eVxrAAAAAAA&KRTB&23519-AAAB5ELz2agAJAN9eVxrAAAAAAA; SPugT=1711672903; KRTBCOOKIE_391=22924-568962836176703241&KRTB&23263-568962836176703241&KRTB&23481-568962836176703241; PugT=1711672903; KRTBCOOKIE_1323=23480-OPU3090482eba0842c0a6adc621a2f48ab4&KRTB&23485-OPU3090482eba0842c0a6adc621a2f48ab4&KRTB&23575-OPU3090482eba0842c0a6adc621a2f48ab4; KRTBCOOKIE_52=22772-R33646_1131CD426_A4CB9467&KRTB&23092-R33646_1131CD426_A4CB9467
2024-03-29 00:41:46 UTC	804	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=6D366468-71AF-422B-99AB-138A6DAB94F7; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=4; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156078:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1712707200%3A257%7C1711756800%3A248_255%7C1712880000%3A262_261_263_245_260_201_236_258_256_259%7C1712275200%3A265_253_252; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Length: 577 Connection: close
2024-03-29 00:41:46 UTC	577	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 62 70 69 2e 72 74 61 63 74 69 76 61 74 65 2e 63 6f 6d 2f 74 61 67 2f 3f 69 64 3d 32 30 39 30 39 26 75 73 65 72 5f 69 64 3d 36 44 33 36 36 34 36 38 2d 37 31 41 46 2d 34 32 32 42 2d 39 39 41 42 2d 31 33 38 41 36 44 41 42 39 34 46 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 37 35 31 34 35 3f 62 69 64 64 65 72 5f 69 64 3d 31 39 35 37 35 35 26 62 69 64 64 65 72 5f 75 75 69 64 3d 36 44 33 36 36 34 36 38 2d 37 31 41 46 2d 34 32 32 42 2d 39 39 41 42 2d 31 33 38 41 36 Data Ascii: PubMatic.loadAsyncImagePixel('https://bpi.rtactivate.com/tag/?id=20909&user_id=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=6D366468-71AF-422B-99AB-138A6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.4	50564	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	1497	OUT	GET /cksync.php?cs=1&type=56551&ovsid=RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1; data-mn2=3546744950180300000V10~~1
2024-03-29 00:41:46 UTC	686	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-url=RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005~~1;Expires=Wed, 25 Sep 2024 00:41:46 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:46 GMT Connection: close
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:46 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.4	50557	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	384	OUT	GET /sadbundle/473513299895995753/images/headline4.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:46 UTC	820	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 5750 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 28 Mar 2024 19:26:04 GMT Expires: Fri, 28 Mar 2025 19:26:04 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/png Age: 18942 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:46 UTC	432	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 04 b0 08 03 00 00 00 10 7f c4 3b 00 00 00 ae 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 2d 8a f4 2a 00 00 00 39 74 52 4e 53 00 05 b2 e7 3b c0 13 67 09 c9 ee 86 93 ea fd 8d cf 99 0d f9 72 5e 19 6d 43 3e d5 48 Data Ascii: PNGIHDRX;PLTE-*9tRNS;gr^mC>H
2024-03-29 00:41:46 UTC	1252	IN	Data Raw: 55 55 55 55 55 55 55 55 55 55 85 3d 38 10 00 00 00 00 00 f2 7f 6d 04 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 61 0f 0e 04 00 00 00 00 80 fc 5f 1b 41 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 d8 83 03 01 00 00 00 00 20 ff d7 46 50 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 15 f6 e0 40 00 00 00 00 00 c8 ff b5 11 54 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 Data Ascii: UUUUUUUUUU=8mUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa_AUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU FPUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU@TUUUUUUUUUUUUUUUU
2024-03-29 00:41:46 UTC	1252	IN	Data Raw: 9f d2 f8 41 79 63 4c 0f f3 36 f5 41 4b 3a cf 85 02 ca 4e 72 95 73 9b b8 2c ab 3a a4 4d d8 d0 a5 b4 65 48 8e ec 6b 81 12 9b ab ac 85 4c c8 91 a6 61 63 4e 3d b4 70 9e 5b 42 28 0b dd eb 30 88 f6 c0 c5 71 c7 f4 a0 0e 93 8c d4 3b 23 80 32 9e d7 c2 f3 50 41 3e bc e1 94 3d 2b 2b 6d ce 4c 17 56 87 21 3e 45 a5 0b 7a d4 09 38 37 dd 84 7a 64 29 79 99 fa 90 80 aa 09 a1 44 fa 3c 2a 31 af 38 98 eb 77 d1 d3 d6 2a 3f 42 af ec a1 39 cd 30 63 df e0 7c ca 4a 5d 78 4b af c1 96 90 91 22 5d 86 14 01 6c 86 b8 e8 40 41 c2 a3 e0 4b cb 98 d1 34 9a 70 47 73 41 01 ad 60 87 83 9c 91 3e 8f 35 94 41 94 c6 cf 28 49 3f 91 01 de 94 6b ba 18 bd 1f 89 f9 20 fa 61 fd 77 0e 32 65 a5 05 c5 1a 74 9a 3d 43 16 e8 40 b6 e9 51 28 a0 0f c3 84 3e 31 a7 ae 6a 41 0e 07 7d dd a3 f6 1e bc d8 d2 3c 4b e9 Data Ascii: AycL6AK:Nrs,:MeHkLacN=p[B(0q;#2PA>=++mLV!>Ez87zd)yD<18w?B90c\|J]xK"]l@AK4pGsA`>5A(I?k aw2et=C@Q(>1jA}<K
2024-03-29 00:41:46 UTC	1252	IN	Data Raw: 98 d0 04 4d 68 4d 71 89 96 76 1f 5a 69 1c 2e c6 12 b1 89 99 77 0f 25 46 c5 fe 98 ae 1a ff 64 92 25 05 5f 37 d9 6c ea 31 1f 7e a4 97 3d d3 28 35 f2 ca 6f 0e f2 12 7d e2 2a 6e 8e 99 f1 55 f7 28 d3 84 9c 06 9a cd 0d 73 f1 0b 05 d1 be 16 ac 70 1e df 68 9c 9f ea 8d eb 01 ea 87 d3 52 12 ba 32 d2 f6 fc 5d 0f a1 94 ea 1d 7e 22 7b f2 4c 6a b4 65 f2 a4 d2 95 96 f2 91 32 5d f8 10 5c c3 a3 6e fa bd c7 3b ba b6 01 7a dd 82 06 4b 7a a2 1f 69 f3 bc 6b 1a 3d c1 16 c3 9c 7e 42 8f fa a7 ab 54 ed b0 c8 3b a9 da eb fd e4 ce 7b c8 48 89 2e 8a e1 21 c5 52 96 49 3c 09 e8 da 2e a2 47 25 1b de f1 8a 3f db 2b da c1 a3 60 45 55 2e 4e dd d8 ca 3e 60 bc c4 86 7a 94 e4 b1 d7 eb 76 43 58 1b bb 38 66 c3 fb 7e 57 e8 63 42 af 58 fe 7d b0 db 1e f6 d9 33 23 d3 42 f9 d3 48 ca e5 80 79 f7 40 Data Ascii: MhMqvZi.w%Fd%_7l1~=(5o}*nU(sphR2]~"{Lje2]\n;zKzik=~BT;{H.!RI<.G%?+`EU.N>`zvCX8f~WcBX}3#BHy@
2024-03-29 00:41:46 UTC	1252	IN	Data Raw: 33 c5 c1 83 11 1b 41 97 2d b8 cf e6 1d 28 b3 23 94 aa 42 9a 22 bd cf f8 b3 88 0e 94 08 00 6e 8d a6 ba 7a 2d 95 e9 94 65 aa b4 93 91 ea 00 64 46 87 45 5c 73 8f 63 91 d4 61 d1 7b 11 7a 10 f3 7a e1 6d b8 36 f8 18 40 5f 79 4d 95 4b 52 7e 6e 07 74 d6 dc 2c e3 08 1a 29 4b 72 00 11 b1 b3 a2 1e 70 e3 0b 43 85 53 45 c6 70 a0 ad e9 92 c3 75 5e 85 0e bb 40 8d 35 ee 5c cc 6d 8b 5d a1 48 41 3f e3 0f 82 11 ee e3 0e 00 6d 4c 95 a6 ea 06 af 48 36 38 74 65 04 6b d1 29 8f 90 d4 c0 ce 42 38 73 40 48 0b 33 d2 af cb 6b e7 4f e1 84 53 79 1e 41 69 93 ad 22 63 1e 88 b0 c2 75 d7 57 19 57 4e b5 83 bd 11 d6 14 dc 58 b5 23 66 41 49 3c 47 bc 0f 6b e6 00 cb 84 95 1e 41 6c 04 a3 2b 65 5c 0d cc b1 07 20 14 e3 8a 26 e2 00 68 23 79 aa d4 50 e1 c7 09 e1 d4 bb 83 17 5b b3 71 a2 4e 61 2a f8 Data Ascii: 3A-(#B"nz-edFE\sca{zzm6@_yMKR~nt,)KrpCSEpu^@5\m]HA?mLH68tek)B8s@H3kOSyAi"cuWWNX#fAI<GkAl+e\ &h#yP[qNa*
2024-03-29 00:41:46 UTC	310	IN	Data Raw: 63 8c 31 c6 18 63 8c 31 c6 18 63 8c b1 3f ec c1 81 00 00 00 00 00 90 ff 6b 23 a8 aa aa aa aa aa aa aa aa aa aa aa aa aa aa b0 07 07 02 00 00 00 00 40 fe af 8d a0 aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa b0 07 07 02 00 00 00 00 40 fe af 8d a0 aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa 2a ec c1 81 00 00 00 00 00 90 ff 6b 23 a8 aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa 4a 7b 70 48 00 00 00 00 20 e8 ff 6b 6f 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: c1c1c?k#@@*k#J{pH ko

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.4	50567	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	380	OUT	GET /sadbundle/473513299895995753/images/model.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:46 UTC	820	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 2826 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 28 Mar 2024 19:49:23 GMT Expires: Fri, 28 Mar 2025 19:49:23 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/png Age: 17543 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:46 UTC	432	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 04 b0 04 03 00 00 00 d5 8f 29 3a 00 00 00 30 50 4c 54 45 00 00 00 fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe 63 de 4d 40 00 00 00 0f 74 52 4e 53 00 44 77 bb ee 11 cc 33 88 99 66 dd 55 22 aa ed cd 1a e7 00 00 0a 7a 49 44 41 54 78 da ec c1 81 00 00 00 00 80 a0 fd a9 17 a9 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 66 0f 0e 04 00 00 00 00 80 fc 5f 1b 41 55 55 55 55 55 55 55 55 55 55 55 55 55 55 85 3d 38 10 00 00 00 00 00 f2 7f 6d 04 55 55 55 55 55 55 55 85 dd fa 77 6d 22 8c e3 38 fe 55 b9 36 6a ab 5e 71 af bf 36 a9 51 41 a9 53 05 91 8e 17 4a 17 2b 68 40 44 Data Ascii: PNGIHDRX):0PLTEcM@tRNSDw3fU"zIDATxf_AUUUUUUUUUUUUUU=8mUUUUUUUwm"8U6j^q6QASJ+h@D
2024-03-29 00:41:46 UTC	1252	IN	Data Raw: ee bb 0b 0b 06 89 f3 b0 1a 40 bf ec ff 1f 35 87 71 84 95 ae 9a fa 39 85 cc a6 73 94 c2 a2 58 0d e0 b7 54 35 28 af 72 18 16 8b ce c3 9a 04 10 63 16 f8 24 b5 7c 40 dd 36 d9 81 3a 6b fa 28 1a 0b 4f 96 cd 4b 55 4d 50 6d 97 61 a5 ab ae c3 92 08 fd 6c 4d e0 98 d4 d2 c1 d0 a3 7c 9d 6a bd 1f a5 1b 37 ab 49 68 c2 6a d3 65 58 b4 9d 87 d5 41 bf c9 02 90 48 1d d3 00 5f c3 d3 40 da d2 1e b9 7b 26 d2 fa 23 b0 f5 6a a6 0b 5c 15 a3 0b 99 54 1d 24 77 2b 26 97 b8 0c 6b e4 3c ac f7 e8 c1 00 32 a9 a5 01 fc 12 09 d6 81 35 b1 5d 7a 47 64 89 a2 7e 64 d7 1b e6 6d b9 03 c5 33 a5 73 2e 9d 93 e0 29 c0 63 07 61 65 61 18 ce 2c 00 03 37 61 0d 4f 58 c7 45 6e 02 df f4 38 6c 4a 2d 13 c5 94 5b b6 eb 14 30 b4 1d 66 cf 40 0c 5b 22 12 44 f9 aa 17 bc 90 aa b8 98 c5 41 0c 5c 76 10 56 5f ef 63 Data Ascii: @5q9sXT5(rc$\|@6:k(OKUMPmalM\|j7IhjeXAH_@{&#j\T$w+&k<25]zGd~dm3s.)caea,7aOXEn8lJ-[0f@["DA\vV_c
2024-03-29 00:41:46 UTC	1142	IN	Data Raw: 52 5c 35 94 ef 1c 58 ef 51 fd 69 b9 0c 69 6f 66 07 1f 82 55 26 53 b5 31 b1 a9 b5 4b f4 77 0d 9d 1c f6 dc 48 fe 8e 3a f0 5e e0 55 5a 18 16 1f 0e a0 59 29 aa 3b 80 91 0d 2b 49 c1 32 13 96 de 1b 86 61 25 54 33 5a 38 1f 99 1b fc a7 8c 2a 23 31 b0 5e a6 a5 cf 1a 86 95 a0 bc 17 82 85 ad 5b bf 8c 9c 8b 49 60 c8 f8 38 cf be 62 99 03 4b 9f 3a 64 c1 fa ac 06 3b fb c9 da 26 ee ff cb 9b e8 fb 2a 39 38 16 c9 6f a6 ba da 90 bb e1 35 30 51 f1 43 b0 b8 d8 7d a7 44 17 d7 66 ac 0e a5 26 27 62 72 9e e5 59 9e 36 d9 b0 f4 79 56 85 b1 29 58 a9 24 03 33 bd 48 d1 85 56 07 23 6f 73 0f ab 93 ab 0a 2c ec 25 8d 69 7b 58 33 32 85 69 11 58 bc 80 bb 37 30 e4 82 c6 42 0f 07 46 3f 64 a0 60 d9 c8 81 95 7b 52 0a 58 68 4a bf e1 7d 11 6f a6 3e b5 44 b8 62 b7 c5 f9 eb e4 f6 58 81 85 5d 92 69 Data Ascii: R\5XQiiofU&S1KwH:^UZY);+I2a%T3Z8#1^[I`8bK:d;&98o50QC}Df&'brY6yV)X$3HV#os,%i{X32iX70BF?d`{RXhJ}o>DbX]i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.4	50584	34.111.113.62	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	553	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1711672894631; TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069; TapAd_3WAY_SYNCS=1!2136
2024-03-29 00:41:46 UTC	1101	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:46 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711672894631;Expires=Tue, 28 May 2024 00:41:46 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069;Expires=Tue, 28 May 2024 00:41:46 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!2136;Expires=Tue, 28 May 2024 00:41:46 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:46 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.4	50576	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	500	OUT	GET /crum?cm_dsp_id=46&external_user_id=5423405387794830934&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:46 UTC	980	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0f03aa605bc-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:46 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:46 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DGdqKZ7NMmliSti4EIUylRD7Ace9AytVaiYQDQFwWmW9rzbzSfdLhPYiQIYrNHHHruj1fqZSBRz2q%2BQc1IPkwsEfHtCd9pQ0pGxvlCHKJuuW6bAK8e9qDBWADkMhOk0PuqpHdwNh70Ivrg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.4	50565	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	382	OUT	GET /sadbundle/473513299895995753/images/lockout.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:46 UTC	820	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 3078 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 28 Mar 2024 19:30:56 GMT Expires: Fri, 28 Mar 2025 19:30:56 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/png Age: 18650 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:46 UTC	432	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 04 b0 08 03 00 00 00 10 7f c4 3b 00 00 00 9c 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 38 39 38 9b 9c 9b 69 6a 69 cd cd cd f3 f3 f3 44 45 44 5d 5d 5d e6 e6 e6 82 83 82 b4 b4 b4 a8 a8 a8 50 51 50 8f 8f 8f 76 76 76 da da da c1 c1 c1 89 04 1f 2a 00 00 00 23 74 52 4e 53 00 a0 f0 44 50 80 90 40 60 77 70 20 c0 31 bb b0 10 d0 57 a9 ca 06 99 de e5 2a f7 b5 38 65 16 88 68 d7 85 c7 b7 3b 7f 00 00 0a f6 49 44 41 Data Ascii: PNGIHDRX;PLTE898ijiDED]]]PQPvvv#tRNSDP@`wp 1W8eh;IDA
2024-03-29 00:41:46 UTC	1252	IN	Data Raw: 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 61 0f 0e 04 00 00 00 00 80 fc 5f 1b 41 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 d8 83 03 01 00 00 00 00 20 ff d7 46 50 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 15 f6 e0 40 00 00 00 00 00 c8 ff b5 11 54 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 Data Ascii: UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa_AUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU FPUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU@TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU
2024-03-29 00:41:46 UTC	1252	IN	Data Raw: 46 d7 ba 0e 2b 36 07 d8 6c 45 63 f1 fe 47 7d 27 ac f3 b1 78 e7 aa 78 4b bd 78 7f 55 da 43 4c 58 7f 97 a9 68 fd 75 58 fb 7a 0b 68 d4 99 78 7a e9 be 6d 84 25 5b 93 5c f6 58 9d db df bd 3f 6d 76 f8 10 56 a6 f4 2a 8d b0 46 e4 3f bb 76 b3 d2 30 10 05 60 74 88 06 b5 21 90 aa 83 55 4b 28 e4 fd df 51 ef 4c ea 18 a5 d0 6d e1 9c d5 fc dc ec be d5 90 7e d9 d8 5f 0a eb b4 6c 3d d4 66 c2 77 44 87 bc 0d 2b 8d 87 72 b3 fb 79 49 ed aa b2 cc eb e4 47 b7 1a 5e da b6 10 d6 cd 9b df ae 0b 2b ef ff 87 15 a3 55 04 d4 c2 0a f3 eb 12 3e a7 bf ed b6 87 89 66 18 bb 65 43 58 b7 6f 7a ee 7f 89 1f 0e ca c1 b0 76 17 eb 92 4a 6e 73 ed 3e 3f f6 e1 3e 55 c7 d8 8c a9 c8 4f fd f9 db 63 5d 56 bb f1 3c d9 4c 69 3e 6d 0e 52 78 8f d5 5d 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: F+6lEcG}'xxKxUCLXhuXzhxzm%[\X?mvV*F?v0`t!UK(QLm~_l=fwD+ryIG^+U>feCXozvJns>?>UOc]V<Li>mRx]
2024-03-29 00:41:46 UTC	142	IN	Data Raw: 9f 7b 58 fa 1a 56 9d ad 93 23 2c 9d c3 ca 84 85 4f c3 2a 6b ce 84 85 cb c3 ca 43 08 84 85 ab c3 8a 5e 78 14 e2 f3 b0 ca 29 ac e7 8e 48 58 f8 30 ac af c7 0d 2d ac ae 8f c5 4d d3 6b 58 dd 14 de 85 c5 71 03 de 86 65 2f 07 a4 2d ac 92 dd ea ca f2 1a d6 d2 f9 bb b0 38 20 c5 db d0 ce 9f 74 9a 94 f4 7f 7c d2 c1 3f c2 02 44 58 f8 1d 22 6f dd 00 00 00 00 00 00 c0 3d fc 01 6c 52 aa de 9b 70 cf 0f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: {XV#,O*kC^x)HX0-MkXqe/-8 t\|?DX"o=lRpIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.4	50558	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	1216	OUT	GET /cksync.php?cs=1&type=sov&ovsid=IZjJALZHIXjbUV1jQgKNiPaF&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1
2024-03-29 00:41:46 UTC	667	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1;Expires=Wed, 25 Sep 2024 00:41:46 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:46 GMT Connection: close
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:46 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.4	50575	38.98.69.175	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	419	OUT	GET /sn.ashx?ak=1 HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R33646_1131CD426_A4CB9467.1.000000000000000066060E47
2024-03-29 00:41:46 UTC	242	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: image/gif Expires: -1 Date: Fri, 29 Mar 2024 00:41:45 GMT Connection: close Content-Length: 43 Strict-Transport-Security: max-age=-394677706; includeSubDomains
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.4	50583	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	502	OUT	GET /crum?cm_dsp_id=8&external_user_id=0b2e56bd-231c-4ec2-ba2a-78dde1fe3a07&expiration=1743208899 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:46 UTC	992	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0f0b8543934-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:46 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:46 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i6bVsRrMWJwRMiR9R76Fn9L4L%2BFcWsPNhR7WBUko%2BF4Q9VyLfxpq4EPVY4QM%2FetYY1SiO311UEt%2BPhtA7TtNXl502qJyMdVZ%2FJ57p158EIJKihh%2BkEKFcZaRRSzIbWTgZ%2BFOfrVZCnncog%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.4	50582	3.228.195.183	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	780	OUT	GET /ct/0_0_0_162277/us/0/1/0/0/0/0/300/600/242/1063/0/pixel.gif?v=2_1&ttid=2&d=02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com&r=0.3609436411114877 HTTP/1.1 Host: l.evidon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:46 UTC	231	IN	HTTP/1.1 204 No Content Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 10 Connection: close X-Powered-By: Express ETag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI" Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.4	50589	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	503	OUT	GET /crum?cm_dsp_id=18&expiration=1727570499&external_user_id=1186a2d5-5631-4997-9cd5-d010d9cb78b1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:46 UTC	988	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0f09dca07f2-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:46 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:46 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VfwqRMeVID%2FtfR5Ak1AYqE4uGFfNG4qK%2BQJ9rPMkp6ogd%2Fk5Zvrg41RZ7Yj2y3jYZvHQW2pFB8fOjzYA74%2FJZQ3g4SmA80u2PQGwVHz86haWWdDRdlSqOSsvgtW6q3EGQoxr%2BnfKmehjVw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.4	50586	34.111.113.62	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	903	OUT	GET /idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=5423405387794830934&pt=55bb0499-3b94-4610-88d6-811dcbabb069%2Chttps%253A%252F%252Fx.bidswitch.net%252Fsync%253Fdsp_id%253D437%2526ssp%253Dcriteo%2526user_id%253D%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1711672894631; TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069; TapAd_3WAY_SYNCS=1!2136-2!2136
2024-03-29 00:41:46 UTC	1156	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:46 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711672894631;Expires=Tue, 28 May 2024 00:41:46 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=55bb0499-3b94-4610-88d6-811dcbabb069;Expires=Tue, 28 May 2024 00:41:46 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!2136-2!2136;Expires=Tue, 28 May 2024 00:41:46 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://x.bidswitch.net/sync?dsp_id=437&ssp=criteo&user_id= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.4	50590	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	383	OUT	GET /sadbundle/473513299895995753/images/cta_over.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:46 UTC	820	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 1642 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 28 Mar 2024 19:28:55 GMT Expires: Fri, 28 Mar 2025 19:28:55 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/png Age: 18771 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:46 UTC	432	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 04 b0 08 03 00 00 00 10 7f c4 3b 00 00 00 36 50 4c 54 45 00 00 00 e6 e6 e6 38 39 38 8f 8f 8f 63 64 63 ba bb ba db db db 42 43 42 58 59 58 d0 d0 d0 79 79 79 a4 a5 a4 9a 9a 9a 4d 4e 4d 84 84 84 6e 6f 6e c5 c5 c5 af b0 af 88 b9 b2 88 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 05 e2 49 44 41 54 78 da ec c1 81 00 00 00 00 80 a0 fd a9 17 a9 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 f6 e0 40 00 00 00 00 00 c8 ff b5 11 54 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 Data Ascii: PNGIHDRX;6PLTE898cdcBCBXYXyyyMNMnontRNS@fIDATx`@TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU
2024-03-29 00:41:46 UTC	1210	IN	Data Raw: 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 15 f6 e0 40 00 00 00 00 00 c8 ff b5 11 54 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 85 3d 38 10 00 00 00 00 00 f2 7f 6d 04 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 61 0f 0e 04 00 00 00 00 80 fc 5f 1b 41 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 Data Ascii: UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU@TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU=8mUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa_AUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.4	50585	18.160.10.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	482	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:46 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 caafbc8a9aa04b09dd564a3ddef60622.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: yAAC6JUwd1dznMB40cLngD5DnJ8KDpYyXvRQ9SaJ9TZn-R5LawBQoA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.4	50594	52.207.168.130	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	487	OUT	GET /map/ct=y/c=14701/tp=MTAI/tpid=6D366468-71AF-422B-99AB-138A6DAB94F7/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=d8cab0c14b874ae9dd7e20695ff4df37
2024-03-29 00:41:46 UTC	314	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.50.79 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-03-29 00:41:46 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.4	50588	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	487	OUT	GET /crum?cm_dsp_id=17&external_user_id=P1GEqyyk_OouTnS49Tqs&puid=&us_privacy=1YNN HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:46 UTC	988	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0f12d5e0581-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:46 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:46 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ftPa8FyenwPHBFkN99Suk9T49JU2w5IMLJlXbgsIncjioNbfYH0a3%2Bb6zptNwaRBsHSDTX%2FGH7csTmqprTp%2FLMJ4TELDOpOcO6DuCtAWqHqGo%2B8HekjExBuiKiyNlmX9QHR%2FvyaeVrfCEg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.4	50587	35.211.178.172	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	981	OUT	GET /sync?dsp_id=437&ssp=criteo&user_id= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1711672899; tuuid=ca57c23d-569f-46f3-a577-3e6f6bd561b5; tuuid_lu=1711672902; custom_data=gbp70V9NUXF0OUZvQk9QTkhjNGRpNFZSUWJVbGVockNINkhIRmZwd25zbVFEblRlSElnJTJCVzhZbUY1JTJGOW9oQmU0U1VvWWhkcFVvT2NRa0RaY2V5MlVCRyUyQllQNCUyRmV3RXFENGZLRXpnOFRUa0NpeGJpN3BTMWxKdWtLTDVONHZYYk1Ld0pZZWdmTGw3TnNvWTVuRVo4QjNoNEcxOWZqbUh1dlczaFNGeVNSMEFkZEdkUVhCQlZ0c2M4dUhGUWszSEJNSU94MQ
2024-03-29 00:41:46 UTC	783	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //ssp-sync.criteo.com/user-sync/match?p=gbp70V9NUXF0OUZvQk9QTkhjNGRpNFZSUWJVbGVockNINkhIRmZwd25zbVFEblRlSElnJTJCVzhZbUY1JTJGOW9oQmU0U1VvWWhkcFVvT2NRa0RaY2V5MlVCRyUyQllQNCUyRmV3RXFENGZLRXpnOFRUa0NpeGJpN3BTMWxKdWtLTDVONHZYYk1Ld0pZZWdmTGw3TnNvWTVuRVo4QjNoNEcxOWZqbUh1dlczaFNGeVNSMEFkZEdkUVhCQlZ0c2M4dUhGUWszSEJNSU94MQ&u=ca57c23d-569f-46f3-a577-3e6f6bd561b5 Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.4	50591	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	385	OUT	GET /sadbundle/473513299895995753/images/disc_panel.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:46 UTC	820	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 5026 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 28 Mar 2024 19:23:09 GMT Expires: Fri, 28 Mar 2025 19:23:09 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 07 Mar 2024 15:58:32 GMT Content-Type: image/png Age: 19117 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 00:41:46 UTC	432	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 04 b0 04 03 00 00 00 d5 8f 29 3a 00 00 00 30 50 4c 54 45 00 00 00 c0 c0 c0 f0 f0 f0 e0 e0 e0 d0 d0 d0 b0 b0 b0 49 49 49 9f 9f 9f 13 13 13 6c 6c 6c 25 25 25 8f 8f 8f 37 37 37 5b 5b 5b 7d 7d 7d ff ff ff 1a fd 04 f0 00 00 00 0f 74 52 4e 53 e6 f8 fd fc fa f7 ed f5 e8 f0 e9 f3 eb ee f2 08 a9 31 f0 00 00 13 12 49 44 41 54 78 da ec 9c c9 6f 23 45 14 87 7f 49 9c b6 e3 35 ac 62 09 2a c7 01 11 40 c2 66 60 04 88 c5 21 ec 12 60 13 84 c4 72 88 11 48 5c 40 46 80 14 24 10 31 61 39 20 a4 18 72 00 4e 31 88 e5 46 0c ff 80 1b 84 38 92 20 b8 c7 12 07 04 97 a4 bc 25 ce d6 bc 57 ee 26 76 6c 3c 84 19 07 08 f5 c9 33 53 55 dd ef 55 d7 37 72 a7 ba e7 69 a0 d1 68 34 1a 8d 46 a3 d1 68 34 1a 8d 46 a3 d1 68 34 1a 8d 46 Data Ascii: PNGIHDRX):0PLTEIIIlll%%%777[[[}}}tRNS1IDATxo#EI5b*@f`!`rH\@F$1a9 rN1F8 %W&vl<3SUU7rih4Fh4Fh4F
2024-03-29 00:41:46 UTC	1252	IN	Data Raw: 64 bd dd 2c 0b 6f d4 1d 59 43 d5 3d 68 ba 6c 1d be 83 b7 e2 c8 72 8d 8f 41 d3 45 96 00 12 8e ac e5 e7 0a 29 68 fe 7c 07 3f 9d c1 a4 23 ab 90 5a 4e 42 f3 e7 cf 86 8b 79 bf 74 64 8d c1 a5 ef f0 ed 6f 1d 78 63 d5 78 eb f0 7a 45 d4 b8 7b 16 10 d8 c3 90 be c3 b7 bf cf 52 1b 2b f5 3e cb 33 25 53 dc b5 80 be 2d 78 2e 85 46 a3 d1 68 34 1a 8d 46 a3 d1 68 34 1a 8d 46 a3 d1 68 34 1a 8d 46 a3 d1 9c 02 5d ce fc 97 31 32 b1 b7 d0 81 37 ad 1c 88 be f5 be 75 34 78 16 87 23 34 8c d3 c2 58 41 3b 81 14 fe 1a 02 3d 20 70 ef 2d f7 02 5f 5b 8f a1 95 c2 dd 19 47 d6 a9 a7 77 6f f4 40 16 4d 7c 1a 49 05 7a 81 5b 66 e0 a5 22 89 cc 81 c9 32 f8 eb b2 5c 15 34 f0 98 c7 5a 96 f7 e1 9b 46 30 58 47 21 7f 70 b2 43 c8 9a b7 32 ce 5a 8e b5 ac a1 54 ec 7b ae ea 9a 9f 38 0d 59 69 91 fa 5f c8 Data Ascii: d,oYC=hlrAE)h\|?#ZNBytdoxcxzE{R+>3%S-x.Fh4Fh4Fh4F]127u4x#4XA;= p-_[Gwo@M\|Iz[f"2\4ZF0XG!pC2ZT{8Yi_
2024-03-29 00:41:46 UTC	1252	IN	Data Raw: 88 b3 77 69 6a 77 43 56 ba 0a 67 eb 10 0e 4a f7 0e 6f 1d 4c da 69 d4 b0 6a 6f 1d 6c 59 03 e3 38 81 c9 0c a5 5c 1d 85 6f 87 ae 47 00 14 d3 4b 59 ea ad 83 2d 2b 7d 32 62 cb 2a 8c 46 6c 59 7c 3c a7 64 15 ee 8c f3 ca fd d6 1d 51 de 94 d6 11 2d f2 d6 8c 56 13 28 89 2b e1 aa e6 d3 f2 76 69 94 1e 4c 38 b2 9c b6 c4 da 68 49 6d 4a cd 3f 64 f9 2a 53 71 78 ac 2c d8 f8 16 d2 97 9d db 90 35 5f 67 59 25 da 94 fa 2a 0f 49 bf f5 70 34 f5 f1 e5 f1 ac c1 5b 61 67 53 aa 64 05 d5 a6 f4 ce a8 89 f9 3d 78 23 74 3d 02 a0 98 5e ca 52 ef b3 6c 59 43 91 77 6d 59 83 e5 1f 6c 59 ea 21 45 c9 72 97 97 95 05 7e f0 50 8f 3b cf 9b 40 44 7d 91 17 2a 26 bc 89 d8 50 f4 22 89 05 39 ef c8 72 da b2 e9 71 c7 91 85 d9 5b 04 90 c8 81 58 8e 61 28 7e 41 43 96 6b 0b ce e3 ce ec cd 12 4f 58 e7 c3 9f Data Ascii: wijwCVgJoLijolY8\oGKY-+}2bFlY\|<dQ-V(+viL8hImJ?dSqx,5_gY%Ip4[agSd=x#t=^RlYCwmYlY!Er~P;@D}&P"9rq[Xa(~ACkOX
2024-03-29 00:41:46 UTC	1252	IN	Data Raw: 0b be 24 64 8c 34 ac 08 58 77 03 2c 73 3d f8 6b 0d cf ea 3b 6b 8a 45 9a 34 0e 60 f5 b7 f9 ce 62 8d 2c 2c f7 0f 9d fd ce d2 b6 ef b2 d0 a9 6e 7c c1 a3 67 a4 0e 1d 4a 42 c6 58 5e f3 b0 12 1b 78 95 3b 74 d8 5b fb ec 0f 1d 7e bb 1e 4a dc 8f 95 b1 87 15 0e 1d be f0 9c 13 75 0b de ed 61 c5 8f 38 74 08 1a c7 c0 a1 c4 f1 58 cd df 16 37 f5 8e 80 c5 63 60 b1 86 c1 62 94 75 b6 e8 32 89 c9 db 6d 41 69 64 5a 16 1a 44 94 1c 61 a1 67 3c 8e 86 de b8 1f ec 70 50 5a 12 32 c6 d3 2b 1e 96 fb 5f 44 dc 41 e9 8b 3d 43 a5 15 93 a7 39 28 f5 ae 87 d4 c7 2b 06 6b cb 19 3b 28 dd c9 73 2e 01 59 f0 3d 0f ab be 9d 83 d2 a0 71 24 42 c9 8a c9 35 c0 5a 35 75 fa 87 f6 c9 0d 5c e5 31 b0 58 c3 60 31 ca 3a 2f 8e 6e 9d 70 d9 c9 db 6d 41 69 f4 ab 2c 34 88 28 39 c2 42 cf c0 33 bf e5 4e 77 8e b9 Data Ascii: $d4Xw,s=k;kE4`b,,n\|gJBX^x;t[~Jua8tX7c`bu2mAidZDag<pPZ2+_DA=C9(+k;(s.Y=q$B5Z5u\1X`1:/npmAi,4(9B3Nw
2024-03-29 00:41:46 UTC	838	IN	Data Raw: a1 8e f8 83 52 60 ed 93 4c 48 a6 83 08 a6 08 b0 4c c6 f8 22 31 90 4c 25 c2 60 99 3a 1c 8f f5 c7 63 92 eb 14 42 06 b6 89 d4 57 5f 33 a4 d7 db 2b 63 18 23 22 c0 ef 21 c0 a2 a1 89 c1 72 4a 08 b3 98 67 89 ec 92 5e 27 f9 c3 42 a1 60 23 d6 8e 03 f5 dc ec 90 b2 56 0d 6f 70 a3 fd 23 9c ee 58 a3 0e 27 66 d8 e9 0e 1d 44 fc e9 0e 46 ce d6 fb 13 ae 07 9d 1b 00 16 11 06 8b d3 1d 55 de a8 52 95 e8 14 42 06 b6 89 f4 31 49 e9 ab ec e2 74 c7 02 fc 1e 02 2c 1a 9a 18 2c a7 84 30 8b 79 96 e8 76 69 bd 4e d4 0b d5 56 cc 70 9f b6 19 75 54 5b 95 77 f5 e0 7f c7 de 4e cc d8 98 c8 18 0b 06 3b 63 fe 5d b9 16 89 3d 57 ed c4 8c 4a f5 f2 a9 85 a7 d4 41 d1 29 24 cf 22 f1 bf aa 57 9d ca 18 74 0a c9 b1 48 ec 2d 0f a4 83 4e 22 85 8c 51 54 51 45 15 55 d4 ff 5b 97 52 b7 c4 8a fa 77 6b fe 0b Data Ascii: R`LHL"1L%`:cBW_3+c#"!rJg^'B`#Vop#X'fDFURB1It,,0yviNVpuT[wN;c]=WJA)$"WtH-N"QTQEU[Rwk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.4	50592	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	462	OUT	GET /rum?cm_dsp_id=4&external_user_id=3118679036834831413 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:46 UTC	990	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0f149531757-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:46 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:46 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FM3QyqpPiR%2FLrVS%2Fr1mW5GrKzuVYwlr6RMck%2Fh%2BzQZyRvi9eI00tROVKPD90qFHB9q3NXEQj3CJncIzsQ9DH93BmhI0u4N8Y7SASKsiWw0gTRVmcRL%2BWe8dId4i6HVKq7fWccFI4XP6sZw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.4	50593	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	481	OUT	GET /crum?cm_dsp_id=41&external_user_id=1b407dde-ed65-11ee-9900-64996dd289d9 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:46 UTC	986	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0f17c7787a1-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:46 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:46 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ycMXTx9hr1%2FoV4BOG8ELx6DXj8ixWtXlnB3UmUQlqlkOzlsRjsh4EB3vFuwK2aeYHkENuNmOE%2B496PUW2UfrtGedtqDGD6pzp%2B2sHDwi3X20hOH%2BKg2gyIHG7d4bjemTZk3kvuxm6ScDCQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.4	50570	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	1243	OUT	GET /cksync.php?cs=1&type=55953&ovsid=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&gdpr=0&gdpr_consent= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1
2024-03-29 00:41:46 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1;Expires=Fri, 12 Apr 2024 00:41:46 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:46 GMT Connection: close
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:46 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.4	50574	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	1304	OUT	GET /cksync.php?cs=1&vsid=3546744890180387000V10&type=adb&refUrl=&vid=16728938013546744890180387000V10&ovsid=ZgYOPgAB7vmzSgAj&axid_e=&_test=ZgYOPgAB7vmzSgAj HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1
2024-03-29 00:41:46 UTC	659	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-adb=ZgYOPgAB7vmzSgAj~~1;Expires=Wed, 25 Sep 2024 00:41:46 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:46 GMT Connection: close
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:46 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.4	50578	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	1301	OUT	GET /cksync.php?cs=1&vsid=3546744890180387000V10&type=opx&refUrl=&vid=16728938013546744890180387000V10&axid_e=&ovsid=51c60a0a-b2b1-4df8-a524-32544527bc2c HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1
2024-03-29 00:41:46 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1;Expires=Wed, 25 Sep 2024 00:41:46 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:46 GMT Connection: close
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:46 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.4	50596	107.22.223.168	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	752	OUT	GET /s/75145?bidder_id=195755&bidder_uuid=6D366468-71AF-422B-99AB-138A6DAB94F7 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CiEKBQgMENEXCgYI0gEQxxcKBQgGEMcXCgkI_____wcQ0Rc; lidid=07571c18-3f04-4602-a656-288806fb242c
2024-03-29 00:41:46 UTC	695	IN	HTTP/1.1 303 See Other Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Length: 0 Connection: close Location: https://x.bidswitch.net/syncd?dsp_id=256&user_group=2&user_id=07571c18-3f04-4602-a656-288806fb242c&redir=//i.liadm.com/s/52176?bidder_id%3D5298%26bidder_uuid%3D$%7BBSW_UID%7D Set-Cookie: _li_ss=CigKBQgGEMcXCgUIDBDRFwoJCP____8HENEXCgUICxDHFwoGCNIBEMcX; Max-Age=2592000; Expires=Sun, 28 Apr 2024 00:41:46 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=07571c18-3f04-4602-a656-288806fb242c; Max-Age=63072000; Expires=Sun, 29 Mar 2026 00:41:46 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.4	50579	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	1221	OUT	GET /cksync.php?cs=8&type=spa&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1; data-mn2=3546744950180300000V10~~1
2024-03-29 00:41:46 UTC	442	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 56 Content-Type: image/gif p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:46 GMT Connection: close
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:46 UTC	13	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.4	50577	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	1260	OUT	GET /cksync.php?cs=1&type=58601&ovsid=u_99ef042a-5492-47e4-9c9a-171f0fce9075 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1; data-mn2=3546744950180300000V10~~1
2024-03-29 00:41:46 UTC	681	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1;Expires=Mon, 13 May 2024 00:41:46 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:46 GMT Connection: close
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:46 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.4	50597	34.232.211.121	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	718	OUT	GET /qmap?c=240&tp=PUBM&tpid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=d8cab0c14b874ae9dd7e20695ff4df37
2024-03-29 00:41:46 UTC	313	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.61.0 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-03-29 00:41:46 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.4	50601	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	574	OUT	GET /crum?cm_dsp_id=133&external_user_id=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&pi=index&gpdr=&gdpr_consent=&us_privacy=1YNN&user_id=ZgYOPsAoJI0AAAi4ADlhawAA%261617 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:46 UTC	982	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0f35c645b34-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:46 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:46 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kl49vwWzUZAooMOt4C0OM1%2BjLTCja5LIUBGf80fccEKZIeq5wzDg02hHojxlUJ9MixesptERaTNdDNqTW64GoX1Mt9vPnrM7TmVkV22jMVremyGGIqbdJgSZo9eiOgQxr9oU6tO%2FTtHySg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.4	50602	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	486	OUT	GET /crum?cm_dsp_id=111&external_user_id=568962836176703241&expiration=1712882503 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:46 UTC	986	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0f38bad0a05-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:46 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:46 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5r1DR0jYWULGr%2B%2BhLkO%2FTDs3VfDS9y6g6vbXo6qmGbZo1hruooPjXblgZxwhHAcZTuBigZOi4duNpXqn9lOChmtmOGJvCGcTJrIflPh64Wf2W4Yc%2BPaI7fAvHEjwL0PmglS1drm6uqKnTQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.4	50600	52.71.168.94	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	641	OUT	GET /?companyId=673&id=pubmatic_id:6D366468-71AF-422B-99AB-138A6DAB94F7 HTTP/1.1 Host: io.narrative.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:46 UTC	391	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:46 GMT Location: https://io.narrative.io/?io.narrative.guid.v2=1f441760-ed65-11ee-b039-16c962239a11&companyId=673&id=pubmatic_id:6D366468-71AF-422B-99AB-138A6DAB94F7 Server: nginx/1.22.1 Set-Cookie: io.narrative.guid.v2=1f441760-ed65-11ee-b039-16c962239a11; Max-Age=47278080; SameSite=None; Secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.4	50603	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	472	OUT	GET /rum?cm_dsp_id=123&external_user_id=TjMxskYIXe9LRDfaNGZeQmalMCs HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:46 UTC	982	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0f3c8e73894-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:46 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:46 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=45bGgvXhBdjDFuDSNjmEtMGBghZOim8VSWm4nbrvLIRucIjcNgnd4t89exWzwm7BdiWBSZfciM9DZKTTcepKn61%2BRN8r8BaCVyzJQmeUzAN17JE5PJkNPzS%2BzOBoT6SzbOiiM1ZB8B8jwg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.4	50599	3.222.105.150	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	657	OUT	GET /tag/?id=20909&user_id=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1 Host: bpi.rtactivate.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:46 UTC	140	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.4	50608	104.18.36.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	508	OUT	GET /rum?cm_dsp_id=64&external_user_id=316c09dc-77f5-496c-8783-9ae88f47c0a1-66060e46-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: r.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; CMPS=1617; CMPRO=1617
2024-03-29 00:41:47 UTC	970	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 86bbd0f46d9b2424-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZgYOPsAoJI0AAAi4ADlhawAA; Path=/; Domain=casalemedia.com; Expires=Sat, 29 Mar 2025 00:41:46 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1617; Path=/; Domain=casalemedia.com; Expires=Thu, 27 Jun 2024 00:41:46 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y4n9OqJlFeNCrCpz%2B%2Bf1W365kVy88aw7APOFVCLt9ZcbF%2FIRbPIVlgXc8Y66Npq1QIdv6Om3xtpg8S%2FCQhUNkHb5qnyRKwKioDvm0hWFvmTsSKHANebbdixHyXSkT9l25Fa2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-29 00:41:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.4	50595	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	1734	OUT	GET /cksync.html?cs=1&vsid=3546744890180387000V10&type=pub&refUrl=&vid=16729006893546744890180387000V10&axid_e=&ovsid=6D366468-71AF-422B-99AB-138A6DAB94F7 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1; data-mn2=3546744950180300000V10~~1; data-url=RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005~~1
2024-03-29 00:41:47 UTC	694	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1;Expires=Mon, 13 May 2024 00:41:47 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:47 GMT Connection: close
2024-03-29 00:41:47 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-03-29 00:41:47 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.4	50609	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	1771	OUT	POST /p?s=2023538075&t=1711672906258&_I=&_AO=0&_NOL=0&etag=performance&etrg=backgroundPost&outcm=performance&usergenf=0&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&test=drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless&rid=2vl5n89j0c3hk&pd=unknown&pt=home&A_utm=%7B%22GAM_MID_RIGHT_C_BRSTIME%22%3A4795%2C%22GAM_MID_RIGHT_C_FTIME%22%3A9645%2C%22GAM_MID_RIGHT_C_RTIME%22%3A22820%7D HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:47 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:47 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.4	50607	34.194.241.212	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	465	OUT	GET /s/52164?bidder_id=5298&licd=&bidder_uuid=ca57c23d-569f-46f3-a577-3e6f6bd561b5 HTTP/1.1 Host: i6.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=07571c18-3f04-4602-a656-288806fb242c
2024-03-29 00:41:46 UTC	226	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-03-29 00:41:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.4	50612	74.119.119.73	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	956	OUT	GET /user-sync/match?p=gbp70V9NUXF0OUZvQk9QTkhjNGRpNFZSUWJVbGVockNINkhIRmZwd25zbVFEblRlSElnJTJCVzhZbUY1JTJGOW9oQmU0U1VvWWhkcFVvT2NRa0RaY2V5MlVCRyUyQllQNCUyRmV3RXFENGZLRXpnOFRUa0NpeGJpN3BTMWxKdWtLTDVONHZYYk1Ld0pZZWdmTGw3TnNvWTVuRVo4QjNoNEcxOWZqbUh1dlczaFNGeVNSMEFkZEdkUVhCQlZ0c2M4dUhGUWszSEJNSU94MQ&u=ca57c23d-569f-46f3-a577-3e6f6bd561b5 HTTP/1.1 Host: ssp-sync.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=08dfbe43-cb0c-4918-bda8-5b9f2b385f1d
2024-03-29 00:41:47 UTC	372	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 29 Mar 2024 00:41:46 GMT server: Kestrel cache-control: no-store,max-age=0 location: https://ups.analytics.yahoo.com/ups/58301/sync?_origin=0&redir=true&uid=k-HLV7lAvpZmDKomHOA1EJPqcyuceA5ebKjKDVyQ cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.4	50605	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:46 UTC	1283	OUT	GET /cksync.php?cs=1&type=58259&ovsid=VqUQt33vvQ3VT5KZdpyI&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1; data-mn2=3546744950180300000V10~~1
2024-03-29 00:41:47 UTC	663	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ylm=VqUQt33vvQ3VT5KZdpyI~~1;Expires=Wed, 25 Sep 2024 00:41:47 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:47 GMT Connection: close
2024-03-29 00:41:47 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:47 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.4	50611	35.211.178.172	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	981	OUT	GET /sync?dsp_id=437&ssp=criteo&user_id= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1711672899; tuuid=ca57c23d-569f-46f3-a577-3e6f6bd561b5; tuuid_lu=1711672902; custom_data=gbp70V9NUXF0OUZvQk9QTkhjNGRpNFZSUWJVbGVockNINkhIRmZwd25zbVFEblRlSElnJTJCVzhZbUY1JTJGOW9oQmU0U1VvWWhkcFVvT2NRa0RaY2V5MlVCRyUyQllQNCUyRmV3RXFENGZLRXpnOFRUa0NpeGJpN3BTMWxKdWtLTDVONHZYYk1Ld0pZZWdmTGw3TnNvWTVuRVo4QjNoNEcxOWZqbUh1dlczaFNGeVNSMEFkZEdkUVhCQlZ0c2M4dUhGUWszSEJNSU94MQ
2024-03-29 00:41:47 UTC	783	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 29 Mar 2024 00:41:47 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //ssp-sync.criteo.com/user-sync/match?p=gbp70V9NUXF0OUZvQk9QTkhjNGRpNFZSUWJVbGVockNINkhIRmZwd25zbVFEblRlSElnJTJCVzhZbUY1JTJGOW9oQmU0U1VvWWhkcFVvT2NRa0RaY2V5MlVCRyUyQllQNCUyRmV3RXFENGZLRXpnOFRUa0NpeGJpN3BTMWxKdWtLTDVONHZYYk1Ld0pZZWdmTGw3TnNvWTVuRVo4QjNoNEcxOWZqbUh1dlczaFNGeVNSMEFkZEdkUVhCQlZ0c2M4dUhGUWszSEJNSU94MQ&u=ca57c23d-569f-46f3-a577-3e6f6bd561b5 Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.4	50616	52.71.168.94	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	766	OUT	GET /?io.narrative.guid.v2=1f441760-ed65-11ee-b039-16c962239a11&companyId=673&id=pubmatic_id:6D366468-71AF-422B-99AB-138A6DAB94F7 HTTP/1.1 Host: io.narrative.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io.narrative.guid.v2=1f441760-ed65-11ee-b039-16c962239a11
2024-03-29 00:41:47 UTC	242	IN	HTTP/1.1 204 No Content Cache-Control: no-cache Date: Fri, 29 Mar 2024 00:41:47 GMT Server: nginx/1.22.1 Set-Cookie: io.narrative.guid.v2=1f441760-ed65-11ee-b039-16c962239a11; Max-Age=47278080; SameSite=None; Secure Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.4	50613	35.211.178.172	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	812	OUT	GET /syncd?dsp_id=256&user_group=2&user_id=07571c18-3f04-4602-a656-288806fb242c&redir=//i.liadm.com/s/52176?bidder_id%3D5298%26bidder_uuid%3D$%7BBSW_UID%7D HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1711672899; tuuid=ca57c23d-569f-46f3-a577-3e6f6bd561b5; tuuid_lu=1711672902
2024-03-29 00:41:47 UTC	273	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 29 Mar 2024 00:41:47 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //i.liadm.com/s/52176?bidder_id=5298&bidder_uuid=ca57c23d-569f-46f3-a577-3e6f6bd561b5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.4	50618	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	2738	OUT	POST /p?s=2023538075&t=F8vyoN48RWZwtIiS,0.33509213811447136&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03C2WZIAfuc5wHrRWD%04_w%03www.yahoo.com%2F%04_rid%032vl5n89j0c3hk%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLQ1AMEACWH4gQEAMAdNgUEAZlCNwcEACPSVQgEAWVv0QoFVkNEUEE%04A_utm%03%7B%22perf_lcp%22%3A2660%2C%22perf_lcp_rating%22%3A%22needs-improvement%22%2C%22perf_lcp_elmt%22%3A%22img%22%2C%22perf_lcp_id%22%3A%22StretchedBox%20Objf(cv)%20W(100%25)%22%2C%22perf_lcp_slk%22%3A%22%22%2C%22perf_lcp_url%22%3A%22https%3A%2F%2Fs.yimg.com%2Fuu%2Fapi%2Fres%2F1.2%2FyzJLCRT._OcfHpmpL5upqg--~B%2FZmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--%2Fhttps%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-03%2Fbbc85280-ed48-11ee-aefe-2ec31e2ca7f6.cf.webp%22%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031711672906%04_ms%03500%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:47 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:47 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.4	50622	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	1462	OUT	GET /kb/index?locale=en_US&page=product&y=PROD_ACCT HTTP/1.1 Host: help.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:47 UTC	626	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:47 GMT Content-Length: 0 Server: ATS Expires: -1 Pragma: no-cache X-Frame-Options: SAMEORIGIN Content-Language: en-US Location: https://help.yahoo.com/kb/account Set-Cookie: JSESSIONID=node0e2uazhk9ge811c2chg1hblsac401687.node0; Path=/kb Cache-Control: max-age=0, private Age: 0 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.4	50623	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	843	OUT	POST /event.png?impid=f6401e7fd4004956be533ce8a493d3fa&flavor=1&gdpr=&gdpr_consent=&isbxdms=6932&b6=6246&iabv5=5832&lftb=6346&sftb=6346&eoid=25&engofcsms=7019&dvp_pageEng=true HTTP/1.1 Host: tpsc-ue1.doubleverify.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:47 UTC	340	IN	HTTP/1.1 204 No Content Date: Fri, 29 Mar 2024 00:41:47 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://02811bfe81fdfabbd0e0e460914172e9.safeframe.googlesyndication.com Access-Control-Allow-Credentials: true Expires: 2024-03-28T00:41:47 Pragma: no-cache Cache-Control: max-age=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.4	50614	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	1347	OUT	GET /cksync.php?cs=1&vsid=3546744890180387000V10&type=ctn&refUrl=&vid=16728938013546744890180387000V10&ovsid=0bf86f4e7d934cb7b5daae7a5c7d8db5&axid_e=&y=null&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1; data-mn2=3546744950180300000V10~~1
2024-03-29 00:41:47 UTC	675	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1;Expires=Wed, 25 Sep 2024 00:41:47 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:47 GMT Connection: close
2024-03-29 00:41:47 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:47 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.4	50624	3.225.218.10	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	1182	OUT	GET /ups/58301/sync?_origin=0&redir=true&uid=k-HLV7lAvpZmDKomHOA1EJPqcyuceA5ebKjKDVyQ HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0:18z8~2hk0:175w~2hk0"
2024-03-29 00:41:47 UTC	872	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:47 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0:18z8~2hk0:175w~2hk0:18zh~2hk0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 29-Mar-2025 00:41:47 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58824/sync?_origin=0&dpid=58301&ovsid=k-HLV7lAvpZmDKomHOA1EJPqcyuceA5ebKjKDVyQ&redir=true Age: 0 Connection: close Server: ATS/9.1.10.106 Set-Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; Expires=Sat, 29 Mar 2025 06:41:47 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.4	50615	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	1258	OUT	GET /cksync.php?cs=1&type=58280&ovsid=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1; data-mn2=3546744950180300000V10~~1
2024-03-29 00:41:47 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1;Expires=Wed, 25 Sep 2024 00:41:47 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:47 GMT Connection: close
2024-03-29 00:41:47 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:47 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.4	50617	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	1420	OUT	GET /cksync.php?cs=1&vsid=3546744890180387000V10&type=dtm&refUrl=&vid=16728938013546744890180387000V10&ovsid=AAABzNBJmlEeqwMiMonlAAAAAAA&axid_e=&expiration=1711759301&nuid={{AXID}}&gpp_sid=-1&gpp=DBAA&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1; data-mn2=3546744950180300000V10~~1
2024-03-29 00:41:47 UTC	670	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-dtm=AAABzNBJmlEeqwMiMonlAAAAAAA~~1;Expires=Wed, 25 Sep 2024 00:41:47 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:47 GMT Connection: close
2024-03-29 00:41:47 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:47 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.4	50619	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	1323	OUT	GET /cksync.php?cs=1&type=57926&ovsid=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1; data-mn2=3546744950180300000V10~~1
2024-03-29 00:41:47 UTC	686	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1;Expires=Mon, 13 May 2024 00:41:47 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:47 GMT Connection: close
2024-03-29 00:41:47 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:47 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.4	50620	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	1347	OUT	GET /cksync.php?cs=1&vsid=3546744890180387000V10&type=ctn&refUrl=&vid=16729006893546744890180387000V10&ovsid=0bf86f4e7d934cb7b5daae7a5c7d8db5&axid_e=&y=null&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1; data-mn2=3546744950180300000V10~~1
2024-03-29 00:41:47 UTC	675	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1;Expires=Wed, 25 Sep 2024 00:41:47 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:47 GMT Connection: close
2024-03-29 00:41:47 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:47 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.4	50628	107.22.223.168	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	759	OUT	GET /s/52176?bidder_id=5298&bidder_uuid=ca57c23d-569f-46f3-a577-3e6f6bd561b5 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CigKBQgGEMcXCgUIDBDRFwoJCP____8HENEXCgUICxDHFwoGCNIBEMcX; lidid=07571c18-3f04-4602-a656-288806fb242c
2024-03-29 00:41:47 UTC	609	IN	HTTP/1.1 303 See Other Date: Fri, 29 Mar 2024 00:41:47 GMT Content-Length: 0 Connection: close Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=liveintent&ttd_tpi=1&gdpr=0 Set-Cookie: _li_ss=Ci8KBQgKEMcXCgUIBhDHFwoFCAwQ0RcKCQj_____BxDRFwoFCAsQxxcKBgjSARDHFw; Max-Age=2592000; Expires=Sun, 28 Apr 2024 00:41:47 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=07571c18-3f04-4602-a656-288806fb242c; Max-Age=63072000; Expires=Sun, 29 Mar 2026 00:41:47 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.4	50625	52.223.40.198	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	637	OUT	GET /track/cmf/generic?ttd_pid=stickyads&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=de959f04-5668-4cc4-9c45-9e4a8efcd9a8; TDCPM=CAESFwoIcHVibWF0aWMSCwjEkpDP4OTnPBAFEhQKBXRhcGFkEgsI7qj62-Dk5zwQBRIZCgpyaWdodG1lZGlhEgsI8KWh6ODk5zwQBRIVCgZjYXNhbGUSCwi81bH04OTnPBAFGAEgAygCMgsIxp79iPfk5zwQBTgBWgV0YXBhZGAC
2024-03-29 00:41:47 UTC	691	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:47 GMT Content-Length: 287 Connection: close server: Kestrel location: https://ads.stickyadstv.com/user-registering?dataProviderId=208&userId=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&gdpr=0&gdpr_consent= set-cookie: TDID=de959f04-5668-4cc4-9c45-9e4a8efcd9a8; expires=Sat, 29 Mar 2025 00:41:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjEkpDP4OTnPBAFEhQKBXRhcGFkEgsI7qj62-Dk5zwQBRIZCgpyaWdodG1lZGlhEgsI8KWh6ODk5zwQBRIVCgZjYXNhbGUSCwi81bH04OTnPBAFGAEgASgCMgsIjNDQ8Pfk5zwQBTgBWglzdGlja3lhZHNgAg..; expires=Sat, 29 Mar 2025 00:41:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-29 00:41:47 UTC	287	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 74 69 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 75 73 65 72 2d 72 65 67 69 73 74 65 72 69 6e 67 3f 64 61 74 61 50 72 6f 76 69 64 65 72 49 64 3d 32 30 38 26 75 73 65 72 49 64 3d 64 65 39 35 39 66 30 34 2d 35 36 36 38 2d 34 63 63 34 2d 39 63 34 35 2d 39 65 34 61 38 65 66 63 64 39 61 38 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 74 69 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 75 73 65 72 2d 72 65 67 69 73 74 65 72 69 6e 67 3f 64 61 74 61 50 72 6f 76 69 64 65 72 49 64 3d 32 30 38 26 75 73 65 72 49 64 3d 64 65 39 35 39 66 30 34 2d 35 36 36 38 2d 34 63 63 34 2d 39 63 34 35 2d 39 65 34 61 38 Data Ascii: Redirecting to: <a href="https://ads.stickyadstv.com/user-registering?dataProviderId=208&userId=de959f04-5668-4cc4-9c45-9e4a8efcd9a8&gdpr=0&gdpr_consent=">https://ads.stickyadstv.com/user-registering?dataProviderId=208&userId=de959f04-5668-4cc4-9c45-9e4a8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.4	50621	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	1481	OUT	GET /kb/account HTTP/1.1 Host: help.yahoo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=node0e2uazhk9ge811c2chg1hblsac401687.node0; A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:48 UTC	718	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:47 GMT Content-Type: text/html;charset=utf-8 Server: ATS Expires: 0 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache X-Frame-Options: SAMEORIGIN Content-Language: en-US Set-Cookie: JSESSIONID=node088c9oh1ve9hy12pogs0p4ua76401395.node0; Path=/kb Set-Cookie: _csrf=d63c8533-fbe4-4922-a66e-9b0a02546e63; Path=/kb; HttpOnly Age: 2 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 37 64 65 62 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 0a 0a 0a 0a 0a 0a 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 69 64 3d 22 53 74 65 6e 63 69 6c 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e Data Ascii: 7deb<!doctype html><html lang="en-US" id="Stencil"><head><meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"><meta name="viewport" content="width=device-width,initial-scale=1.0,maximum-scale=1.0,user-scalable=no" />
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 64 65 6e 79 5f 6c 69 73 74 3a 5b 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 5d 7d 2c 64 69 73 74 72 69 62 75 74 65 64 5f 74 72 61 63 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 74 72 75 65 7d 7d 3b 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 6c 6f 61 64 65 72 5f 63 6f 6e 66 69 67 3d 7b 61 67 65 6e 74 49 44 3a 22 37 34 39 33 35 33 39 31 35 22 2c 61 63 63 6f 75 6e 74 49 44 3a 22 36 36 39 36 34 33 22 2c 74 72 75 73 74 4b 65 79 3a 22 32 35 32 36 39 35 30 22 2c 78 70 69 64 3a 22 55 67 41 4f 56 31 4a 51 47 77 55 4a 58 56 46 62 42 41 4d 42 58 77 3d 3d 22 2c 6c 69 63 65 6e 73 65 4b 65 79 3a 22 4e 52 4a 53 2d 32 38 64 64 34 64 64 34 36 63 39 39 30 34 30 32 38 64 61 22 2c 61 70 70 6c 69 63 61 74 69 6f 6e 49 44 3a 22 36 39 39 Data Ascii: deny_list:["bam.nr-data.net"]},distributed_tracing:{enabled:true}};(window.NREUM\|\|(NREUM={})).loader_config={agentID:"749353915",accountID:"669643",trustKey:"2526950",xpid:"UgAOV1JQGwUJXVFbBAMBXw==",licenseKey:"NRJS-28dd4dd46c9904028da",applicationID:"699
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 61 74 61 2d 6e 72 2d 6d 61 73 6b 5d 22 2c 68 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 7b 6d 61 73 6b 5f 73 65 6c 65 63 74 6f 72 3a 22 2a 22 2c 62 6c 6f 63 6b 5f 73 65 6c 65 63 74 6f 72 3a 22 5b 64 61 74 61 2d 6e 72 2d 62 6c 6f 63 6b 5d 22 2c 6d 61 73 6b 5f 69 6e 70 75 74 5f 6f 70 74 69 6f 6e 73 3a 7b 63 6f 6c 6f 72 3a 21 31 2c 64 61 74 65 3a 21 31 2c 22 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 22 3a 21 31 2c 65 6d 61 69 6c 3a 21 31 2c 6d 6f 6e 74 68 3a 21 31 2c 6e 75 6d 62 65 72 3a 21 31 2c 72 61 6e 67 65 3a 21 31 2c 73 65 61 72 63 68 3a 21 31 2c 74 65 6c 3a 21 31 2c 74 65 78 74 3a 21 31 2c 74 69 6d 65 3a 21 31 2c 75 72 6c 3a 21 31 2c 77 65 65 6b 3a 21 31 2c 74 65 78 74 61 72 65 61 3a 21 31 2c 73 65 6c 65 63 74 3a 21 31 2c 70 61 73 73 77 6f 72 64 3a 21 Data Ascii: ata-nr-mask]",h=()=>{const e={mask_selector:"*",block_selector:"[data-nr-block]",mask_input_options:{color:!1,date:!1,"datetime-local":!1,email:!1,month:!1,number:!1,range:!1,search:!1,tel:!1,text:!1,time:!1,url:!1,week:!1,textarea:!1,select:!1,password:!
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 65 63 74 6f 72 28 74 29 7b 64 28 74 29 3f 65 2e 6d 61 73 6b 5f 73 65 6c 65 63 74 6f 72 3d 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2c 22 29 2e 63 6f 6e 63 61 74 28 66 29 3a 22 22 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 74 3f 65 2e 6d 61 73 6b 5f 73 65 6c 65 63 74 6f 72 3d 66 3a 28 30 2c 6c 2e 5a 29 28 22 41 6e 20 69 6e 76 61 6c 69 64 20 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 2e 6d 61 73 6b 5f 73 65 6c 65 63 74 6f 72 20 77 61 73 20 70 72 6f 76 69 64 65 64 2e 20 27 2a 27 20 77 69 6c 6c 20 62 65 20 75 73 65 64 2e 22 2c 74 29 7d 2c 67 65 74 20 62 6c 6f 63 6b 5f 63 6c 61 73 73 28 29 7b 72 65 74 75 72 6e 22 6e 72 2d 62 6c 6f 63 6b 22 7d 2c 67 65 74 20 69 67 6e 6f 72 65 5f 63 6c 61 73 73 28 29 7b 72 65 74 75 72 6e 22 6e 72 2d 69 67 6e 6f 72 65 22 7d 2c 67 65 74 Data Ascii: ector(t){d(t)?e.mask_selector="".concat(t,",").concat(f):""===t\|\|null===t?e.mask_selector=f:(0,l.Z)("An invalid session_replay.mask_selector was provided. '*' will be used.",t)},get block_class(){return"nr-block"},get ignore_class(){return"nr-ignore"},get
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 72 7d 63 6f 6e 73 74 20 79 3d 7b 61 63 63 6f 75 6e 74 49 44 3a 76 6f 69 64 20 30 2c 74 72 75 73 74 4b 65 79 3a 76 6f 69 64 20 30 2c 61 67 65 6e 74 49 44 3a 76 6f 69 64 20 30 2c 6c 69 63 65 6e 73 65 4b 65 79 3a 76 6f 69 64 20 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 49 44 3a 76 6f 69 64 20 30 2c 78 70 69 64 3a 76 6f 69 64 20 30 7d 2c 41 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 6c 6f 61 64 65 72 2d 63 6f 6e 66 69 67 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 41 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4c 6f 61 64 65 72 43 6f 6e 66 69 67 20 66 6f 72 20 22 2e Data Ascii: r}const y={accountID:void 0,trustKey:void 0,agentID:void 0,licenseKey:void 0,applicationID:void 0,xpid:void 0},A={};function x(e){if(!e)throw new Error("All loader-config objects require an agent identifier!");if(!A[e])throw new Error("LoaderConfig for ".
2024-03-29 00:41:48 UTC	987	IN	Data Raw: 74 2e 6c 69 63 65 6e 73 65 4b 65 79 26 26 21 21 74 2e 65 72 72 6f 72 42 65 61 63 6f 6e 26 26 21 21 74 2e 61 70 70 6c 69 63 61 74 69 6f 6e 49 44 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 65 29 7d 7d 2c 39 35 36 37 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 44 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 6e 3d 72 28 35 30 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 74 72 79 7b 69 66 28 21 65 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 28 30 2c 6e 2e 5a 29 28 22 53 65 74 74 69 6e 67 20 61 20 43 6f 6e 66 69 67 75 72 61 62 6c 65 20 72 65 71 75 69 72 65 73 20 61 6e 20 6f 62 6a 65 63 74 20 61 73 20 69 6e 70 75 74 22 29 3b 69 66 28 21 74 7c 7c 22 6f 62 Data Ascii: t.licenseKey&&!!t.errorBeacon&&!!t.applicationID}catch(e){return!1}}(e)}},9567:(e,t,r)=>{"use strict";r.d(t,{D:()=>o});var n=r(50);function o(e,t){try{if(!e\|\|"object"!=typeof e)return(0,n.Z)("Setting a Configurable requires an object as input");if(!t\|\|"ob
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 2e 64 28 74 2c 7b 46 4e 3a 28 29 3d 3e 63 2c 49 46 3a 28 29 3d 3e 6c 2c 4c 57 3a 28 29 3d 3e 61 2c 4e 6b 3a 28 29 3d 3e 68 2c 54 74 3a 28 29 3d 3e 64 2c 5f 41 3a 28 29 3d 3e 69 2c 63 76 3a 28 29 3d 3e 70 2c 69 53 3a 28 29 3d 3e 73 2c 69 6c 3a 28 29 3d 3e 6e 2c 75 78 3a 28 29 3d 3e 75 2c 76 36 3a 28 29 3d 3e 6f 2c 77 31 3a 28 29 3d 3e 66 7d 29 3b 63 6f 6e 73 74 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 21 21 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 6f 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 Data Ascii: .d(t,{FN:()=>c,IF:()=>l,LW:()=>a,Nk:()=>h,Tt:()=>d,_A:()=>i,cv:()=>p,iS:()=>s,il:()=>n,ux:()=>u,v6:()=>o,w1:()=>f});const n="undefined"!=typeof window&&!!window.document,o="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof W
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 61 74 69 63 20 63 6f 6e 74 65 78 74 49 64 3d 22 6e 72 40 63 6f 6e 74 65 78 74 3a 22 2e 63 6f 6e 63 61 74 28 6f 2e 61 29 3b 73 74 61 74 69 63 20 63 6f 6e 74 65 78 74 4f 72 69 67 69 6e 61 6c 49 64 3d 22 6e 72 40 6f 72 69 67 69 6e 61 6c 3a 22 2e 63 6f 6e 63 61 74 28 6f 2e 61 29 3b 73 74 61 74 69 63 20 63 6f 6e 74 65 78 74 57 72 61 70 70 65 64 49 64 3d 22 6e 72 40 77 72 61 70 70 65 64 3a 22 2e 63 6f 6e 63 61 74 28 61 2e 63 6f 6e 74 65 78 74 49 64 29 3b 73 74 61 74 69 63 20 67 65 74 4f 62 73 65 72 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 42 79 41 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 28 65 29 7b 63 6f 6e 73 74 20 74 3d 28 30 2c 6e 2e 66 50 29 28 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 3f 2e 69 6e 69 74 69 61 6c 69 7a 65 64 41 67 65 Data Ascii: atic contextId="nr@context:".concat(o.a);static contextOriginalId="nr@original:".concat(o.a);static contextWrappedId="nr@wrapped:".concat(a.contextId);static getObservationContextByAgentIdentifier(e){const t=(0,n.fP)();return Object.keys(t?.initializedAge
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3b 69 66 28 64 28 65 29 2c 21 65 7c 7c 21 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 72 29 72 65 74 75 72 6e 20 63 28 74 29 3b 73 5b 65 5d 2e 67 65 74 28 74 29 2e 73 74 61 67 65 64 3d 21 30 3b 63 6f 6e 73 74 20 61 3d 5b 2e 2e 2e 73 5b 65 5d 5d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 63 6f 6e 73 74 20 72 3d 65 3f 6e 2e 65 65 2e 67 65 74 28 65 29 3a 6e 2e 65 65 2c 61 3d 69 2e 58 2e 68 61 6e 64 6c 65 72 73 3b 69 66 28 72 2e 62 61 63 6b 6c 6f 67 26 26 61 29 7b 76 61 72 20 73 3d 72 2e 62 61 63 6b 6c 6f 67 5b 74 5d 2c 63 3d 61 5b 74 5d 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 3b 73 26 26 64 3c 73 2e 6c Data Ascii: nts.length>2&&void 0!==arguments[2]&&arguments[2];if(d(e),!e\|\|!s[e].get(t)\|\|r)return c(t);s[e].get(t).staged=!0;const a=[...s[e]];function c(t){const r=e?n.ee.get(e):n.ee,a=i.X.handlers;if(r.backlog&&a){var s=r.backlog[t],c=a[t];if(c){for(var d=0;s&&d<s.l
2024-03-29 00:41:48 UTC	197	IN	Data Raw: 63 74 2e 65 6e 74 72 69 65 73 28 65 7c 7c 7b 7d 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 6c 65 74 5b 6e 2c 6f 5d 3d 65 3b 64 5b 6f 5d 3d 74 2c 74 20 69 6e 20 72 7c 7c 28 72 5b 74 5d 3d 5b 5d 29 7d 29 29 7d 2c 61 62 6f 72 74 3a 75 2c 61 62 6f 72 74 65 64 3a 21 31 2c 69 73 42 75 66 66 65 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 62 28 29 5b 64 5b 65 5d 5d 7d 2c 64 65 62 75 67 49 64 3a 72 2c 62 61 63 6b 6c 6f 67 3a 66 3f 7b 7d 3a 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 2e 62 61 63 6b 6c 6f 67 3f 74 2e 62 61 63 6b 6c 6f 67 3a 7b Data Ascii: ct.entries(e\|\|{}).forEach((e=>{let[n,o]=e;d[o]=t,t in r\|\|(r[t]=[])}))},abort:u,aborted:!1,isBuffering:function(e){return!!b()[d[e]]},debugId:r,backlog:f?{}:t&&"object"==typeof t.backlog?t.backlog:{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.4	50626	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	2303	OUT	POST /p?s=2023538075&t=X8ct8sar49Ha5zUZ,0.010066978607001786&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03C2WZIAfuc5wHrRWD%04_w%03www.yahoo.com%2F%04_rid%032vl5n89j0c3hk%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLQ1AMEACWH4gQEAMAdNgUEAZlCNwcEACPSVQgEAWVv0QoFVkNEUEE%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031711672895%04A_prems%03159%04_E%03dwell%04_ts%031711672906%04_ms%03829%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:47 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:47 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.4	50629	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	2286	OUT	POST /p?s=2023538075&t=64GaR5eHgizVwYp1,0.8373559727498421&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03C2WZIAfuc5wHrRWD%04_w%03www.yahoo.com%2F%04_rid%032vl5n89j0c3hk%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLQ1AMEACWH4gQEAMAdNgUEAZlCNwcEACPSVQgEAWVv0QoFVkNEUEE%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031711672906%04A_prems%03829%04_E%03dwell%04_ts%031711672906%04_ms%03923%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:47 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:47 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.4	50631	74.119.119.73	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	956	OUT	GET /user-sync/match?p=gbp70V9NUXF0OUZvQk9QTkhjNGRpNFZSUWJVbGVockNINkhIRmZwd25zbVFEblRlSElnJTJCVzhZbUY1JTJGOW9oQmU0U1VvWWhkcFVvT2NRa0RaY2V5MlVCRyUyQllQNCUyRmV3RXFENGZLRXpnOFRUa0NpeGJpN3BTMWxKdWtLTDVONHZYYk1Ld0pZZWdmTGw3TnNvWTVuRVo4QjNoNEcxOWZqbUh1dlczaFNGeVNSMEFkZEdkUVhCQlZ0c2M4dUhGUWszSEJNSU94MQ&u=ca57c23d-569f-46f3-a577-3e6f6bd561b5 HTTP/1.1 Host: ssp-sync.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=08dfbe43-cb0c-4918-bda8-5b9f2b385f1d
2024-03-29 00:41:47 UTC	372	IN	HTTP/1.1 302 Found content-length: 0 date: Fri, 29 Mar 2024 00:41:46 GMT server: Kestrel cache-control: no-store,max-age=0 location: https://ups.analytics.yahoo.com/ups/58301/sync?_origin=0&redir=true&uid=k-HLV7lAvpZmDKomHOA1EJPqcyuceA5ebKjKDVyQ cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.4	50630	34.198.123.133	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	482	OUT	GET /qmap?c=240&tp=PUBM&tpid=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=d8cab0c14b874ae9dd7e20695ff4df37
2024-03-29 00:41:47 UTC	314	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:47 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.6.174 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-03-29 00:41:47 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.4	50636	3.222.105.150	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	421	OUT	GET /tag/?id=20909&user_id=6D366468-71AF-422B-99AB-138A6DAB94F7&gdpr=0&gdpr_consent= HTTP/1.1 Host: bpi.rtactivate.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:47 UTC	140	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Fri, 29 Mar 2024 00:41:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close
2024-03-29 00:41:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.4	50638	3.225.218.10	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	1205	OUT	GET /ups/58824/sync?_origin=0&dpid=58301&ovsid=k-HLV7lAvpZmDKomHOA1EJPqcyuceA5ebKjKDVyQ&redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0:18z8~2hk0:175w~2hk0:18zh~2hk0"
2024-03-29 00:41:47 UTC	894	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:47 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0:18z8~2hk0:175w~2hk0:18zh~2hk0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 29-Mar-2025 00:41:47 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://hb.yahoo.net/cksync?cs=63&axid_e=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ovsid=k-HLV7lAvpZmDKomHOA1EJPqcyuceA5ebKjKDVyQ&dpid=58301 Age: 0 Connection: close Server: ATS/9.1.10.106 Set-Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; Expires=Sat, 29 Mar 2025 06:41:47 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.4	50635	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	2301	OUT	POST /p?s=2023538075&t=MVONGT4Ou21WLb4U,0.1834799365827593&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03C2WZIAfuc5wHrRWD%04_w%03www.yahoo.com%2F%04_rid%032vl5n89j0c3hk%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLQ1AMEACWH4gQEAMAdNgUEAZlCNwcEACPSVQgEAWVv0QoFVkNEUEE%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031711672906%04A_prems%03923%04_E%03dwell%04_ts%031711672907%04_ms%03052%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:47 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:47 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.4	50637	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	2286	OUT	POST /p?s=2023538075&t=UzeE97WcQDPyh5H9,0.8545694018982983&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03C2WZIAfuc5wHrRWD%04_w%03www.yahoo.com%2F%04_rid%032vl5n89j0c3hk%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLQ1AMEACWH4gQEAMAdNgUEAZlCNwcEACPSVQgEAWVv0QoFVkNEUEE%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031711672907%04A_prems%03052%04_E%03dwell%04_ts%031711672907%04_ms%03117%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:47 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:47 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.4	50639	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	2288	OUT	POST /p?s=2023538075&t=gBscDLfGdZqZ7pWj,0.5438891313895629&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03C2WZIAfuc5wHrRWD%04_w%03www.yahoo.com%2F%04_rid%032vl5n89j0c3hk%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLQ1AMEACWH4gQEAMAdNgUEAZlCNwcEACPSVQgEAWVv0QoFVkNEUEE%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03window.focus%04A_prets%031711672907%04A_prems%03117%04_E%03dwell%04_ts%031711672907%04_ms%03225%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:47 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:47 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.4	50640	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	2287	OUT	POST /p?s=2023538075&t=aChZ821QLgaArYH2,0.29535902036082873&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03C2WZIAfuc5wHrRWD%04_w%03www.yahoo.com%2F%04_rid%032vl5n89j0c3hk%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLQ1AMEACWH4gQEAMAdNgUEAZlCNwcEACPSVQgEAWVv0QoFVkNEUEE%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031711672907%04A_prems%03225%04_E%03dwell%04_ts%031711672907%04_ms%03230%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:47 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:47 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.4	50633	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	1328	OUT	GET /cksync.php?cs=1&type=57926&ovsid=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY&pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&tc=1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1; data-mn2=3546744950180300000V10~~1
2024-03-29 00:41:48 UTC	686	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1;Expires=Mon, 13 May 2024 00:41:48 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:48 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:48 GMT Connection: close
2024-03-29 00:41:48 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:48 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.4	50644	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	2301	OUT	POST /p?s=2023538075&t=7Jzb6tFvMtjRot54,0.6799028717243547&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03C2WZIAfuc5wHrRWD%04_w%03www.yahoo.com%2F%04_rid%032vl5n89j0c3hk%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLQ1AMEACWH4gQEAMAdNgUEAZlCNwcEACPSVQgEAWVv0QoFVkNEUEE%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031711672907%04A_prems%03230%04_E%03dwell%04_ts%031711672907%04_ms%03231%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:48 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:48 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.4	50646	3.225.218.10	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	1192	OUT	GET /ups/58301/sync?_origin=0&redir=true&uid=k-HLV7lAvpZmDKomHOA1EJPqcyuceA5ebKjKDVyQ HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0:18z8~2hk0:175w~2hk0:18zh~2hk0"
2024-03-29 00:41:48 UTC	872	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:48 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0:18z8~2hk0:175w~2hk0:18zh~2hk0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 29-Mar-2025 00:41:48 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58824/sync?_origin=0&dpid=58301&ovsid=k-HLV7lAvpZmDKomHOA1EJPqcyuceA5ebKjKDVyQ&redir=true Age: 0 Connection: close Server: ATS/9.1.10.106 Set-Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; Expires=Sat, 29 Mar 2025 06:41:48 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.4	50643	52.223.40.198	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	868	OUT	GET /track/cmf/generic?ttd_pid=liveintent&ttd_tpi=1&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=de959f04-5668-4cc4-9c45-9e4a8efcd9a8; TDCPM=CAESFwoIcHVibWF0aWMSCwjEkpDP4OTnPBAFEhQKBXRhcGFkEgsI7qj62-Dk5zwQBRIZCgpyaWdodG1lZGlhEgsI8KWh6ODk5zwQBRIVCgZjYXNhbGUSCwi81bH04OTnPBAFGAEgASgCMgsIjNDQ8Pfk5zwQBTgBWglzdGlja3lhZHNgAg..
2024-03-29 00:41:47 UTC	691	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:47 GMT Content-Length: 215 Connection: close server: Kestrel location: https://i.liadm.com/s/35759?bidder_id=44489&bidder_uuid=de959f04-5668-4cc4-9c45-9e4a8efcd9a8 set-cookie: TDID=de959f04-5668-4cc4-9c45-9e4a8efcd9a8; expires=Sat, 29 Mar 2025 00:41:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjEkpDP4OTnPBAFEhQKBXRhcGFkEgsI7qj62-Dk5zwQBRIZCgpyaWdodG1lZGlhEgsI8KWh6ODk5zwQBRIVCgZjYXNhbGUSCwi81bH04OTnPBAFEhkKCmxpdmVpbnRlbnQSCwis8ITI4eTnPBAFGAEgASgCMgsIiueH9ffk5zwQBTgBWgpsaXZlaW50ZW50YAI.; expires=Sat, 29 Mar 2025 00:41:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-29 00:41:47 UTC	215	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 33 35 37 35 39 3f 62 69 64 64 65 72 5f 69 64 3d 34 34 34 38 39 26 62 69 64 64 65 72 5f 75 75 69 64 3d 64 65 39 35 39 66 30 34 2d 35 36 36 38 2d 34 63 63 34 2d 39 63 34 35 2d 39 65 34 61 38 65 66 63 64 39 61 38 22 3e 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 33 35 37 35 39 3f 62 69 64 64 65 72 5f 69 64 3d 34 34 34 38 39 26 62 69 64 64 65 72 5f 75 75 69 64 3d 64 65 39 35 39 66 30 34 2d 35 36 36 38 2d 34 63 63 34 2d 39 63 34 35 2d 39 65 34 61 38 65 66 63 64 39 61 38 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://i.liadm.com/s/35759?bidder_id=44489&bidder_uuid=de959f04-5668-4cc4-9c45-9e4a8efcd9a8">https://i.liadm.com/s/35759?bidder_id=44489&bidder_uuid=de959f04-5668-4cc4-9c45-9e4a8efcd9a8</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.4	50648	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:47 UTC	2299	OUT	POST /p?s=2023538075&t=X9jhw5PF1AB0go2b,0.515646347501131&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03C2WZIAfuc5wHrRWD%04_w%03www.yahoo.com%2F%04_rid%032vl5n89j0c3hk%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLQ1AMEACWH4gQEAMAdNgUEAZlCNwcEACPSVQgEAWVv0QoFVkNEUEE%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031711672907%04A_prems%03231%04_E%03dwell%04_ts%031711672907%04_ms%03234%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:48 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:48 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.4	50642	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:48 UTC	1420	OUT	GET /cksync.php?cs=1&vsid=3546744890180387000V10&type=dtm&refUrl=&vid=16729006893546744890180387000V10&ovsid=AAAMjXTITz3kSQNVDnwtAAAAAAA&axid_e=&expiration=1711759302&nuid={{AXID}}&gpp_sid=-1&gpp=DBAA&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1; data-mn2=3546744950180300000V10~~1
2024-03-29 00:41:48 UTC	670	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1;Expires=Wed, 25 Sep 2024 00:41:48 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:48 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:48 GMT Connection: close
2024-03-29 00:41:48 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:48 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
715	192.168.2.4	50645	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:48 UTC	1250	OUT	GET /cksync.php?cs=1&type=mn2&ovsid=3546744950180300000V10&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1; data-mn2=3546744950180300000V10~~1
2024-03-29 00:41:48 UTC	665	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-mn2=3546744950180300000V10~~1;Expires=Wed, 25 Sep 2024 00:41:48 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:48 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:48 GMT Connection: close
2024-03-29 00:41:48 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:48 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
716	192.168.2.4	50654	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:48 UTC	2301	OUT	POST /p?s=2023538075&t=SPrvu6poFxSGZaCt,0.2883028536198884&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03C2WZIAfuc5wHrRWD%04_w%03www.yahoo.com%2F%04_rid%032vl5n89j0c3hk%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLQ1AMEACWH4gQEAMAdNgUEAZlCNwcEACPSVQgEAWVv0QoFVkNEUEE%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031711672907%04A_prems%03234%04_E%03dwell%04_ts%031711672907%04_ms%03640%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:48 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:48 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
717	192.168.2.4	50647	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:48 UTC	1322	OUT	GET /cksync.php?cs=1&type=56551&ovsid=RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1; data-mn2=3546744950180300000V10~~1; data-url=RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005~~1
2024-03-29 00:41:48 UTC	686	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-url=RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005~~1;Expires=Wed, 25 Sep 2024 00:41:48 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:48 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:48 GMT Connection: close
2024-03-29 00:41:48 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:48 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
718	192.168.2.4	50655	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:48 UTC	2285	OUT	POST /p?s=2023538075&t=gPB0SFAPmV9CzNEx,0.472934808017361&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03C2WZIAfuc5wHrRWD%04_w%03www.yahoo.com%2F%04_rid%032vl5n89j0c3hk%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLQ1AMEACWH4gQEAMAdNgUEAZlCNwcEACPSVQgEAWVv0QoFVkNEUEE%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031711672907%04A_prems%03640%04_E%03dwell%04_ts%031711672907%04_ms%03646%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:48 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:48 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
719	192.168.2.4	50657	107.22.223.168	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:48 UTC	770	OUT	GET /s/35759?bidder_id=44489&bidder_uuid=de959f04-5668-4cc4-9c45-9e4a8efcd9a8 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=Ci8KBQgKEMcXCgUIBhDHFwoFCAwQ0RcKCQj_____BxDRFwoFCAsQxxcKBgjSARDHFw; lidid=07571c18-3f04-4602-a656-288806fb242c
2024-03-29 00:41:48 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 00:41:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: _li_ss=Ci8KBQgKEMcXCgUIBhDHFwoFCAwQ0RcKCQj_____BxDRFwoFCAsQxxcKBgjSARDHFw; Max-Age=2592000; Expires=Sun, 28 Apr 2024 00:41:48 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=07571c18-3f04-4602-a656-288806fb242c; Max-Age=63072000; Expires=Sun, 29 Mar 2026 00:41:48 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-03-29 00:41:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
720	192.168.2.4	50649	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:48 UTC	1221	OUT	GET /cksync.php?cs=8&type=spa&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1; data-mn2=3546744950180300000V10~~1
2024-03-29 00:41:48 UTC	442	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 56 Content-Type: image/gif p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:48 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:48 GMT Connection: close
2024-03-29 00:41:48 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:48 UTC	13	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.4	50650	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:48 UTC	1260	OUT	GET /cksync.php?cs=1&type=58601&ovsid=u_99ef042a-5492-47e4-9c9a-171f0fce9075 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-dtm=AAAMjXTITz3kSQNVDnwtAAAAAAA~~1; data-mn2=3546744950180300000V10~~1
2024-03-29 00:41:48 UTC	681	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1;Expires=Mon, 13 May 2024 00:41:48 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:48 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:48 GMT Connection: close
2024-03-29 00:41:48 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:48 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
722	192.168.2.4	50660	3.225.218.10	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:48 UTC	1205	OUT	GET /ups/58824/sync?_origin=0&dpid=58301&ovsid=k-HLV7lAvpZmDKomHOA1EJPqcyuceA5ebKjKDVyQ&redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0:18z8~2hk0:175w~2hk0:18zh~2hk0"
2024-03-29 00:41:48 UTC	894	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:48 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2hk0:19aj~2hk0:19bn~2hk0:19bu~2hk0:19cu~2hk0:19cw~2hk0:19e0~2hk0:19e7~2hk0:19ea~2hk0:18z8~2hk0:175w~2hk0:18zh~2hk0";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 29-Mar-2025 00:41:48 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://hb.yahoo.net/cksync?cs=63&axid_e=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ovsid=k-HLV7lAvpZmDKomHOA1EJPqcyuceA5ebKjKDVyQ&dpid=58301 Age: 0 Connection: close Server: ATS/9.1.10.106 Set-Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; Expires=Sat, 29 Mar 2025 06:41:48 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
723	192.168.2.4	50658	35.169.97.227	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:48 UTC	1188	OUT	GET /sync/stickyads/be9e58c44069016c9e434c515e7bb3?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:48 UTC	654	IN	HTTP/1.1 302 Found Date: Fri, 29 Mar 2024 00:41:48 GMT Content-Length: 0 Connection: close Location: https://ads.stickyadstv.com/user-registering?dataProviderId=199&userId=y-n77til9E2oPNfi2rKImNfx9gjThpc_TeaIFvTpjm~A Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
724	192.168.2.4	50659	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:48 UTC	640	OUT	GET /zz/combo?pj/sh/202403271817/css/slick.css&pj/sh/202403271817/css/stylesV1.css&pj/sh/202403271817/css/sbi.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://help.yahoo.com/kb/account Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:48 UTC	548	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Last-Modified: Thu, 28 Mar 2024 16:20:00 GMT Content-Type: text/css Cache-Control: max-age=315360000, Public Date: Thu, 28 Mar 2024 16:20:00 GMT Age: 30110 Strict-Transport-Security: max-age=31536000 Server: ATS Referrer-Policy: no-referrer-when-downgrade Content-Length: 115749 ATS-Carp-Promotion: 1 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 2f 2a 20 53 6c 69 64 65 72 20 2a 2f 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 0a 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 20 Data Ascii: /* Slider */.slick-slider{ position: relative; display: block; box-sizing: border-box; -webkit-user-select: none; -moz-user-select: none; -ms-user-select: none; user-select: none; -webkit-touch-callout:
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 72 69 67 68 74 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 20 69 6d 67 0a 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 2e 73 6c 69 63 6b 2d 6c 6f 61 64 69 6e 67 20 69 6d 67 0a 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 2e 64 72 61 67 67 69 6e 67 20 69 6d 67 0a 7b 0a 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 69 6e 69 74 69 61 6c 69 7a 65 64 20 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 0a 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 6c 6f 61 64 69 6e 67 20 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 0a 7b 0a 20 20 20 20 76 69 73 69 62 Data Ascii: right;}.slick-slide img{ display: block;}.slick-slide.slick-loading img{ display: none;}.slick-slide.dragging img{ pointer-events: none;}.slick-initialized .slick-slide{ display: block;}.slick-loading .slick-slide{ visib
2024-03-29 00:41:48 UTC	393	IN	Data Raw: 20 20 7d 0a 20 20 23 79 75 63 73 2d 62 74 6e 2d 6e 61 76 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0a 20 20 7d 0a 20 20 23 53 74 65 6e 63 69 6c 20 62 6f 64 79 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 2e 33 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 7d 0a 0a 2f 2a 20 48 54 4d 4c 35 20 64 69 73 70 6c 61 79 20 64 65 66 69 6e 69 74 69 6f 6e 73 0a 20 20 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 43 6f 72 72 65 63 74 20 60 62 6c 6f 63 6b 60 20 64 69 73 70 6c 61 79 20 6e 6f 74 20 64 65 66 69 6e 65 64 20 Data Ascii: } #yucs-btn-nav { display:none; } #Stencil body { margin-top:4.3em !important; }}/* HTML5 display definitions ========================================================================== //* * Correct `block` display not defined
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 60 62 6c 6f 63 6b 60 20 64 69 73 70 6c 61 79 20 6e 6f 74 20 64 65 66 69 6e 65 64 20 66 6f 72 20 60 6d 61 69 6e 60 20 69 6e 20 49 45 20 31 31 2e 0a 20 2a 2f 0a 61 72 74 69 63 6c 65 2c 0a 61 73 69 64 65 2c 0a 64 65 74 61 69 6c 73 2c 0a 66 69 67 63 61 70 74 69 6f 6e 2c 0a 66 69 67 75 72 65 2c 0a 66 6f 6f 74 65 72 2c 0a 68 65 61 64 65 72 2c 0a 68 67 72 6f 75 70 2c 0a 6d 61 69 6e 2c 0a 6d 65 6e 75 2c 0a 6e 61 76 2c 0a 73 65 63 74 69 6f 6e 2c 0a 73 75 6d 6d 61 72 79 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 31 2e 20 43 6f 72 72 65 63 74 20 60 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 60 20 64 69 73 70 6c 61 79 20 6e 6f 74 20 64 65 66 69 6e 65 64 20 69 6e 20 49 45 20 38 2f 39 2e 0a 20 2a 20 32 2e 20 4e 6f 72 6d 61 6c Data Ascii: `block` display not defined for `main` in IE 11. /article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary { display: block;}/* * 1. Correct `inline-block` display not defined in IE 8/9. * 2. Normal
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 72 6f 6d 65 2e 0a 20 2a 2f 0a 61 62 62 72 5b 74 69 74 6c 65 5d 20 7b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 64 6f 74 74 65 64 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 41 64 64 72 65 73 73 20 73 74 79 6c 65 20 73 65 74 20 74 6f 20 60 62 6f 6c 64 65 72 60 20 69 6e 20 46 69 72 65 66 6f 78 20 34 2b 2c 20 53 61 66 61 72 69 2c 20 61 6e 64 20 43 68 72 6f 6d 65 2e 0a 20 2a 2f 0a 62 2c 0a 73 74 72 6f 6e 67 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 41 64 64 72 65 73 73 20 73 74 79 6c 69 6e 67 20 6e 6f 74 20 70 72 65 73 65 6e 74 20 69 6e 20 53 61 66 61 72 69 20 61 6e 64 20 43 68 72 6f 6d 65 2e 0a 20 2a 2f 0a 64 66 6e 20 7b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 Data Ascii: rome. /abbr[title] { border-bottom: 1px dotted;}/* * Address style set to `bolder` in Firefox 4+, Safari, and Chrome. /b,strong { font-weight: bold;}/* * Address styling not present in Safari and Chrome. */dfn { font-style: italic
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 2a 2f 0a 66 69 67 75 72 65 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 31 65 6d 20 34 30 70 78 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 41 64 64 72 65 73 73 20 64 69 66 66 65 72 65 6e 63 65 73 20 62 65 74 77 65 65 6e 20 46 69 72 65 66 6f 78 20 61 6e 64 20 6f 74 68 65 72 20 62 72 6f 77 73 65 72 73 2e 0a 20 2a 2f 0a 68 72 20 7b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 30 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 6e 74 61 69 6e 20 6f 76 65 72 66 6c 6f 77 20 69 6e 20 61 6c 6c 20 62 72 6f 77 73 65 72 73 2e 0a 20 2a 2f 0a 70 72 65 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 41 64 64 72 65 73 73 20 6f 64 64 20 60 65 6d 60 2d 75 6e 69 74 20 66 6f 6e 74 Data Ascii: /figure { margin: 1em 40px;}/* * Address differences between Firefox and other browsers. /hr { box-sizing: content-box; height: 0;}/* * Contain overflow in all browsers. /pre { overflow: auto;}/* * Address odd `em`-unit font
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 74 20 60 73 65 6c 65 63 74 60 20 73 74 79 6c 65 20 69 6e 68 65 72 69 74 61 6e 63 65 20 69 6e 20 46 69 72 65 66 6f 78 2e 0a 20 2a 2f 0a 62 75 74 74 6f 6e 2c 0a 73 65 6c 65 63 74 20 7b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 31 2e 20 41 76 6f 69 64 20 74 68 65 20 57 65 62 4b 69 74 20 62 75 67 20 69 6e 20 41 6e 64 72 6f 69 64 20 34 2e 30 2e 2a 20 77 68 65 72 65 20 28 32 29 20 64 65 73 74 72 6f 79 73 20 6e 61 74 69 76 65 20 60 61 75 64 69 6f 60 0a 20 2a 20 20 20 20 61 6e 64 20 60 76 69 64 65 6f 60 20 63 6f 6e 74 72 6f 6c 73 2e 0a 20 2a 20 32 2e 20 43 6f 72 72 65 63 74 20 69 6e 61 62 69 6c 69 74 79 20 74 6f 20 73 74 79 6c 65 20 63 6c 69 63 6b 61 62 6c 65 20 60 69 6e 70 75 74 60 20 74 79 70 65 73 Data Ascii: t `select` style inheritance in Firefox. /button,select { text-transform: none;}/* * 1. Avoid the WebKit bug in Android 4.0.* where (2) destroys native `audio` * and `video` controls. * 2. Correct inability to style clickable `input` types
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 63 75 72 73 6f 72 20 73 74 79 6c 65 20 66 6f 72 20 43 68 72 6f 6d 65 27 73 20 69 6e 63 72 65 6d 65 6e 74 2f 64 65 63 72 65 6d 65 6e 74 20 62 75 74 74 6f 6e 73 2e 20 46 6f 72 20 63 65 72 74 61 69 6e 0a 20 2a 20 60 66 6f 6e 74 2d 73 69 7a 65 60 20 76 61 6c 75 65 73 20 6f 66 20 74 68 65 20 60 69 6e 70 75 74 60 2c 20 69 74 20 63 61 75 73 65 73 20 74 68 65 20 63 75 72 73 6f 72 20 73 74 79 6c 65 20 6f 66 20 74 68 65 0a 20 2a 20 64 65 63 72 65 6d 65 6e 74 20 62 75 74 74 6f 6e 20 74 6f 20 63 68 61 6e 67 65 20 66 72 6f 6d 20 60 64 65 66 61 75 6c 74 60 20 74 6f 20 60 74 65 78 74 60 2e 0a 20 2a 2f 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 6e 75 6d 62 65 72 22 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 0a 69 6e 70 75 74 5b 74 Data Ascii: cursor style for Chrome's increment/decrement buttons. For certain * `font-size` values of the `input`, it causes the cursor style of the * decrement button to change from `default` to `text`. */input[type="number"]::-webkit-inner-spin-button,input[t
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 62 61 72 20 69 6e 20 49 45 20 38 2f 39 2f 31 30 2f 31 31 2e 0a 20 2a 2f 0a 74 65 78 74 61 72 65 61 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 44 6f 6e 27 74 20 69 6e 68 65 72 69 74 20 74 68 65 20 60 66 6f 6e 74 2d 77 65 69 67 68 74 60 20 28 61 70 70 6c 69 65 64 20 62 79 20 61 20 72 75 6c 65 20 61 62 6f 76 65 29 2e 0a 20 2a 20 4e 4f 54 45 3a 20 74 68 65 20 64 65 66 61 75 6c 74 20 63 61 6e 6e 6f 74 20 73 61 66 65 6c 79 20 62 65 20 63 68 61 6e 67 65 64 20 69 6e 20 43 68 72 6f 6d 65 20 61 6e 64 20 53 61 66 61 72 69 20 6f 6e 20 4f 53 20 58 2e 0a 20 2a 2f 0a 6f 70 74 67 72 6f 75 70 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 0a 2f 2a 20 54 61 62 6c 65 73 0a 20 20 20 3d 3d 3d 3d Data Ascii: bar in IE 8/9/10/11. /textarea { overflow: auto;}/* * Don't inherit the `font-weight` (applied by a rule above). * NOTE: the default cannot safely be changed in Chrome and Safari on OS X. /optgroup { font-weight: bold;}/ Tables ====
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 70 65 3d 22 73 65 61 72 63 68 22 5d 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 30 70 78 3b 0a 7d 0a 0a 73 65 6c 65 63 74 20 6f 70 74 69 6f 6e 3a 64 69 73 61 62 6c 65 64 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 7d 0a 0a 2e 73 69 74 65 2d 68 65 61 64 65 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 6c 65 66 74 2c 20 23 37 45 31 46 46 46 20 30 25 2c 20 23 33 39 30 30 37 44 20 31 30 30 25 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 Data Ascii: pe="search"] { border: none; background: #fff; font-size: 14px; padding: 5px 10px;}select option:disabled { opacity: 1; color: #fff;}.site-header { background-image: linear-gradient(to left, #7E1FFF 0%, #39007D 100%); background-repe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
725	192.168.2.4	50652	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:48 UTC	1604	OUT	GET /cksync?cs=63&axid_e=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ovsid=k-HLV7lAvpZmDKomHOA1EJPqcyuceA5ebKjKDVyQ&dpid=58301 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3546744890180387000V10; usp_status=1; data-zta=969751699754991983~~1; data-idx=ZgYOPsAoJI0AAAi4ADlhawAABlEAAAIB~~1; data-mag=LUBXUGUO-1P-87GV~~1; data-son=d8bfd039-9f04-449c-875f-e04a2484e308~~1; data-mn=3546744950180300000V10~~1; data-tlt=1910044241478282443237~~1; data-apx=5423405387794830934~~1; data-sov=IZjJALZHIXjbUV1jQgKNiPaF~~1; data-ttd=de959f04-5668-4cc4-9c45-9e4a8efcd9a8~~1; data-adb=ZgYOPgAB7vmzSgAj~~1; data-opx=51c60a0a-b2b1-4df8-a524-32544527bc2c~~1; data-pub=6D366468-71AF-422B-99AB-138A6DAB94F7~~1; data-gum=u_99ef042a-5492-47e4-9c9a-171f0fce9075~~1; data-ylm=VqUQt33vvQ3VT5KZdpyI~~1; data-ctn=0bf86f4e7d934cb7b5daae7a5c7d8db5~~1; data-sht=ed83e77c-dcbc-4ab9-9f7f-299e2ec96b4b~~1; data-rhs=Kud320-u6tzC6Pytg5jdMuzjSHK-J1VqkCxExzV-6uY~~1; data-mn2=3546744950180300000V10~~1; data-url=RX-9d21a42c-0599-49e7-b7d6-902789d2d8da-005~~1; data-dtm=AAABzNBJmlEeqwMiMonlAAAAAAA~~1
2024-03-29 00:41:48 UTC	684	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-crt=k-HLV7lAvpZmDKomHOA1EJPqcyuceA5ebKjKDVyQ~~63;Expires=Wed, 25 Sep 2024 00:41:48 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Fri, 29 Mar 2024 00:41:48 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 29 Mar 2024 00:41:48 GMT Connection: close
2024-03-29 00:41:48 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-29 00:41:48 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
726	192.168.2.4	50661	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:48 UTC	2302	OUT	POST /p?s=2023538075&t=pQ7vl4DSvq3kA2w1,0.19357381560040254&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03C2WZIAfuc5wHrRWD%04_w%03www.yahoo.com%2F%04_rid%032vl5n89j0c3hk%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLQ1AMEACWH4gQEAMAdNgUEAZlCNwcEACPSVQgEAWVv0QoFVkNEUEE%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031711672907%04A_prems%03646%04_E%03dwell%04_ts%031711672907%04_ms%03710%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:48 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:48 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
727	192.168.2.4	50662	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:48 UTC	2286	OUT	POST /p?s=2023538075&t=1cmldEDrARDOVXhC,0.9535561151472067&_I=&_AO=0&_NOL=0&_R=&_P=3.53.39%05_a1s%03d%3DAQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA%26S%3DAQAAAoGiPRSST7yGr3-rH3Eb1j4%04_pl%031%04A_v%033.53.39%04A_cn%03VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicProviderListv2-copy%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03C2WZIAfuc5wHrRWD%04_w%03www.yahoo.com%2F%04_rid%032vl5n89j0c3hk%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQIEAMLQ1AMEACWH4gQEAMAdNgUEAZlCNwcEACPSVQgEAWVv0QoFVkNEUEE%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031711672907%04A_prems%03710%04_E%03dwell%04_ts%031711672907%04_ms%03764%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; A1S=d=AQABBCkOBmYCEPuOkBJ7tH4EffDxJe-LbhUFEgEBAQFfB2YPZtwv0iMA_eMAAA&S=AQAAAoGiPRSST7yGr3-rH3Eb1j4; cmp=t=1711672887&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-4YT8itdE2uJnuqXRKh7gS6_EwSTIuGsR~A&dv360=eS1ic0Z3NmtwRTJ1RWxZNGVCUUo5ejBsZS50cml2LmJqc35B&ydsp=y-WqbvyRNE2uLqb7uH.BqA3YMIB24aloKM~A&tbla=y-giJcaqlE2uKu6Z07rl9A2mtwmGSOTBLZ~A; tbla_id=92a9cfc4-d7cf-441c-98e2-f9158552d644-tuctcff93bb; __gpi=UID=00000dd6af91f12e:T=1711672894:RT=1711672894:S=ALNI_MYNYgt10uxPNNF24xXCFYIkQF_Xhw; __eoi=ID=41fc011ee8100aa1:T=1711672894:RT=1711672894:S=AA-AfjaBn49PTUul8dYolplfH5bu
2024-03-29 00:41:48 UTC	503	IN	HTTP/1.1 200 OK date: Fri, 29 Mar 2024 00:41:48 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-03-29 00:41:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
728	192.168.2.4	50665	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:48 UTC	543	OUT	GET /kj/js/dispatcherWidget.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.yahoo.com/kb/account Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:48 UTC	765	IN	HTTP/1.1 200 OK x-amz-id-2: 53f2tujHb0q5Iobv8FnIbX4hIQokRlaNmdZxBZNaZtx67RRwdjMvwu8z7UkDItmsggJejpGI0iA= x-amz-request-id: SFG3A208P58EEZY7 Date: Fri, 29 Mar 2024 00:34:35 GMT Last-Modified: Fri, 02 Feb 2024 16:36:29 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 32281 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "2bcd33abcf1d9b53e39084bef961e404" Age: 434 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 76 61 72 20 5f 5f 65 78 74 65 6e 64 73 20 3d 20 28 74 68 69 73 20 26 26 20 74 68 69 73 2e 5f 5f 65 78 74 65 6e 64 73 29 20 7c 7c 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 65 78 74 65 6e 64 53 74 61 74 69 63 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 64 2c 20 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 78 74 65 6e 64 53 74 61 74 69 63 73 20 3d 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 7b 20 5f 5f 70 72 6f 74 6f 5f 5f 3a 20 5b 5d 20 7d 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 20 26 26 20 66 75 6e 63 74 69 6f 6e 20 28 64 2c 20 62 29 20 7b 20 64 2e 5f 5f 70 Data Ascii: (function () { var __extends = (this && this.__extends) \|\| (function () { var extendStatics = function (d, b) { extendStatics = Object.setPrototypeOf \|\| ({ __proto__: [] } instanceof Array && function (d, b) { d.__p
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 44 49 53 50 41 54 43 48 45 52 5f 41 4f 4c 5f 48 4f 53 54 20 3d 20 27 68 74 74 70 73 3a 2f 2f 6d 65 6d 62 65 72 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2e 61 6f 6c 2e 63 6f 6d 27 3b 0a 20 20 20 20 76 61 72 20 44 49 53 50 41 54 43 48 45 52 5f 59 41 48 4f 4f 5f 48 4f 53 54 20 3d 20 27 68 74 74 70 73 3a 2f 2f 64 69 73 70 61 74 63 68 65 72 2e 79 61 68 6f 6f 2e 63 6f 6d 27 3b 0a 20 20 20 20 76 61 72 20 4e 4f 53 43 52 4f 4c 4c 5f 43 4c 41 53 53 4e 41 4d 45 20 3d 20 27 5f 64 69 73 70 61 74 63 68 65 72 57 69 64 67 65 74 5f 6e 6f 73 63 72 6f 6c 6c 27 3b 0a 20 20 20 20 76 61 72 20 53 54 59 4c 45 5f 54 41 47 5f 43 4f 4e 54 45 4e 54 20 3d 20 22 2e 22 2e 63 6f 6e 63 61 74 28 4e 4f 53 43 52 4f 4c 4c 5f 43 4c 41 53 53 4e 41 4d 45 2c 20 22 20 7b 6f 76 65 72 66 6c 6f 77 3a Data Ascii: DISPATCHER_AOL_HOST = 'https://membernotifications.aol.com'; var DISPATCHER_YAHOO_HOST = 'https://dispatcher.yahoo.com'; var NOSCROLL_CLASSNAME = '_dispatcherWidget_noscroll'; var STYLE_TAG_CONTENT = ".".concat(NOSCROLL_CLASSNAME, " {overflow:
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 34 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 31 20 2b 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 20 2a 20 30 78 31 30 30 30 30 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 73 34 28 29 20 2b 20 73 34 28 29 20 2b 20 27 2d 27 20 2b 20 73 34 28 29 20 2b 20 27 2d 27 20 2b 20 73 34 28 29 20 2b 20 27 2d 27 20 2b 20 73 34 28 29 20 2b 20 27 2d 27 20 2b 20 73 34 28 29 20 2b 20 73 34 28 29 20 2b 20 Data Ascii: { var s4 = function () { return Math.floor((1 + Math.random()) * 0x10000) .toString(16) .substring(1); }; return s4() + s4() + '-' + s4() + '-' + s4() + '-' + s4() + '-' + s4() + s4() +
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 62 75 74 65 28 27 73 63 72 6f 6c 6c 69 6e 67 27 2c 20 27 6e 6f 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 44 69 6d 65 6e 73 69 6f 6e 28 69 66 72 61 6d 65 45 6c 6d 2c 20 63 6f 6e 74 65 78 74 2e 68 65 69 67 68 74 2c 20 22 68 65 69 67 68 74 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 73 65 74 44 69 6d 65 6e 73 69 6f 6e 28 69 66 72 61 6d 65 45 6c 6d 2c 20 63 6f 6e 74 65 78 74 2e 77 69 64 74 68 2c 20 22 77 69 64 74 68 22 29 20 26 26 20 63 6f 6e 74 65 78 74 2e 72 65 73 70 6f 6e 73 69 76 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 44 69 6d 65 6e 73 69 6f 6e 28 69 66 72 61 6d 65 45 6c 6d 2c 20 22 31 30 30 25 22 2c 20 22 77 69 64 74 68 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 Data Ascii: bute('scrolling', 'no'); setDimension(iframeElm, context.height, "height"); if (!setDimension(iframeElm, context.width, "width") && context.responsive) { setDimension(iframeElm, "100%", "width"); }
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 72 61 6d 65 45 6c 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 73 61 6e 64 62 6f 78 27 2c 20 27 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 2d 74 6f 2d 65 73 63 61 70 65 2d 73 61 6e 64 62 6f 78 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 72 61 6d 65 45 6c 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 61 6c 6c 6f 77 66 75 6c 6c 73 63 72 65 65 6e 27 2c 20 27 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 66 72 61 6d 65 45 6c 6d 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 50 72 65 73 65 6e 74 65 72 2e 70 72 6f 74 6f 74 Data Ascii: n'); iframeElm.setAttribute('sandbox', 'allow-scripts allow-same-origin allow-popups allow-popups-to-escape-sandbox'); iframeElm.setAttribute('allowfullscreen', ''); return iframeElm; }; Presenter.protot
2024-03-29 00:41:48 UTC	1074	IN	Data Raw: 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 6f 6e 48 69 64 65 28 63 6f 6e 74 65 78 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 50 72 65 73 65 6e 74 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 6e 53 68 6f 77 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 63 6f 6e 74 65 78 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 61 6e 53 68 6f 77 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 6e 74 65 78 74 2e 73 68 6f 77 4f 6e 45 6c 65 6d 65 6e 74 43 6c 61 73 73 20 26 26 20 63 6f 6e 74 65 78 74 2e 73 68 6f 77 4f 6e 45 6c 65 6d 65 6e 74 43 6c 61 73 73 2e 65 6c 65 6d 65 Data Ascii: } else { this.onHide(context); } }; Presenter.prototype.canShow = function (context) { var canShow = true; if (context.showOnElementClass && context.showOnElementClass.eleme
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 2f 2f 20 49 66 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 77 61 73 20 70 72 65 76 69 6f 75 73 6c 79 20 68 69 64 64 65 6e 20 6f 72 20 75 6e 73 69 7a 65 64 2c 20 74 68 65 72 65 20 63 61 6e 20 62 65 20 69 73 73 75 65 73 20 77 69 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 69 6e 69 74 69 61 6c 20 68 65 69 67 68 74 73 20 69 6e 20 6f 6c 64 65 72 20 62 72 6f 77 73 65 72 73 2e 20 49 66 20 6e 6f 74 20 61 6c 72 65 61 64 79 20 73 65 74 2c 20 73 65 74 20 69 74 20 74 6f 20 31 20 61 6e 64 20 6c 65 74 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 69 74 20 72 65 73 69 7a 65 20 66 72 6f 6d 20 74 68 65 72 65 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 Data Ascii: // If the content was previously hidden or unsized, there can be issues with // initial heights in older browsers. If not already set, set it to 1 and let // it resize from there. var
2024-03-29 00:41:48 UTC	1300	IN	Data Raw: 6c 64 43 6f 6e 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 63 6f 6e 74 65 78 74 2c 20 69 66 72 61 6d 65 55 72 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 66 72 61 6d 65 45 6c 6d 20 3d 20 5f 73 75 70 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 69 6c 64 43 6f 6e 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 2e 63 61 6c 6c 28 74 68 69 73 2c 20 63 6f 6e 74 65 78 74 2c 20 69 66 72 61 6d 65 55 72 6c 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 68 69 64 65 28 69 66 72 61 6d 65 45 6c 6d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 66 72 61 6d 65 45 6c 6d 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 41 75 74 6f 48 69 64 65 50 72 65 73 65 6e 74 65 72 2e 70 72 Data Ascii: ldContentContainer = function (context, iframeUrl) { var iframeElm = _super.prototype.buildContentContainer.call(this, context, iframeUrl); this.hide(iframeElm); return iframeElm; }; AutoHidePresenter.pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
729	192.168.2.4	50663	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:48 UTC	624	OUT	GET /rz/p/yahoo_login_en-US_s_f_p_bestfit_login.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://help.yahoo.com/kb/account Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:48 UTC	823	IN	HTTP/1.1 200 OK x-amz-id-2: gRDB4r31oIcHQnwpbjmlP/Qu6ojjebGoG/asMYst4Xh77REqWBipP1cKMivmZVyAXRyIWhiAuj4= x-amz-request-id: PPQEA7XR6FZT0097 Date: Thu, 28 Mar 2024 11:20:35 GMT Last-Modified: Wed, 27 Mar 2024 21:32:36 GMT x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=86400 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 749 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "d3f769a0b541999478af920ece54c47a" Expires: Thu, 28 Mar 2024 23:00:00 GMT Age: 48074 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:48 UTC	749	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 24 08 03 00 00 00 39 30 c1 d1 00 00 00 30 50 4c 54 45 47 70 4c 60 02 d3 60 01 d3 60 03 d3 60 01 d2 60 01 d2 61 03 d3 60 01 d3 61 02 d3 65 08 d6 69 10 d8 60 01 d2 60 01 d2 60 01 d2 62 05 d5 60 01 d2 0e 13 cb 02 00 00 00 0f 74 52 4e 53 00 6c 83 4b b7 dd 41 93 5e 1b 0f a2 ef c9 2c 9c f0 fd ac 00 00 02 5d 49 44 41 54 78 da cd 97 db 92 ad 20 0c 44 03 06 90 fb ff ff ed a9 52 a0 71 0f 7a bc bc d0 4f 43 d7 1e 58 09 09 20 7d d2 92 37 19 fa 2a 17 f2 ae 44 03 7d 06 94 f4 55 6b e1 8b 34 d0 0c 19 8c 05 70 9d 14 50 17 be 40 34 e7 16 fb 8c 89 26 cc 20 5a c4 4e 0a 28 0a 1f d3 a4 5b ac 0a e0 72 ab e1 c5 26 dd 18 ba f1 e2 a3 8a 5e 93 dd bd 84 0c 26 19 95 f2 fd 02 5a b2 52 d1 af 8e e8 da 45 8b a8 07 f5 8a Data Ascii: PNGIHDR$900PLTEGpL`````a`aei```b`tRNSlKA^,]IDATx DRqzOCX }7*D}Uk4pP@4& ZN([r&^&ZRE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
730	192.168.2.4	50664	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 00:41:48 UTC	624	OUT	GET /rz/p/yahoo_login_en-US_s_f_w_bestfit_login.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://help.yahoo.com/kb/account Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 00:41:48 UTC	823	IN	HTTP/1.1 200 OK x-amz-id-2: bM0xyf/JBPY9J+U5/5TtucEcWYLM6YhHPreh43Rq/Hvk1sJNDq3O2s4YqoHkmdXxLu71VK25IYE= x-amz-request-id: 52FVN6APRDBK4R95 Date: Thu, 28 Mar 2024 21:13:07 GMT Last-Modified: Wed, 27 Mar 2024 21:32:36 GMT x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=86400 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 779 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "459c23291de93ec831e2e6ebeb1fbb54" Expires: Thu, 28 Mar 2024 23:00:00 GMT Age: 12522 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-29 00:41:48 UTC	779	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 24 08 03 00 00 00 39 30 c1 d1 00 00 00 39 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 7d 3c 96 4d 00 00 00 12 74 52 4e 53 00 da f6 c9 18 b7 98 48 6d 87 5a a6 0b 29 e7 64 7d 3c 2d 3d a9 3e 00 00 02 6f 49 44 41 54 78 5e cd 97 db 8e ac 20 14 44 0b b9 0b 78 e1 ff 3f f6 64 68 ac c8 69 e2 a8 f3 c2 ca 3c b4 d5 13 5d 1b dc d0 e0 4f d8 5c f0 f8 2b 71 ca 1f 12 3a 0c 20 b8 56 3f 89 41 05 65 15 9c 07 15 dc ab df 12 07 15 0c 99 95 0e 27 d8 b6 c8 a0 82 ae fa 69 0c 2a 28 aa a0 c5 0d 56 57 d8 e9 e0 0a b6 f8 04 29 a4 b1 50 ae 90 28 88 e4 a5 10 c1 82 60 f7 5a 08 19 66 Data Ascii: PNGIHDR$909PLTEGpL}<MtRNSHmZ)d}<-=>oIDATx^ Dx?dhi<]O\+q: V?Ae'i*(VW)P(`Zf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
731	192.168.2.4	50669	3.214.19.47	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
732	192.168.2.4	50666	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
733	192.168.2.4	50673	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
734	192.168.2.4	50672	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
735	192.168.2.4	50674	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
736	192.168.2.4	50675	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
737	192.168.2.4	50667	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
738	192.168.2.4	50671	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
739	192.168.2.4	50680	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
740	192.168.2.4	50685	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
741	192.168.2.4	50678	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
742	192.168.2.4	50679	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
743	192.168.2.4	50681	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
744	192.168.2.4	50683	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
745	192.168.2.4	50684	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
746	192.168.2.4	50676	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
747	192.168.2.4	50677	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
748	192.168.2.4	50697	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
749	192.168.2.4	50682	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
750	192.168.2.4	50695	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
751	192.168.2.4	50687	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
752	192.168.2.4	50692	192.229.211.36	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
753	192.168.2.4	50699	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
754	192.168.2.4	50689	192.229.211.36	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
755	192.168.2.4	50686	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
756	192.168.2.4	50703	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
757	192.168.2.4	50688	18.164.131.113	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
758	192.168.2.4	50704	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
759	192.168.2.4	50691	192.229.211.36	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
760	192.168.2.4	50702	54.174.153.22	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
761	192.168.2.4	50694	192.229.211.36	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
762	192.168.2.4	50705	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
763	192.168.2.4	50693	192.229.211.36	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
764	192.168.2.4	50698	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
765	192.168.2.4	50700	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
766	192.168.2.4	50690	192.229.211.36	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
767	192.168.2.4	50706	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
768	192.168.2.4	50707	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
769	192.168.2.4	50708	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
770	192.168.2.4	50709	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
771	192.168.2.4	50710	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
772	192.168.2.4	50712	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
773	192.168.2.4	50696	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
774	192.168.2.4	50711	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
775	192.168.2.4	50713	192.229.211.36	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
776	192.168.2.4	50717	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
777	192.168.2.4	50715	192.229.211.36	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
778	192.168.2.4	50716	192.229.211.36	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
779	192.168.2.4	50718	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
780	192.168.2.4	50719	172.253.63.104	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
781	192.168.2.4	50720	192.229.211.36	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
782	192.168.2.4	50721	192.229.211.36	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
783	192.168.2.4	50725	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
784	192.168.2.4	50724	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
785	192.168.2.4	50723	192.229.211.36	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
786	192.168.2.4	50722	192.229.211.36	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
787	192.168.2.4	50729	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
788	192.168.2.4	50730	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
789	192.168.2.4	50733	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
790	192.168.2.4	50734	18.164.131.113	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
791	192.168.2.4	50736	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
792	192.168.2.4	50732	192.229.211.36	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
793	192.168.2.4	50735	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
794	192.168.2.4	50731	23.43.243.169	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
795	192.168.2.4	50738	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
796	192.168.2.4	50739	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
797	192.168.2.4	50741	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
798	192.168.2.4	50740	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
799	192.168.2.4	50743	50.17.145.44	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
800	192.168.2.4	50744	142.251.167.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
801	192.168.2.4	50746	50.17.145.44	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
802	192.168.2.4	50745	68.67.160.26	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
803	192.168.2.4	50748	172.253.115.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
804	192.168.2.4	50751	18.164.131.113	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
805	192.168.2.4	50752	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
806	192.168.2.4	50753	50.17.145.44	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
807	192.168.2.4	50756	52.7.252.24	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
808	192.168.2.4	50757	172.253.115.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
809	192.168.2.4	50759	172.253.115.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
810	192.168.2.4	50766	18.160.37.10	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
811	192.168.2.4	50765	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
812	192.168.2.4	50764	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
813	192.168.2.4	50763	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
814	192.168.2.4	50767	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
815	192.168.2.4	50768	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
816	192.168.2.4	50771	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
817	192.168.2.4	50772	162.247.243.39	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
818	192.168.2.4	50774	34.36.216.150	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
819	192.168.2.4	50775	172.253.115.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
820	192.168.2.4	50776	54.230.244.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
821	192.168.2.4	50777	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
822	192.168.2.4	50779	34.198.123.133	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
823	192.168.2.4	50780	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
824	192.168.2.4	50781	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
825	192.168.2.4	50782	172.253.62.99	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
826	192.168.2.4	50784	34.111.113.62	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
827	192.168.2.4	50786	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
828	192.168.2.4	50785	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
829	192.168.2.4	50787	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
830	192.168.2.4	50790	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
831	192.168.2.4	50791	54.167.230.135	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
832	192.168.2.4	50793	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
833	192.168.2.4	50794	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
834	192.168.2.4	50796	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
835	192.168.2.4	50795	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
836	192.168.2.4	50798	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
837	192.168.2.4	50797	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
838	192.168.2.4	50799	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
839	192.168.2.4	50800	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
840	192.168.2.4	50803	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
841	192.168.2.4	50806	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
842	192.168.2.4	50805	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
843	192.168.2.4	50804	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
844	192.168.2.4	50807	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
845	192.168.2.4	50808	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
846	192.168.2.4	50809	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
847	192.168.2.4	50810	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
848	192.168.2.4	50811	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
849	192.168.2.4	50812	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
850	192.168.2.4	50813	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
851	192.168.2.4	50816	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
852	192.168.2.4	50817	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
853	192.168.2.4	50818	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
854	192.168.2.4	50819	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
855	192.168.2.4	50820	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
856	192.168.2.4	50821	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
857	192.168.2.4	50822	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
858	192.168.2.4	50823	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
859	192.168.2.4	50824	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
860	192.168.2.4	50825	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
861	192.168.2.4	50826	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
862	192.168.2.4	50827	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
863	192.168.2.4	50828	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
864	192.168.2.4	50829	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
865	192.168.2.4	50830	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
866	192.168.2.4	50831	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
867	192.168.2.4	50832	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
868	192.168.2.4	50833	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
869	192.168.2.4	50834	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
870	192.168.2.4	50835	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
871	192.168.2.4	50836	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
872	192.168.2.4	50837	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
873	192.168.2.4	50838	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
874	192.168.2.4	50839	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
875	192.168.2.4	50840	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
876	192.168.2.4	50841	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
877	192.168.2.4	50842	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
878	192.168.2.4	50843	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
879	192.168.2.4	50844	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
880	192.168.2.4	50845	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
881	192.168.2.4	50846	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
882	192.168.2.4	50847	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
883	192.168.2.4	50848	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
884	192.168.2.4	50849	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
885	192.168.2.4	50850	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
886	192.168.2.4	50851	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
887	192.168.2.4	50852	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
888	192.168.2.4	50854	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
889	192.168.2.4	50853	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
890	192.168.2.4	50857	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
891	192.168.2.4	50856	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
892	192.168.2.4	50858	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
893	192.168.2.4	50860	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
894	192.168.2.4	50861	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
895	192.168.2.4	50859	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
896	192.168.2.4	50865	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
897	192.168.2.4	50863	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
898	192.168.2.4	50862	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
899	192.168.2.4	50866	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
900	192.168.2.4	50864	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
901	192.168.2.4	50867	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
902	192.168.2.4	50868	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
903	192.168.2.4	50871	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
904	192.168.2.4	50869	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
905	192.168.2.4	50873	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
906	192.168.2.4	50875	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
907	192.168.2.4	50874	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
908	192.168.2.4	50870	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
909	192.168.2.4	50872	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
910	192.168.2.4	50877	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
911	192.168.2.4	50882	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
912	192.168.2.4	50879	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
913	192.168.2.4	50883	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
914	192.168.2.4	50880	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
915	192.168.2.4	50878	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
916	192.168.2.4	50881	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
917	192.168.2.4	50876	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
918	192.168.2.4	50888	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
919	192.168.2.4	50889	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
920	192.168.2.4	50890	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
921	192.168.2.4	50893	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
922	192.168.2.4	50892	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
923	192.168.2.4	50891	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
924	192.168.2.4	50896	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
925	192.168.2.4	50897	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
926	192.168.2.4	50899	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
927	192.168.2.4	50901	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
928	192.168.2.4	50902	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
929	192.168.2.4	50900	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
930	192.168.2.4	50903	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
931	192.168.2.4	50904	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
932	192.168.2.4	50908	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
933	192.168.2.4	50906	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
934	192.168.2.4	50907	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
935	192.168.2.4	50909	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
936	192.168.2.4	50910	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
937	192.168.2.4	50905	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
938	192.168.2.4	50911	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
939	192.168.2.4	50912	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
940	192.168.2.4	50895	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
941	192.168.2.4	50913	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
942	192.168.2.4	50915	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
943	192.168.2.4	50917	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
944	192.168.2.4	50918	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
945	192.168.2.4	50919	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
946	192.168.2.4	50920	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
947	192.168.2.4	50923	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
948	192.168.2.4	50924	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
949	192.168.2.4	50925	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
950	192.168.2.4	50926	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
951	192.168.2.4	50927	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
952	192.168.2.4	50928	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
953	192.168.2.4	50930	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
954	192.168.2.4	50931	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
955	192.168.2.4	50932	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
956	192.168.2.4	50933	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
957	192.168.2.4	50934	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
958	192.168.2.4	50935	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
959	192.168.2.4	50922	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
960	192.168.2.4	50936	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
961	192.168.2.4	50937	3.230.217.116	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
962	192.168.2.4	50939	172.64.151.101	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
963	192.168.2.4	50938	151.101.65.44	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
964	192.168.2.4	50941	34.111.85.214	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
965	192.168.2.4	50943	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
966	192.168.2.4	50884	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
967	192.168.2.4	50942	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
968	192.168.2.4	50955	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
969	192.168.2.4	50953	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
970	192.168.2.4	50952	172.253.115.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
971	192.168.2.4	50940	204.237.133.116	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
972	192.168.2.4	50954	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
973	192.168.2.4	50957	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
974	192.168.2.4	50958	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
975	192.168.2.4	50956	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
976	192.168.2.4	50959	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
977	192.168.2.4	50960	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
978	192.168.2.4	50814	151.101.129.229	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
979	192.168.2.4	50961	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
980	192.168.2.4	50946	23.43.243.136	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
981	192.168.2.4	50962	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
982	192.168.2.4	50963	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
983	192.168.2.4	50964	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
984	192.168.2.4	50965	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
985	192.168.2.4	50966	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
986	192.168.2.4	50970	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
987	192.168.2.4	50969	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
988	192.168.2.4	50972	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
989	192.168.2.4	50976	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
990	192.168.2.4	50975	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
991	192.168.2.4	50977	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
992	192.168.2.4	50978	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
993	192.168.2.4	50980	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
994	192.168.2.4	50981	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
995	192.168.2.4	50982	34.236.83.94	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
996	192.168.2.4	50983	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
997	192.168.2.4	50984	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
998	192.168.2.4	50985	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
999	192.168.2.4	50974	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1000	192.168.2.4	50986	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1001	192.168.2.4	50987	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1002	192.168.2.4	50988	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1003	192.168.2.4	50989	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1004	192.168.2.4	50990	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1005	192.168.2.4	50992	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1006	192.168.2.4	50993	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1007	192.168.2.4	50994	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1008	192.168.2.4	50996	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1009	192.168.2.4	50995	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1010	192.168.2.4	50991	44.238.214.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1011	192.168.2.4	50997	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1012	192.168.2.4	50998	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1013	192.168.2.4	51001	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1014	192.168.2.4	50999	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1015	192.168.2.4	51000	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1016	192.168.2.4	51004	172.64.151.101	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1017	192.168.2.4	51005	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1018	192.168.2.4	51006	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1019	192.168.2.4	51007	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1020	192.168.2.4	51008	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1021	192.168.2.4	51010	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1022	192.168.2.4	51009	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1023	192.168.2.4	51011	44.238.214.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1024	192.168.2.4	51012	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1025	192.168.2.4	51013	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1026	192.168.2.4	51015	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1027	192.168.2.4	51014	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1028	192.168.2.4	51017	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1029	192.168.2.4	51016	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1030	192.168.2.4	51019	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1031	192.168.2.4	51018	44.238.214.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1032	192.168.2.4	51020	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1033	192.168.2.4	51027	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1034	192.168.2.4	51028	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1035	192.168.2.4	51030	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1036	192.168.2.4	51029	44.238.214.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1037	192.168.2.4	51031	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1038	192.168.2.4	51033	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1039	192.168.2.4	51032	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1040	192.168.2.4	51034	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1041	192.168.2.4	51036	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1042	192.168.2.4	51035	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1043	192.168.2.4	51037	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1044	192.168.2.4	51038	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1045	192.168.2.4	51039	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1046	192.168.2.4	51046	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1047	192.168.2.4	51043	68.67.160.117	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1048	192.168.2.4	51049	34.111.85.214	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1049	192.168.2.4	51042	44.238.214.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1050	192.168.2.4	51051	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1051	192.168.2.4	51052	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1052	192.168.2.4	51047	23.43.243.147	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1053	192.168.2.4	51053	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1054	192.168.2.4	51054	172.253.115.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1055	192.168.2.4	51056	35.244.159.8	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1056	192.168.2.4	51059	68.67.160.117	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1057	192.168.2.4	51068	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1058	192.168.2.4	51062	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1059	192.168.2.4	51066	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1060	192.168.2.4	51060	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1061	192.168.2.4	51064	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1062	192.168.2.4	51067	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1063	192.168.2.4	51063	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1064	192.168.2.4	51061	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1065	192.168.2.4	51065	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1066	192.168.2.4	51070	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1067	192.168.2.4	51071	44.238.214.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1068	192.168.2.4	51076	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1069	192.168.2.4	51073	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1070	192.168.2.4	51075	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1071	192.168.2.4	51074	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1072	192.168.2.4	51077	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1073	192.168.2.4	51072	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1074	192.168.2.4	51079	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1075	192.168.2.4	51082	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1076	192.168.2.4	51080	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1077	192.168.2.4	51078	44.238.214.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1078	192.168.2.4	51081	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1079	192.168.2.4	51083	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1080	192.168.2.4	51086	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1081	192.168.2.4	51088	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1082	192.168.2.4	51085	152.199.24.48	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1083	192.168.2.4	51089	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1084	192.168.2.4	51087	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1085	192.168.2.4	51090	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1086	192.168.2.4	51092	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1087	192.168.2.4	51093	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1088	192.168.2.4	51091	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1089	192.168.2.4	51084	23.43.243.35	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1090	192.168.2.4	51096	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1091	192.168.2.4	51095	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1092	192.168.2.4	51099	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1093	192.168.2.4	51097	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1094	192.168.2.4	51098	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1095	192.168.2.4	51102	35.244.159.8	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1096	192.168.2.4	51104	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1097	192.168.2.4	51106	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1098	192.168.2.4	51105	44.238.214.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1099	192.168.2.4	51109	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1100	192.168.2.4	51110	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1101	192.168.2.4	51111	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1102	192.168.2.4	51112	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1103	192.168.2.4	51114	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1104	192.168.2.4	51115	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1105	192.168.2.4	51116	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1106	192.168.2.4	51119	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1107	192.168.2.4	51120	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1108	192.168.2.4	51113	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1109	192.168.2.4	51123	34.200.65.202	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1110	192.168.2.4	51121	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1111	192.168.2.4	51122	34.95.69.49	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1112	192.168.2.4	51124	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1113	192.168.2.4	51128	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1114	192.168.2.4	51125	44.212.89.82	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1115	192.168.2.4	51129	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1116	192.168.2.4	51127	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1117	192.168.2.4	51126	44.238.214.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1118	192.168.2.4	51130	34.95.69.49	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1119	192.168.2.4	51134	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1120	192.168.2.4	51138	54.236.94.254	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1121	192.168.2.4	51136	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1122	192.168.2.4	51137	172.253.63.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1123	192.168.2.4	51135	172.253.115.132	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1124	192.168.2.4	51140	44.238.214.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1125	192.168.2.4	51139	54.156.138.144	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1126	192.168.2.4	51094	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1127	192.168.2.4	51142	3.226.25.25	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1128	192.168.2.4	51146	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1129	192.168.2.4	51148	34.200.65.202	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1130	192.168.2.4	51149	44.197.69.112	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1131	192.168.2.4	51151	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1132	192.168.2.4	51145	23.43.243.136	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1133	192.168.2.4	51144	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1134	192.168.2.4	51154	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1135	192.168.2.4	51153	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1136	192.168.2.4	51141	23.43.243.35	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1137	192.168.2.4	51143	23.43.243.43	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1138	192.168.2.4	51147	23.43.243.136	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1139	192.168.2.4	51155	44.238.214.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1140	192.168.2.4	51162	34.200.65.202	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1141	192.168.2.4	51165	44.195.161.142	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1142	192.168.2.4	51163	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1143	192.168.2.4	51166	142.251.167.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1144	192.168.2.4	51168	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1145	192.168.2.4	51167	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1146	192.168.2.4	51169	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1147	192.168.2.4	51171	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1148	192.168.2.4	51170	99.84.208.102	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1149	192.168.2.4	51176	34.200.65.202	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1150	192.168.2.4	51174	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1151	192.168.2.4	51173	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1152	192.168.2.4	51175	23.43.243.136	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1153	192.168.2.4	51182	142.251.163.154	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1154	192.168.2.4	51184	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1155	192.168.2.4	51181	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1156	192.168.2.4	51187	69.194.240.13	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1157	192.168.2.4	51190	172.253.115.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1158	192.168.2.4	51185	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1159	192.168.2.4	51194	44.212.89.82	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1160	192.168.2.4	51195	142.251.163.154	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1161	192.168.2.4	51191	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1162	192.168.2.4	51202	172.253.115.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1163	192.168.2.4	51199	142.251.163.154	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1164	192.168.2.4	51210	152.199.24.48	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1165	192.168.2.4	51219	172.253.115.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1166	192.168.2.4	51216	69.194.240.13	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1167	192.168.2.4	51228	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1168	192.168.2.4	51229	192.40.36.177	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1169	192.168.2.4	51186	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1170	192.168.2.4	51230	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1171	192.168.2.4	51225	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1172	192.168.2.4	51227	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1173	192.168.2.4	51226	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1174	192.168.2.4	51232	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1175	192.168.2.4	51233	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1176	192.168.2.4	51235	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1177	192.168.2.4	51234	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1178	192.168.2.4	51237	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1179	192.168.2.4	51236	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1180	192.168.2.4	51238	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1181	192.168.2.4	51231	23.43.243.136	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1182	192.168.2.4	51243	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1183	192.168.2.4	51244	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1184	192.168.2.4	51245	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1185	192.168.2.4	51247	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1186	192.168.2.4	51248	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1187	192.168.2.4	51246	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1188	192.168.2.4	51250	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1189	192.168.2.4	51249	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1190	192.168.2.4	51251	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1191	192.168.2.4	51252	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1192	192.168.2.4	51254	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1193	192.168.2.4	51253	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1194	192.168.2.4	51255	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1195	192.168.2.4	51256	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1196	192.168.2.4	51257	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1197	192.168.2.4	51258	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1198	192.168.2.4	51260	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1199	192.168.2.4	51259	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1200	192.168.2.4	51261	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1201	192.168.2.4	51264	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1202	192.168.2.4	51262	23.222.200.28	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1203	192.168.2.4	51265	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1204	192.168.2.4	51266	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1205	192.168.2.4	51267	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1206	192.168.2.4	51268	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1207	192.168.2.4	51183	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1208	192.168.2.4	51271	44.209.20.160	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1209	192.168.2.4	51272	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1210	192.168.2.4	51269	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1211	192.168.2.4	51270	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1212	192.168.2.4	51273	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1213	192.168.2.4	51276	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1214	192.168.2.4	51275	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1215	192.168.2.4	51278	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1216	192.168.2.4	51277	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1217	192.168.2.4	51284	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1218	192.168.2.4	51283	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1219	192.168.2.4	51280	172.253.63.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1220	192.168.2.4	50885	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1221	192.168.2.4	51285	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1222	192.168.2.4	51288	44.212.89.82	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1223	192.168.2.4	51287	18.238.49.124	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1224	192.168.2.4	51294	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1225	192.168.2.4	51293	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1226	192.168.2.4	51292	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1227	192.168.2.4	51291	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1228	192.168.2.4	51289	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1229	192.168.2.4	51296	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1230	192.168.2.4	51290	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1231	192.168.2.4	51297	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1232	192.168.2.4	51298	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1233	192.168.2.4	51295	152.199.24.48	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1234	192.168.2.4	51304	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1235	192.168.2.4	51301	68.67.160.26	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1236	192.168.2.4	51300	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1237	192.168.2.4	51305	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1238	192.168.2.4	51308	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1239	192.168.2.4	51307	172.253.63.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1240	192.168.2.4	51310	34.95.69.49	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1241	192.168.2.4	51311	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1242	192.168.2.4	51299	23.43.243.145	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1243	192.168.2.4	51312	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1244	192.168.2.4	51314	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1245	192.168.2.4	51313	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1246	192.168.2.4	51315	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1247	192.168.2.4	51118	34.111.85.214	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1248	192.168.2.4	51316	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1249	192.168.2.4	51317	151.101.65.44	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1250	192.168.2.4	51318	172.64.151.101	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1251	192.168.2.4	51319	204.237.133.116	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1252	192.168.2.4	51321	3.228.195.183	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1253	192.168.2.4	51326	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1254	192.168.2.4	51239	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1255	192.168.2.4	51328	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1256	192.168.2.4	51323	23.43.243.136	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1257	192.168.2.4	51327	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1258	192.168.2.4	51331	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1259	192.168.2.4	51333	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1260	192.168.2.4	51332	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1261	192.168.2.4	51334	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1262	192.168.2.4	51339	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1263	192.168.2.4	51337	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1264	192.168.2.4	51351	35.244.159.8	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1265	192.168.2.4	51340	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1266	192.168.2.4	51349	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1267	192.168.2.4	51347	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1268	192.168.2.4	51343	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1269	192.168.2.4	51338	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1270	192.168.2.4	51345	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1271	192.168.2.4	51346	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1272	192.168.2.4	51348	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1273	192.168.2.4	51344	152.199.24.48	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1274	192.168.2.4	51354	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1275	192.168.2.4	51364	3.225.218.10	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1276	192.168.2.4	51365	3.225.218.10	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1277	192.168.2.4	51359	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1278	192.168.2.4	51379	99.84.208.48	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1279	192.168.2.4	51377	3.225.218.10	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1280	192.168.2.4	51369	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1281	192.168.2.4	51372	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1282	192.168.2.4	51362	34.95.69.49	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1283	192.168.2.4	51361	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1284	192.168.2.4	51382	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1285	192.168.2.4	51401	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1286	192.168.2.4	51355	172.253.115.132	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1287	192.168.2.4	51363	142.251.167.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1288	192.168.2.4	51381	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1289	192.168.2.4	51406	192.40.36.177	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1290	192.168.2.4	51386	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1291	192.168.2.4	51367	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1292	192.168.2.4	51390	54.225.229.4	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1293	192.168.2.4	51366	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1294	192.168.2.4	51384	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1295	192.168.2.4	51387	162.247.243.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1296	192.168.2.4	51376	23.43.243.147	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1297	192.168.2.4	51399	23.43.243.145	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1298	192.168.2.4	51407	23.43.243.136	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1299	192.168.2.4	51416	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1300	192.168.2.4	51370	34.198.209.31	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1301	192.168.2.4	51385	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1302	192.168.2.4	51375	23.43.243.147	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1303	192.168.2.4	51410	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1304	192.168.2.4	51411	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1305	192.168.2.4	51420	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1306	192.168.2.4	51388	23.43.243.147	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1307	192.168.2.4	51383	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1308	192.168.2.4	51389	3.225.218.10	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1309	192.168.2.4	51422	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1310	192.168.2.4	51408	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1311	192.168.2.4	51412	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1312	192.168.2.4	51403	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1313	192.168.2.4	51368	54.225.229.4	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1314	192.168.2.4	51425	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1315	192.168.2.4	51428	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1316	192.168.2.4	51421	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1317	192.168.2.4	51402	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1318	192.168.2.4	51371	52.23.99.235	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1319	192.168.2.4	51409	23.43.243.145	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1320	192.168.2.4	51427	54.205.102.34	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1321	192.168.2.4	51413	23.43.243.136	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1322	192.168.2.4	51418	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1323	192.168.2.4	51419	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1324	192.168.2.4	51417	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1325	192.168.2.4	51424	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1326	192.168.2.4	51426	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1327	192.168.2.4	51415	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1328	192.168.2.4	51414	23.43.243.136	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1329	192.168.2.4	51430	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1330	192.168.2.4	51423	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1331	192.168.2.4	51432	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1332	192.168.2.4	51433	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1333	192.168.2.4	51429	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1334	192.168.2.4	51431	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1335	192.168.2.4	51436	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1336	192.168.2.4	51438	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1337	192.168.2.4	51435	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1338	192.168.2.4	51437	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1339	192.168.2.4	51444	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1340	192.168.2.4	51443	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1341	192.168.2.4	51439	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1342	192.168.2.4	51441	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1343	192.168.2.4	51440	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1344	192.168.2.4	51434	44.238.214.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1345	192.168.2.4	51448	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1346	192.168.2.4	51442	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1347	192.168.2.4	51447	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1348	192.168.2.4	51449	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1349	192.168.2.4	51452	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1350	192.168.2.4	51453	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1351	192.168.2.4	51455	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1352	192.168.2.4	51460	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1353	192.168.2.4	51458	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1354	192.168.2.4	51457	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1355	192.168.2.4	51454	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1356	192.168.2.4	51461	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1357	192.168.2.4	51459	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1358	192.168.2.4	51462	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1359	192.168.2.4	51464	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1360	192.168.2.4	51470	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1361	192.168.2.4	51465	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1362	192.168.2.4	51466	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1363	192.168.2.4	51469	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1364	192.168.2.4	51467	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1365	192.168.2.4	51468	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1366	192.168.2.4	51471	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1367	192.168.2.4	51472	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1368	192.168.2.4	51474	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1369	192.168.2.4	51473	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1370	192.168.2.4	51478	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1371	192.168.2.4	51476	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1372	192.168.2.4	51480	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1373	192.168.2.4	51479	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1374	192.168.2.4	51482	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1375	192.168.2.4	51481	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1376	192.168.2.4	51475	44.238.214.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1377	192.168.2.4	51484	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1378	192.168.2.4	51483	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1379	192.168.2.4	51485	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1380	192.168.2.4	51487	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1381	192.168.2.4	51488	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1382	192.168.2.4	51489	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1383	192.168.2.4	51490	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1384	192.168.2.4	51486	142.251.163.154	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1385	192.168.2.4	51492	172.253.115.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1386	192.168.2.4	51493	172.253.115.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1387	192.168.2.4	51491	142.251.163.154	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1388	192.168.2.4	51497	142.251.163.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1389	192.168.2.4	51501	172.253.115.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1390	192.168.2.4	51513	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1391	192.168.2.4	51509	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1392	192.168.2.4	51518	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1393	192.168.2.4	51503	142.251.163.154	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1394	192.168.2.4	51511	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1395	192.168.2.4	51510	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1396	192.168.2.4	51522	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1397	192.168.2.4	51514	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1398	192.168.2.4	51512	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1399	192.168.2.4	51521	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1400	192.168.2.4	51529	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1401	192.168.2.4	51528	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1402	192.168.2.4	51523	172.253.115.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1403	192.168.2.4	51525	172.253.115.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1404	192.168.2.4	51535	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1405	192.168.2.4	51536	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1406	192.168.2.4	51532	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1407	192.168.2.4	51526	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1408	192.168.2.4	51531	142.251.163.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1409	192.168.2.4	51539	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1410	192.168.2.4	51534	174.137.133.49	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1411	192.168.2.4	51541	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1412	192.168.2.4	51540	44.238.214.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1413	192.168.2.4	51543	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1414	192.168.2.4	51544	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1415	192.168.2.4	51548	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1416	192.168.2.4	51549	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1417	192.168.2.4	51550	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1418	192.168.2.4	51547	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1419	192.168.2.4	51551	142.251.163.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1420	192.168.2.4	51552	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1421	192.168.2.4	51553	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1422	192.168.2.4	51554	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1423	192.168.2.4	51556	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1424	192.168.2.4	51555	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1425	192.168.2.4	51557	35.71.139.29	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1426	192.168.2.4	51558	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1427	192.168.2.4	51559	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1428	192.168.2.4	51560	54.236.72.150	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1429	192.168.2.4	51563	172.253.63.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1430	192.168.2.4	51562	142.251.163.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1431	192.168.2.4	51564	99.84.208.102	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1432	192.168.2.4	51565	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1433	192.168.2.4	51566	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1434	192.168.2.4	51567	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1435	192.168.2.4	51571	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1436	192.168.2.4	51570	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1437	192.168.2.4	51569	44.238.214.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1438	192.168.2.4	51573	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1439	192.168.2.4	51572	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1440	192.168.2.4	51576	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1441	192.168.2.4	51577	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1442	192.168.2.4	51581	142.251.167.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1443	192.168.2.4	51582	142.251.163.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1444	192.168.2.4	51583	142.251.163.155	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1445	192.168.2.4	51585	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1446	192.168.2.4	51589	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1447	192.168.2.4	51591	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1448	192.168.2.4	51587	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1449	192.168.2.4	51588	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1450	192.168.2.4	51590	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1451	192.168.2.4	51117	3.230.217.116	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1452	192.168.2.4	51341	34.111.85.214	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1453	192.168.2.4	51592	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1454	192.168.2.4	51584	185.184.8.90	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1455	192.168.2.4	51603	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1456	192.168.2.4	51600	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1457	192.168.2.4	51595	142.251.163.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1458	192.168.2.4	51593	34.214.251.32	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1459	192.168.2.4	51602	54.225.229.4	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1460	192.168.2.4	51594	142.251.163.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1461	192.168.2.4	50886	152.195.55.192	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1462	192.168.2.4	51599	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1463	192.168.2.4	51598	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1464	192.168.2.4	51596	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1465	192.168.2.4	51613	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1466	192.168.2.4	51597	142.251.16.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1467	192.168.2.4	51631	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1468	192.168.2.4	51616	151.101.193.44	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1469	192.168.2.4	51604	34.95.69.49	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1470	192.168.2.4	51623	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1471	192.168.2.4	51614	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1472	192.168.2.4	51629	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1473	192.168.2.4	51605	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1474	192.168.2.4	51606	172.64.151.101	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1475	192.168.2.4	51615	18.173.219.113	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1476	192.168.2.4	51601	142.251.167.148	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1477	192.168.2.4	51607	204.237.133.116	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1478	192.168.2.4	51625	51.222.239.230	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1479	192.168.2.4	51628	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1480	192.168.2.4	51630	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1481	192.168.2.4	51627	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1482	192.168.2.4	51626	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1483	192.168.2.4	51634	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1484	192.168.2.4	51637	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1485	192.168.2.4	51638	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1486	192.168.2.4	51639	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1487	192.168.2.4	51640	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1488	192.168.2.4	51641	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1489	192.168.2.4	51636	44.238.214.105	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1490	192.168.2.4	51642	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1491	192.168.2.4	51644	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1492	192.168.2.4	51648	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1493	192.168.2.4	51650	51.222.239.230	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1494	192.168.2.4	51649	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1495	192.168.2.4	51652	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1496	192.168.2.4	51653	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1497	192.168.2.4	51654	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1498	192.168.2.4	51655	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1499	192.168.2.4	51659	172.64.151.101	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1500	192.168.2.4	51660	34.111.85.214	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1501	192.168.2.4	51658	142.251.163.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1502	192.168.2.4	51664	151.101.1.44	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1503	192.168.2.4	51666	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1504	192.168.2.4	51668	34.198.209.31	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1505	192.168.2.4	51667	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1506	192.168.2.4	51669	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1507	192.168.2.4	51670	69.147.92.12	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1508	192.168.2.4	51672	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1509	192.168.2.4	51671	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1510	192.168.2.4	51665	23.43.243.168	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1511	192.168.2.4	51676	69.147.92.11	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1512	192.168.2.4	51675	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1513	192.168.2.4	51679	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1514	192.168.2.4	51680	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1515	192.168.2.4	51681	34.117.228.201	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1516	192.168.2.4	51685	172.253.63.149	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1517	192.168.2.4	51688	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1518	192.168.2.4	51689	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1519	192.168.2.4	51694	34.117.228.201	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1520	192.168.2.4	51695	142.250.31.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1521	192.168.2.4	51700	172.253.115.105	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1522	192.168.2.4	51699	44.238.214.105	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1523	192.168.2.4	51704	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1524	192.168.2.4	51705	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1525	192.168.2.4	51706	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1526	192.168.2.4	51703	74.6.231.18	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1527	192.168.2.4	51712	172.253.63.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1528	192.168.2.4	51701	23.43.243.168	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1529	192.168.2.4	51711	142.251.163.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1530	192.168.2.4	51714	3.228.195.183	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1531	192.168.2.4	51715	192.184.68.166	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1532	192.168.2.4	51717	34.117.228.201	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1533	192.168.2.4	51720	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1534	192.168.2.4	51721	52.23.99.235	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1535	192.168.2.4	51722	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1536	192.168.2.4	51737	142.251.163.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1537	192.168.2.4	51723	23.43.243.168	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1538	192.168.2.4	51759	99.84.208.113	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1539	192.168.2.4	51765	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1540	192.168.2.4	51764	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1541	192.168.2.4	51767	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1542	192.168.2.4	51757	35.186.253.211	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1543	192.168.2.4	51763	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1544	192.168.2.4	51760	142.251.167.148	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1545	192.168.2.4	51762	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1546	192.168.2.4	51736	142.251.163.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1547	192.168.2.4	51756	35.211.178.172	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1548	192.168.2.4	51741	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1549	192.168.2.4	51755	142.251.163.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1550	192.168.2.4	51761	23.105.12.150	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1551	192.168.2.4	51754	142.251.163.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1552	192.168.2.4	51738	142.251.163.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1553	192.168.2.4	51766	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1554	192.168.2.4	51740	142.251.163.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1555	192.168.2.4	51739	34.117.228.201	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1556	192.168.2.4	51758	207.65.37.181	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1557	192.168.2.4	51731	54.157.225.250	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1558	192.168.2.4	51724	23.43.243.168	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1559	192.168.2.4	51750	69.166.1.34	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1560	192.168.2.4	51768	44.212.89.82	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1561	192.168.2.4	51774	142.251.163.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1562	192.168.2.4	51772	34.117.228.201	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1563	192.168.2.4	51773	142.251.163.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1564	192.168.2.4	51777	23.105.12.150	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1565	192.168.2.4	51775	142.251.163.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1566	192.168.2.4	51783	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1567	192.168.2.4	51784	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1568	192.168.2.4	51782	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1569	192.168.2.4	51781	142.251.163.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1570	192.168.2.4	51785	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1571	192.168.2.4	51786	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1572	192.168.2.4	51788	142.251.163.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1573	192.168.2.4	51791	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1574	192.168.2.4	51790	142.251.163.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1575	192.168.2.4	51792	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1576	192.168.2.4	51793	23.105.12.150	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1577	192.168.2.4	51794	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1578	192.168.2.4	51795	142.251.163.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1579	192.168.2.4	51797	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1580	192.168.2.4	51798	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1581	192.168.2.4	51796	142.251.163.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1582	192.168.2.4	51802	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1583	192.168.2.4	51805	69.147.92.12	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1584	192.168.2.4	51801	142.251.167.148	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1585	192.168.2.4	51808	69.147.92.12	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1586	192.168.2.4	51806	69.147.92.12	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1587	192.168.2.4	51811	99.84.208.102	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1588	192.168.2.4	51803	142.251.163.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1589	192.168.2.4	51810	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1590	192.168.2.4	51813	142.251.163.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1591	192.168.2.4	51814	66.218.87.15	443	8	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1592	192.168.2.4	51816	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1593	192.168.2.4	51815	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1594	192.168.2.4	51817	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1595	192.168.2.4	51818	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1596	192.168.2.4	51821	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1597	192.168.2.4	51824	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1598	192.168.2.4	51823	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1599	192.168.2.4	51822	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1600	192.168.2.4	51827	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1601	192.168.2.4	51828	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1602	192.168.2.4	51829	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1603	192.168.2.4	51830	172.253.63.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1604	192.168.2.4	51831	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1605	192.168.2.4	51832	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1606	192.168.2.4	51833	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1607	192.168.2.4	51834	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1608	192.168.2.4	51835	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1609	192.168.2.4	51836	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Target ID:	0
Start time:	01:41:04
Start date:	29/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	01:41:07
Start date:	29/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	01:41:10
Start date:	29/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://depl.pages.dev/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	01:41:33
Start date:	29/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6760 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	01:42:25
Start date:	29/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=9836 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	01:42:25
Start date:	29/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=9824 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	01:42:26
Start date:	29/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=8420 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	01:42:34
Start date:	29/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=8928 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	01:42:34
Start date:	29/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=7044 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	01:42:34
Start date:	29/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=auction_worklet.mojom.AuctionWorkletService --lang=en-US --service-sandbox-type=service_with_jit --mojo-platform-channel-handle=8220 --field-trial-handle=2100,i,14041114356187470776,2713178704255341703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://depl.pages.dev/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 1000

Chrome Cache Entry: 1001

Chrome Cache Entry: 1002

Chrome Cache Entry: 1003

Chrome Cache Entry: 1004

Chrome Cache Entry: 1005

Chrome Cache Entry: 1006

Chrome Cache Entry: 1007

Chrome Cache Entry: 1008

Chrome Cache Entry: 1009

Chrome Cache Entry: 1010

Chrome Cache Entry: 1011

Chrome Cache Entry: 1012

Chrome Cache Entry: 1013

Chrome Cache Entry: 1014

Chrome Cache Entry: 1015

Chrome Cache Entry: 1016

Chrome Cache Entry: 1017

Chrome Cache Entry: 1018

Chrome Cache Entry: 1019

Chrome Cache Entry: 1020

Chrome Cache Entry: 1021

Chrome Cache Entry: 1022

Chrome Cache Entry: 1023

Chrome Cache Entry: 1025

Chrome Cache Entry: 1026

Chrome Cache Entry: 1027

Windows Analysis Report
https://depl.pages.dev/